Pursuant to the provisions set forth in the General Data Protection Regulation (Regulation (EU) 2016/679) and Organic Act 3/2018 of 5 December on Personal Data Protection and the Safeguarding of Digital Rights, CITOGEN, S.L.U. hereby informs you of the following:

Who is your data’s data controller?

CITOGEN, S.L.U. with VAT Registration No. B50600188 and address for the purpose of serving notice at Avenida Diagonal Plaza, 40, 50197 Zaragoza, Spain.

You may contact the data controller by calling +34 976 320 849 or sending an e-mail to cagt@cagt.es.

Who is the Data Protection Officer?

CITOGEN, S.L.U. has appointed EXPLOTACIÓN DE SOFTWARE INTEGRAL, S.L. as its Data Protection Officer (DPO). You can contact our DPO by sending an e-mail to dpo@cagt.es, stating “CITOGEN, S.L.U.” in the subject along with the reason for your query or request.

Why do we collect your data and what are the legal grounds for processing your data?

POTENTIAL CUSTOMERS’ PERSONAL DATA

CLIENTS’ PERSONAL DATA

SUPPLIERS’ PERSONAL DATA

CANDIDATES’ PERSONAL DATA

How long do we keep your data?

POTENTIAL CUSTOMERS’ PERSONAL DATA

Personal data will be kept for as long as the quote remains valid or until the data subject requests its erasure. Your data will be erased once the quote or offer made is no longer valid.

Any personal data needed to send marketing communications, if you have authorised them, will be kept as long as you do not request its erasure.

CUSTOMERS AND SUPPLIERS’ PERSONAL DATA

The personal data provided will be kept for as long as the business relationship is maintained or until the data subject requests its erasure. Once the business relationship has ended, the data will be kept for as long as necessary to fulfil legal obligations. Your data will be erased once the responsibilities arising from said legal obligations have expired.

Any personal data needed to send marketing communications will be kept as long as you do not request its erasure.

CANDIDATES’ PERSONAL DATA

The data provided by the candidate will be kept for one year.

Do we process sensitive data?

In order to conduct the tests requested, CITOGEN, S.L.U. may process the interested party’s health and/or genetic data on the grounds of it being necessary for the purposes of the preventive medicine requested, medical diagnoses and the provision of healthcare, as well as for the contractual relationship’s fulfilment. Furthermore, in some cases and solely with the data subject’s consent, additional clinical data may be processed in order to provide you with optimal results.

Do we perform profiling with your data?

In the case of recruitment candidates, CITOGEN, S.L.U. may conduct profiling using the information provided by the candidate on their CV in order to select the best possible candidate for a given job position.

To whom do we transfer your data?

Data transfers will only be made if there is a legal obligation to do so. Moreover, on certain occasions, CITOGEN S.L. relies on the cooperation of specialised laboratories that require access to the personal data provided along with the samples in order to provide their services. These laboratories work under a services subcontract and are necessary to achieve the purpose of providing the client with an optimal service. These subcontracted laboratories have ensured CITOGEN S.L. that they strictly fulfil data protection regulations and conduct data processing under the most stringent security measures.

Will your data be transferred to countries outside the European Union?

If you have subscribed to our newsletter service, we hereby inform you that deliveries are made through MailChimp, whose database is located on servers housed in the United States. In any event, MailChimp fulfils the standard data protection clauses approved by the European Commission and processes data in accordance with them.

What rights are you entitled to and how can you exercise them?

The data subject is entitled to the right to access their personal data, to request rectification of inaccurate data, as well as to its erasure where, among other reasons, it is no longer required for the purposes for which it was collected. In certain circumstances, you may also request limitation to the processing of your data —in which case it will only be kept to exercise or defend claims— and to request your data’s portability. You may object to the processing of said data due to reasons related to your particular situation and CITOGEN, S.L.U. will cease processing it, save where there are compelling legitimate grounds thereof or to exercise or defend any possible claims. The data subject may from time to time withdraw any consents they may have granted. The data subject may exercise their rights by sending an e-mail to cagt@cagt.es or at the offices located at Camino del Pilón, 86, Casa 5-7, Local, 50011 Zaragoza, Spain, attaching a photocopy of their national ID card thereto and stating the right they wish to exercise. You may also file a complaint to the Spanish Data Protection Agency.