Privacy Policy

PRIVACY POLICY

1. To whom does this Privacy Policy apply?
2. Who is responsible for data processing?
3. What is the legal basis for data processing?
4. What information do we process?
5. For what purpose do we process the data?
6. How long will we retain the data?
7. To whom are the data communicated?
8. Can international data transfers be carried out?
9. What rights does the user have regarding the data provided?
10. How do we protect our users’ data?
11. Modifications Applicable legislation

1. To whom does this Privacy Policy apply?

By visiting or consulting the website www.alivira.es (hereinafter, the “Website“) and reviewing or requesting information about our products and services, the user (potential clients, candidates, employees, collaborators, among others) accepts the processing of their personal data, consenting to the terms established in this document (hereinafter, the “Privacy Policy“).

This Privacy Policy and the way we process your data are regulated by the General Data Protection Regulation, or Regulation [EU] 2016/679 (“GDPR“).

2. Who is responsible for data processing?

The relevant information of the Data Controller responsible for processing personal data provided by users is:

3. What is the legal basis for data processing?

The legal basis for processing personal data is:

• The execution of forms on the Website. These forms (section 4.a) are completed by the data subject, who shares specific information and thereby gives full consent for the processing of their personal data.

4. What information do we process?

The information received from users or shared by them, which will be processed with the utmost confidentiality, is managed as detailed below.

• Information users provide directly: ALIVIRA collects and stores certain information entered by the user on the Website through the following sections/forms:

• Information users provide indirectly:

• Data Quality: The user must guarantee, both to ALIVIRA and to third parties, the quality of the information and personal data provided through the Website. This means that all personal data and information shared must be real, truthful, up-to-date, and belong to the user, not to third parties. If the data belongs to third parties, we understand that it has been shared with their consent, and we request that the third party be invited to review our legal texts as soon as possible.
• Data Modification: The user must notify ALIVIRA of any changes to the personal data provided, being responsible, in any case, for the truthfulness and accuracy of the data supplied at all times.

5. For what purpose do we process the data?

6. How long will we retain the data?

ALIVIRA will retain the user’s personal data for as long as reasonably necessary to: fulfill any of the purposes mentioned in this Privacy Policy, comply with applicable laws, regulatory requirements, and relevant court orders, or, in any case, while we continue to send information or communications, and the data subject has not requested its deletion or objected to the processing.

Personal data will be anonymized or deleted once it is no longer relevant for the purposes for which it was collected.

Retention periods applied:

• Selection processes (résumés): one (1) year.

7. To whom are the data communicated?

The personal data collected by ALIVIRA will be used exclusively to achieve the purpose defined on the Website. To fulfill this purpose and properly provide the service, ALIVIRA may share certain personal data of users:

• Upon legal request: ALIVIRA may share information with law enforcement agencies and/or third parties in response to information requests related to criminal investigations and alleged illegal activities.
• External service providers: To achieve the objectives of this Privacy Policy, we may need to grant access to your personal data to third parties that support the services we offer. These include financial institutions, technology and analytics service providers, and marketing, advertising, and social media service providers, some of whom may act as joint controllers, always under the exclusive control of ALIVIRA when necessary to provide our services.
• Mailing platform: If the user expressly authorizes the receipt of commercial information, we may collaborate with Intuit, Inc. (operating under the trade name MailChimp), a company registered in the United States, always under the exclusive control of ALIVIRA. The user can review this provider’s Privacy Policy [here].
• With the user’s consent: In addition to the cases mentioned above, the user will be informed if any of their information is shared with the Website’s business partners or third parties for purposes beyond those stated on the Website (e.g., for commercial purposes), allowing the user the opportunity to opt out of such sharing. None of the above data communications will involve selling, renting, sharing, or otherwise disclosing customers’ personal information for commercial purposes in violation of the commitments made in this Privacy Policy.

8. Can international data transfers be carried out?

If we transfer your personal data to a third country—meaning a country outside the European Economic Area (which includes the European Union member states plus Liechtenstein, Iceland, and Norway) or a country that does not have a recognized adequate level of data protection—we will comply with all applicable laws regarding such transfers. This includes ensuring that your personal data remains secure and that appropriate safeguards are in place to guarantee adequate protection. To achieve this, ALIVIRA will use the Standard Contractual Clauses for data protection adopted by the European Commission or, where applicable, rely on the EU-U.S. Data Privacy Framework for data transfers to the United States.

9. What rights does the user have regarding the data provided?

The user may exercise the following rights before ALIVIRA:

• Right to be informed: The user has the right to receive clear, transparent, and easily understandable information about how we use their data and their rights. This is why we provide this information in this Privacy Policy.
• Right of access: The user has the right to access their data (if we are processing it), as well as other related information (similar to what is provided in this Privacy Policy), to stay informed and verify that we are using their data in compliance with data protection regulations.
• Right to rectification: The user has the right to have their information corrected (inaccurate data) if it is incorrect or incomplete.
• Right to erasure: Also known as the “right to be forgotten,” this allows users to request the deletion of their data when it is no longer needed for the purposes for which it was collected. This is not a general right to erasure; there are exceptions.
• Right to restrict processing: The user has rights that allow them to “block” or prevent the further use of their data. When processing is restricted, we will only retain the data for the exercise or defense of legal claims. Additionally, we maintain lists of users who have requested a “block” to ensure compliance with this restriction in the future.
• Right to data portability: The user has the right to obtain and reuse their personal data for their own purposes across different services.
• Right to object: The user has the right to object to certain types of processing, including processing for direct marketing purposes, except in cases where there are compelling legitimate reasons or for the exercise or defense of legal claims.

The exercise of these rights is strictly personal, meaning the user must verify their identity.

To exercise these rights under the applicable regulations, the user can contact ALIVIRA via email at karizoo@alivira.es or by sending a written request to the address listed in Section 1 of this Privacy Policy. The request must include the following information and documents:

• Full name of the requester, attaching a photocopy of their ID card (DNI) or another valid identification document. If acting on behalf of someone else, proof of representation must be included. The use of an electronic signature will exempt the need to provide these documents.
• Indication of the requester’s address and a clear specification of the right they wish to exercise.

Additionally, the user may exercise certain rights directly by:

• Unsubscribing from commercial communications using the “unsubscribe” option available in the footer of each commercial email we send.
• Withdrawing consent for cookies related to the processing of personal data via the cookie management tool available on our Website.

The user also has the right to file a complaint with the relevant Supervisory Authority or the Spanish Data Protection Agency (www.aepd.es) if they deem it necessary.

10. How do we protect our users’ data?

ALIVIRA informs the user that it has adopted the necessary technical and organizational measures required by the current Data Protection regulations to ensure the security of their data, in order to prevent unauthorized alteration, loss, access, or processing of the data.
As previously mentioned, the personal data provided by users through the Website will not be transferred to other entities or companies for their own purposes. However, some companies subcontracted by ALIVIRA may have access to personal data and information, always under the exclusive control of ALIVIRA, solely for the purpose of providing a service necessary for the proper functioning of the Website and our services.

11. Modifications

ALIVIRA reserves the right to modify this Privacy Policy in accordance with the applicable legislation at any given time. Therefore, it is recommended that the user periodically review this Privacy Policy in order to stay informed about the processing and protection of personal data, as well as the rights that they are entitled to.

12. Applicable legislation

Esta Política de Privacidad se rige por la legislación española. El uso de este Sitio Web implica la aceptación explícita de la jurisdicción española para resolver cualquier disputa relacionada con este Sitio Web.

Last updated: February 2025