Skip to main content

Respecting the provisions of current legislation, CYGYC BIOCON, S.L. (hereinafter CYGYC BIOCON), undertakes to adopt the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected.

 

1. Laws that incorporates this privacy policy

This privacy policy is adapted to the Spanish and European legislation in force on the protection of personal data on the Internet. Specifically, it respects the following rules:

  • The Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data (GDPR).
  • The Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights.
  • Law 34/2002, of July 11, 2002, on Information Society Services and Electronic Commerce (LSSI-CE).

 

2. Identity of the Controller of the personal data processing

The responsible for the processing of personal data collected on this website is: CYGYC BIOCON, S.L. (more information in the “legal notice”).

2.1 The contact details, for the purpose of notifications within the scope of privacy, are:

  • Address: Calle Bélgica, num. 5, P.I, Pla de Llerona, 08520, Les Franqueses del Vallès (Barcelona).
  • Contact telephone: 93 377 19 00
  • Contact Email: info@cygycbiocon.com (put in the subject Privacy)

Note of interest: Establish that at this time the Data Controller, as a measure of active responsibility, has a Data Protection Officer, outsourced to Compliance Quality Legal Service, a consultancy and legal advice specializing in the field of new technology laws, which has been reported and registered with the Spanish Agency for Data Protection, establishing as contact details the following email soporte@qualitylegalservice.com

 

3. Activity Register

The personal data collected by CYGYC BIOCON, under its responsibility, through the forms established on its site, will be collected in activities duly registered, in accordance with the current regulatory framework, called “data management web users”.

3.1 Principles applicable to the processing of personal data

The processing of the User’s personal data shall be subject to the following principles set out in Article 5 of the GDPR:

– Principle of lawfulness, fairness and transparency: the consent of the User will be always required after fully transparent information of the purposes for which the personal data are collected.

– Purpose limitation principle: personal data will be collected for specified, explicit and legitimate purposes.

– Principle of data minimization: the personal data collected will be only those strictly necessary in relation to the purposes for which they are processed.

– Accuracy principle: personal data must be accurate and always up to date.

– Principle of limitation of the storage period: personal data will only be kept in such a way as to allow the identification of the user for the time necessary for the purposes of their processing, unless there is a legal requirement that makes it advisable to keep them after the intended purpose has been fulfilled.

– Principle of integrity and confidentiality: personal data will be treated in a way that guarantees its security and confidentiality.

– Principle of proactive responsibility: the Data Controller shall be responsible for ensuring that the above principles are complied with.

4. Categories of personal data

The categories of data processed by CYGYC BIOCON, through this website, are only identification, contact and curriculum data associated with the form “job opportunities”. In no case, special categories of personal data within the meaning of Article 9 of the GDPR are processed.

5. Legal basis for the processing of personal data

The legal basis for the processing of personal data is defined by the pre-commercial relationship that can be established with the customer or contact, through the link “contact”.

The user will have the right to exercise his/her rights associated with the processing of the data provided in his/her communications in accordance with the provisions of point 13 of this privacy policy.

In the occasions in which the user must or may provide their data through forms to make inquiries, request information or for reasons related to the content of the website, you will be informed if the completion of any of them is mandatory because they are essential for the proper care of the request made.

 

6. Purposes of the processing for which the personal data is used

Personal data are collected and managed by CYGYC BIOCON in order to facilitate, expedite and fulfil the commitments established between the website and the user or the maintenance of the relationship established in the forms that the latter fills or to respond to a request or query.

Likewise, the data may be used for commercial purposes of personalization, operational and statistical, and activities of the corporate purpose of CYGYC BIOCON, as well as for the extraction, storage of data and marketing studies to adapt the content offered to the user, as well as to improve the quality, operation and navigation through the website (in this case the data processing will be performed in dissociated form or in aggregate magnitudes).

At the time the personal data is obtained, depending on the purpose of the form or data collection procedure, the user will be informed about the specific purpose or purposes of the processing for which the personal data will be used, i.e. the use or uses to which the information collected will be put.

 

7. Periods of maintenance of personal data

Establish that this point is limited to the collection and processing of data associated with this website, according to its current reality. It does not apply to personal data processed by the company in other technological or physical environments other than this website.

Personal data will only be kept for the minimum time necessary to achieve the purposes of their treatment and, in any case, or until the user requests the cancellation or limitation of use of their data.

At this time, the collection of data is determined by:

– The email, located in the footer of the website, which allows the sending of a communication to that email (info@cygycbiocon.com). Therefore, the collection of data will be determined by the user’s email that communicates and the data that may be contained in the body of the email and attachment. In this regard, we ask that use of this channel is commercial and technical field associated with the activity of CYGYC BIOCON.

You could also use the referenced mail for the request to exercise your rights RGPD 2016/679.

– The link “contact” substantiated in a form where you can establish a communication within a processional or business field, so please ensure that the contact details are associated with this field.

– The form of the “internal” that allows to give scope to the whistleblower law 2/2023. Establish that this treatment is carried out under the technological environment of the channel provider (Compliance Quality Legal Service), therefore, the scope of security and confidentiality is established by said provider. To establish, in this regard, that said link has implemented an “https” security protocol to ensure a secure connection.

 

8. Recipients of personal data

The User’s personal data, in general, will not be shared with third parties, except for those associated with a communication or complaint of the internal channel that may be subject to access and processing by third parties as set out in the channel management manual and/or competent public bodies depending on the type of crime or offense reported.

 

9. Personal data of minors

Respecting the provisions of Articles 8 of the RGPD and 13 of RDLOPD, only those over 14 years may consent to the processing of their personal data in a lawful manner by CYGYC BIOCON. In the case of a minor under 14 years, the consent of parents or guardians will be required for treatment, and this will only be considered lawful to the extent that they have authorized it.

Establishing the purpose of this website is not intended for minors, but for people who, because of their professional or business activity, are interested in the products and services of CYGYC BIOCON. For this reason, we ask that minors refrain from sending communications through the “contact” link.

 

10. Secrecy and security of personal data

CYGYC BIOCON undertakes to adopt the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected, to ensure the security of personal data and prevent accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or unauthorized communication or access to such data.

The Web Site has an SSL (Secure Socket Layer) certificate, which ensures that personal data is transmitted securely and confidentially, as the transmission of data between the server and the User, and in feedback, is fully encrypted.

However, because CYGYC BIOCON cannot guarantee the impregnability of the Internet or the total absence of hackers or others fraudulently accessing personal data, the Data Controller undertakes to notify the User without undue delay when a breach of security of personal data occurs that is likely to involve a high risk to the rights and freedoms of natural persons. Following the provisions of Article 4 of the GDPR 2016/679, a breach of security of personal data means any breach of security resulting in the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or unauthorized communication or access to such data.

Personal data will be treated as confidential by the Data Controller, who undertakes to inform and to ensure by means of a legal or contractual obligation that such confidentiality is respected by its employees, associates, and any person to whom it makes the information accessible.

In this moment, due to the capacity of data collection and functionalities of interaction and access of the web user, the level of risk in terms of security and infringement of rights and freedoms of the user in the processing, maintenance and access of data by third parties is low.

In relation to data collection and “internal channel” functionalities, the responsibility is determined by the service provider in the reception and registration process. All data processing that may be carried out subsequently, derived from the application of research processes will be managed outside the application and within the technological environment of CYGYC BIOCON.

 

11. International transfer of data

The concept of international transfer does not apply to the processing of data outside the territorial/technological scope of Spain, and by extension of the EU.

 

12. Data collection forms

The data that can be collected on this website are limited to three types of forms:

12.1 Located in the link “contact”:

  • The origin of the data is from the data subject himself or his legal representative.
  • The type of data to be collected will be the sender’s e-mail address, and the identification and contact data established, such as name and surname, e-mail, position, and company (may be incorporated in the body of the message).
  • The maintenance of the identification and contact data will be established indefinitely, unless there is an exercise of cancellation, opposition, or limitation of treatment by the owner of the data.
  • This contact form is intended for professional and business CYGYC BIOCON and third parties who wish to relate to it in this area.

12.2 Located in the “internal” link:

  • The origin of the data is by the informant.
  • The type of data to be collected will be associated with the type of communication and complaint established by the informant, where identifying data of the witness/s and the denounced person/s may be collected.
  • The maintenance of the data is established by Law 2/2023 (see articles 26 and 32), determined in the process of reception and registration (4 years) and investigation and resolution (in accordance with the applicable regulations, determined by the type of crime or infraction).

12.3 Located in the link “job opportunities”:

  • The origin of the data is from the interested party itself (job seeker)
  • The type of data that will be collected will be the e-mail address of the interested party, and those identifying and contact data that are established, such as name and surname and e-mail.
  • The maintenance of identifying and contact data will be established indefinitely, unless there is an exercise of cancellation, opposition, or limitation of treatment by the owner of the data.
  • This contact form is intended for job applicants, and in this regard, we request that in the case of attaching the cover letter and cv, these documents strictly comply with the purpose thereof. Please do not include any data related to your personal sphere, which are not relevant for us.

 

13. Request for the exercise of ARCO Rights (extensible to the Digital Rights included in the current regulatory framework).

The current data protection regulations recognize you a series of rights in relation to the use we make of the data. Your rights are unipersonal and non-transferable, that is, they can only be performed by the owner of the data, after verification of their identity by the responsible (in this case CYGYC BIOCON).

Here are the rights you have:

  • Request ACCESS to your personal data.
  • Request RECTIFICATION of your data
  • Request the DELETION or elimination of your data (right to be “forgotten”)
  • LIMIT or object to the use we make of your data Right to PORTABILITY of your data for cases of telecommunication or internet services.
  • Right to WITHDRAW your consent at any time.
  • Right to file a data protection COMPLAINT with the Supervisory Authority: Data Protection Agency.

To exercise your rights of access, rectification, deletion, limitation or opposition, portability, and withdrawal of your consent, you can do so directly by contacting CYGYC BIOCON, or through the State Authority designated for this purpose Spanish Data Protection Agency.

In addition to the rights referred to in this point, if you believe that your data is not being collected or processed in accordance with current Data Protection regulations, you may make a complaint to the Control Authority of reference.

Thus, the User may exercise his/her rights by means of a written communication addressed to the Data Controller with the reference “RGPD”, specifying:

  • User’s name, surname(s) and copy of ID card. In cases where the representation is admitted, it will also be necessary the identification by the same means of the person representing the user, as well as the document proving the representation. The photocopy of the DNI may be replaced by any other means valid in law that proves the identity.
  • Request with the specific reasons for the request or information to be accessed.
  • Address for notification purposes.
  • Date and signature of the applicant.
  • Any document supporting the request.

This request, and any attachments, may be sent to the contact addresses set forth in section 2.1 of this privacy policy.

 

14. Acceptance and changes to this privacy policy

As a user of this website, in the event that you browse through it, it will be of interest that you have read and agree with the conditions on the protection of personal data contained in this Privacy Policy, as well as that you accept the processing of your personal data so that the Data Controller can proceed in the manner, during the periods and for the purposes indicated. The use of the Website implies acceptance of the Privacy Policy of the same.

CYGYC BIOCON reserves the right to modify its Privacy Policy, according to its own criteria, or motivated by a legislative, jurisprudential, or doctrinal change of the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will be explicitly notified to the user.

Informative note: This Privacy Policy was updated on May 14, 2024.