This Privacy Policy (hereinafter, the “Policy”) is binding on any person who uses and/or browses (hereinafter, the “User”) the website www.web.mfar.es (hereinafter, the “Website” or the “Web”). The mere use of the Website, which is absolutely voluntary, implies full acceptance of this Privacy Policy, so the User must read it carefully before carrying out any type of operation, viewing, use, etc. with this Website.
By using this Website and communicating electronically with MFAR (the “Provider” or “MFAR”), personal data of users may be collected and processed. MFAR recognizes the importance of the privacy of the information collected about users who visit our website, and that is why we are committed to respecting your privacy.
For all these reasons, MFAR wants to guarantee the User that we always use the information we receive in a manner that is compatible with the purposes for which it was provided, and through this Policy we try to provide the User with the necessary information so that they can understand how we process their information. This privacy policy complies with the General Data Protection Regulation and Law 34/2002, of July 11, on information society services and electronic commerce, as well as with the rest of the current Spanish regulations that apply to it.

Data controller:

The personal data that may be collected from the User will be obtained and processed by MFAR:

• Company name: Marketing Farmacéutico & Investigación Clínica, S.L.
• Tax ID number: B64093602
• Registered office: Balmes 243, Escalera A 5º1ª – 08006 Barcelona
• Email address: mfar@mfar.es
• Registration details: Mercantile Registry of Barcelona, ​​volume 38275, folio 146, page B 319967, entry 1

Personal data collected:

• Cookies: we use cookies, a technology that consists of storing and retrieving data on a User’s terminal equipment in order to store information and retrieve information already stored. You can obtain more information about this in our Cookies Policy.
• IP address: we collect the IP address of your device. This consists of a unique address that identifies a device on the Internet or a local network at a specific time.

Both are personal data collected automatically, but neither of these data allows the identity of the User to be found out automatically unless the User voluntarily provides it by other means. The collection of identifying data in our case always depends on its contribution by the User, in the following cases:

• Creation of member accounts: in cases where the User wishes to become a member and register on the website by creating their own account, they must provide certain personal identifying information as a necessary requirement, but only when the User voluntarily wants to create said account and therefore provides the data. These data will be exclusively necessary to identify the User in their new account that identifies them as a member.
• Communications: in the same way, those people who visit our website can, if they wish, contact us by going to the email address indicated above, and MFAR may use the contact information provided in these emails to respond to their requests.

In the event that the User provides data from third parties, he/she declares that he/she has the consent of the third parties or sufficient legitimacy and undertakes to transfer to the owner of said data the information contained in the Privacy Policy, exempting MFAR from any liability in this regard.

Purposes

The personal data collected from each User is processed for the purpose of ensuring the operation of the services provided by the website, the management of its use and the provision of improvements to its operation (through certain types of cookies and obtaining the IP Address), maintaining the relationship between MFAR and the User and providing services requested and consented to by the User, specifically the personal data provided by the User to register and log in as a user on the website (through the provision of personal data by the User).

Legal basis for processing

The legitimacy for data processing is based on the consent to obtain it granted by the User, derived from their voluntary contribution of the data and their willingness to log in or register as a user or recipient of communications, as well as their consent to the use of cookies. These data will be processed while the relationship remains in force and, where applicable, the User does not revoke the consent they have given to the processing of their data.

For its part, the use of technical cookies and the processing of the IP address bases its legitimacy on its necessary and legitimate nature. In the case of these cookies, it is based on their need to make the Website work, and in the case of the IP address, it is based on its need to allow the connection to the Website through the Internet, so the use of your data is necessary for the maintenance of the relationship between the person responsible for the Website and the User.

The communication of data does not imply any legal or contractual requirement, or a necessary requirement to sign a contract. Likewise, the interested party is not obliged to provide personal data. These are simply transferred by the User when expressly authorized in the cases mentioned above or by the legitimate and necessary processing that derives from the User’s navigation through the Website in cases where obtaining them is necessary and legitimate and does not require express consent or provision of data on the User’s part.

Recipients and transfer to third parties
In general, the recipient of the personal data will be MFAR, and it will only communicate said data to suppliers or organizations contracted to manage the Website or other service provisions, as well as when it is strictly necessary to manage and maintain the relationship with the User, when it must be communicated in a mandatory manner to the authorities or by legal imperative or prior authorization by the User.

Security measures
MFAR will treat the User’s data confidentially through private servers, in accordance with the provisions of the applicable regulations, adopting the necessary technological measures to guarantee the security of your data and avoid damage to the User.

Rights
Users have the right to exercise at any time, in accordance with the applicable regulations, their rights of access, rectification or deletion of data, request that the processing be limited, oppose it, request the portability of their data, and revoke consent, expressing such request to the email address cetlam@mfar.net. You may also file a claim with the Spanish Data Protection Agency (www.aepd.es).

To do so, you may access your personal information at any time to review, correct or delete it through the website.

The User, for his/her part, undertakes to ensure that he/she has understood the content of this Privacy Policy prior to the transfer of the data he/she provides, as well as to inform MFAR of any substantial change in his/her personal data that is relevant to the relationship between MFAR and the User. Likewise, any change to this Policy will be immediately published on this page, and the renewal of the User’s consent will be necessary when necessary.

Term
Personal data will be kept as long as the relationship between MFAR and the User remains in force and for the time necessary to fulfill the purpose for which it is collected, as well as to determine the possible responsibilities that may arise from said purpose and the processing thereof.

Contact
The Controller of the personal data provided by the User is MFAR. You can contact MFAR directly through the following email address: cetlam@mfar.net. If you have any questions about our Privacy Policy or the operation of the website, you can contact us through the communication methods stated in the section “Data Controller”.