Privacy policy

1.Who is the data controller?

The data controller is Kiro Grifols, S.L., with address for contact purposes at calle Goiru Kalea, 1, Edificio B, Planta 2, 20500, Arrasate-Mondragón, Gipuzkoa– (Spain) («Kiro»)

2.Who is the data officer at Kiro and how can I contact with him/her?

The data protection officer acts as an interlocutor between Kiro and you to ensure that Kiro complies with the data protection legislation and to guarantee your rights under such legislation. You may contact the data protection officer at the following address dpo@grifols.com

3.How does Kiro use your personal data?

Kiro uses your personal data to respond your requests of information and/or suggestions you make through the means provided in the website.

4.Why does Kiro use your personal data?

The legal basis that allows Kiro to process your personal data is the consent you have given by completing and sending the form available on the website.

5.How long does Kiro retain your personal data for?

Kiro will process your personal data until your request of information and/or suggestions have been answered. Once we have responded to your request, Kiro will retain your personal data until the end of the statutes of limitation of any liabilities arising from processing your data. Such period shall be, at least, of five (5) years.

6.With whom does Kiro share your personal data

Kiro will not share your personal data with any third party, unless it needs to comply with a legal order.

7.What are your rights when you provide Kiro with your personal data?

Rights	Content	Notification channel
Access	You may access your data included in Kiro’ files.	privacy@grifols.com
Rectification	You may modify your personal data if it is inaccurate.
Erasure	You may request that your personal data is erased.
Objection	You may request that your personal data is not processed.
Portability	You may receive, in an electronic file, the personal data that you provided Kiro with, as well as send it to different entities
Restrictions on processing	You may request a restriction on how your data is processed when processing of your data is illegal and you oppose to the erasure of your data, Kiro does no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims, you have objected to the processing for the performance of a task carried out in the public interest or necessary for the purposes of a legitimate interest, whilst it is being verified whether the legitimate grounds of Kiro override yours.

You may withdraw your consent at any time, without this having any effect on the legitimacy of any prior data processing, by sending an email to privacy@grifols.com, with the subject line «Data Protection – Kiro website». To exercise your rights and withdraw consent you must also send a copy of your ID card or of any other document that confirms your identity.

In any event, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with any other competent data protection authority