Privacy policy

Basic information relating to data processing

1. Identity and contact details of the data controller

In accordance with the applicable data protection regulations and, in particular, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights, the data controller is:

2. Compliance with applicable regulations

ICONIKA has adapted the Website to the GDPR and the LOPDGDD. To this end, it has implemented those policies, means and technical and organisational procedures required to guarantee and protect the confidentiality, integrity and availability of your personal data.

The transmission of data by the user of ICONIKA’s services (hereinafter, the “User”) through the Website is carried out voluntarily, with the user having been informed in advance of the processing, the use and the purposes thereof.

3. Principles we apply to your personal information

The data provided to ICONIKA by different means, online or offline contact forms or any other procedure used to collect your data will be processed in accordance with the data protection regulations in force and with the sole purpose of providing the service of which you have been informed.

In the processing of your personal data we apply the following principles, which comply with the requirements of the GDPR:

Principle of lawfulness, fairness and transparency: We will always have a legal basis for the processing of your personal data for one or more specific purposes of which we will inform you in advance with complete transparency. ICONIKA informs you that only the information necessary to achieve the purpose of the processing is collected, and only the data you have provided for the purpose(s) of which you were informed will be processed.

Principle of data minimisation: We will only request the data strictly necessary in relation to the purposes reported.

Principle of storage limitation: Personal data will be kept for the time strictly necessary until the purpose for which it was collected is fulfilled, and provided that the cause that legitimised the processing of this personal data remains. Once the cause that legitimised the processing has ended, the personal data will be kept duly blocked for the limitation period of any actions that may arise from the relationship maintained between the parties and/or the retention periods legally provided for.

Principle of integrity: Your data will be processed in a manner that ensures adequate security of the personal data and guarantees confidentiality. You should know that we take all necessary precautions to prevent unauthorised access to or misuse of the data by third parties.

Principle of confidentiality: ICONIKA, in its capacity as data controller, guarantees confidentiality in the processing of all of the User’s personal data to which it has access. The data controller, like any other person involved in any stage of the processing, is bound by the strictest professional secrecy, with a particular commitment to adopt the levels of protection and the measures necessary, both technical and organisational, to guarantee the security of the personal data and to prevent its alteration, misuse, loss, theft, unauthorised processing or access.

Principle of data accuracy: All information provided by the User to ICONIKA must be truthful, and the User shall be solely responsible for any false or inaccurate statements they make and for any harm they cause to ICONIKA or third parties.

ICONIKA reserves the right to exclude from its services any User who has provided false data, without prejudice to any other legal actions that may be appropriate.

4. Processing of personal data

4.1. Collection and processing of personal data: by providing us with your data through the Website or by any other means, the User guarantees that it is true, accurate, complete and up to date, being responsible for any direct or indirect damage or loss that may be caused as a result of the breach of this obligation. In the event that you provide ICONIKA with third-party data, the User must have the consent of those third parties and undertake to convey to them the information contained in this Policy, releasing ICONIKA from any liability in this regard. Notwithstanding the above, ICONIKA may carry out verifications to confirm this fact, adopting the appropriate due diligence measures in accordance with the data protection regulations.

4.2. Purposes of the processing: the purposes of the processing that ICONIKA carries out of the User’s personal data include, among others, those set out in the following table:

4.3. Category of data and data subjects: in accordance with the purposes mentioned, ICONIKA collects and processes identifying data (first name, surname, email address and telephone number). Additionally, through cookies we collect certain information linked to the User’s browsing, the processing and purposes of which are explained in our Cookies Policy at the foot of the Website. The personal data collected belongs to the category of data subjects: users.

4.4. Automated individual decisions, including profiling: no automated individual decisions, including profiling, are envisaged.

5. Processing of data by third parties and transfer

Depending on the purposes for which personal data is collected, your personal data may be processed by:

Authorised personnel of ICONIKA or its representatives acting on its behalf, subject to the applicable data protection regulations in force.

Public administrations, authorities and bodies, including courts and tribunals, where required by applicable regulations.

Third-party external service providers that ICONIKA contracts and that have the status of data processor. All of this only after implementing the necessary measures to ensure that we may share this information and having signed a data processing agreement with our data processors, in compliance with data protection regulations.

If there is a sale, merger, consolidation, change in corporate control, substantial transfer of assets, reorganisation or liquidation of ICONIKA, at our discretion, we may transfer, sell or assign the information collected on the Website to one or more relevant parties.

6. Security measures

ICONIKA adopts the security levels required by the GDPR appropriate to the nature of the data being processed at any given time in the course of its activity. In this regard, it uses encryption techniques that do not allow a third party to trace the identity of the User who interacts with our services. Likewise, it may also carry out secure techniques for anonymising the personal data it processes in order to develop its activity. Notwithstanding the above, technical security in a medium such as the internet is not impregnable and malicious actions by third parties may exist, although ICONIKA makes available to you the means to prevent such actions.

7. Rights of data subjects and the exercise thereof

In accordance with the GDPR and the LOPDGDD, Users may exercise the following rights:

Right of access: The User may ask ICONIKA whether it is processing their data and, if so, may access it.

Right to rectification: The User may request the rectification of the data if it is inaccurate or incomplete.

Right to request the erasure of their data, where possible. In any case, at the moment the User exercises this right, all personal data linked to their account, as well as the information and content integrated into their profile, will be deactivated and will remain blocked until the legal period provided for expires.

Right to request the restriction of its processing: In this case we will only keep it for the exercise or defence of claims.

Right to object to the processing: ICONIKA will stop processing the personal data, with the exception that it must continue to be processed for reasons of overriding legitimate interest or for the exercise or defence of possible claims.

Right to data portability: In the event that the User wishes their data to be processed by another data controller, ICONIKA will facilitate the transfer of their data to the new controller provided that both have the necessary technical means for this.

Right not to be subject to a decision based solely on the automated processing of their personal data.

Right to withdraw consent: If the User has given consent for a specific purpose, they may withdraw it whenever they wish, without this affecting the lawfulness of the processing based on the consent prior to its withdrawal.

Right to lodge a complaint with the Spanish Data Protection Agency: If you consider that an infringement of the data protection legislation has been committed with respect to the processing of your personal data (www.aepd.es).

To exercise your rights, you may use the templates and forms available on the official website of the Spanish Data Protection Agency (https://www.aepd.es/es/derechos-y-deberes/conoce-tus-derechos), and address a written request to ICONIKA’s registered office or to the email address dpd@xarxafarma.com, REF: “Protección de Datos”.

8. Consent of the User

The User states that they have read and expressly accepted this Privacy Policy, when the legal basis for the processing is their consent. You may withdraw consent at any time. The withdrawal of consent will not affect the lawfulness of the processing prior to its withdrawal.

The User undertakes to hold ICONIKA harmless against any possible claim, fine or penalty that it may be obliged to bear as a result of the User’s breach of the duty described in this paragraph.

9. Links to other websites

This Website contains links to other websites not managed by ICONIKA, so that ICONIKA exercises no control over them and is not responsible for the information to which they provide access. We ask that you visit these websites directly to obtain information about their privacy policy, which provides information on the protection of your data, security, data collection and the provisions relating to the transmission of the data.

If you follow us on our social networks, please review their privacy policies for information on how they process and share your personal data, given that ICONIKA exercises no control over them and bears no liability whatsoever for the information to which these websites have access.

10. Changes to the privacy policy

We will only use personal data in accordance with the Privacy Policy in force at the time this data is collected.

ICONIKA reserves the right to modify this Privacy Policy at any time, with effect from the date of publication of these modifications on the Website, which is why we recommend visiting it each time you access it. In any case, if at any time we decide to process personal data in a manner different from that declared at the time of its collection, the User will be informed of this, obtaining their consent where necessary.

In the event that any clause of this Privacy Policy is annulled or deemed void, the remaining conditions will not be affected, fully retaining their validity and effect, in accordance with the applicable regulations in force at any given time.

11. Applicable legislation

The privacy of all the information provided, both by the User through the various personal data request forms and that accessible through the Website, is governed by the data protection regulations in force, in particular by the GDPR and the LOPDGDD.

12. Cookies

Access to the Website may involve the use of cookies. Cookies are small amounts of information that are stored in the browser used by each user so that the server remembers certain information that it can subsequently use. This information allows you to be identified as a specific user and allows your personal preferences to be saved, as well as technical information about the use and operation of the Website.

For more information, you may consult our Cookies Policy at the foot of the Website.