Privacy Policy

To ensure and protect the privacy and confidentiality of the personal data of data subjects who access the LABORATORIOS NORMON, S.A. website (hereinafter “NORMON”) and/or that are processed by NORMON for the management of other services, NORMON has drawn up this Privacy Policy in accordance with current applicable laws regarding Personal Data Protection.

The only personal data that NORMON will have access to will be those which the data subject voluntarily provides to NORMON. The data subject guarantees that the personal data and any other information he or she will provide to NORMON are true and correct.

In this respect, the data subject must be aware that, for access to some services offered by NORMON, personal data will be requested. Therefore, the data subject expressly authorizes NORMON, by accepting this Privacy Policy, to process the data that are necessary to be used in relation to the execution of the request, consultation or agreed service. Under no circumstances the personal data provided by the data subject will be transferred to third parties by NORMON without the corresponding consent, unless NORMON is obliged by law to such transfer.

The mandatory data will be specified in the corresponding section and/or data collection form, and the refusal to provide them shall imply that the aforementioned services and contents cannot be accessed or used. The fields marked with an asterisk (*) on the existing forms are strictly necessary to send your request, and the inclusion of data in the remaining fields is voluntary.

In accordance with applicable Law, the data and information that the data subject has provided to NORMON will be treated with the utmost diligence and confidentiality. NORMON has adopted the necessary technical, organizational and security measures to guarantee the security of personal data and to prevent their alteration, loss or unauthorized processing, taking into account the state of the technology, the nature of the stored data and the risks to which they are exposed.

NORMON does not intend nor wish to obtain personal data directly from minors. In the event that a minor provides us with his or her data without the consent of his or her parents or guardians, we kindly urge the parent or guardian to contact us and request that this information is deleted.

Controller	Purpose of the processing		Legal basis	Storage Period	Recipients	Rights
Laboratorios Normon, S.A. (“NORMON”) Ronda de Valdecarrizo, 6. 28760 Tres Cantos (Madrid) Tel: +34 91 806 52 40 You may contact the Data Protection Delegate at the above address or via e-mail at lopd@normon.com.	Contact/ Commercial Communications	To provide the services and information requested by the interested party through NORMON’s contact forms and to communicate any commercial information that NORMON considers may be of interest to the interested party. Such commercial actions may be carried out by e-mail or other means of communication.	Consentimiento del interesado. Consent of the interested party. The data of obligatory completion will be specified in the corresponding section. The refusal to provide the data by the interested party will imply not being able to access or use the referred services and contents. The fields marked with an asterisk (*) in the existing forms are strictly necessary to respond to your request, being voluntary the inclusion of data in the remaining fields.	The data will be kept for as long as continues to serve the purpose for which it was collected and as long as the legislation in force so indicates.	No data will be disclosed to third parties, unless is legally obliged to do so. Under no circumstances will the personal data provided by the data subject be disclosed to third parties by NORMON without the prior consent of the data subject, unless NORMON is obliged by a law to such disclosure.	Access, rectification, deletion, limitation, opposition and portability of data. If any interested party wishes to exercise their rights of access, rectification, opposition, suppression, limitation and/or portability with respect to their personal data, they should contact NORMON at Ronda de Valdecarrizo, 6. 28760 Tres Cantos (Madrid) Tel: +34 91 806 52 40 or at the e-mail address lopd@normon.com, corresponding to the Delegate of Data Protection, attaching a copy of their ID card and the request they wish to make. The data subject has the right to withdraw the consent given at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal. The exercise of the right of deletion shall be limited to the data retention obligations stipulated by the legislation in force. The data subject may also file a complaint with the Spanish Data Protection Agency (www.aepd.es).
	Medical Inquiries	To provide the services and information requested by the interested party through NORMON’s “Medical Inquiries” section at and to communicate any commercial information that NORMON considers may be of interest to the interested party. Such communications may be made by e-mail or other means of communication.	Consent of the interested party. The mandatory data will be specified in the corresponding section . The refusal to provide the data by the interested party will imply not being able to access or use the referred services and contents. The fields marked with an asterisk (*) in the existing forms are strictly necessary to respond to your request, being voluntary the inclusion of data in the remaining fields. Legitimate interest of NORMON to respond to the requests for information received by the Company through the forms available on its Web or other communication channel.	The data will be kept as long as the purpose for which they were collected remains in force and always until the current legislation indicates it.	No data will be disclosed to third parties, unless is legally obliged to do so. Under no circumstances will the personal data provided by the data subject be disclosed to third parties by NORMON without the prior consent of the data subject, unless NORMON is obliged by a law to such disclosure.
	Pharmacovigilance	Manage adverse reactions / special drug situations, and clinical incidents / events with respect to the rest of NORMON’s products.	Consent of the interested party. The refusal to provide the data by the interested party will imply not being able to access or use the aforementioned services and contents. The fields marked with an asterisk (*) in the existing forms are strictly necessary to respond to your request, being voluntary the inclusion of data in the remaining fields. Legitimate interest of NORMON to manage adverse reactions / special situations of the medicines, and incidents / clinical events regarding the rest of its products. Also, the processing is necessary for compliance with a legal obligation applicable to NORMON.	The data will be kept as long as the purpose for which they were collected remains in force and always until the current legislation indicates it.	No data will be disclosed to third parties, unless is legally obliged to do so. Under no circumstances will the personal data provided by the data subject be disclosed to third parties by NORMON without the prior consent of the data subject, unless NORMON is obliged by a law to such disclosure.
	Work with us	Management of the personnel selection process in relation to those interested parties who have registered for a NORMON job offer and/or have sent their curriculum vitae to the company. In addition, NORMON may use the data of candidates to assess their profile in future selection processes of the company.	Consent of the interested party. The refusal to provide the data by the interested party will imply not being able to access or participate in the selection process. The fields marked with an asterisk (*) in the existing forms are strictly necessary to respond to your request, being voluntary the inclusion of data in the remaining fields.	3 years from receipt of the data by NORMON.	No data will be disclosed to third parties, unless is legally obliged to do so. Under no circumstances will the personal data provided by the data subject be disclosed to third parties by NORMON without the prior consent of the data subject, unless NORMON is obliged by a law to such disclosure.
	Contracts with us	Management, signing and execution of contracts with NORMON, as well as carrying out communications and administrative, economic and accounting procedures related to the object of the Contract. In the event that personal data processing is commissioned, the distribution of obligations and responsibilities during its processing shall be regulated in the corresponding Personal Data Processing Commissioning Agreement to be signed by the Parties in accordance with the current legislation on data protection.	Consent of the interested party. The refusal to provide the data by the interested party will imply not being able to manage or sign the contract. Execution of a contract. The data related to the signing of the Contract are necessary to carry out the management and execution of the contracts, as well as to carry out related communications and administrative formalities. Legitimate interest of NORMON in managing its contractual relations or other activities related to the Company’s business, including satisfaction surveys, among others.	The data will be retained for as long as the contract is in force and, after its termination, the data will be retained for as long as liabilities may arise, unless NORMON is obliged by a law or by the competent Authorities to retain them for a longer period.	No data will be disclosed to third parties, unless is legally obliged to do so. Under no circumstances will the personal data provided by the data subject be disclosed to third parties by NORMON without the prior consent of the data subject, unless NORMON is obliged by a law to such disclosure.
	Digital signature	Management, digital signature and execution of documents and/or contracts with NORMON, as well as carrying out the communications and administrative procedures necessary for the electronic signature of documents and contracts.	Consent of the interested party. The refusal to provide the data by the interested party will imply not being able to manage or digitally sign the document and / or contract. The data requested in the existing forms are strictly necessary to attend the mentioned management. Execution of a contract. The data related to the electronic signature are necessary to carry out the management and execution of the documents and/or contracts, as well as to carry out related communications and administrative formalities. Legitimate interest of NORMON in managing its contractual relations or other activities related to the Company’s business.	The data will be retained for the period necessary to fulfill the purpose of the electronic signature and/or as long as the contract/document is in force or liabilities may arise, unless NORMON is required by law or by the competent Authorities to retain them for a longer period.	No data will be disclosed to third parties, unless is legally obliged to do so. Under no circumstances will the personal data provided by the data subject be disclosed to third parties by NORMON without the prior consent of the data subject, unless NORMON is obliged by a law to such disclosure.
	Normon Client Area	To manage, mainly through Normon’s Customer Area , the commercial relationship between the interested party and NORMON as well as to provide the requested services and information and to communicate any commercial information that NORMON considers may be of interest to them. Such commercial actions may be carried out by e-mail or other means of communication.	Consent of the interested party. The data of obligatory completion will be specified in the corresponding section. The refusal to provide the data by the interested party will imply not being able to access or use the referred services and contents. The fields marked with an asterisk (*) in the existing forms are strictly necessary to respond to your request, being voluntary the inclusion of data in the remaining fields.	The data will be kept for the duration of the relationship for which they were provided and, after its termination, the data will be kept for as long as liabilities may arise, unless NORMON is obliged by a law or by the competent Authorities to keep them for a longer period.	No data will be disclosed to third parties, unless is legally obliged to do so. Under no circumstances will the personal data provided by the data subject be disclosed to third parties by NORMON without the prior consent of the data subject, unless NORMON is obliged by a law to such disclosure.
	Client management	To manage the business relationship between the data subject and Normon. Within the Customer Area, functionalities or services are offered that require Normon to process the personal data of a third party that the user or customer has provided, such as, for example, the sending of an invitation to create an auxiliary profile within the Customer Area account. The user who provides personal data of third parties warrants that he/she has informed of this Privacy Policy and, in particular, of the purposes for which and the manner in which Normon needs to process his/her personal data.	Execution of the contract Being the basis of legal standing as necessary to execute the contractual relationship between the parties	The data will be kept for as long as continues to serve the purpose for which it was collected and as long as the legislation in force so indicates.	No data will be disclosed to third parties, unless is legally obliged to do so. Under no circumstances will the personal data provided by the data subject be disclosed to third parties by NORMON without the prior consent of the data subject, unless NORMON is obliged by a law to such disclosure.
	Club Normonclass Client Area	The web registration form will process your personal data in order to provide you with the registration on the Club Normonclass website and access to purchase services, manage the norpoints, as well as your profile.	Consent of the interested party. The basis of legitimacy will be the consent given by you unequivocally at the time of filling out the web registration form and accepting the conditions of the legal notice and privacy policy.	The data will be kept as long as the purpose for which they were collected remains in force and always until the current legislation indicates it.	No data will be disclosed to third parties, unless is legally obliged to do so. Under no circumstances will the personal data provided by the data subject be disclosed to third parties by NORMON without the prior consent of the data subject, unless NORMON is obliged by a law to such disclosure.
	Manage your registration to congresses and training courses.	Manage your registration for the Congresses and Training Courses offered by NORMON, the online attendance to the same and other inherent formalities, being the basis of legitimacy as necessary for the execution of the contract, regarding the registration of the selected course and, in the case of the Normonclass Customer Area, acquired through the norpoints. In addition, the user may participate in an interactive chat during the training in streaming through the website platform and voluntarily use the camera and/or microphone.	Consent of the interested party. The basis of legitimacy will be your consent given at the time of participating in the chat or activating the microphone and your camera. The training sessions will be recorded.	The data will be kept as long as the purpose for which they were collected remains in force and always until the current legislation indicates it.	No data will be disclosed to third parties, unless is legally obliged to do so. Under no circumstances will the personal data provided by the data subject be disclosed to third parties by NORMON without the prior consent of the data subject, unless NORMON is obliged by a law to such disclosure.
	Manage your entry in contests and sweepstakes	Manage your registration in the Contests or Sweepstakes promoted by NORMON, in accordance with the legal bases in force at any given time.	Consent of the interested party. The basis of legitimacy of your data is the consent given unequivocally by accepting the terms and conditions (legal basis) of the contest or sweepstakes.	The data will be kept as long as the purpose for which they were collected remains in force and always until the current legislation indicates it.	No data will be disclosed to third parties, unless is legally obliged to do so. Under no circumstances will the personal data provided by the data subject be disclosed to third parties by NORMON without the prior consent of the data subject, unless NORMON is obliged by a law to such disclosure.
	Transparency in transfers of value to healthcare professionals.	Management and publication of transfers of value made to healthcare professionals. In relation to NORMON’s commitment to “Transparency” in its relations with healthcare professionals, NORMON is obliged, in accordance with the Code of Conduct on Interactions with the Healthcare Community of the Spanish Association of Generic Medicines (AESEG), to publish the transfers of value made to healthcare professionals as of July 2017. For the purposes of data processing and publication on the web, it is reported that the following may be considered as transfers of value: -Fees paid by NORMON for services provided to us by healthcare professionals -Registration for an event organized by NORMON. -Travel or accommodation expenses that NORMON may have paid or reimbursed directly to the Healthcare Professional or indirectly through a natural person or legal entity.	Consent of the person concerned. Refusal to provide the data by the data subject will mean that the Transfer of Value cannot be managed. This is without prejudice to the right granted to Healthcare Professionals to refuse and/or revoke consent to the publication of their data; in which case, NORMON will publish the Transfers of Value relating to such recipient on an anonymous basis. If several Healthcare Professionals refuse to grant their consent, the Company will publish the Transfers of Value made for their benefit in aggregate form, indicating the total number of Healthcare Professionals who have been recipients of such transfers. NORMON’s Legitimate Interest in complying with the Codes of Conduct to which the Company is adhered and the applicable regulations.	With respect to the retention of such information (both aggregated and individualized), it will be publicly available for a minimum period of 3 years from its publication, unless a shorter period is legally established or the healthcare professional revokes his or her consent and is legally binding for NORMON. In addition, NORMON will keep on file the documentation evidencing the transfers of value for a minimum period of 5 years from the end of each period, unless a shorter period is legally established.	No data will be disclosed to third parties, unless is legally obliged to do so. Under no circumstances will the personal data provided by the data subject be disclosed to third parties by NORMON without the prior consent of the data subject, unless NORMON is obliged by a law to such disclosure.
	Ethical channel	Everything related to the processing of data as a result of responding to complaints made in the ethics channel (whistleblower channel). For more information, you can access the Complaints Management Procedure (ethics channel), which you will have access to when reporting a complaint.	Fulfillment of a legal obligation Art. 31 bis of the PC, Prosecutor’s Office Circular 1/2016 on Criminal Liability of legal persons and Law 2/2023 on whistleblower defense, OJEU Directive (EU) 2019/1937 of the European Parliament and of the Council of 23 October 2019 on the protection of persons who report breaches of Union law Execution of the contract. For the purposes of the labor or commercial relationship that exists between the parties. Public interest. In the event that the data controller proceeds to denounce or report a crime to the State Security Forces or a Court, by preventing and act against criminal offenses under the provisions of art. 24 of the LO/3/2018, by reporting a possible crime.	The data will be kept for the time necessary to decide whether to initiate an investigation on the reported facts. – In any case, three (3) months after the data have been entered, they will be deleted from the complaint system. If it is necessary to keep the data in order to continue the investigation, it shall be communicated to the Laboratorios Normon, S.A. body responsible for investigating the reported facts, who may continue to process it, and a copy of the data shall not be kept in the internal complaints information system .  Complaints that have not been followed up may only be recorded in an anonymous form. – If it is proven that the information provided or part of it is not truthful, it shall be immediately deleted as soon as such circumstance comes to light, unless such lack of truthfulness may constitute a criminal offense, in which case the information shall be kept for the necessary time during the legal proceedings. – Complaints that have not been followed up may only be recorded in anonymized form without being subject to the obligation of blocking. In no case shall internal communications and investigations be kept for a period of more than ten years. – If a legal proceeding is initiated as a result of the investigation following the information obtained from the whistleblower channel, the retention period will be for the duration of the proceeding and the time necessary to respond to the responsibilities of the company. The origin of the above criteria is as follows: – Pursuant to Law 2/2023 on the defense of the whistleblower and art. 24.2 of LO 3/2018. – Art. 32 of the LO 3/2018	No data will be disclosed to third parties, unless is legally obliged to do so. Under no circumstances will the personal data provided by the data subject be disclosed to third parties by NORMON without the prior consent of the data subject, unless NORMON is obliged by a law to such disclosure.