"NAYECO" is deeply committed to compliance with Spanish and European personal data protection regulations, and guarantees full compliance with the obligations established, as well as the implementation of the security measures set out in the General Data Protection Regulation (GDPR) (EU) 2016/679, of 27 April, and in Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD and GDD, hereinafter LOPD).
In accordance with these regulations, we inform you that the use of our website may require the provision of certain personal data through registration or contact forms, or by sending emails, and that these will be processed by "NAYECO", the Data Controller, whose details are:
Collection and Processing of Personal Data
Personal data is any information relating to a person: name, email, address, telephone, NIF/NIE... Additionally, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by your Internet access provider.
"NAYECO", as the Data Controller, has the duty to inform the Users of its website about the collection of personal data that may be carried out, either by sending an email or by filling in the forms included on the website.
Only the data necessary to provide the contracted service, or to be able to respond adequately to the request for information made by the User, will be collected. The data collected is identifying and corresponds to a reasonable minimum to be able to carry out the activity performed. In particular, specially protected data is not collected at any time. Under no circumstances will the data be used for a purpose other than that for which it was collected.
Contact/email forms
Purpose: To respond to your request for information made through our contact form(s).
Legal basis: The legal basis that legitimises this processing is the User's consent, which may be revoked at any time.
Data transfer: Personal data will be processed through servers managed by Axertia, which shall be considered the Data Processor.
Mailing list (newsletter) subscription forms
Purpose: Sending communications, some of them commercial, of interest to Users according to the subject matter of the website. As established by the LSSICE, "NAYECO" undertakes not to send commercial communications without identifying them as such. For these purposes, information sent to clients for the maintenance of the existing contractual relationship, if any, shall not be considered a commercial communication.
Legal basis: The legal basis that legitimises this processing is the User's consent, which may be revoked at any time.
Data transfer: Personal data will be processed through servers managed by Axertia, which shall be considered the Data Processor.
User registration request forms
Purposes:
Legal basis: The legal basis that legitimises this processing is the User's consent, which may be revoked at any time.
Data transfer: Personal data will be processed through servers managed by Axertia, which shall be considered the Data Processor. The data provided will be transferred to the companies that make up the NAYECO Business Group, the medicine-supplying laboratories themselves, or companies contracted for this purpose.
Minors
Only persons over 14 years of age may provide personal data on this website. As required by the LOPD and GDD, in the case of minors under 14 years of age, the consent of their parents or guardians shall be a mandatory condition for us to process their personal data.
On the other hand, only persons over 18 years of age may contract our services. In the case of minors under 18 years of age, the consent of their parents or legal guardians shall be a mandatory condition for us to provide the services offered, unless the minor is emancipated.
New customer request
This registration is intended exclusively for professionals. When the User registers through the corresponding form, the information we collect includes:
The User must also provide a password, which must meet certain security requirements. They do not expire. To recover the password, the User must go to the specific recovery form and enter their email to continue with the process and be able to modify it, by clicking the link that will be sent to the email address entered. The User is responsible for keeping their password confidential, as well as for all uses they make of it. They must notify "NAYECO" of any unauthorised use of their account or password as soon as possible.
Once registered, the User has access to a private panel, in which they can view certain content, account options (such as the password or User details), etc.
The User may receive the following notifications:
Security Measures
Users of the "NAYECO" website are informed that the technical and organisational security measures within our reach have been adopted to prevent the loss, misuse, alteration, unauthorised access and theft of data, thus guaranteeing the confidentiality, integrity and quality of the information contained therein, in accordance with the provisions of the current data protection regulations. The personal data collected in the forms is processed solely by the staff of "NAYECO" or by the designated Data Processors.
The "NAYECO" Website also has SSL encryption, which allows the User to securely send their personal data through the website's contact or registration forms.
Accuracy of the data
The User states that all the data provided by them is true and correct and undertakes to keep it up to date. The User shall be responsible for the accuracy of their data and shall be solely responsible for any conflicts or litigation that may result from the falsity thereof. It is important that, in order for us to keep the personal data up to date, the User informs "NAYECO" whenever there has been any modification thereto.
Data transfer
"NAYECO" will not transfer or communicate your data to any third party, except in the cases legally provided for or when strictly necessary for the provision of a service. Specifically, the data may be transferred to:
- Technology or IT service providers
- Companies that make up the NAYECO Business Group
- Medicine-supplying laboratories or companies contracted for this purpose
- Payment service providers
- Courier and parcel companies
- Third parties or intermediaries, acting as service providers, who operate on our behalf (administrative agency, consultancy, etc.).
Data transfers will take place respecting the strictest confidentiality, using the necessary measures, such as the signing of confidentiality agreements, or adherence to their privacy policies established on their respective websites. The User may refuse the transfer of their data to the Data Processors, by means of a written request, through any of the means previously referenced.
In addition, in those cases where it is necessary, Customer data may be transferred to certain bodies, in compliance with a legal obligation: the Spanish Tax Agency, banking entities, the Labour Inspectorate, etc.
Exercise of User Rights
The LOPD and GDD and the GDPR grant data subjects the possibility of exercising a series of rights related to the processing of their personal data. To do so, the User must contact us, providing documentation proving their identity (DNI or passport), by email to protecciondedatos@nuzoa.com, or by written communication to the address that appears in our Legal Notice. Said communication must reflect the following information: the User's first and last name, the purpose of the request, the address and the supporting data.
The exercise of rights must be carried out by the User themselves. However, they may be exercised by a person authorised as the legal representative of the User, providing the documentation proving such representation.
The User may request the exercise of the following rights:
In the event that consent has been granted for a specific purpose, the User has the right to withdraw consent at any time, without this affecting the lawfulness of the processing based on the consent prior to its withdrawal.
We undertake to execute all these rights within the maximum legal period (1 month).
If a User considers that there is a problem with the way "NAYECO" is handling their data, they may direct their complaints to the Security Officer or to the corresponding data protection authority, the Spanish Data Protection Agency being the one indicated in the case of Spain.
Data retention
The personal data of Users who use the contact form or who send us an email requesting information will be processed for the time strictly necessary to attend to the request for information, or until the consent granted is revoked.
The personal data of Customers will be processed until the contractual relationship ends. The retention period of personal data will be the minimum necessary, and may be kept up to:
For their part, the data of Users who subscribe to the bulletin or newsletter will be kept indefinitely, until the consent granted is revoked.
In the case of processing the data of candidates (C.V.), "NAYECO" may keep your CV stored for a maximum of two years to incorporate it into future calls, unless the candidate states otherwise.
Personnel Selection
An applicant who sends electronic communications to "NAYECO", with the purpose of accessing the controller's personnel selection processes, authorises us to analyse the documents submitted (for example, the C.V.), all the content that is directly accessible through Internet search engines (for example, Google), the profiles they maintain on professional social networks (for example, LinkedIn), the data obtained in the entrance tests and the information they reveal in the job interview, with the aim of evaluating their candidacy and being able, where appropriate, to offer them a job. In the event that the candidate is not selected, "NAYECO" may keep their C.V. stored for a maximum of two years, to incorporate it into future calls, unless the candidate states otherwise. The legal basis that legitimises this processing will be the consent of the data subject, which may be revoked at any time.
Confidentiality
The information provided by the User shall, in any case, be considered confidential, and may not be used for purposes other than those described herein. "NAYECO" undertakes not to disclose or reveal information about the User's claims, the reasons for the advice requested or the duration of its relationship with them.
Validity
This privacy and data protection policy has been drafted by ExpertosLOPD®, a data protection company, on 25 May 2023, and may vary depending on the changes in regulations and case law that occur, it being the responsibility of the data owner to read the updated document, in order to know their rights and obligations in this regard at all times.