Legal.

Privacy Policy.

3P BIOPHARMACEUTICALS, S.L.U. Privacy Policy

Personal data processing

In compliance with the provisions of the legislation on Data Protection, including Directive (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”), you are hereby informed that 3P BIOPHARMACEUTICALS S.L.U.  is responsible for processing its users’ data, which it does in order to provide the service that the user requests via the contact form. In order to do this, it requires that the user check the box which indicates that he/she accepts this policy; should he/she fail to do so, it does not have his/her express consent and, therefore, will be unable to respond to his/her request. It is hereby informed that the services of this website are intended for adults (individuals who have reached the legal age).

For the correct provision of the services offered by 3P BIOPHARMACEUTICALS S.L.U., the user must answer each and every one of the questions that appear on the forms on the website. The user also declares that the information is true, accurate and complete. 3P BIOPHARAMCEUTICALS, S.L.U. does not assume any responsibility that may result from or due to inaccuracy, veracity or completeness of the data provided by the user.

The personal data requested is also processed in order to send commercial information about the products and services that 3P BIOPHARMACEUTICALS S.L.U. currently offers and may offer in the future; this information includes advertising and promotional communications, newsletters, via post, fax, email or any other means. In order for his/her data to be processed, the user must check the relevant box on the form on the website.

In addition to (i) providing the service requested by the user through the form on the website; and (ii) sending commercial information, 3P BIOPHARMACEUTICALS S.L.U. processes your personal data (such as identification data, cookie data, images captured through video surveillance systems, etc.) for the following purposes: (iii) management and administration of contractual relationships established with suppliers, customers, and employees; (iv) security of the premises and individuals; (v) to respond to your queries and issues; (vi) to evaluate your application for a future job vacancy; (vii) management and administration of individuals receiving training; (viii) management of data from individuals who detect serious or very serious criminal or administrative offenses and report them.

For more detailed information, see the section “Complete information on processing personal data”.

Given the personal nature of the data provided, 3P BIOPHARMACEUTICALS S.L.U. undertakes to process them in a strictly confidential manner, keeping them duly secret. To this end, the company has implemented suitable security measures in accordance with the risk analysis carried out.

You are informed that your data are generally hosted in the European Union (“EU”) and that they will not be communicated or transferred to third parties without your prior express consent except in the cases mentioned below.

3P BIOPHARMACEUTICALS, S.L.U. informs the user that some communications and/or transfers of data to third parties may be imposed by certain regulations or may be necessary to comply with obligations imposed by authorities or public bodies, in which case we are obliged to transfer such data.

In addition, other communications and/or transfers of data may occur as a result of contracting services to service providers, in which case we will enter into a data processing agreement with such service providers as required by the GDPR.

Regarding international transfers, 3P BIOPHARMACEUTICALS, S.L.U. informs you that no international data transfers will be performed unless the company is legally required to do so or it needs to pass data on solely and exclusively to provide or receive the service requested. In addition, if it is necessary to send the data to third parties outside the EU, we will ensure that they provide a sufficient level of protection and safeguards; by transmitting the data to those countries that have European Commission adequacy decisions. In the absence of an adequacy decision, we will transfer personal data to a third country or an international organization provided that we have provided appropriate safeguards (as stated in clause 46 of the GPDR), such as standard contractual clauses. For more information on the appropriate safeguards applicable in the absence of an adequacy decision, please refer to Article 46 of the GDPR.

The countries recognized as providing an adequate level of protection are those identified on the following page of the “Agencia Española de Protección de Datos” or “AEPD”: link to the page.

In case you wish to request a copy of the appropriate safeguards or additional information about international data transfers, please contact 3P at the following email address to submit your request: complianceofficer@3pbio.com.

3PBIOPHARMACEUTICALS, S.L.U. informs that your personal data may be transmitted to companies that are part of the same business group or affiliated entities of the group for internal administrative purposes. This data will be treated confidentially and will be subject to the terms contained in this privacy policy. In this regard, 3P BIOPHARMACEUTICALS, S.L.U. and Biovian Oy have signed a joint controller agreement in compliance with Article 26 of the GDPR.

In the event that you request it, the essential aspects of the joint controller agreement will be made available to you, by requesting it at the following address: complianceofficer@3pbio.com.

Rights

The data collected and processed shall be retained for a limited period of time as stated in the section “How long do we keep your data”? This period will be as required to fulfill the legal obligations imposed on 3P BIOPHARMACEUTICALS S.L.U.  by the different legislation applicable.

The user can exercise the following rights at any time by writing to the address complianceofficer@3pbio.com:

Right of access: the party concerned may request the data processed from the Data Controller and if his/her data are processed, may ask what specific data are processed.

Right of rectification: the party concerned may ask the Data Controller to correct his/her personal data if they are not accurate.

Right of erasure: the party concerned may ask the Data Controller to delete his/her personal data.

Right of objection: the party concerned may object to the Data Controller processing his/her personal data.Right to limitation of processing: the party concerned may ask the Data Controller temporarily not to process his/her data in specific circumstances.

Right to portability: the party concerned may request his/her automated data from the Data Controller in a structured, easy-to-access, easy-to-handle format.

For more information about your rights, please go to the website of the Spanish Data Protection Agency (https://www.aepd.es).

Cookies

The information stored in each cookie is as follows: language, date and time of the user’s last visit to our Website, design of contents chosen by the user on his/her first visit to our Website, and security elements involved in controlling access to restricted areas.

Through this Website, we study our users’ preferences (demographic, traffic patterns, and other information as a whole to understand the behavior and profile of our users). Tracking our users’ preferences helps us to improve our Website and the services we provide.

To do this, we use Google Analytics (Google tool which tracks website traffic), which can store cookies on your computer to help us collect information that will be used for statistical purposes only and to study the behavior of the users of our website. The information collected by the cookie (including your IP) is stored and transmitted to the Google servers in the United States of America. Google will use this information to track your activity on our website and generate reports with which to identify how you use it. Google may provide such information to third parties when required to do so by law. Acceptance of this policy implies acceptance of Google’s use of the information collected by Google Analytics.

You can set your browser to reject the storage of cookies on your computer. You can find out more in our Cookies Policy.

Complete information on processing personal data

Data controller

Who is responsible for processing your data?

Identity: 3P BIOPHARMACEUTICALS S.L.U.
Postal Add.: Pol Ind. Mocholí c/Mocholí 2 – 31110 – Noáin
NIF: B-31875800
E-mail: Info@3pbio.com

What data do we process?

Identifier data: first name, last name, email address.
Electronic and cookie identifier information.
Data relating to the Curriculum Vitae (“CV”) of a job candidate.
Images captured through video surveillance systems.
Images or photographs of employees.
Personal data of whistleblowers who submit communications through the whistleblowing channel.

Purpose of processing

For what purpose do we process your personal data?

3P BIOPHARMACEUTICALS S.L.U.  treats the information which the persons concerned provide it with for the following purposes:

Management and administration of contractual relationships established with suppliers, customers and employees.
To provide the persons concerned with commercial information and/or newsletters about products and services which may be of interest to them.
Security of the premises and individuals in the event that you are recorded by our video surveillance cameras.
To provide the service requested by the user through the form on the website.
To respond to your queries and issues if you ask us a question via our website.
To evaluate your application for a future job vacancy if you have provided us with your CV.
Management and administration of persons receiving training.
Management of the data of individuals who detect serious or very serious criminal or administrative offenses and report them through the mechanisms established by law.

How long do we keep your data?

The personal data provided shall be retained:

As long as the commercial relationship lasts.
As long as the person concerned does not request their deletion.
The information which must be kept for a period of time specified by law will not be destroyed until that period elapses.

In case you provide your data to receive commercial information from 3P BIOPHARMACEUTICALS, S.L.U., as well as to receive newsletters, we will treat your data as long as you wish to receive such communications, understanding that you consent to receive them unless you withdraw your consent in writing.

Without prejudice to the foregoing, the user is informed that he/she may exercise his/her right of deletion at any time by notifying the data controller in writing (by notifying the e-mail address mentioned above under “who is responsible for processing your data?”. However, the Data Controller may keep your data, duly blocked, in order to deal with administrative and legal responsibilities that may arise.

Lawfulness of processing

Why is the processing of your personal data legitimate?

The legal basis for the processing of your data is as follows:

Performance of contract (including the management and administration of persons receiving training) if you are an employee, customer or supplier.
Public interest in the event that you have been recorded by video surveillance cameras for the purpose of physical security of the premises.
Consent given on the website if you request the provision of the service through the form on the website.
Consent given on the website if you send a request or query via our contact form.
Request for pre-contractual measures by the data subject in the event that they have submitted their CV.
Compliance with a legal obligation (Law 2/2023, of February 20, regulating the protection of individuals who report regulatory violations and anti-corruption measures) in the event that you are a whistleblower.
Consent (based on the acceptance of the relevant checkbox) or legitimate interest (based on Article 21 of Law 34/2002, of July 11, on Information Society Services and Electronic Commerce) when sending advertising.

If you have any concerns or questions regarding our data protection practices (including any requests to exercise your data rights) please contact complianceofficer@3pbio.com.

You also have the right to submit a complaint to the relevant supervisory authority related to the processing of your data. For these purposes, we inform you that in Spain, the supervisory authority is the Spanish Data Protection Agency, and you can exercise your rights through the forms provided by this entity, which are available on its website.

Changes to our Privacy Policy

We may update our privacy policy from time to time to reflect legal changes, technological progress and/or new business practices. Any amendment becomes effective upon publication on the website. We therefore recommend that you regularly visit the site to keep yourself informed on possible updates.

Biovian Oy Privacy Policy

Biovian Oy is committed to protecting your privacy. We respect your rights as a data subject. This Privacy Policy when you use our website https://3pbiovian.com/, or otherwise use our services or interact with us. This statement outlines the purpose and legal basis of processing personal data, what personal data is processed, retention period for personal data and the rights of the data subject.

Communication regarding privacy matters

Biovian Oy is the data controller for the processing of personal data. We ensure that your information is handled in compliance with the applicable law. Our contact information is:

Biovian Oy
Address: Tykistökatu 6A, Biocity FIN-20520 Turku, FINLAND
nº 1808073-1
Email: Gdpr@biovian.com

Personal data being processed

We only collect personal data that is essential and relevant for the purposes explained in this privacy statement. The following data concerning the data subjects is processed:

Basic information such as your name, the company you work for, your title and position.
Contact information such as your postal address, e-mail address and telephone numbers.
Technical information such as information from requests which you have sent through our website or communications which we have sent to you electronically.
Information which you provide to us for the purposes of attending meetings or other events with us, such as access and dietary requirements
Any other information relating to you which you provide to us.

BIOVIAN Oy informs that your personal data may be transmitted to companies that are part of the same business group or affiliated entities of the group for internal administrative purposes. This data will be treated confidentially and will be subject to the terms contained in this privacy policy. In this regard, 3P BIOPHARMACEUTICALS, S.L.U. and Biovian Oy have signed a joint controller agreement in compliance with Article 26 of the GDPR.

In the event that you request it, the essential aspects of the joint controller agreement will be made available to you, by requesting it at the following address: complianceofficer@3pbio.com.

Legal basis and purpose of processing personal data

We only process personal data when we have a legal basis to do so. The legal basis depends on the personal data concerned and the specific context in which we process it. Please note that we may process your data for more than one lawful basis depending on the specific purpose for which we are using your data.

The purposes and legal basis for the processing of your data are as follows:

Retention period for personal data

Generally, we keep your data for as long as is strictly necessary, as long as you interact with us or until you request deletion of your personal data. We may also have a legal obligation to retain your data longer, for example based on the Accounting Act.

How data is collected

We collect your personal data in general from you when you interact with us, either by email or phone, or visit our website. We may also collect some data from publicly available data sources such as companies’ websites, the trade register as well as from other public or private registers.

Data disclosures and transfers

We do not disclose your personal data to third parties unless required to do so by law. We may however outsource some of our processing activities to service providers such as communications service providers and IT-service providers.

These service providers may be located outside the European Union (“EU”). When transferring your personal data outside the EU we ensure the level of protection by entering into data processing agreements with relevant standard contractual clauses for data transfers between EU and non-EU countries approved by the European commission.

Rights of the data subject

As a data subject you have certain rights under the Directive (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”).

Right to access: You have the right to receive confirmation from us on whether we process your personal data. If you request, we provide you with a copy of the personal data we process.

Right to rectification: You have the right to demand the rectification of inaccurate personal data concerning you and to have incomplete personal data completed.

Right to erasure: In certain cases, you have the right to have your personal data removed. For example, when the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.

Right to restriction of processing: In certain cases, you may request us to restrict the processing of your personal data. The right to restriction exists, for example, when you contest the accuracy of the personal data. In such cases, the processing will be restricted for a period enabling us to verify the accuracy of the personal data.

Right to object: In certain situations, if we process your personal data based on our legitimate interest, you have the right to object to the processing of your personal data. In such cases, we will stop the processing unless we demonstrate compelling legitimate grounds for the processing which override your interests and rights.

If the personal data is processed for direct marketing based on our legitimate interest, you have the right to object at any time to the processing without any specific grounds.

Right to data portability: you have the right to receive the personal data that you have provided to us in a structured, commonly used, and machine-readable format and, if desired, transmit that data to another controller.

Right to withdraw consent: If we process personal data based on your consent, you have the right to withdraw your consent by informing the data controller. Withdrawal of consent does not affect the lawfulness of the processing carried out prior to the withdrawal of consent.

If you have any concerns or questions regarding our data protection practices (including any requests to exercise your data rights) please contact Gdpr@biovian.com.

You also have the right to submit a complaint to the relevant supervisory authority related to the processing of your data. In Finland the data protection supervisory authority is The Office of the Data Protection Ombudsman. https://tietosuoja.fi/en/home

Changes to our Privacy Policy