PRIVACY POLICY

1.- WHO ARE WE?

• Owner: LABORATORIOS DIATER SA (hereinafter, "DIATER").
• Tax payer ID number: A-82481813
• Registered office: Av. Gregorio Peces Barba 2, Parque Tecnológico de Leganés, 28918 Leganés, Madrid (Spain)
• Contact phone: (+34) 91 496 60 13
• Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
• DPO: This email address is being protected from spambots. You need JavaScript enabled to view it. 

2.- INFORMATION 

By accepting this Privacy Policy, the user (hereinafter, the "User" or, when applicable, the "Users"is informed that the personal data provided through any of the channels enabled by DIATER and data derived from the user navigation data and those that it can provide in the future through any means authorised to do soshall be treated by DIATER

The User must carefully read this Privacy Policy, which has been written in a clear and simple way, to facilitate its understanding, and the User can freely and voluntarily determine whether or not they wish to provide their personal data to DIATER. 

3.- OBLIGATION TO PROVIDE THE DATA

The data requested in the forms and/or channels established by DIATER are generally mandatory (unless otherwise specified in the required field) to fulfil the purposes for which they are being collected.

Therefore, if they are not provided or are not provided correctly, it will not be possible to meet the User's requests. 

4.- FOR WHAT PURPOSE WILL DIATER TREAT USER DATA? 

The User's personal data will be processed by DIATER in accordance with the following purposes:

1. Manage ther registration as a User in the "Area for professionals" on the DIATER website: Manage the registration and cancellation of the registered User; Identify and authenticate the User's access, in those settings to which they have been given access; prevent and control the use of the "Area for professionals", of the DIATER website, or any other enabled channel or means, to avert illegal or unauthorised purposes, regardless of whether these are financially motivated.
2. Manage the contracting of services that are carried out through any channel enabled for this purpose, as well as the billing and the proper provision of the service: Manage the service provision, previously requested by the Users. By way of example, but not limited to: registration for events (scientific workshops and conferences). Additionally, manage all those collaborations, presentations and other activities, carried out by Users, with whom DIATER has contracted a service.
3. Make transparent on a website owned by DIATER the value transfers made to healthcare professionals: Make Public the amounts related to registration, accommodation and transfer expenses related to scientific and professional meetings of its own or of third parties, as well as those related to any provision of service performed by a healthcare professional.
4. Manage the notifications of adverse reactions and other activities related to Pharmacovigilance, as well as the notification of incidents related to the quality, safety and efficacy of medicines or medical devices: collect the notifications of adverse reactions, as well as quality incidents of the products and, where appropriate, notify said information to the Health, National or European Authorities, with competence in the matter.
5. Respond to the questions raised by the User through the enabled contact channels: Manage, process and respond to requests, incidents, claims or enquiries from the User, made through the various communication channels provided for this purpose.
6. Prepare reports, statistics and internal analysis to improve DIATER products and services: Analyse, manage and prepare internal reports and statistics for the constant improvement of the quality of DIATER products, services and processes, to which ends aggregated information is used in all cases.
7. Send commercial communications of DIATER's own products and services: Manage the sending of information about new courses or events organised by DIATER, as well as scientific-technical information, by electronic and/or conventional means, provided that the User has given his consent or, if he has not expressed his opposition in this regard, when it concerns a previously registered professional.
8. Comply with the legally established obligations: When the treatment is necessary to comply with a legal obligation that may be applicable to DIATER. 

5.- WHAT USER DATA WILL DIATER PROCESS?

DIATER may process the following personal User data:

1. Manage their registration as a User in the "Area for professionals" on the DIATER website:
   
   
   • Identifying data: name, surname(s).
   • Contact information: email address, telephone number and postal and fax addresses.
   • Personal data: date of birth, city of residence, postal code.
   • Professional data: registration number.
   • Employment details: name of the means or company to which the User belongs (hospital, private practice), specialty.
     
     
2. Manage the contracting of services that are carried out through the channels enabled for this purpose, as well as the billing and the proper provision of the service:
   
   
   • Identifying data: name, surname(s), ID, signature.
   • Contact information: email address, telephone number and postal and fax addresses.
   • Personal data: date of birth, city of residence, postal code.  
   • Professional data: registration number.
   • Employment details data: name of the means or company of belonging (hospital, private practice) specialty.
   • Financial data: account number.
   • Data on goods and services transactions: goods and services supplied by the affected party, goods and services received by the affected party.
     
     
3. Publish on a website, owned by DIATER, the value transfers made to healthcare professionals:
   
   
   • Identification data: name, surname(s), ID.
   • Employment details: name of the means or company to which the User belongs to (hospital, private practice), city of professional practice. Professional address.
   • Data on goods and services transactions: goods and services supplied by the affected party, goods and services received by the affected party.
   • Economic data: transfer of value perceived by the healthcare professional.
     
     
4. Manage the notifications of adverse reactions and other activities related to pharmacovigilance, as well as the notification of incidents related to the quality, safety and efficacy of medicines:
   
   
   • Identifying data: name, surname(s).
   • Personal data: date of birth, gender.
   • Contact details: email address, phone number.
   • Health data: (i) description of the adverse reaction; (ii) data on the medicine supplied (name, dosage, frequency, and start date of supply); (iii) data from the patient's medical history.
   • Any other information that the User wants to share with DIATER.
   • Data obtained from third party sources: the data on the affected patient may come from the notifier of the adverse reaction: healthcare professionals, and relatives of the person affected by the adverse event.
     
     
5. Respond to the questions raised by the User through the contact channels enabled:
   
   
   • Identifying data: name, surname(s) and ID.
   • Contact details: email address, phone number.
   • Other data: any data that the User may provide.
     
     
6. Prepare reports, statistics and internal analyses to improve DIATER's products and services:
   
   
   • Other data: Aggregated User information
     
     
7. Send commercial communications on DIATER's own products and services:
   
   
   • Identifying data: name and surname(s).
   • Contact information: email address, telephone number and postal address.
     
     
8. Compliance with legal obligations: Any data that may be legally required.
   
   In the event that the User provides data from third parties (for example, contact details of a family member), they declare that they have their consent and/or sufficient legitimacy and undertake to convey the information contained in the Privacy Policy to them, exempting DIATER from any liability in this regard.

However, DIATER may carry out the appropriate verifications to verify this fact, adopting the corresponding due diligence measures, in accordance with data protection regulations.

6.- WHAT IS THE LEGITIMATION OF DIATER'S PROCESSING OF USER DATA?

The legitimacy of DIATER's treatment of User data is based on the contractual relationship created when the User registers in the Area for Professionals, on the legitimate interest, on compliance with legal obligations, on the consent requested, as well as on fulfilment of the other contractual relationships so created. In particular, DIATER treats the User's data in accordance with the following legitimising bases: 

1. Manage your registration as a User in the "Area for professionals" of the DIATER website: The data processing arising from this purpose will be based on legitimation of the fulfilment of the contractual relationship.
2. Manage the contracting of services that are carried out through the Website, or any of its own or third-party platforms, as well as the billing and the proper provision of the service: The data processing derived from this purpose will be based on legitimate fulfilment of the contractual relationship.
3. Publish on a website, owned by DIATER, the value transfers to healthcare professionals: The data processing arising from this purpose will be based on DIATER's legitimate interest.
4. Manage the notifications of adverse reactions and other activities related to pharmacovigilance, as well as the notification of incidents relted to the quality, safety and efficacy of medicines: The treatment of your data derived from this purpose will have as a basis of legitimacy compliance with a legal obligation, in accordance with RD 577/2013, of July 26, which regulates the pharmacovigilance of medicines for human use.
5. Answer the questions raised through the enabled contact channels : The legitimacy of the processing of data arising from this purpose will be based on the User's consent, which he may withdraw at any time. In the event that the User withdraws his consent, the query or question raised may not be processed.
6. Prepare reports, statistics and internal analyses to improve DIATER's products and services: The legitimacy of all treatments arising from this purpose will be based on the legitimate interest, recognised by the data controller under the data protection regulations.

This legitimate interest is based on being able to offer the Users DIATER services of the highest quality and user-friendliness. 

1. Send commercial communications of DIATER's own products and services: The data processing arising from this purpose is based on The aforementioned consent will be understood to be granted when the User ticks the box enabled for this purpose in the different forms for collecting personal information established.
   
   However, those scientific-technical communications sent by DIATER that have professional utility or relevance, will be sent, based on the legitimate interest of DIATER, recognized by the data protection regulations, by virtue of the registration as a professional carried out by the User.
   
   
2. Comply with the legally established obligations: All treatments derived from this purpose will be based on compliance with a legal obligation. 

The consents obtained for the aforementioned purposes are independent, so the User may revoke one or more of them without affecting the others.

7.- DATA STORAGE

The User's personal data will be kept by DIATER for the following periods:

1. Manage your registration as a User in the "Area for professionals" of the DIATER website: Your data will be kept as long as you are still registered as a User and, subsequently, during the Statute of Limitations for any legal actions that may arise from it.
2. Manage the contracting of services that are carried out through the Website, or any own or third-party platforms, as well as the billing and the proper provision of the service: Your data will be kept as long as the contractual relationship remains in force, and subsequently, until any legal actions that may arise from it have become time-barred.
3. Publish on a website, owned by DIATER, the value transfers made to healthcare professionals: Your data will be publicly available for at least 3 years, being subsequently kept for 2 more years, in accordance with the Pharmaceutical Industry's Code of Good Practices.
4. Manage the notifications of adverse reactions and other activities related to pharmacovigilance, as well as the notification of incidents related to the quality, safety and efficacy of medicines: Your data will be kept for at least ten (10) years after the end of the marketing of the product to which the notifications refer, in order to complete or track the product subject to notification.
5. Respond to the questions raised through the contact channels enabled: Your data will be kept for the period needed to process and answer your request and, once it is completed, during the limitation period for legal actions arising from the aforementioned request.
6. Prepare reports, statistics and internal analyses to improve DIATER's products and services: The information will be used in an aggregated way for the preparation of reports, statistics and analysis, during the time needed to process and prepare the referred reports, statistics and/or analysis, and, once it has ended, during the limitation period for legal actions.
7. Send commercial communications of DIATER's own products and services: the data will be treated in accordance with said purpose until the User revokes the consent granted, or where appropriate, until the User opposes the treatment of your data.
8. Comply with the legally established obligations: The data provided to comply with the obligations derived from the services offered by DIATER will be kept for the legally established deadlines.

8.- WHICH RECIPIENTS WILL THE USER'S DATA BE SHARED WITH?

The User's personal data may be communicated to:

• Public administrations. By way of example, but not limited thereto, your data may be communicated anonymously to the European Medicines Agency (EMA), or where appropriate, to the Spanish Agency for Medicines and Health Products (AEMPS), or to other Health Authorities that so require, to comply with the obligations concerning Pharmacovigilance, as well as for the purposes of any other legally required notifications based on compliance with a legal obligation to notify and monitor suspected adverse reactions.
• Courts and Tribunals, in the cases provided by law, based on compliance with a legal obligation.
• Ethics Supervision Unit of the National Business Association of the Pharmaceutical Industry (Farmaindustria). Your identification data, as well as those concerning the value transfer, may be communicated to Farmaindustria, when so required, based on the legitimate interest of the aforementioned Association, of which DIATER is an associate member.

In the event that DIATER intends to carry out a communication of data other than those provided for in this section, the User's prior express consent shall be requested.

9.- INTERNATIONAL DATA TRANSFERS

The User is informed that DIATER has contracted the services of technology service providers, whose servers are hosted outside the European Economic Area, which implies an international transfer of data, that is, a flow of personal data from Spanish territory to recipients established in countries outside the European Economic Area (the countries of the European Union, in addition to Liechtenstein, Iceland and Norway). 

The aforementioned international data transfers are regularized by virtue of subscription to the standard contractual clauses, that is, standard terms, approved by the European Commission for data protection, which can be used for the purpose of transferring personal data, outside the European Economic Area, in compliance with current regulations on data protection. 

11.- USER' RESPONSIBILITY

The User guarantees that the data provided to DIATER are true, accurate, complete and updated. For these purposes, the User is responsible for the veracity of all the data that he communicates and will keep the information provided suitably updated, in such a way that it reflects the true state of affairs.

Likewise, it guarantees that if data is provided to third parties, those parties are informed of the aspects contained in this document. By the same token, it guarantees that it has obtained your authorisation to provide your data to DIATER for the purposes indicated.

In any case, the User will be responsible for any false or inaccurate information provided through the data-gathering forms provided, and shall also be liable for any direct or indirect damages that said information may cause to DIATER and/or to third parties.

12.-EXERCISE OF RIGHTS

As the owner of the data, the User can send a letter to DIATER, to the address indicated in the heading of this Privacy Policy, or by means of an email to the address: This email address is being protected from spambots. You need JavaScript enabled to view it., attaching a copy of a document providing proof of the User's identity, at any time and free of charge, to exercise the following rights:

a) Right of Access:

You will have the right for DIATER to inform you about whether or not it is treating your personal data and, in this case, to be able to access said data and receive information about the purposes for which they are processed, the categories of data affected by the treatment, the recipients to whom your personal data was communicated and the expected period of data conservation, among other information. 

b) Right of Rectification and Suppression:

You will have the right to request the deletion of personal data provided that the applicable legal requirements are met, and the rectification of inaccurate data that concerns you when, among other reasons, these are no longer necessary for the purposes for which they were collected. 

c) Limitation of treatment, revocation of consent and total or partial opposition to treatment:

In certain circumstances (for example, in the event that the applicant disputes the accuracy of their data, while the accuracy of these is verified), he may request that the processing of his  personal data be limited, these being only processed for the exercise or the defense of claims.

You will also have the right to revoke the consent given and to oppose the data treatment at any time, for reasons concerning your particular situation and in the event that said treatment is based on our legitimate interest or the legitimate interest of a third party (including the treatment for the purposes of direct marketing and drawing up the corresponding profiles). In this case, DIATER will cease processing that data, unless there are legitimate reasons for doing otherwise.

d) Portability of your data:

You will have the right to receive the personal data that you have provided to DIATER in a structured, common and machine-readable format, and to be able to transmit them to another data controller without the controller to whom you have provided them preventing it, in the cases provided by law to these effects. 

e) Automated individual decisions:

Likewise, in addition to the aforementioned rights, if automated decisions are made, including profiling, you will have the right to obtain human intervention from DIATER and to express your point of view and challenge the decision.

f) Others:

Likewise, when personal data is transferred to a third country or to an international organisation, you will have the right to be informed about how you can access or obtain a copy of the appropriate guarantees regarding the transfer.

By the same token, you may file a claim regarding the protection of your personal data with the Spanish Agency for Data Protection at the following address: C / Jorge Juan, 6, 28001 - Madrid (Spain) when the interested party considers that DIATER has violated the rights enshrined in the applicable data protection regulations.

13.- SECURITY MEASURES 

DIATER will treat the User's data at all times in a wholly confidential manner and shall perform its mandatory duty of maintaining data secrecy in accordance with the provisions of the applicable regulations, adopting all necessary technical and organizational measures to guarantee the security of said data and avoid its alteration, loss, unauthorised treatment or access, taking into account the state of technology, the nature of the stored data and the risks to which they are exposed.

14.- CHANGES 

DIATER reserves the right to review its Privacy Policy at the time it deems appropriate, in which case it will be communicated to the Users. For this reason, we ask that you regularly check this privacy statement to read the most recent version of DIATER's Privacy Policy.

15.- ACCEPTANCE AND CONSENT 

The User declares that he has been informed of the terms and conditions on the protection of personal data, and fully accepts the contents of this Privacy Policy.

Last update: February 18, 2021.