Last update: March 2023

Almirall S.A. (“Almirall”, “we”, “us”, “our”) is committed to the safeguard of the privacy of its stakeholders and the compliance of the data protection principles and applicable laws.

This Privacy Policy together with our Terms of Use and our Cookies Policy sets out the basis on which any personal data we collect from you when you navigate in www.ninainpsoriasis.com (the “Site”) will be collected and processed by us.

By visiting our Site, you agree to the practices described in this Policy. By using the Site, you agree to the terms and conditions of this Privacy Polic. For more information about this document or how we process your personal data, you can contact our Global Data Protection Officer at the e-mail address dpo.global@almirall.com

Who is the controller of the data you provide?	The legal entity which is collecting and processing your data as data controller is Almirall S.A. You can find more information about us at www.almirall.com.
Which kind of personal data we process?	We process personal data that we collect from your use of the Site from a technical perspective and by means of Cookies.
For what purposes do we need your personal data?	We may use your personal data to make you available the use of the Site.
Which is our lawfulness to process your persona data?	Our lawfulness lies on our legitimate interest.
For how long we will keep your personal data?	Your personal data will be stored and processed until the period in which Almirall is obliged to comply with any legal obligation that may arise in connection with this Site.
Are we going to share your personal data?	Data will not be shared with third parties other than our service providers who help us better to provide you with the use of the Site.
Which are your rights as data subject and how you can exercise them?	The exercise of the rights that are foreseen under the applicable privacy regulations and other applicable local legislation would be applicable in accordance with the technical and organizational particularities of the corresponding data processing performed.

For further information regarding Privacy and Data Protection, please consult the Additional Information.

2. Additional information

2.1. Who is the controller of the data we collect?

For the purpose of the General Data Protection Regulations and any local applicable laws, the data controller of the data you provide through this Site is Almirall, S.A., a Spanish company with registered office at Ronda General Mitre 151, 08022 Barcelona, with VAT number A-58869389, registered at the Companies Registry of Barcelona at Volume 21795, Sheet 32, Page no. B-28.089 and with the Ministry for Health and Consumer Affairs Registration Number - 1889E.

You can contact Us at the telephone number (+34) 93 291 30 00.

Please note that data controller means the legal entity that decides the purposes and means of processing your personal data.

2.2. What type of personal data we process?

As you navigate around the Site, certain information can be passively collected (that is, gathered without your actively providing the information), using various technologies. We and our third-party service providers passively collect and use information in the following ways:

• Using Cookies: Cookies are pieces of information stored directly on the computer you are using. Cookies allow us to collect information such as browser type, time spent on the Site, pages visited, and language preferences. We and our service providers use the information for security purposes, to facilitate navigation and to display information more effectively. We also use cookies to recognize your computer or device, which makes your use of the Site easier and makes the Site display properly on your device. In addition, we use cookies to gather statistical information about Site usage in order to continually improve its design and functionality, understand how individuals use it, and to assist us with resolving questions regarding it. Some of our cookies are managed for us by third parties. You can refuse to accept these cookies by following your browser's instructions; however, if you do not accept them, you may experience some inconvenience in your use of the Site. To learn more about cookies, please take a look to our Cookies Policy.
• Through your browser: The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: browser type and browser version, operating system used, deferrer URL, host name of the accessing computer, time of the server request and IP address.

2.3. For what purposes do we need your personal data?

Your personal data will be used to provide you with the contents to which you may have access through the Site. Part of the data is collected also in order to ensure error-free provision of the Site and improve the contents offered through the Site and the functionalities and also to have analytics in aggregate about the traffic of our Site. Your personal data will not be used for any other different purposes.

2.4. For how long will we keep your personal data?

The personal data you provide to us will be stored and processed until the period of time in which Almirall is obliged to comply with any legal obligation that may arise in connection with the Site.

2.5. Which is our lawfulness to process your personal data

The processing of your personal data for the purposes indicated above lies on the legitimate interest we have to run the Site.

2.6. Are we going to share your personal data?

Data will not be shared with third parties other than our services providers who help us to better provide you with the information related to the Site (i.e. for instance, for data analytics), (hereinafter, the “Recipients”). Whenever information needs to be transferred to Recipients outside the European Economic Area to a country which has not received the decision of adequate level of protection issued by the European Commission, personal data will be duly protected by standard contractual clauses approved by the European Commission or binding corporate rules of the data processor.

2.7. Which are your rights as data subject and how you can exercise them?

1. Right of access: means the right to obtain access to your information that Almirall processes.
2. Right to rectification means the right to be entitled to have your information corrected if it is inaccurate or incomplete.
3. Right to erasure: in simple terms, it means to request the deletion or removal of the information concerning him/her where there is no compelling reason for an organisation to keep using it. This right is also known as “the right to be forgotten” and is not a general right to erasure; there are exceptions.
4. Right to restrict processing means the right to ‘block' or suppress further use of the information concerning You in certain circumstances. When processing is restricted, we inform you that Almirall can still store your information but may not use it further.
5. Right to data portability means the right to obtain and reuse personal data by a third party in a structured, commonly used and machine readable format in certain circumstances. If you request the direct transfer of the data to another data controller, this will only take place if it is technically feasible.
6. Right to object means the right to object to certain types of processing, in certain circumstances.

The exercise of the above referred rights would be applicable in accordance with the technical and organizational particularities of the corresponding data processing performed.

If you would like to exercise any of the abovementioned rights, you can send us an electronic request to our address datamanagerglobal@almirall.com.

https://edpb.europa.eu/about-edpb/about-edpb/members_en#member-es.