Privacy Policy

DATA CONTROLLER AND DATA PROTECTION OFFICER 

Italfarmaco, S.A. (hereinafter, “Italfarmaco”), with tax Identification number A-78570611 and address at Carrer San Rafael 3, 28108 Alcobendas, Madrid (Spain), is the Data Controller of the personal data.

You can contact our Data Protection Officer by sending a letter to the postal address provided or by sending an email to spain.dpo@italfarmacogroup.com

THE PERSONAL DATA WE PROCESS AND HOW WE OBTAIN THEM

In principle, Italfarmaco will not need to process your personal identification data when you file a Claim. It is possible to file Claims without including your personal details. However, you may voluntarily provide your personal data as part of the Claim submission process, including, but not limited to information about your identity, first and last name, telephone number or email address.

Italfarmaco also informs you that it does not request or process special categories of personal data, such as information on racial or ethnic origin, religious or ideological convictions, trade union membership or sexual orientation. However, you may include information from any special categories in the free-text fields of the form, if you deem it convenient.

The Claim may also contain personal data of other persons mentioned in the Claim. In such cases, whenever possible, because their contact details are available, and it does not hinder the purpose of any investigation to be carried out, the individuals whose personal data are processed shall be informed. In all cases, we shall preserve the confidentiality of the Claim you file, as well as your identity.

WHAT FOR AND WHY DO WE PROCESS YOUR PERSONAL DATA?

We process your identifying data -if provided- and other data provided in the form with the aim of analysing the Claim you file through the Ethics Channel, requesting you more information regarding issues which are not clear enough in your Claim, and developing the corresponding investigation, in its case.

The legitimate grounds for processing the personal data you provide is the fulfilment of an obligation stated by the law, as recognized in Article 6.1.c) of the GDPR.

In case you provide us with personal data from special categories in your Claim, the legitimate interest is the essential public interest in accordance with Article 9.2.g) of the GDPR.

HOW LONG DO WE KEEP YOUR DATA? 

The personal data you provide in a Claim shall be kept for no more than three (3) months in the Ethics Channel tool to be able to analyse it and carry out the corresponding investigation, if necessary. Once this period has elapsed, Italfarmaco shall encrypt and move the personal data from the Ethics Channel tool to a different location.

Claims for which no investigation has been opened shall be kept in anonymized form, making it impossible to identify the reporting party or third parties. After the period referred to in the first paragraph of this section has elapsed, if an investigation is opened, the data may continue to be processed by the Ethics Channel’s Managers. 

RECIPIENTS

Access to the personal data you include in the Claim shall be limited exclusively to the Compliance Committee (including the Person in Charge of the Management of the Ethics Channel) and the Ethics Channel’s Managers and any internal and/or external investigators that may be appointed. Likewise, when disciplinary measures are taken against an employee, access shall also be granted to personnel with management and control functions at Italfarmaco, S.A. or Lacer, S.A. Human Resources Department. The employees of the referred Department are contractually bound by confidentiality and safeguarding obligations in the processing of personal data stipulated by current regulations on privacy.

The personal data could also be communicated under a judicial request to third parties as judges and courts and/or state law enforcement forces and agencies, when it is necessary for proper judicial proceedings.

Finally, we hereby inform you that the referred personal data could be disclosed to the companies within the corporate Italfarmaco Group for internal administrative and management purposes provided that such communication is necessary to comply with the purposes of processing your personal data identified in section “What for and why do we process your personal data?”

INTERNATIONAL DATA TRANSFERS AND AUTOMATED DECISIONS

Italfarmaco hereby informs you (i) that no international transfers of personal data shall be carried out, and (ii) that it shall not take decisions that may affect you based solely on automated processing of your personal data. All decision-making processes related to the processing purposes described are performed with human intervention.

TECHNICAL IMPLEMENTATION AND SECURITY OF YOUR DATA

The Ethics Channel tool includes an option to file a Claim anonymously through an encrypted connection. When you use our Ethics Channel, your IP address and current location are not stored at any time. After sending the Claim, you will receive a case number and a case access code so that you can continue communicating securely with us. We maintain appropriate technical measures to ensure the data protection and confidentiality. All information stored in the referred tool is encrypted with the most advance technology.

YOUR RIGHTS

You may exercise your rights of access, rectification, deletion, restriction of and/or opposition to processing and data portability by contacting our Data Protection Officer by post at our postal address or by sending an email as indicated in Section “Data Controller and Data Protection Officer” of this Privacy Policy.

COMPLAINTS

If you feel that processing of your personal data violates regulations or your privacy rights, you may submit a complaint to our Data Protection Officer by using the postal and email addresses indicated in Section “Data Controller and Data Protection Officer” of this Privacy Policy, or by contacting the Spanish Data Protection Agency at its electronic headquarters or postal address. 

 

 

In accordance with current legislation on personal data protection, we hereby inform you of the following:

DATA CONTROLLER

The Data Controller of this processing is Lacer, S.A. Sociedad Unipersonal (hereinafter “LACER“), with registered office at calle Boters 5, 08290 Cerdanyola del Vallès, Barcelona (Spain).

DATA PROTECTION OFFICER

For further information on your privacy guarantees, please contact our Data Protection Officer at our postal address or email address dataprotection@lacer.es.

HOW DID WE OBTAIN YOUR DATA?

Your data have been obtained through (i) the commercial or contractual relations that the company, entity or organisation you work for or collaborate with has maintained – or currently maintains – with LACER, (ii) the relations maintained with you directly, and/or (iii) from other third-party business partners.

Likewise, we have been able to obtain your personal data through publicly accessible sources, such as the Internet, excluding those digital environments in which access is restricted to a specific circle of people.

WHAT PERSONAL DATA DO WE PROCESS?

Your data will be processed for the legitimate purposes explained below. Data categories will be limited to your corporate contact details necessary for your professional location related to the company, entity or organisation for which you work or collaborate.

WHY DO WE PROCESS YOUR PERSONAL DATA?

We process your corporate contact data for the sole purpose of maintaining commercial, contractual or collaborative relationships that LACER maintains with the company, entity or organisation you work for or you collaborate with, as well as with yourself in the event that you are an individual entrepreneur or liberal professional, which may include, for example, managing your registration in LACER environments.

We will also process your data in order to comply with our legal obligations, for example, those related to the maintenance of marketing authorisations for LACER products.

ON WHAT GROUNDS DO WE PROCESS YOUR PERSONAL DATA?

The processing of your corporate contact data related to the purpose described in the first paragraph of section 5 above responds to a legitimate interest of our company, expressly recognised by applicable privacy regulations. In this regard, we hereby inform you that we have carried out the assessments required by privacy regulations, confirming that LACER’s interests prevail over data subjects´ privacy rights.

The processing of your corporate contact data for the maintenance of marketing authorisations, where applicable, is based on compliance with the legal obligations to which LACER is subject due to its activity.

WHEN AND WHY DO WE DISCLOSE YOUR PERSONAL DATA TO THIRD PARTIES?

Your data may be disclosed to the recipients listed below for the reasons described below:

• Public Administrations: for compliance with the legal obligations to which LACER is subject due to its activity. For example, medicines´ applicable regulations, food supplements, cosmetics, among other products marketed by LACER.
• Companies within the corporate group to which LACER belongs, i.e. ITALFARMACO Group for internal administrative and management purposes, provided that such communication is necessary to comply with the purposes of processing your personal data identified in section 5 of this policy.
• Suppliers, which may include ITALFARMACO Group companies, who need access to your data for the provision of services that LACER has contracted with such suppliers, and with whom LACER has signed the confidentiality and personal data processing contracts necessary and required by law to protect your privacy.
• Accounting auditing companies for compliance with the legal account auditing obligations to which LACER is subject due to its activity.

In the event that LACER is required to disclose personal data to other third parties in the future, you shall be notified in a timely manner.

INTERNATIONAL DATA TRANSFERS

LACER may transfer your data to countries outside the European Economic Area (“Third Countries”) that do not have a level of personal data protection equivalent to that provided at the European level. These transfers may be made on the basis of adequacy decisions by the European Commission, in which case the Third Country will be considered to have regulations equivalent to those of the European Union and, therefore, your personal data will be processed with the same level of protection.

In the event that your personal data are transferred to Third Countries that do not have regulations equivalent to the European Economic Area, the transfer will be carried out with all guarantees and adequate safeguards required by regulations to preserve your privacy, subject to verification of the legislation of the destination country. Such safeguards may consist of the application of standard contractual clauses and of additional guarantees to them, in accordance with the regulations of each Third Country, or of binding corporate rules approved by the data protection authorities. This happens, for example, when LACER contracts the services of suppliers in Third Countries.

For further information on guarantees in relation to international data transfers, you may contact our Data Protection Officer at the postal and e-mail addresses indicated.

HOW LONG DO WE KEEP YOUR DATA?

Your personal data will be kept for as long as your commercial and/or contractual relationship with LACER remains in force. At the end of said relationship, we will keep your data for any reason, for the applicable legal limitation periods. In this case, they will be processed for the sole purpose of accrediting compliance with our legal or contractual obligations. At the end of such limitation periods, your data will be deleted or, alternatively, anonymised.

WHAT ARE YOUR RIGHTS?

You may exercise your rights of access, rectification, erasure, object, limitation and/or portability to the processing of your data, through the postal and electronic addresses indicated above.

Likewise, if you consider that the processing of your personal data infringes the abovementioned regulations or your privacy rights, you can file a complaint:

• To our Data Protection Officer, through our postal and e-mail addresses indicated.
• To the Spanish Data Protection Agency, through its website or postal address.

CHANGES, MODIFICATIONS OR UPDATES

LACER reserves the right to modify this Privacy Policy at any time it deems appropriate, in order to reflect regulatory changes, good practices or update personal data processing activities. You will be informed of such updates in accordance with the requirements of these regulations, in the event that your rights are appreciably affected as a result of such modification or update.

CODE OF CONDUCT FOR DATA PROTECTION IN THE ADVERTISING ACTIVITY OF AUTOCONTROL

LACER is adhered to AUTOCONTROL’s Code of Conduct on Data Protection in the Advertising Activity, accredited by the Spanish Data Protection Agency. Consequently, we inform you that LACER is subject to AUTOCONTROL’s out-of-court complaint handling system for complaints related to data protection and advertising. Further information is available to interested parties on the website www.autocontrol.es.

DATA CONTROLLER

Lacer, S.A. (hereinafter “LACER”), with registered office at C/Boters 5, 08290 – Cerdanyola del Vallès (Barcelona) Spain.

DATA PROTECTION OFFICER

You can contact our Data Protection Officer by sending a letter to LACER’s address or by emailing dataprotection@lacer.es.

HOW DID WE OBTAIN YOUR DATA?

The data we hold about you were obtained as a result of past or current commercial or contractual relationships between the company, entity or organization for which you work or with which you collaborate and LACER.

WHAT PERSONAL DATA DO WE PROCESS?

The data we process for the legitimate purposes outlined below are limited to your corporate contact information at the company, entity or organization for which you work or with which you collaborate, and/or the data required to carry out the process of due diligence.

WHY DO WE PROCESS YOUR PERSONAL DATA?

We process your corporate contact information for the sole purpose of maintaining the commercial, contractual or collaborative relationships between LACER and the company, entity or organization for which you work or with which you collaborate, or for the purpose of carrying out the process of due diligence.

ON WHAT GROUNDS DO WE PROCESS YOUR PERSONAL DATA?

The processing of your corporate contact information for the purpose of maintaining the relationship between LACER and the company, entity or organization for which you work or with which you collaborate responds to a legitimate interest of our company that is explicitly set out in the regulations on privacy.

The processing of your corporate contact information for the purpose of carrying out processes of due diligence is based on compliance with legal obligations and LACER’s Ethical Code.

WHEN AND WHY DO WE DISCLOSE YOUR PERSONAL DATA TO THIRD PARTIES?

Your data may be disclosed to the recipients listed below for the reasons described below:

• Public administrations: to fulfil the legal obligations to which LACER is subject because of its business activity.
• Providers that require access to your data in order to provide the services that LACER has contracted from said providers, with which LACER has signed the necessary confidentiality and data processing agreements required under the regulations designed to protect your privacy.
• Account auditing firms: to fulfil the legal obligations for account auditing to which LACER is subject because of its business activity.

In the event that LACER is required to disclose personal data to other third parties in the future, you shall be notified in a timely manner.

INTERNATIONAL DATA TRANSFERS

LACER does not need to carry out international data transfers. In the event that LACER needs to contract the services of providers located in countries that do not have regulations equivalent to European legislation (“third countries”) for the processing of your data, no agreements shall be entered into until said providers have fulfilled all the requirements established by the data protection regulations, and the guarantees and safeguards necessary to preserve your privacy have been applied. For more information about guarantees in relation to international data transfers, please contact the Data Protection Officer of both parties via the postal and email addresses indicated above.

HOW LONG DO WE KEEP YOUR DATA?

Your personal data shall be stored as long as you have a relationship with LACER and, once said relationship is terminated for any reason, until the applicable statutory limitation periods have ended. In this case, your data shall be processed for the sole purpose of proving compliance with our legal or contractual obligations. Once said limitation periods have ended, your data shall be deleted or, alternatively, anonymized.

WHAT ARE YOUR RIGHTS?

You may exercise your rights of access, rectification, deletion, objection, restriction of processing and data portability by contacting us at the postal or email address indicated above.

Likewise, if you feel that the processing of your personal data breaches regulations or your privacy rights, you may submit a complaint:

• To our Data Protection Officer at the postal or email address indicated above.
• To the Spanish Data Protection Agency through its website or by writing to its address.

CODE OF CONDUCT FOR DATA PROTECTION IN THE ADVERTISING ACTIVITY OF AUTOCONTROL

LACER is adhered to AUTOCONTROL’s Code of Conduct on Data Protection in the Advertising Activity, accredited by the Spanish Data Protection Agency. Consequently, we inform you that LACER is subject to AUTOCONTROL’s out-of-court complaint handling system for complaints related to data protection and advertising. Further information is available to interested parties on the website www.autocontrol.es.

In accordance with current regulations on personal data protection, we hereby inform you of the following:

DATA CONTROLLER AND DATA PROTECTION OFFICER

That LACER, S.A. (hereinafter “LACER”), with registered office at C/Boters 5, 08290 – Cerdanyola del Vallès (Barcelona) Spain, is the Data Controller responsible for your personal data.

You can contact our Data Protection Officer by sending a letter to the postal address provided or by emailing dataprotection@lacer.es.

WHAT PERSONAL DATA DO WE PROCESS, HOW DID WE OBTAIN THEM AND WHY DO WE PROCESS THEM?

Your personal data shall be processed by LACER for the purposes of assessing your application for current or future job vacancies at our company. In order to fulfil this purpose, LACER may process the following personal data about you:

• Initial data: The data included in the CV and cover letter you submitted to LACER, and
• Additional data: The data about you that LACER generates during selection processes in which you may be included shall also be subject to processing. Such processing may involve an analysis of your personal profile with a view to assessing your suitability for the job vacancy in question. With respect to these additional data, the following shall be processed:
  • Data from behavioural, morphological and personality tests carried out, and
  • Data published on social networks whose privacy settings are not restricted to third parties and/or data published on the Internet.

IMPORTANT: Given the nature of the selection process, LACER shall create a personal profile based on your personal data to analyse whether or not it matches the job vacancy. If you would prefer us not to carry out this analysis, please notify our Data Protection Officer immediately. Such notification means that we will not be able to include you in future selection processes, and we shall proceed to delete all your data from our database of candidates.

ON WHAT GROUNDS DO WE PROCESS YOUR PERSONAL DATA?

The processing of your personal data is legitimized by the express consent you give us, which you may withdraw at any time. This withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Likewise, the processing of your personal data is legitimized by the need to apply, at your request, pre-contractual measures between you and LACER.

Furthermore, processing your personal data in relation to potentially consulting social networks and/or the Internet is based on LACER’s legitimate interest in identifying the most suitable candidates in the selection process.

DISCLOSURE TO THIRD PARTIES

Your data may be disclosed to the recipients listed below for the reasons described below:

• Companies within the corporate group to which LACER belongs, i.e. ITALFARMACO Group, so that they can assess your application.
• Public administrations: to fulfil the legal obligations to which LACER is subject because of its business activity.
• Account auditing firms: to fulfil the legal obligations for account auditing to which LACER is subject because of its business activity.
• Law enforcement authorities: when our company is required to provide information to fulfil a legal obligation.
• Providers that require access to your data in order to provide the services that LACER has contracted from said providers, with which LACER has signed the necessary confidentiality and data processing agreements required under the regulations designed to protect your privacy.

In the event that LACER is required to disclose personal data to other third parties in the future, you shall be notified in a timely manner.

INTERNATIONAL TRANSFERS

LACER has contracted services from technology providers that are located in countries without regulations equivalent to European legislation (“third countries”). These providers have signed confidentiality and data processing agreements with LACER in accordance with regulations for providers located in third countries, and the appropriate guarantees and safeguards to protect your privacy have been applied.

For more information about guarantees in relation to international data transfers, please contact our Data Protection Officer via the postal and email addresses indicated above.

HOW LONG DO WE KEEP YOUR DATA?

We hereby inform you that your data shall be kept for a maximum period of twelve (12) months for the purpose of carrying out future selection processes, provided that you do not state otherwise, exercise your cancellation right or join our workforce.

Once said period has ended, your data shall be deleted or, alternatively, anonymized.

AUTOMATED INDIVIDUAL DECISION-MAKING 

LACER does not make decisions that may significantly affect you based solely on the automated processing of your data. All of our company’s decisions with respect to job applications are taken with human involvement. 

WHAT ARE YOUR RIGHTS?

We hereby inform you that you have the right to access your personal data, rectify inaccurate data, request their deletion when they are no longer necessary, object to or restrict the processing of said data or request their portability.

To exercise these rights, please contact LACER’s Data Protection Officer at the postal or email address indicated above.

COMPLAINTS

If you feel that the processing of your personal data breaches regulations, you may (i) submit a complaint to our Data Protection Officer, or (ii) file a complaint with the Spanish Data Protection Agency at the following address: C/ Jorge Juan, 6, 28001 Madrid (Spain).

CODE OF CONDUCT FOR DATA PROTECTION IN THE ADVERTISING ACTIVITY OF AUTOCONTROL

LACER is adhered to AUTOCONTROL’s Code of Conduct on Data Protection in the Advertising Activity, accredited by the Spanish Data Protection Agency. Consequently, we inform you that LACER is subject to AUTOCONTROL’s out-of-court complaint handling system for complaints related to data protection and advertising. Further information is available to interested parties on the website www.autocontrol.es.

DATA CONTROLLER

LACER S.A.U. and EFARMES S.A. Sociedad Unipersonal, with registered office at C/Boters 5, 08290 – Cerdanyola del Vallès (Barcelona) Spain. 

DATA PROTECTION OFFICER

You can contact our Data Protection Officer by sending a letter to the address provided above or by emailing dataprotection@lacer.es.

WHAT PERSONAL DATA DO WE PROCESS?

We process the personal data provided by you.

WHY DO WE PROCESS YOUR PERSONAL DATA? 

We process your personal data in order to:

• Identify the person reporting the case and ensure that the case is properly monitored;
• Analyse the case and send information to the health authorities about the suspected adverse reactions reported by you and follow up on the notification. 

ON WHAT GROUNDS DO WE PROCESS YOUR PERSONAL DATA? 

The processing of your personal data in connection with the aforementioned purposes is legitimized by the need to comply with a legal obligation applicable to LACER S.A.U. and/or EFARMES S.A. Sociedad Unipersonal, whichever applies, as a pharmaceutical company.

WHEN AND WHY DO WE DISCLOSE YOUR PERSONAL DATA TO THIRD PARTIES? 

Your data may be disclosed to the recipients listed below for the reasons described below:

• The competent health authorities when required by current legislation.
• Licence partners and other third parties such as medical professionals and companies involved in the sale of the product for which the adverse event was reported and that are required under the regulations to report adverse events.
• Providers that require access to your data in order to provide the services that LACER has contracted from said providers, with which LACER has signed the necessary confidentiality and data processing agreements required under the regulations designed to protect your privacy.
• Companies within the corporate group to which LACER belongs, i.e. ITALFARMACO Group, in order to fulfil farmacovigilance obligations or for internal administrative and management purposes.

In the event that LACER S.A.U. and/or EFARMES S.A. Sociedad Unipersonal are required to disclose personal data to other third parties in the future, you shall be notified in a timely manner.

INTERNATIONAL DATA TRANSFERS 

LACER S.A.U. and/or EFARMES S.A. Sociedad Unipersonal need to carry out international data transfers when the reporter is a health professional.

If the reporter is an individual, LACER S.A.U. and/or EFARMES S.A. Sociedad Unipersonal do not need to carry out international data transfers.

In the event that LACER needs to contract the services of providers located in countries that do not have regulations equivalent to European legislation (“third countries”) for the processing of your data, no agreements shall be entered into until said providers have fulfilled all the requirements established by the data protection regulations, and the guarantees and safeguards necessary to preserve your privacy have been applied. For more information about guarantees in relation to international data transfers, please contact the Data Protection Officer via the postal and email addresses indicated above. 

HOW LONG DO WE KEEP YOUR DATA? 

Your personal data shall be kept for as long as the product is sold, plus a further ten (10) years after sales of the product have ceased. In this case, they shall be processed for the sole purpose of proving compliance with our legal or contractual obligations. Once said limitation periods have ended, your data shall be deleted or, alternatively, anonymized. 

WHAT ARE YOUR RIGHTS?

You may exercise your rights of access, rectification, deletion, objection, restriction of processing and data portability by contacting us at the postal or email address indicated above.

Likewise, if you feel that the processing of your personal data breaches regulations or your privacy rights, you may submit a complaint:

• To our Data Protection Officer at the postal or email address indicated above.
• To the Spanish Data Protection Agency through its website or by writing to its address.

CODE OF CONDUCT FOR DATA PROTECTION IN THE ADVERTISING ACTIVITY OF AUTOCONTROL

LACER is adhered to AUTOCONTROL’s Code of Conduct on Data Protection in the Advertising Activity, accredited by the Spanish Data Protection Agency. Consequently, we inform you that LACER is subject to AUTOCONTROL’s out-of-court complaint handling system for complaints related to data protection and advertising. Further information is available to interested parties on the website www.autocontrol.es.

In accordance with current regulations on personal data protection, the company hereby informs you of the following:

DATA CONTROLLER AND DATA PROTECTION OFFICER

That LACER, S.A. (hereinafter “LACER”), with registered office at C/Boters 5, 08290 – Cerdanyola del Vallès (Barcelona) Spain, is the Data Controller responsible for your personal data.

You can contact our Data Protection Officer by sending a letter to the postal address provided or by emailing  dataprotection@lacer.es

WHAT PERSONAL DATA DO WE PROCESS AND WHY DO WE PROCESS THEM?

LACER shall process your data for the purpose of handling your complaint or claim and taking the relevant steps, and you shall be able to closely monitor the complaint status, processing and closure.

LACER shall process your identification data and contact data, as well as any other data strictly necessary to reply to your request.

The data requested are obligatory, except where otherwise expressly indicated. Therefore, your refusal to provide these data will make it is impossible to reply to your request.

In the event that you provide data on third parties, you hereby declare that said information is accurate.

ON WHAT GROUNDS DO WE PROCESS YOUR PERSONAL DATA?

Your data are processed by LACER to handle the complaint or claim in compliance with legal obligations.

DISCLOSURE TO THIRD PARTIES

Your data may be disclosed to the recipients listed below for the reasons described below:

• Public administrations: to fulfil the legal obligations to which LACER is subject because of its business activity.
• Courts and Tribunals: in the cases provided for by law.
• Law enforcement authorities: when our company is required to provide information to fulfil a legal obligation.
• Providers that require access to your data in order to provide the services that LACER has contracted from said providers, with which LACER has signed the necessary confidentiality and data processing agreements required under the regulations designed to protect your privacy.
• Companies within the corporate group to which LACER belongs, i.e. ITALFARMACO Group, for internal administrative and management purposes.

In the event that LACER is required to disclose personal data to other third parties in the future, you shall be notified in a timely manner.

INTERNATIONAL TRANSFERS

LACER has not contracted services from technology providers that are located in countries without regulations equivalent to European legislation (“third countries”).

HOW LONG DO WE KEEP YOUR DATA?

We hereby inform you that your data shall be kept during the entire time it takes to carry out the investigation and then during the full time required by applicable legislation until any liability derived from your request is time-barred.

Once said period has ended, your data shall be deleted or, alternatively, anonymized.

AUTOMATED INDIVIDUAL DECISION-MAKING

LACER does not make decisions that may significantly affect you based solely on the automated processing of your data. All of our company’s decisions with respect to job applications are taken with human involvement.

WHAT ARE YOUR RIGHTS?

We hereby inform you that you have the right to access your personal data, rectify inaccurate data, request their deletion when they are no longer necessary, object to or restrict the processing of said data or request their portability.

To exercise these rights, please contact LACER’s Data Protection Officer at the postal or email address indicated above.

COMPLAINTS

If you feel that the processing of your personal data breaches regulations, you may (i) submit a complaint to our Data Protection Officer, or

(ii) file a complaint with the Spanish Data Protection Agency at the following postal address: C/ Jorge Juan, 6, 28001 Madrid (Spain).

CODE OF CONDUCT FOR DATA PROTECTION IN THE ADVERTISING ACTIVITY OF AUTOCONTROL

LACER is adhered to AUTOCONTROL’s Code of Conduct on Data Protection in the Advertising Activity, accredited by the Spanish Data Protection Agency. Consequently, we inform you that LACER is subject to AUTOCONTROL’s out-of-court complaint handling system for complaints related to data protection and advertising. Further information is available to interested parties on the website www.autocontrol.es.