Privacy policy

2. What data we process and how we obtain it

We process the personal data you voluntarily provide to us and the data generated while browsing:

• Contact and communication data: when you contact us by email or phone (for example, name, company, email address, phone number and the content of your message).
• Browsing data: technical and statistical information about use of the Website collected through cookies and similar technologies (for example, pages visited, device or browser), under the terms of our Cookie Policy.
• Application data: when you send us your application through the “Careers” section, we may process identification and contact details, academic and training data, professional experience and any other information voluntarily included in your CV.

We do not intentionally collect special category data (health data or others under art. 9 GDPR) through the Website. Please do not include such information in your communications.

3. Purposes of processing

• To handle and manage your enquiries, requests for information and commercial contacts.
• To manage relationships with clients, suppliers and collaborators (CDMO partners).
• To analyse use of the Website in order to improve its operation, content and security.
• Where applicable, and with your consent, to carry out marketing and audience measurement.
• To manage the unsolicited applications received and to assess professional profiles for recruitment processes and future job opportunities at QuaPharma.

4. Legal basis

• Consent of the data subject (art. 6.1.a GDPR): to respond to your communications and for cookies/technologies that are not strictly necessary (analytics and marketing).
• Legitimate interest of QuaPharma (art. 6.1.f GDPR): for managing professional contacts and for the security and improvement of the Website.
• Performance of a contract or pre-contractual measures (art. 6.1.b GDPR): where processing is necessary within the framework of a commercial relationship.
• Consent of the data subject (art. 6.1.a GDPR): to manage the unsolicited applications received and to keep them for the period indicated so they can be considered in future recruitment processes, given by ticking the acceptance box on the “Careers” form.

5. Retention period

We will retain your data for as long as the relationship or the interest that led to its collection remains and, thereafter, for the periods legally required to address possible liabilities. Browsing data is retained for the periods indicated in the Cookie Policy.

Data and CVs received through the “Careers” section are retained for a maximum of 12 months from receipt, unless the applicant asks for them to be erased sooner.

6. Recipients and data processors

No data will be disclosed to third parties except where legally required. To provide its services, QuaPharma may rely on providers acting as data processors, including:

• Website hosting and infrastructure: Sarenet, S.A.U. (servers located in Spain / European Union).
• Corporate email: Microsoft, through Microsoft 365. It is used for the content manager’s emails and for the internal notices of new applications received through the “Careers” form, which include the applicant’s name and neither attach nor link to their CV. As it is provided by a US company, an international transfer limited to those emails cannot be ruled out.
• First-party web analytics: Matomo, hosted on the company’s own servers (analytics.quapharma.es), configured in a privacy-friendly way and without disclosure to third parties.
• With your consent, third-party tools for analytics or marketing purposes: Google Analytics 4 and Microsoft Clarity (analytics) and LinkedIn (campaign and audience measurement). These tools may involve international data transfers to the United States, covered by the EU–US Data Privacy Framework adequacy decision and/or standard contractual clauses. Details are available in the Cookie Policy.

7. Rights of data subjects

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, as well as withdraw any consent given, by writing to privacidad@quapharma.es or by post to our registered office, stating “Data Protection” and providing suitable identification.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that the processing does not comply with the regulations.

8. Security measures

QuaPharma applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk, protecting the confidentiality, integrity and availability of personal data.

9. Cookies

The Website uses cookies and similar technologies under the terms described in our Cookie Policy, accessible from the footer, where you can configure or withdraw your preferences at any time.

10. Changes to this Privacy Policy

QuaPharma may update this Privacy Policy to adapt it to regulatory changes or changes in its processing activities. We recommend reviewing it periodically; the version in force will be the one published on the Website.