Commitment to the Protection of Personal Data
“Informed People and Protected Data”
The management of GENERAL PROJECT SOLUTIONS PHARMACEUTICALS, S.L. (hereinafter, the data controller) is fully committed to protecting personal data and complying with current privacy and data protection regulations.
Our goal is to ensure the security, confidentiality, and integrity of the personal information processed by the organization at all times, while fostering a culture based on transparency, accountability, and continuous improvement.
This Data Protection Policy is based on compliance with:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR).
- Current Spanish regulations regarding the protection of personal data.
- Applicable sector-specific legislation and corresponding implementing regulations.
Principle of Proactive Responsibility
GENERAL PROJECT SOLUTIONS PHARMACEUTICALS, S.L. adheres to the principle of proactive accountability, which means that the company not only complies with data protection regulations but can also demonstrate such compliance to the relevant authorities.
To this end, the organization maintains procedures, controls, and technical and organizational measures designed to ensure the proper and secure management of personal data.
Principles Applied in the Processing of Personal Data
All activities related to the processing of personal data within the organization are governed by the following fundamental principles:
Data Protection by Design
The organization will implement appropriate technical and organizational measures from the initial phase of any process, service, or system that involves the processing of personal data.
These measures are designed to ensure the effective application of data protection principles and the incorporation of appropriate safeguards at all times.
Data Protection by Default
By default, only the personal data strictly necessary for each specific purpose of the processing will be processed.
The organization will limit access to, processing of, and retention of information to the minimum necessary.
Data Protection Throughout the Information Lifecycle
Security and protection measures will be applied throughout the entire lifecycle of personal data, from its collection to its permanent deletion.
Legality, Integrity, and Transparency
Personal data will be processed in a lawful, fair, and transparent manner with respect to the data subjects.
Users will be clearly informed about how their data is processed and about their rights.
Purpose Limitation
Personal data will be collected solely for specific, explicit, and legitimate purposes, and will not be used for purposes incompatible with those for which it was collected.
Data Minimization
The organization will only collect and process data that is appropriate, relevant, and strictly necessary for each specific purpose.
Data Accuracy
Personal information must be accurate and kept up to date.
The necessary measures will be taken to correct or delete, without delay, any data that is inaccurate or incomplete.
Limitation on the Retention Period
Personal data will be retained only for as long as necessary to fulfill the purposes of the processing and the corresponding legal obligations.
Once these time periods have expired, they will be securely deleted.
Integrity and Confidentiality
The organization will implement appropriate technical and organizational measures to ensure the security of personal data and prevent:
- Unauthorized Access
- Illegal Treatments
- Data Loss
- Accidental damage or destruction
Staff Training and Information
Staff training and awareness are essential to ensuring the protection of personal data.
All staff members with access to personal information will receive the necessary training and information regarding their obligations regarding data protection and information security.
Commitment from the Entire Organization
This Data Protection Policy is communicated to all employees of GENERAL PROJECT SOLUTIONS PHARMACEUTICALS, S.L. and is available to all interested parties.
Every member of the organization is responsible for understanding, implementing, and adhering to this policy within the scope of their duties, as well as for actively contributing to the continuous improvement of processes related to data protection.
Policy Review and Update
The management of GENERAL PROJECT SOLUTIONS PHARMACEUTICALS, S.L. will periodically review this Data Protection Policy to ensure that it remains in compliance with current regulations and best practices regarding privacy and information security.