PRIVACY POLICY

1.- WHO ARE WE?

Owner: ALLERGEN SERVILAB, S.L. (en adelante, “ALLERGEN”).
CIF: B-87925905
Registered office: Calle Aldehuela, 97, 05306. La Horcajada (Ávila).
Contact telephone number: (+34) 91 496 60 13
Email: lopd@diater.com
DPO: dpogrupo@grupodiater.com

2.- INFORMATION

Upon acceptance of this Privacy Policy, the user (hereinafter, the "User" or, where applicable, the "Users") is informed that the personal data provided through any of the channels provided by ALLERGEN, as well as the data derived from the User's browsing and any other data that the User may provide in the future, through any means provided for this purpose, will be processed by ALLERGEN.

The User shall carefully read this Privacy Policy, which has been drafted in a clear and simple manner to facilitate its understanding, and the User may freely and voluntarily determine whether or not he/she wishes to provide his/her personal data to ALLERGEN.

3.- OBLIGATION TO PROVIDE THE DATA

The data requested in the forms and/or channels established by ALLERGEN are, in general, mandatory (unless otherwise specified in the required field) in order to comply with the purposes for which they are being collected.

Therefore, if the information is not provided or is not provided correctly, the User's requests may not be fulfilled.

4.- FOR WHAT PURPOSE WILL ALLERGEN PROCESS THE USER'S DATA?

The User's personal data will be processed by ALLERGEN for the following purposes:

Respond to the questions raised by the User through the contact channels provided: Manage, process and respond to requests, applications, incidents, complaints or queries from the User, made through the different communication channels made available to the User.

Produce internal reports, statistics and analysis to improve ALLERGEN products and services: Analizar, gestionar y elaborar informes internos y estadísticas para la mejora constante de la calidad de los productos, servicios y procesos de ALLERGEN, en todo caso, utilizando información agregada.

To comply with the legally established obligations: Where the processing is necessary for compliance with a legal obligation that may be applicable to ALLERGEN.

5.- WHAT USER DATA WILL ALLERGEN PROCESS?

ALLERGEN may treat the following personal data of the User:

Provide answers to the questions submitted by the User through the established contact channels:

Identification data: name, surname and ID card number.
Contact details: e-mail address, telephone number.
Other data: any data that may be provided by the User.

Produce internal reports, statistics and analysis to improve ALLERGEN products and services:

Other data: User’s aggregated information form

To comply with the legally established obligations: Any legally required data.

In the event that the User provides data relating to third parties (for example, the contact details of a family member), the User declares that he/she has their consent and/or sufficient legitimacy and undertakes to provide them with the information contained in the Privacy Policy, exempting ALLERGEN from any liability in this respect.

However, ALLERGEN may carry out the appropriate checks to verify this fact, adopting the appropriate due diligence measures in accordance with data protection regulations.

6.- WHAT IS THE LEGITIMACY OF ALLERGEN'S PROCESSING OF USER DATA?

The processing of the User's data by ALLERGEN is legitimised on the basis of legitimate interest, compliance with legal obligations and the requested consent. In particular, ALLERGEN processes the User's data in accordance with the following legitimate bases:

Respond to the questions raised by the User through the contact channels provided: The data processing derived from this purpose shall be based on the consent of the User, which may be withdrawn at any time. In the event that the User withdraws consent, the query or question raised can no longer be processed.
Produce internal reports, statistics and analysis to improve ALLERGEN products and services: All processing derived from this purpose will be based on legitimate interest, recognised to the data controller by data protection regulations.

This legitimate interest is based on being able to offer ALLERGEN's services to Users with the highest quality and best possible experience.

To comply with the legally established obligations: All processing derived from this purpose will be based on the fulfilment of a legal obligation.

7.- CONSERVATION OF THE DATA

The User's personal data will be kept by ALLERGEN for the following periods of time:

Respond to the questions raised by the User through the contact channels provided: Your data will be kept for the period necessary to process and reply to your request and, once this period has expired, for the period of limitation of the legal actions derived from the aforementioned request.
Produce internal reports, statistics and analysis to improve ALLERGEN products and services: The information shall be used in aggregated form for the preparation of reports, statistics and analyses, for the period necessary to process and prepare such reports, statistics and/or analyses, and, after the end of this period, for the period of limitation of legal actions.

To comply with the legally established obligations: The data provided in order to comply with the obligations arising from the services offered by ALLERGEN shall be kept for the legally established periods of time.

8.- RECIPIENTS TO WHOM THE USER'S DATA MAY BE DISCLOSED

The User's personal data may be communicated to:

Courts and tribunals, in cases provided for by law, on the basis of the fulfilment of a legal obligation.

In the event that ALLERGEN intends to make a communication of data other than those provided for in this section, the express consent of the User shall be requested.

9.- INTERNATIONAL DATA TRANSFERS

The User is informed that ALLERGEN has contracted the services of technological service providers whose servers are hosted outside the European Economic Area, which implies an international transfer of data, i.e. a flow of personal data from Spanish territory to recipients established in countries outside the European Economic Area (the countries of the European Union, in addition to Liechtenstein, Iceland and Norway).

The aforementioned international data transfers are regularised by virtue of the subscription of standard contractual clauses, i.e. standard terms, approved by the European Data Protection Commission, which may be used for the purpose of transferring personal data outside the European Economic Area, in compliance with current data protection regulations.

10.- USER’S RESPONSABILITY

The User guarantees that the data provided to ALLERGEN are true, accurate, complete and up to date. To this end, the User is responsible for the truthfulness of all the data he/she provides and shall keep the information provided duly updated so that it corresponds to his/her actual situation.

Likewise, the User guarantees that he/she has informed the third parties to whom he/she provides his/her data, if he/she does so, of the aspects contained in this document. Likewise, he/she guarantees that he/she has obtained their authorisation to provide their data to ALLERGEN for the aforementioned purposes.

In any event, the User shall be liable for any false or inaccurate information provided through the information collection forms provided and for any direct or indirect damage that may be caused to ALLERGEN or third parties as a result thereof.

11.- EXERCISE OF RIGHTS

As the owner of the data, the User may send a letter to ALLERGEN, at the address indicated in the heading of this Privacy Policy, or by e-mail to the address: dpogrupo@grupodiater.com, attaching a copy of proof of identity, at any time and free of charge, to exercise the following rights:

Right of Access:

You have the right to be informed by ALLERGEN whether or not it is processing your personal data and, if so, to have access to such data and to receive information on the purposes for which they are processed, the categories of data concerned by the processing, the recipients to whom your personal data have been disclosed and the intended period of retention of the data, among other information.
Right of Rectification and Deletion:

You have the right to request the deletion of personal data provided that the applicable legal requirements are met, and the rectification of inaccurate data concerning you when, among other reasons, such data are no longer necessary for the purposes for which they were collected.
Limitation of processing, revocation of consent and total or partial objection to processing:

In certain circumstances (e.g. in case the applicant disputes the accuracy of his or her data, while the accuracy of the data is being verified), you may request that we restrict the processing of your personal data, which will only be processed for the exercise or defence of claims.

You also have the right to withdraw your consent and to object to the processing at any time, on grounds relating to your particular situation, if the processing is based on our legitimate interest or on the legitimate interest of a third party (including processing for the purpose of direct marketing and profiling). In this case, ALLERGEN will cease the processing, unless legitimate reasons are demonstrated.

Data portability:

You shall have the right to receive the personal data you have provided to ALLERGEN in a structured, common, machine-readable format, and to be able to transmit it to another controller without being prevented from doing so by the controller to whom you have provided it, in the cases provided for by law for this purpose.
Automated individual decisions:

In addition to the above rights, in case of automated decisions, including profiling, you have the right to obtain human intervention by ALLERGEN and to express your point of view and to challenge the decision.
Other:

Likewise, when personal data is transferred to a third country or an international organisation, you have the right to be informed about how you can access or obtain a copy of the appropriate safeguards relating to the transfer.

You may also lodge a complaint regarding the protection of your personal data with the Spanish Data Protection Agency at C/ Jorge Juan, 6, 28001 - Madrid, when the data subject considers that ALLERGEN has infringed the rights recognised by the applicable data protection regulations..

11.- SECURITY MEASURES

ALLERGEN shall treat the User's data at all times in an absolutely confidential manner and shall keep the mandatory duty of secrecy with respect to the same, in accordance with the provisions of the applicable regulations, adopting for this purpose the necessary technical and organisational measures to ensure the security of your data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed.

12.- CHANGES

ALLERGEN reserves the right to revise its Privacy Policy from time to time as it deems appropriate, in which case Users will be notified. For this reason, please check this privacy statement regularly to read the most current version of ALLERGEN's Privacy Policy.

13.- ACCEPTANCE AND CONSENT

The User declares to have been informed of the conditions on personal data protection, accepting the content of this Privacy Policy.

Last updated: 23 April 2021.