Privacy Policy

• Data Controller: [company name] (ZZPharma)
• Tax Identification Number (CIF): [CIF]
• Registered office: [full address], Valencia, Spain
• Contact for privacy matters: [privacy email]
• Data Protection Officer: [indicate if applicable; if not, delete this line]

We collect the data you provide via the contact form:

• First name and surname.
• Email address.
• [Company or organisation, if requested on the form.]
• Area of interest.
• The content of your message.

In addition, whilst you are browsing the site, our hosting provider may record technical data such as your IP address, browser type and the date and time of access, for security and operational reasons.

(Quote) Please do not include any health data or confidential information in the form.

• To respond to your enquiry and process your request for collaboration. Legal basis: your consent (Article 6(1)(a) of the GDPR), which you give by ticking the box on the form, and the implementation of pre-contractual measures at your request (Article 6(1)(b)).
• To ensure the security and proper functioning of the website. Legal basis: our legitimate interest (Article 6(1)(f)).
• To comply with legal obligations, where necessary. Legal basis: Article 6(1)(c).

We do not make automated decisions or carry out profiling using your data.

We do not sell your data. We only share it with service providers who act as data processors, under the relevant contract:

• Web hosting: Vercel Inc. (USA).
• Content management: Storyblok GmbH (Austria).
• Email and contact management: [provider].
• Others: [add if applicable].

Where a service provider is located outside the European Economic Area, the transfer is based on appropriate safeguards, such as the European Commission’s adequacy decision or standard contractual clauses.

We may also disclose data to public authorities and judicial bodies where required by law.

We retain the data from the form whilst we process your enquiry and, thereafter, for [a period, e.g. 12 months] to deal with any potential claims. After this time, we will either delete the data or block access to it for the duration of the statutory limitation periods.

If you enter into a working relationship with us, we will retain the data for the duration of that relationship and in accordance with the applicable statutory time limits.

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time. You may also withdraw your consent at any time, without this affecting any processing carried out previously.

To exercise these rights, please write to [privacy email], stating which right you wish to exercise and attaching a copy of your identity document.

If you believe that we have not processed your data correctly, you may lodge a complaint with the Spanish Data Protection Agency (link to https://www.aepd.es).

We implement reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration. No internet transmission is completely secure, so we cannot guarantee absolute security.

We may update this policy to reflect changes in the law or to our services. We will always state the date of the last update at the top of the page.