1. Privacy Policy
The personal data that you provide us with by any of the means provided for this purpose will be processed in accordance with the following privacy policy.
In relation to the collection of data, we inform you that, in the event that it is not necessary to provide all the data requested, those fields that must be completed will be identified with an asterisk, the rest being completely voluntary.
1.1 Identity and the Contact Details of the Controller
Controller: COCOON BIOSCIENCE S.L.
Address: Parque Científico y Tecnológico de Bizkaia, Edificio 802 48160, Derio, Vizcaya
Tax Identification number: B10854867
Phone number: +34 946 620 681
E-mail: info@cocoonbio.com
1.2 Personal Data Processing.
Below, we inform you about the data processing included in this privacy policy, indicating both the legal basis of the General Data Protection Regulation (hereinafter, GDPR) and the specific retention period of the data, to which must be added the time necessary to comply with legal obligations and meet the possible liabilities that may arise for the Data Controller in relation to compliance with the purpose for which the data were collected:
| Concerning Our Relationship With You | ||
|---|---|---|
| Purposes of the processing | Legal basis (GDPR) | Retention period |
| Requests for product samples, information or inquiries: We will use your data to deal with requests for information, queries or complaints that you might send us, with the scope that they require. As well as for the drafting of proposals for services and/or collaboration. | 6.1.a) GDPR. The data subject has given consent to the processing 6.1.b) GDPR. Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract | For as long as it takes to deal with the request and/or complaint. |
| Service provision: We will use your data to manage and process orders for products or services you have contracted with us. | 6.1.b) GDPR. Processing is necessary for the performance of a contract to which the data subject is party. | As long as the contractual relationship remains in force and the Controller is entitled to the processing. |
| Commercial communications: when you request us or consent to receive our newsletter or commercial communications, we will use your data to send you those types of communications related to our products or services. | 6.1.a) GDPR. The data subject has given consent to the processing | As long as you do not object and the Controller is entitled to the data processing. |
| Individuals acting on behalf of legal entities: We will use your data to manage and attend to such representation situation. | Art. 6.1.f) GDPR. Processing is necessary for the purposes of the legitimate interests pursued by the Controller based on Article 19 of Organic Law 3/2018. | As long as the contractual relationship with the legal entity represented remains in force and the Controller is entitled to process the data. |
| Human resources: Job bank and selection processes We manage a job bank and, in this sense, when you send us your CV, the Controller will add your data to our job bank to cover possible vacancies, collaborations, internships or scholarships. When you apply for a specific application, your application will be analysed in relation to it and, where appropriate, if you fit the profile, we will contact you, if not, and only if you give us express consent we will add your personal data to our job bank. | 6.1.a) GDPR. The data subject has given consent to the processing 6.1.b) GDPR. Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract | Two Years |
| Regulatory Compliance-related | ||
| Purposes of the processing | Legal basis (GDPR) | Retention period |
| Processing of the exercise of the rights of the data subject: In the event that, as a data subject, you exercise any of your rights in relation to your personal data, we will use the information you provide to evaluate your request and respond to it. | Art. 6.1.c) GDPR. Processing is necessary for compliance with a legal obligation to which the controller is subject based on Articles 15 to 22 of the GDPR and 12 to 18 of Organic Law 3/2018. | As long as it is necessary to comply with the legal obligations to which the controller is subject. |
| Compliance with legal obligations related to the products and/or services offered to the data subjects. We will use your data to comply with the legal requirements applicable to the relationship that binds us to you. | Art. 6.1.c) Processing is necessary for compliance with a legal obligation to which the controller is subject. | As long as it is necessary to comply with the legal obligations to which the controller is subject. |
| Cookies | ||
| If you have agreed to receive cookies when you visit this website, the cookie policy of the website, accessible via the following link, will apply to you. | ||
In the event that you are requested at any time to consent the processing of your data for a purpose that requires your consent, your failure to grant your consent (or its subsequent withdrawal) will not have any consequences for you in any case. Nor will your opposition to the processing of your data for purposes based on legitimate interest have any kind of consequence.
1.3 Categories of Personal Data We May Collect About You.
Through the various means of contact (email, telephone…), enabled on our website, identification and contact data will be collected, such as name, surname, email address, telephone number, etc. In a specific form, you can send us additional information (e.g. cv…).
Finally, depending on your preferences with cookies, the configuration of your device when accessing the page or the communications that we send you, we may record your browsing on our website obtaining information about your behaviour.
1.4 Recipients. International Transfers.
In general, unless legally obliged to do so, your data will not be communicated or transferred to any third party without your prior express consent. In any case, some communications and/or transfers of data to third parties may be imposed by certain regulations or in order to comply with obligations to Public Administrations, the Public Prosecutor’s Office, Judges and Courts and State Security Forces and Corps.
Other communications and/or transfers will be a necessary consequence of the provision of the requested service, management of the event or as a result of your express consent to the communication. Below, we list those purposes for which it may be necessary to communicate your data to third parties:
- Hosting of the website. The data hosted on our website will be communicated to the company that provides us with the web hosting service.
Finally, we inform you that we use the following third party services involving international data transfers:
- Web analytics service called “Google Analytics” provided by Google (Google Ireland Limited) which according to the terms and conditions of the provider, involves international data transfers outside the EU economic area, and according to the provider’s statement, comply with the applicable legal framework through the Standard Contractual Clauses established by the European Commission.
- CRM service provided by HUB SPOT can be found in its terms and conditions the corresponding data processing agreement and the envisaged international data transfers which according to the provider comply with the applicable legal framework by means of the Standard Contractual Clauses established by the European Commission.
In any case, we would like to inform you that we make every effort to ensure that all our collaborators or suppliers who may have access to your data comply with the requirements established in the GDPR and offer adequate guarantees.
1.5 Data Subject Rights.
With respect to the personal data collected for processing, you have the possibility of exercising your rights of access, rectification, deletion and portability. Likewise, in certain circumstances, you will have the right to request the limitation of or opposition to the processing of your data, in which case the Data Controller will cease to process them and will only keep them in the event that there is a regulatory obligation to do so or until the prescription of any actions that may arise. For any queries or to exercise your rights, you can contact us by providing proof of your identity by emailing info@cocoonbio.com or by any of the contact methods indicated in the heading of this data protection policy.
Finally, you may also contact the supervisory authority when you consider it appropriate to lodge a complaint (for example, in the country where you have your habitual residence, your place of work or where you consider that the alleged infringement has taken place). For the appropriate purposes, we inform you that in Spain the Supervisory Authority is the Spanish Data Protection Agency, and you can exercise your rights through the forms that this entity has set up for this purpose and which are available at its electronic office.
If you would like more information on the aforementioned rights, we invite you to read on or visit the infographic prepared by the Spanish Data Protection Agency.
You may address your complaint or exercise your rights through any of the contact channels indicated in the “Identity and the contact details of the Controller” section of this policy.
2. Legal Notice
2.1 Identity of the Owner.
In accordance with the provisions of Article 10 of Law 34/2002, of 11 July, on Information society services and electronic commerce, we hereby inform you that the owner of this website is the company COCOON BIOSCIENCE S.L. , located at Parque Científico y Tecnológico de Bizkaia, Edificio #802 48160, Derio, Vizcaya, with tax identification number B10854867 and registered in protocol 1078, in volume 43883, sheet 31, page BI-80532.
2.2. Contact Details of the Owner.
If you have any questions, you can contact COCOON BIOSCIENCE S.L. by telephone +34 946 620 681 or by sending your request to the e-mail address info@cocoonbio.com.
Version 1.0_ – Updated May 2024