PRIVACY POLICY

1. Who is the controller?

The controller of the processing of personal data collected through this website is HEALTHTECH HTBA HOLDING S.L. and HEALTHTECH BIO ACTIVES S.L.U. (hereinafter, “HTBA”), located at Avenida Diagonal, No. 567, 4th Floor, 08029, Barcelona (Spain) and Tax ID number B67465708. If you have any doubt or concern about the processing of your personal data, you can contact HTBA by sending an e-mail to the following email address protecciondedatos@htba.com.

2. For what purpose will your personal data be processed and what is the legal basis for its processing?

HTBA will process the personal data that you provide to us and those that arise from our relationship, for the following purposes:

• “Contact Us” form: your data will be processed to answer the inquiries submitted and to process them as accurately as possible.
  Legal Basis: The legal basis for the current processing is the execution of the pre-contractual relationship with HTBA generated when you send to us a request through the corresponding form.
• Marketing Communications regarding HTBA’s Products and Services: Your data will be processed to manage your subscription to our commercial communications, including product updates, promotional offers, and other relevant information about our products and services.
  Legal Basis: The legal basis for this processing is your explicit consent, provided by selecting the designated checkbox in the forms on our website.
• Information about our products, services, and events: If you are a professional representing a current client company or if your company’s contractual relationship with HTBA ended within the past year, we may send you informational communications, including product updates, company news, and invitations to events. These communications are intended to maintain and strengthen our commercial relationship with your organization.
  Legal Basis: The legal basis for this processing is HTBA’s legitimate interest in maintaining and strengthening relationships with our current and recent client companies. You have the right to object to these communications at any time or to request evidence of the legitimate interest assessment for this processing activity by contacting protecciondatos@htba.com.
• Submission of resumes: Your data will be processed to evaluate your application and consider you for current and potential job opportunities at HTBA.
  Legal Basis: The processing of your data is based on the execution of the pre-contractual relationship established when you submit your application to HTBA, while the retention of your resume beyond the application process is based on your consent.
• Video Surveillance: Your data will be processed with the aim of preserving the security of HTBA’s facilities, individuals, and assets.
  Legal Basis: Legitimate interest, aimed at ensuring the security of individuals, assets, and facilities of HTBA.
• HTBA Whistleblower Channels: If you choose to provide your personal data when submitting a report, it will be processed to investigate and address the concerns or reports submitted throughHTBA’s whistleblower channels. However, if you opt to submit an anonymous report, no personal data will be collected or processed.
  Legal Basis: The legal basis for data processing will be compliance with a legal obligation in accordance with Law 2/23 of February 20.

3. How long do we retain your personal data?

Your personal data will be processed as long as necessary to fulfill the purpose for which it was collected and, for purposes you have consented to, as long as you do not withdraw that consent. Once the purpose has been fulfilled, your personal data will be blocked for the applicable retention period, depending on any potential liabilities. After this period, it will be permanently deleted.

4. Will your data be disclosed to third parties?

Your personal data will be shared with third parties if it is strictly necessary to fulfill a legal or contractual obligation.

In addition, to process your personal data, we require the support of service providers. These third parties may have access to your data and will act in the name and on behalf of HTBA, following our instructions, and in any case, they will not have access to your data for their own purposes.

Although most of our suppliers process personal data within the European Economic Area (EEA), we inform you that, in exceptional cases, the processing of your data may be carried out by service providers located in countries outside the EEA. In these exceptional cases, HTBA ensures that it only contracts with providers located in countries for which the European Commission has declared that they ensure an adequate level of protection or, in the absence of such adequacy decision, provided that such providers offer adequate safeguards as required by the applicable regulations (e.g. binding corporate rules subscribing to the European Union standard clauses or the subscription to the standard contractual clauses approved by the Commission).

Likewise, in accordance with Recital 48 of the GDPR, HTBA may also share your personal data with other companies within the HTBA group for legitimate internal administrative purposes. This includes instances where another group company may handle specific administrative functions related to your relationship with HTBA. If an international data transfer is necessary to facilitate these administrative purposes, HTBA will ensure that all such transfers are conducted with the necessary safeguards to protect your data and maintain compliance with GDPR standards.

5. Which rights do you have?

The rights that data subjects may exercise are listed below:

• Right of access: Check what personal data we hold about you.
• Right of rectification: Modify the personal data we hold about you when it is inaccurate or incomplete.
• Right to object: Request that may no longer process your personal data for certain specific purposes.
• Right of deletion: Request that we delete your personal data.
• Right of restriction: Request that we restrict the processing of your personal data.
• Right of portability: Request that we provide the information we hold about you to a third party in a computer format.
• Right to Withdraw Consent: You may withdraw your consent at any time, which will not affect the lawfulness of processing based on consent before its withdrawal.

In addition, you can submit a request to the competent authority to defend your rights, through the website https://www.aepd.es/ To exercise these rights, you only need to send a communication toHTBA either by e-mail to the address protecciondedatos@htba.com or by post to Avenida Diagonal, nº 567, 4th Floor, 08029, Barcelona (Spain), with the reference “Data Protection”.

For the exercise of some requests, HTBA may ask you for additional information to verify your identity. If the request does not meet the specified requirements, HTBA may require you to amend it. The exercise of these rights is free of charge, although a fee may be charged when requests are unfounded, excessive, or repetitive.

5. Changes or modifications to our privacy policy

We may revise this Privacy Policy periodically and post the most current version on our Web site. We will inform you if your rights are materially affected because of a revision.