Below we present the criteria applied by HIPRA regarding the collection and processing of personal data that we collect when you browse the Website or that you voluntarily decide to provide to us.
When using the Website, Applications, other online resources and/or communicating electronically with HIPRA, the personal data of each user may be collected and processed. The processing of such personal data will be governed by this Privacy Policy and by applicable law.

DATA CONTROLLER

The Data Controller is HIPRA, S.A., with tax identification number (NIF) A-55189310. 
Registered address at Avda. La Selva 135, 17170 Amer (Girona), Spain. 
Email: hipra@hipra.com
Telephone: +34 972 43 06 60
Enrolled in the Commercial Registry of Girona, on page GI-00055968, volume 02955, folio 173.

PURPOSE OF THE PROCESSING

We would like to inform you that we will use your data for the following purposes: (i) to manage the commercial and/or contractual relationship with HIPRA; (ii) to provide you with information of interest to you in accordance with the consent given or with the legitimate interest of HIPRA; (iii) to use your information as a point of contact for HIPRA; (iv) to send information, training or events within the scope of HIPRA’s professional activities; (v) to respond to queries or questions that you may submit through the Website, other online resources or other applications; and/or (vi) to comply with our regulatory obligations regarding pharmacovigilance, drug safety and medical information on our products: to monitor drug safety, including detecting, evaluating and preventing adverse reactions and reporting to health authorities, as well as any other purpose imposed by law and the authorities.

LEGITIMATE BASIS

The legitimacy of the processing is your consent and/or HIPRA’s legitimate interest in maintaining the relationship that exists with you, as applicable. Personal Data may also be processed for compliance with legal obligations, such as pharmacovigilance. HIPRA will therefore collect and process your data for as long as the relationship with you continues and provided that you do not revoke the consent you have given to the processing of your data. You have the right to withdraw your consent at any time by following the procedure set out in the RIGHTS section, without affecting the lawfulness of the processing based on the consent prior to your withdrawal.

If you inform us of unwanted adverse events or other issues related to the safety or quality of HIPRA products, we will be legally required to process your communication and may need to contact you for clarification purposes. Subsequently, it is possible that we may need to notify the competent health authorities regarding the problems reported by you. In this context, your information will be sent under pseudonym. In other words, no information will be sent can directly identify you. We may also need to provide this information to companies belonging to our group and to our cooperation partners, to the extent they are equally bound to comply with the legal obligations.

Your personal data will be kept for as long as is strictly necessary to achieve the objectives for which they were obtained, unless the applicable legislation requires their retention for a longer period or it is necessary to keep them for a longer period in accordance with the provisions of Art. 5.1 GDPR. Personal data relating to pharmacovigilance is kept for the full commercial life of the product plus ten (10) years.

USE BY MINORS

This Website is not intended for individuals under the age of 18, so the personal data of minors will not be knowingly processed. If you are under the age of 18 or are legally a minor under the laws of your home country, you will need the permission of your parents or legal guardian in order to use the Website. If the personal data of minors under 18 years of age come to our attention without the required consent, HIPRA will delete them immediately upon notification or request to do so. 
As an exception, in cases of reporting adverse effects, for the purposes of compliance with pharmacovigilance regulations, the data of minors under 18 years of age may be processed even without the consent of their parents or legal guardians. 

DATA TRANSFER

As a group of companies with an international presence, HIPRA may communicate and exchange user data with other companies belonging to the HIPRA Group that are listed on the website and solely for the purposes indicated above. In any case, such data will be processed with the level of protection required under applicable regulations.
HIPRA may also transfer personal data: (i) to subcontracted service providers in order to provide services (e.g.: web hosting, data analysis, provision of information technologies and related infrastructure, customer service, sending emails, auditing and other services); (ii) to other companies with whom we collaborate in connection with particular products or services; and (iii) to comply with applicable laws and requests from public authorities.

AUTOMATIC DATA COLLECTION

Certain information may be collected automatically while you are browsing the Website. For more information about the cookies used on the Website you can access our Cookies Policy.

EEA and UK users: 

CROSS-BORDER DATA TRANSFERS

Data collected through the Website, Applications, communications and other online resources may be processed in any country where HIPRA has facilities, subsidiaries or service providers. Some of these countries may not have the same level of protection as in the countries of the European Economic Area (EEA), so HIPRA will ensure that appropriate measures are taken to protect personal data in accordance with this Privacy Policy and as permitted by applicable data protection laws.  In cases of transfers from the EEA to countries deemed not appropriate by the European Commission, HIPRA will take appropriate necessary measures for the protection of personal data, including ensuring that the recipient will be bound by EU standard contractual clauses.

RIGHTS 

We would like to inform you that users have the right to exercise at any time, under the terms established by current legislation, the rights of access, update, rectification or erasure of data, as well as to request that the processing of data be limited, to oppose the processing of data, to request the portability of their data, as well as to revoke the consent given at any time. If you wish to exercise any of your rights, you may do so by writing to the following address: Avda. La Selva 135, 17170 Amer (Girona), Spain, or at the email address privacy@hipra.com, without prejudice to also contact the relevant local or national Data Protection authority, in Spain, the Spanish Data Protection Agency (www.agpd.es).

DATA UPDATE

It is important, in order for us to keep personal data updated, that you as a user inform us whenever there have been any changes; otherwise, we are not responsible for the accuracy of the data.
You as a user guarantee that the personal data provided is accurate, ensuring that all the information provided corresponds to the actual situation, which is up to date and precise, and you are required to report any modifications.

HIPRA is not liable for any loss or damage caused by the communication of erroneous, inaccurate or incomplete data.Last update: September 2024