PRIVACY POLICY

This document sets out information about what personal data we request through our website and the processing we will carry out with it, including possible transfers to third parties.

Who is responsible for your data?

This Privacy Policy applies to all personal data of individuals who provide data to Noray Bioinformatics, S.L. (hereinafter NorayBio), through its website, as well as to any data to which the latter may have access by any relationship or medium, both with the owner and third parties.

NorayBio is therefore responsible for this personal data, and its address is Parque Tecnológico de Bizkaia 801A, 2º – 48160 Derio (Bizkaia) Spain, and its contact details are +34 94 403 69 98, and the e-mail address is ‘info@noraybio.com’.

Any person holding personal data, should they have any queries or needs regarding data protection, may contact our data protection officer through our Compliance Department at the address ‘protecciondedatos@noraybg.com’.

For what purposes do we process your personal data?

NorayBio collects and stores personal data of the owners of the same provided through the forms on our website or sent by other means for the purposes indicated below, always within the framework of a legal basis for each treatment:

• (a) To provide a service to you within the framework of the agreement or contract that may be concluded between the two parties.
• b) Guarantee you, if applicable, as a user, access to and use of your personal space in the private area of the website(s) managed by NorayBio.
• c) Manage budgets, purchases, requests for offers or services that you, as a customer or potential customer, make to NorayBio.
• d) To inform you as a customer or potential customer, including sending to your e-mail or postal address commercial or promotional communications about products or services similar to those contracted, or newsletters or information of interest to the sector and NorayBio.
• e) To carry out promotional activities about other NorayBio products and services, including sending commercial communications to the e-mail or postal address that you have provided to us.
• f) To carry out promotional activities about other products and services of other companies of the Group to which NorayBio belongs and which are further identified herein.

What is the legitimacy for the processing of your personal data?

The legal basis for the processing of purposes a) and b) is the performance of the contract for the provision of services and/or the purchase of the relevant products, which you have entered into with NorayBio.

The legal basis for the processing of data for purposes c), d), e), f) is the consent requested from you as the data subject, without in any case the possible withdrawal of such consent conditioning the execution of the contract for the provision of services.

NorayBio at the time of registration, collects and processes personal data necessary for registration and access to the user space. In the event that you have requested information or a quote for any of our services or products, or have contracted any of them, NorayBio will collect and process the data necessary to manage the contracting process, purchase or provision of the service (including name, surname, address, professional data, etc.).

In any case, as a user of the personal area, as a potential customer, or as a customer, you know and accept that failure to complete or provide certain personal data may prevent NorayBio from providing you with the services linked to said data.

NorayBio will under no circumstances transfer, exploit or use the data provided for any purpose other than that expressly indicated herein. During the registration process or data collection, you as a user, as a potential customer, or as a customer, will be informed of the non-mandatory nature of the collection of some of the data concerning the provision of the service or product requested.

Where do we get your data from?

The personal data of customers and/or potential customers are provided directly to NorayBio by the interested party.

How long do we keep your personal data?

NorayBio will retain your personal data for as long as the purpose for which they were collected is maintained. When the data are no longer necessary for the purpose for which they were collected, they will be kept for the legal periods established in relation to the type of data and the legal obligations that NorayBio may have with respect to them. Once these legal periods have elapsed, the data will be deleted, adopting the appropriate security measures to ensure the total destruction of the data.

Who has access to your personal data?

NorayBio will not pass on the personal data of customers and/or potential customers to third parties.

However, for the optimal provision of the service offered by NorayBio, it may be necessary for other third-party service providers of NorayBio to access the personal data that you have provided as a user, customer or potential customer, in their capacity as data processors.

By accepting this privacy policy, you, as the data holder, understand that there is a possibility that some of the aforementioned service providers may be located in countries outside the European Economic Area or that do not offer a level of security equivalent to that of Spain. In this case, and being necessary the transfer of data for the provision of the service, the same will be based on the authorisation of the Spanish supervisory authority, in model clauses approved by the commission or, where appropriate, in the Privacy Shield (USA-EU).

In addition to the access that NorayBio’s third-party suppliers may have to the ownership data, in its capacity as data processor and within the framework of the provision of a service to the data controller, NorayBio may transfer the personal data of users, customers or potential customers to the other companies that make up the group of companies to which NorayBio belongs, which are Grupo Noraybio, S.L., Histocell, S.L., and Artinvet, S.L., in relation to the consent given by the data owner. , Histocell, S.L., and Artinvet, S.L., in relation to the consent given by the owner of the data.

Likewise, your personal data may be transferred or communicated by NorayBio to meet its obligations to public administrations in cases where this is required in accordance with the legislation in force at any given time and, where appropriate, also to other bodies such as state forces and bodies, and judicial bodies.

What are the rights of users?

NorayBio informs you as the holder of personal data about the possibility of exercising your rights of access, rectification, opposition, deletion, portability and limitation of processing, as well as the right to refuse the automated processing of personal data collected by NorayBio.

These rights may be exercised free of charge by you as the holder of the personal data, and if applicable, whoever is your representative, by means of a written and signed request addressed to the following address: Parque Tecnológico de Bizkaia 801A, 2º – 48160 Derio (Bizkaia) Spain. Said request must contain in the subject line the reference ‘Data Protection/Noray Bioinformatics, S.L.’ and must include the following details: name and surname of the holder of the personal data, address for notification purposes, photocopy of the National Identity Document or Passport, and the request in which the request is made. In the case of representation, this must be proven by means of a reliable document. Likewise, the user may exercise the aforementioned rights via the e-mail address ‘protecciondedatos@noraybg.com’.

In addition to the above rights, the user, customer and/or potential customer shall have the right to withdraw the consent given at any time by means of the procedure described above, without such withdrawal of consent affecting the lawfulness of the processing prior to the withdrawal of consent. NorayBio may continue to process the data provided by the data subject to the extent permitted by applicable law.

NorayBio reminds the user that he/she has the right to lodge a complaint with the Spanish supervisory authority, Agencia Española de Protección de Datos, c/ Jorge Juan 6, 28001 – Madrid – www.aepd.es.

Unsubscribe from the service of sending commercial, promotional or informative communications.

As mentioned in the previous section, you, as the owner of your personal data, have the right to revoke your consent to receive commercial communications at any time by simply notifying NorayBio that you no longer wish to receive commercial communications.

To do so, the owner of the data may either revoke their consent in the manner described in the previous section or click on the link included in each commercial communication, thereby cancelling the sending of electronic commercial communications.

From what age can the user access our products and services?

NorayBio’s services and/or products are not intended for persons under 18 years of age. By accepting this Privacy Policy, the user declares and guarantees that he/she is over 18 years of age.

What security measures do we implement to protect your information?

NorayBio undertakes to comply with its obligation of secrecy of personal data and its duty to protect them, and will adopt the necessary measures to prevent their alteration, loss, processing or unauthorised access, in accordance with the provisions of applicable regulations.

NorayBio has implemented the necessary technical and organisational security measures to guarantee the security of your personal data and to avoid its alteration, loss and unauthorised processing and/or access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed, whether from human action or the physical or natural environment, in accordance with the provisions of the applicable regulations.

NorayBio is a privacy-conscious entity, and in order to reinforce the confidentiality and integrity of the information in its organisation, it continuously monitors, controls and evaluates its processes to ensure respect for the privacy and security of information, in accordance with international standards.

Use of cookies

NorayBio uses cookies to distinguish you from other users of our website, which helps us to provide you with a good experience when you browse our website and also allows us to improve our website. You can find out more about our use of cookies in our Cookie Policy.

Links to other websites

The NorayBio website may include hyperlinks to other sites that are not operated or controlled by NorayBio. Therefore, NorayBio does not guarantee, and is not responsible for, the legality, reliability, usefulness, accuracy and timeliness of the content of such websites or their privacy practices. Please note that before you provide your personal information to these non-NorayBio websites, please be aware that their data protection compliance may differ from ours.

Modification of the Privacy Policy

NorayBio may modify its Privacy Policy in accordance with the legislation applicable at any given time. In any case, any modification to the Privacy Policy will be duly notified to the user, customer and/or potential customer, so that they are informed of the changes made to the processing of their personal data and, in the event that the applicable regulations so require, can give their consent.