Data protection

CITOGEN S.L.U. in compliance with the General Data Protection Regulation (Regulation (EU) 2016/679), as well as Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, informs:

 

Who is responsible for the processing of your data?

CITOGEN S.L.U. with CIF B50600188 and address for notification purposes at Av. Diagonal Plaza, 40 50197 ZARAGOZA, Zaragoza (Spain).
You can contact us by calling 976320849 or via email at cagt@cagt.es.

Who is the Data Protection Officer?

CITOGEN S.L.U. appoints EXPLOTACIÓN DE SOFTWARE INTEGRAL, S.L. as the Data Protection Officer. You can contact our officer via email at dpo@cagt.es, indicating “CITOGEN S.L.U.” in the subject and the reason for the inquiry or request.

For what purpose do we collect your data and the legal basis for processing your data?

POTENTIAL CLIENTS’ PERSONAL DATA

PURPOSE LEGAL BASIS
To quote the requested services It is the execution of pre-contractual measures at the request of the data subject (quotations)
Sending commercial information It is the consent

CLIENTS’ PERSONAL DATA

PURPOSE LEGAL BASIS
To quote the requested services It is the execution of pre-contractual measures at the request of the data subject (quotations)
To perform the requested analyses It is the execution of a contract
Internal client-company management It is the legal obligation of CITOGEN S.L.U. to comply with its fiscal and tax obligations
Administrative management of our company It is the execution of a contract
Invoicing of the requested services, if applicable It is the legal obligation of CITOGEN S.L.U. to comply with its fiscal and tax obligations
Research and population statistical study purposes It is the consent
Sending commercial information It is the consent

SUPPLIERS’ PERSONAL DATA

PURPOSE LEGAL BASIS
Management of the provided service and/or product supply It is the execution of a contract
Internal supplier-company management It is the legal obligation of CITOGEN S.L.U. to comply with its fiscal and tax obligations
Administrative management of our company It is the execution of a contract
Payment for the provided services, if applicable It is the legal obligation of CITOGEN S.L.U. to comply with its fiscal and tax obligations
   

CANDIDATES’ PERSONAL DATA

PURPOSE LEGAL BASIS
For the candidate to be part of the selection processes carried out by CITOGEN S.L.U. Candidate’s consent
How long do we keep your data?

POTENTIAL CLIENTS’ PERSONAL DATA
Personal data will be retained while the provided quote is valid or the data subject requests its deletion. Once the quote or offer is no longer valid, the data will be deleted.

Personal data required for the sending of commercial communications, if authorized, will be retained as long as deletion is not requested.

CLIENTS’ AND SUPPLIERS’ PERSONAL DATA

The personal data provided will be retained as long as the commercial relationship is maintained or the data subject requests its deletion. Once the commercial relationship is terminated, the data will be retained as long as necessary to comply with legal obligations. Once the responsibilities derived from these legal obligations are prescribed, the data will be deleted.

Personal data required for the sending of commercial communications will be retained as long as deletion is not requested.

CANDIDATES’ PERSONAL DATA

The data provided by the candidate will be retained for 1 year.

Do we process sensitive data?

To perform the requested analyses, CITOGEN S.L.U. may process the health and/or genetic data of the data subject, which is legitimized by being necessary for the purposes of preventive medicine, medical diagnosis, provision of healthcare, as well as for the fulfillment of the contractual relationship. Additionally, in some cases, and only with the consent of the data subject, additional clinical data may be processed to provide optimal results.

Do we create profiles with your data?

In the case of candidates, with the information provided by the applicant through their CV, CITOGEN S.L.U. may create profiles to select the best candidate for a specific job position.

To whom do we transfer your data?

Transfers will only be made if there is a legal obligation. Additionally, on certain occasions, CITOGEN S.L. cooperates with specialized laboratories that require access to the personal data provided along with the samples to perform their services. These laboratories work under a subcontracting regime and are necessary to achieve the objective of providing optimal service to the client. These subcontracted laboratories guarantee CITOGEN S.L. strict compliance with data protection regulations, as well as information processing under the most efficient security measures.

Will your data be transferred to countries outside the European Union?

If you have subscribed to our newsletter service, we inform you that the mailings are made with MailChimp, whose database is located on servers hosted in the USA. In any case, MailChimp complies with and processes the data in accordance with the standard data protection clauses approved by the European Commission.

What rights do you have and how to exercise them?

The data subject has the right to access their personal data, to request the rectification of inaccurate data, as well as to request their deletion when, among other reasons, they are no longer necessary for the purposes they were collected. In certain circumstances, they may also request the limitation of their processing, in which case they will only be retained for the exercise or defense of claims, as well as request the portability of their data. For reasons related to their particular situation, they may object to their processing and CITOGEN S.L.U. will stop processing them, except for compelling legitimate reasons, or the exercise or defense of possible claims. The applicant may revoke the consents given at any time. The applicant may exercise their rights via email at cagt@cagt.es or at the offices located at Camino del Pilón, nº 86, casa 5-7, local, 50011 Zaragoza (Spain), attaching a copy of their ID and indicating the right they are exercising. You can also file a complaint with the Spanish Data Protection Agency.