In this Privacy Policy, the User will find all the relevant information that applies to the use that the companies of the GRIFOLL Group make of the personal data of our clients and Users, regardless of the channel or medium (online or in person) that you use to interact with us.
As a sign of transparency, we permanently make all the information in this Privacy Policy available to Users, so that they can consult it when they deem it appropriate and they will also find information about each processing of their personal data as they interact with us.
The expression “ User ” includes any person who accesses the Website, either directly or from any other Internet site.
Those responsible for the treatment of User data are:
Owner: INDUSTRIAS GRÁFICAS GRIFOLL, S.L.
Address: Carretera de Terrassa, 147 08191 – Rubí (Barcelona)
VAT number: ESB-08662215
E-mail: [email protected]
Phone: 93 588 38 92
Registration data: Tomo 33139, Folio 185, Hoja B-75391
which in turn is the Owner of the Website, and also the GRIFOLL Group company that offers the products and / or services shown on this Website:
GRIFOLL PRINT SOLUTIONS, S.L.
VAT number: B-62117999
Registration data: Tomo 32305, Folio 62, Hoja B-206091
In other words, both INDUSTRIAS GRÁFICAS GRIFOLL, S.L. as GRIFOLL PRINT SOLUTIONS, S.L. (hereinafter, referred to interchangeably as the “ Controllers ” or the “ Joint Controllers “), are Joint Controllers of the treatment. This means that we have regulated and jointly take charge of treating and protecting the personal data of Users. The contact email of the Controller is the following: [email protected].
The collection, storage, modification, structuring and, where appropriate, elimination, of the data provided by the Users, will constitute treatment operations carried out by the Responsible. The personal data that the Controller will process will generally be the following:
The User is informed that, when the Responsible Party asks them to fill in their personal data to give them access to any functionality or service of the Website, some fields will be marked as mandatory, since they are data that the Responsible party needs to be able to provide the service or give access to the functionality in question. Therefore, the User must bear in mind that if he decides not to provide such data to the Responsible, he may not be able to enjoy those services or functionalities.
The personal data that the User provides will be processed for the following purposes:
The legal basis that allows the Data Controllers to treat the personal data of the Users is, depending on each purpose, the following:
In the event that the User does not provide the Data Controller with their data, or does so erroneously or incompletely, it will not be possible to access certain areas of the Website, nor will it be possible to answer the queries raised.
The personal data provided by the User will be processed by the Joint Controllers during the following time:
In order to purify the possible responsibilities derived from the treatment, the data will be kept duly stored and protected in the systems and databases of the Data Controller during the time in which responsibilities derived from the treatment could arise, in compliance with the regulations in force in every moment. Once the possible actions in each case are prescribed, the Data Controller will proceed to delete the personal data.
To fulfill the purposes indicated here, it is necessary for the Data Controller to transmit the personal data of the Users to other entities of the GRIFOLL Group and to third-party service providers, such as:
With these service providers, the Data Controller has signed data processing commission agreements and they will only access said information to provide the contracted service for and on behalf of the Controller.
In addition, Users are informed that some of the aforementioned service providers are located in territories outside the European Economic Area, which do not provide a level of data protection comparable to that of the European Union, such as the United States. In these cases, Users are informed that the Responsible Party will transfer the data with full guarantee and safeguarding their security:
The Data Controller informs the User that, as a data hosting service provider and by virtue of the provisions of Law 34/2002 of July 11, Services of the Information Society and Electronic Commerce (LSSI), it retains For a maximum period of twelve (12) months, the essential information to identify the origin of the hosted data and the moment in which the provision of the service began.
The retention of these data does not affect the secrecy of communications and they may only be used in the framework of a criminal investigation or for the safeguarding of public safety, making themselves available to the judges and / or courts or the Ministry that so requires.
The communication of data to the State Security Forces and Bodies will be done by virtue of the provisions of the regulations on personal data protection, and with the utmost respect for it.
The Data Controller adopts the necessary measures to guarantee the security, integrity and confidentiality of the data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free circulation thereof.
Although the Responsible Party makes backup copies of the content hosted on its servers, it is not responsible for the loss or accidental deletion of data by Users. Similarly, it does not guarantee the total replacement of the data deleted by the Users, since the aforementioned data could have been deleted and / or modified during the period of time that has elapsed since the last backup copy.
The services provided or provided through the Website, except the specific backup services, do not include the replacement of the contents kept in the backup copies made by the Data Controller, when this loss is attributable to the User; In this case, a rate will be determined according to the complexity and volume of the recovery, always with the prior acceptance of the User. The replacement of deleted data is only included in the price of the service when the loss of content is due to causes attributable to the Responsible Party.
The Data Controller informs the User that they have the following rights:
The User may exercise any of these rights at any time by contacting INDUSTRIAS GRÁFICAS GRIFOLL, SL, at the address Carretera de Terrassa, 147, 08191 – Rubí, Barcelona, or through the email [email protected], or requesting it by any other means of which there is proof of its shipment and its receipt.
Children under 14 years of age may not register as Registered Users on the Website without the prior authorization of their parents, guardians or legal representatives, who will be solely responsible for all acts carried out through it by minors in their charge, including the completion of the forms with the personal data of said minors and the marking, where appropriate, of the boxes that accompany them. In this sense, and to the extent that the Controller does not have the ability to control whether or not the Users are minors, it is advised that parents and guardians must enable the necessary mechanisms to prevent minors from registering at the Website and / or provide personal data without their supervision, the Data Controller not accepting any responsibility in this regard.
In the event that any provision of this Privacy Policy is considered void, in whole or in part, said nullity or inapplication will not affect the other provisions of the Privacy Policy that, where appropriate, may have been established. In the event that the Holder does not exercise any right or action recognized in this Privacy Policy, this will not constitute a waiver thereof, unless acknowledgment and agreement that must be in writing on her part.
The applicable law in case of dispute or conflict of interpretation of the terms that make up this Privacy Policy, as well as any question related to the services of this Website, will be Spanish law to which the parties expressly submit, being competent to the resolution of all conflicts derived from or related to its use in the Courts and Tribunals of Barcelona.
This Privacy Policy is dated October 22, 2020.
The Responsible Party may have to update this Privacy Policy when deemed appropriate. Therefore, it is convenient for the User to review this policy periodically and if possible each time he accesses the Website, in order to be adequately informed about the type of information collected and its treatment. Notwithstanding the foregoing, the Responsible Party will notify the User of each change that occurs in this privacy policy that affects the processing of personal data provided in different ways through the Website or even through email.
