
Privacy Policy
I. PRIVACY AND DATA PROTECTION POLICY
In compliance with current legislation, Lynx Pharmaceuticals (hereinafter also referred to as the Website) undertakes to adopt the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected.
Laws that incorporate this privacy policy
This privacy policy is adapted to current Spanish and European regulations regarding the protection of personal data on the internet. Specifically, it complies with the following regulations:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
- Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD-GDD).
- Royal Decree 1720/2007, of December 21, approving the Implementing Regulations of Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).
- Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).
Identity of the controller of personal data
The controller of the personal data collected by Lynx Pharmaceuticals is VIVAS PHARMA INVESTMENTS S.L., with Tax Identification Number (NIF/CIF): B-88103031 and registered in the Commercial Registry of Madrid with the following registration details: Volume 37740, folio 160, page M-672311. The representative is Jaime Martín Vivas (hereinafter, the Controller).
Contact details:
- Address: C/Cinco Quintas No. 4, 28224, Pozuelo de Alarcón, Madrid
- Telephone: 628104416
- Email: mvivasjaime@gmail.com
Personal Data Registry
In compliance with the GDPR and LOPD-GDD, personal data collected via Website forms will be incorporated and processed in our files to facilitate, expedite, and fulfill commitments between Lynx Pharmaceuticals and the User, maintain relationships established through forms, or respond to requests or queries.
Unless the exception in Article 30.5 of the GDPR applies, a record of processing activities is kept specifying, according to their purposes, the processing activities carried out and other GDPR-established circumstances.
Principles applicable to the processing of personal data
Processing of User personal data will comply with the following principles (GDPR Article 5; LOPD-GDD Articles 4+):
- Legality, loyalty, and transparency: Consent is required after transparent information about data collection purposes.
- Purpose limitation: Data collected for specific, explicit, and legitimate purposes.
- Data minimization: Only data strictly necessary for processing purposes will be collected.
- Accuracy: Data must be accurate and up-to-date.
- Retention limitation: Data retained only as long as necessary for processing purposes.
- Integrity and confidentiality: Data processed to guarantee security and confidentiality.
- Proactive accountability: The Controller ensures all principles are respected.
Categories of personal data
Only identifying data is processed. Special categories under GDPR Article 9 are not processed.
Legal basis for processing
Processing is based on the User’s consent, which can be withdrawn at any time without affecting Website use. Users providing data via forms for inquiries or requests will be informed if completion is mandatory.
Purposes of processing personal data
Data is collected and managed to facilitate, streamline, and fulfill commitments, maintain relationships, respond to requests, and for commercial purposes such as personalization, operational, statistical, marketing, and Website improvement. Users will be informed of specific purposes at the time of collection.
Personal data retention periods
Data is retained only for the minimum necessary period: 24 months, or until the User requests deletion.
Recipients of personal data
User data will not be shared with third parties. Users are informed of recipients or recipient categories at the time of collection.
Personal data of minors
Only those over 14 may lawfully consent. Under-14s require parental or guardian consent.
Confidentiality and security
Lynx Pharmaceuticals adopts technical and organizational measures to ensure data security and prevent unauthorized access, loss, destruction, or alteration. Users will be informed promptly of high-risk data breaches. Data is treated as confidential, and employees, partners, and any parties with access must respect this confidentiality.
Rights arising from the processing of personal data
Users may exercise the following rights against the Data Controller (GDPR & LOPD-GDD):
- Access: Confirm if data is processed and obtain related information.
- Rectification: Correct inaccurate or incomplete data.
- Erasure (“right to be forgotten”): Delete data under specific conditions.
- Restriction of processing: Limit data processing in certain cases.
- Data portability: Receive data in structured format and transmit to another controller.
- Objection: Prevent or stop data processing.
- Automated decisions/profiling: Object to decisions based solely on automated processing, unless legally allowed.
How to exercise rights: Written request to the Controller with reference "GDPR-www.lynxpharma.net"
, including:
- Name, surname, and ID copy (and representation documents if applicable)
- Reason for request
- Notification address
- Date and signature
- Supporting documents
Requests may be sent to:
- Postal address: C/Cinco Quintas No. 4, 28224, Pozuelo de Alarcón, Madrid
- Email: mvivasjaime@gmail.com
Links to third-party websites
The Website may include links to third-party sites, which are not operated by Lynx Pharmaceuticals. Third parties are responsible for their own data protection practices.
II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY
Users must read and agree to this Privacy Policy, accepting personal data processing as outlined. Use of the Website implies acceptance.
Lynx Pharmaceuticals reserves the right to modify this Privacy Policy at its discretion or due to legislative, jurisprudential, or doctrinal changes by the Spanish Data Protection Agency. Updates are not explicitly notified. Users should check this page periodically.
This Privacy Policy complies with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPD-GDD).