In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, repealing Directive 95/46/EC (hereinafter RGPD), Law 34/2002 of 11 July, on information society services and electronic commerce (hereinafter, LSSI-CE) and the Organic Law 3/2018, on Personal Data Protection and guarantee of digital rights (hereinafter, LOPDGDD), EDDA INNOVA PHARMA SL, hereinafter the data controller, guarantees the protection and confidentiality of personal data of any kind provided to us by our customers, in accordance with the provisions of the General Regulation on the Protection of Personal Data. The data provided will be treated in the terms established in the RGPD, in that sense the controller has adopted the levels of protection legally required, and has installed all the technical measures at its disposal to prevent the loss, misuse, alteration, unauthorized access by third parties, exposed below. However, the user must be aware that Internet security measures are not impregnable
Responsible for the treatment
Denomination: EDDA INNOVA PHARMA SL
TAX ID: B84796325
Address: C/ Polo Norte 11,Torrejón de Ardoz, 28850, Madrid
E-mail: info@eddapharma.com
Purpose of the treatment
All data provided by our customers and/or visitors to the website of the data controller or its staff, will be included in the register of personal data processing activities, created and maintained under the responsibility of the data controller, essential to provide the services requested by users, to resolve doubts or questions raised by our visitors and to provide information on services and promotions.
Legitimacy of the treatment
a. Contractual relationship: It is the one that applies when you buy one of our products or hire any of our services.
b. Legitimate interest: To respond to queries and complaints that we raise and to manage the collection of amounts owed.
c. Your consent: If you are a user of our website, by checking the box on the contact form, you authorize us to send you the necessary communications to respond to the query or request for information raised.
Recipients
In order to fulfill the order placed and to provide our products and services efficiently, we may share your personal information with trusted third parties, including, but not limited to, logistics service providers, payment processors… These third parties will only have access to the information necessary to perform their specific functions and are committed not to use your personal information for other purposes.
In addition, we reserve the right to disclose your personal information if required to do so by law or if we believe in good faith that such disclosure is necessary to protect our legal rights, to comply with a court order, or to cooperate with regulatory authorities.
By using our services and providing us with your personal information, you expressly consent to the possible transfer, storage and processing of such information by third parties, as set forth in this clause.
Communication
We will not make international transfers of your personal data for any of the above purposes.
Retention
Your personal data will be kept for the time necessary to fulfill the purpose for which they were collected. If your data is used for several purposes that require us to keep it for different periods of time, we will apply the longest retention period. In determining the appropriate retention period, we consider the risks involved in the processing, as well as our contractual, legal and regulatory obligations, internal data retention policies and our legitimate business interests as described in this Privacy Notice and Cookie Policy.
In this sense, the data controller will keep the personal data once its relationship with you has ended, duly blocked, for the period of limitation of the actions that may arise from the relationship maintained with the interested party.
Once blocked, your data will be inaccessible to the data controller, and will not be processed except to make them available to the Public Administrations, Judges and Courts, for the attention of possible liabilities arising from the processing, as well as for the exercise and defense of claims before the Spanish Data Protection Agency.
Security
We use all reasonable efforts to maintain the confidentiality of personal information processed on our systems. We maintain strict levels of security to protect the personal data we process against accidental loss and against unauthorized access, processing or disclosure, taking into account the state of technology and the nature and risks to which the data is exposed. However, we cannot be held responsible for your use of the data (including username and password) you use on our website. Our staff follow strict privacy standards and where we engage third parties to provide support services, we require them to abide by the same standards and allow us to audit them for compliance.
Links to Third Parties:
Our Site may contain links to third party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.
Your Rights
We inform you that you may exercise the following rights:
a. Right of access to your personal data, to know which are being processed and the processing operations carried out with them;
b. Right to rectify any inaccurate personal data;
c. Right to erasure of your personal data, where this is possible (e.g. by law);
d. Right to limit the processing of your personal data where the accuracy, lawfulness or necessity of the data processing is in doubt, in which case, we may retain them for the exercise or defense of claims.
e. The right to object to the processing of your personal data, when the legal basis that enables us to process them is our legitimate interest. The data controller will stop processing your data unless it has a legitimate interest or it is necessary for the defense of claims.
f. Right to the portability of your data, when the legal basis that enables us to process it is the existence of a contractual relationship or your consent.
g. Right to revoke the consent given to the data controller.
To exercise your rights, you can do so free of charge and at any time by contacting us at the address C/ Polo Norte 11, Torrejón de Ardoz, 28850, Madrid, attaching a copy of your ID card.
Protection of rights
In case you understand that your rights have been disregarded by our entity, you can file a complaint with the Spanish Data Protection Agency, through any of the following means:
Electronic site: https://www.aepd.es
Postal mail: Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001, Madrid
Updates
We reserve the right to make amendments to this privacy statement. We recommend that you consult this privacy statement regularly to be aware of any changes. In addition, we will actively inform you whenever possible.