Privacy Policy

The purpose of this policy is to inform data subjects about the various processing operations carried out by this organisation through the website and which affect their personal data in accordance with the provisions of Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.

1. IDENTIFICATION AND CONTACT DETAILS OF THE CONTROLLER
The organisation INCYE, domiciled at JOAQUÍN TURINA, 2 Pl.0 Of.05 (28224 POZUELO DE ALARCON) MADRID, with N.I.F. A80152804, contact telephone: +34915556104 and email: info@incye.com.

2. PURPOSES OF THE PROCESSING OF YOUR PERSONAL DATA
USERS/USERS OF THE WEBSITE OF THE RESPONSIBLE PARTY.

We will process your personal data provided through our web forms in order to:

• Respond to requests, complaints and incidents transferred through our contact channels incorporated into the website.
• To understand the behaviour of the surfer on the website in order to detect possible computer attacks on our website.
• To comply with the legal obligations that are directly applicable to us and regulate our activity.
• To protect and exercise our rights or respond to claims of any kind.
• Where appropriate, to send commercial communications relating to the goods or services that make up our activity, and/or news or bulletins related to our sector.
• We manage your data in order to schedule the requested appointment.
  Manage, administer and supervise your activity in the blog/forum incorporated.

CUSTOMERS

We will process your personal data provided through our web forms for:

• The management of the commercial relationship.
• The provision of the services you have contracted from us.
• Management related to the shipment and reception of the product purchased through this website.
• Administrative, accounting and tax management.
• To attend to requests, complaints and incidents transferred through our contact channels incorporated in the website.
• To understand the behaviour of browsers on the website in order to detect possible computer attacks on our website.
• Where appropriate, to carry out quality surveys that allow us to evaluate our service.
• Where appropriate, to send commercial communications relating to the goods or services that make up our activity, and/or news or bulletins related to our sector.
• To comply with the legal obligations that are directly applicable to us and regulate our activity.
• To protect and exercise our rights or respond to claims of any kind.

SUPPLIERS

• To manage the commercial relationship.
• To attend to the requests, complaints and incidents transferred through our contact channels incorporated in the website.
• To understand the behaviour of browsers on the website in order to detect possible computer attacks on our website.
• To comply with the legal obligations that are directly applicable to us and regulate our activity.
• To protect and exercise our rights or respond to claims of any kind.
• Where appropriate, to send commercial communications relating to the goods or services that make up our activity, and/or news or bulletins related to our sector.

3. LEGAL BASIS FOR PROCESSING.
USERS/BROWSERS ON THE WEBSITE OF THE RESPONSIBLE PARTY

• In the consent you have given us to process your data for the purposes indicated. Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
• To comply with the legal obligations that apply to us. In this case, the data subject may not refuse the processing of personal data.
• In our legitimate interest to protect our image, business and track record by preventing attacks on our website. In this case, the data subject may not refuse the processing of personal data, although he/she may exercise, where appropriate, the rights recognised in section eight of this policy.

CUSTOMERS

• Execution of a contract to which you are a party or application of pre-contractual measures. Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
• In the consent you have given us to process your data for purposes unrelated to the development or execution of the existing contract. Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
• To comply with the legal obligations that apply to us. In this case, the data subject may not refuse the processing of personal data.
• In our legitimate interest to protect our image, business and track record by preventing attacks on our website. In this case, the data subject may not object to the processing of personal data, although he or she may exercise, where appropriate, the rights recognised in section eight of this policy.

SUPPLIERS

• Execution of a contract to which you are a party or application of pre-contractual measures. Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
• In the consent you have given us to process your data for purposes unrelated to the development or execution of the existing contract. Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
• To comply with the legal obligations that apply to us. In this case, the data subject may not refuse the processing of personal data.
• In our legitimate interest to protect our image, business and track record by preventing attacks on our website. In this case, the data subject may not object to the processing of personal data, although he or she may exercise, where appropriate, the rights recognised in section eight of this policy.

4. DATA RETENTION PERIODS OR CRITERIA
The personal data provided will be kept for the time necessary to fulfil the purposes for which they were initially collected.

Once the data are no longer necessary for the processing in question, they will be kept duly blocked in order to, where appropriate, make them available to the competent Public Administrations and Bodies, Judges and Courts or the Public Prosecutor’s Office, in accordance with the statute of limitations period for any actions that may arise from the relationship maintained with the client and/or the legally stipulated retention periods.

In the event that you have provided us with your curriculum, we will keep your data for a maximum period of one year from the receipt of the same by the entity, unless you have authorised us to keep your data for a longer retention period than that indicated.

5. AUTOMATED DECISIONS AND PROFILING
The website does not make automated decisions nor does it create profiles.

6. RECIPIENTS
For the duration of the processing of your personal data, the organisation may transfer your data to the following recipients:

• Judges and Courts.
• State Security Forces and Corps.
• Other competent public authorities or bodies, when the data controller is legally obliged to provide the personal data.

7. INTERNATIONAL DATA TRANSFERS
The organisation does not carry out any International Data Transfer.

8. RIGHTS
Interested parties may at any time and free of charge exercise their rights of access, rectification and deletion, as well as request that the processing of their personal data be restricted, oppose the processing, request the portability of such data (whenever technically possible) or withdraw the consent given, and where appropriate, when applicable, not to be subject to a decision based solely on automated processing, including profiling.

To do so, you may use the forms provided by the organisation, or write to the postal address or e-mail address indicated above. In any case, your request must be accompanied by a photocopy of your ID card or equivalent document, in order to prove your identity.

In the event that you feel that your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you may file a complaint with the competent Data Protection Supervisory Authority (Spanish Data Protection Agency), through its website: www.agpd.es.

In compliance with the provisions of Article 21 of Law 34/2002 of services of the information society and electronic commerce, if you do not wish to receive more information about our services, you can unsubscribe by sending an email to the address info@incye.com, with subject “UNSUBSCRIBE” or by clicking on the section of the mail *to unsubscribe*.

9. VERACITY OF THE DATA
The interested party guarantees that the data provided are true, accurate, complete and up to date; undertaking to inform of any change in the data provided, through the channels provided for this purpose and indicated in point one of this policy. The user will be responsible for any damage or harm, both direct and indirect, that may be caused as a result of non-compliance with this obligation.

In the event that the user provides data of third parties, he/she declares that he/she has the consent of the interested parties and undertakes to provide them with the information contained in this clause, exempting the organisation from any liability arising from failure to comply with this obligation.