Privacy Policy

This Privacy Policy (hereinafter, the “PRIVACY POLICY”) generally governs the collection and processing by ONCOMATRYX BIOPHARMA, S.A. (hereinafter, “ONCOMATRYX”) of (i) the personal data you provide to us as a user of the website accessible via the domain name www.oncomatryx.com (hereinafter, the “WEBSITE”), including the services available through the WEBSITE at any given time; and (ii) other data collected through other data collection systems duly identified below. All of the foregoing is without prejudice to the specific provisions set forth in certain sections, forms, or services available on the WEBSITE and/or through other channels for the purpose of providing you with relevant information and, where applicable, obtaining your consent.

ONCOMATRYX reserves the right to modify the PRIVACY POLICY to adapt it to new legislative, jurisprudential, and/or administrative developments, as well as to the practices it implements from time to time in the course of its business, always taking your rights and interests into account.

In any case, ONCOMATRYX will provide you with the appropriate technical resources so that you can access the PRIVACY POLICY in order to duly comply with the information obligations we are required to observe in accordance with applicable data protection regulations.

  1. Who is the Data Controller for your data?

The data controller is ONCOMATRYX BIOPHARMA, S.A. (hereinafter, “ONCOMATRYX”), a company with registered office in Derio (Vizcaya), Parque Tecnológico de Vizcaya, 801, B, 2nd floor, registered in the Vizcaya Commercial Registry, page BI-55345, IRUS 1000069087067, and with Tax ID No. A-95586780.

ONCOMATRYX has appointed a Data Protection Officer (DPO), responsible for managing and overseeing privacy matters , whom you may contact via email atdpo@oncomatryx.com .

  1. How did we obtain your data?

The data we process at ONCOMATRYX has been obtained directly from you through (i) the various forms you fill out while browsing the WEBSITE and/or through other channels (e.g., registering as a user of the WEBSITE—where possible—contact forms, forms related to job openings and/or recruitment processes, etc.); (ii) by sending an email inquiry; or (iii) through other duly identified data collection systems, such as the video surveillance system installed at our facilities.

Where indicated, the provision of the collected data is mandatory, and failure to provide it will make it impossible to process your request.

If the personal data provided belongs to a third party, you warrant that you have informed said third party of this PRIVACY POLICY and have obtained their authorization to provide their data to ONCOMATRYX for the purposes outlined below.

Additionally, we inform you of the possible processing of your social media data through the corporate profiles that ONCOMATRYX maintains on each social media platform where it is present, all in accordance with the terms and conditions established by each social media platform.

  1. What type of data do we process?

The data we process at ONCOMATRYX consists of the information you have provided to us through the appropriate forms we use to establish contact with you and/or via email, as well as any other data we may obtain through ONCOMATRYX’s corporate profiles on the social media platforms where we are present and/or other duly identified data collection channels.

Specifically, at ONCOMATRYX we process the following categories of data:

  • Identification and contact information (e.g., first name, last name, national ID number, mailing and email addresses, phone number, etc.).
  • Professional data (company where you work, job title and responsibilities, business mailing and email addresses, and business phone number) to the extent that (i) you provide them through the corresponding forms; and (ii) they are necessary for business contact purposes and/or for maintaining our business relationship with you or your organization.
  • Internet browsing data (e.g., IP address, website visits, Wi-Fi connections, etc.).
  • Data regarding personal characteristics, education, employment, etc. (in the case of job applications/offers and/or ONCOMATRYX recruitment processes in which you voluntarily participate).
  • Images captured by the video surveillance system installed at the entrances to our facilities.
  1. For what purpose do we process your data, and on what legal basis?

The processing of your personal data serves the following purposes:

  • To manage and process your registration as a user of the WEBSITE, when possible, based on your request for pre-contractual measures or the contractual relationship established with you in this regard.
  • To manage your access to and use of the content and services that ONCOMATRYX makes available to you through the WEBSITE, including blog services, social media, or any other features that may be accessible from the WEBSITE at any given time, all based on your request for pre-contractual measures or the contractual relationship established with you in this regard.
  • To process and manage any requests for information, suggestions, complaints, or claims you submit via the WEBSITE or email, all based on your consent.
  • To manage your job application or your registration for a job opening and your participation in the corresponding selection process, all based on your request for pre-contractual measures.
  • In cases where you have given your consent, to manage and publicize activities and events organized by ONCOMATRYX using your image and identifying information, all based on the consent you have provided.
  • To ensure the safety and security of people and property by capturing images through the video surveillance system installed at the entrances and inside our facilities, all based on the public interest (safety of people and property).

We remind you that, when consent is the legal basis for processing, you may revoke it at any time, freely and at no cost, under the terms set forth in Section 7 below.

  1. To Whom Do We Disclose Your Data?

We inform you that your personal data may be disclosed to the following third parties:

  • Public agencies and government authorities to which, where applicable, ONCOMATRYX has a legal obligation to disclose your data.
  • If you have given your consent, entities within the business group to which ONCOMATRYX belongs may use your data to respond to your requests and inquiries and/or to send you marketing communications regarding those entities and their respective activities or products.

We do not plan to transfer your data internationally.

  1. How long will we retain your data?

In general, personal data will be retained for as long as it remains necessary for the purpose for which it was collected and as long as you do not revoke your consent to its processing or request its deletion at an earlier time, as well as for the time necessary to comply with the legal obligations that ONCOMATRYX must observe.

In any case, we inform you that ONCOMATRYX has established internal data purging policies designed to control the retention periods for the personal data in its possession; therefore, such data may be deleted when it is no longer necessary and/or appropriate for the purpose for which it was collected.

In particular, the following is hereby stated:

  • With regard to the video surveillance system installed at our facilities, please note that the recorded images will be deleted within a maximum period of one month.
  • For the processing of job applications, your data will be retained for a maximum period of 5 years.
  1. What are your rights?

The applicable data protection regulations grant you a series of rights regarding your personal data, which you may exercise during the processing of such data. These rights are as follows:

  • Access to your data: You have the right to access your data to find out what personal data concerning you we are processing.
  • Requesting the correction or deletion of your data: Under certain circumstances, you have the right to correct any inaccurate personal data concerning you that we are processing, or even to request that we delete it when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
  • Requesting the restriction of the processing of your data: Under certain circumstances, you have the right to request that we restrict the processing of your data; in such cases, we inform you that we will retain it solely for the exercise or defense of legal claims, as provided for by applicable data protection regulations.
  • Data portability: Under certain circumstances, you have the right to receive the personal data concerning you—which you have provided to us—in a structured, commonly used, and machine- , and to transmit that data to another data controller.
  • Object to the processing of your data: Under certain circumstances and for reasons related to your particular situation, you have the right to object to the processing of your data; in such cases, we will cease processing it unless, for compelling legitimate reasons or for the exercise or defense of potential claims, it must be retained.

Furthermore, when the processing of your data is based on your consent, you have the right to withdraw it at any time, without this affecting the lawfulness of the processing based on the consent given prior to its withdrawal.

You may exercise these rights by submitting a written request to ONCOMATRYX atdpo@oncomatryx.com .

Finally, please note that you may file a complaint with the competent supervisory authority (the Spanish Data Protection Agency), particularly if you have not received a satisfactory response regarding the exercise of your rights. You may contact this authority through its website: www.aepd.es.

  1. Security Measures

ONCOMATRYX will treat your data at all times with the utmost confidentiality and will uphold the mandatory duty of confidentiality regarding such data, in accordance with the provisions of applicable data protection regulations, adopting for this purpose the necessary technical and organizational measures to ensure the security of your data and prevent its alteration, loss, unauthorized processing, or unauthorized access, taking into account the state of technology, the nature of the stored data, and the risks to which it is exposed.

  1. Cookie Policy

Our website may, on occasion, use a technology known as “cookies.” A cookie is a token that a server sends to your browser when you access a website. Cookies can store many types of data and help provide additional functionality to the site or analyze its usage more accurately. In all cases where cookies are used, we will not collect personal information unless you give us your explicit consent.
By using this website, you agree to the terms of this Privacy Statement as they appear at the time you use this site. If we modify or update this Privacy Statement in the future, the changes will be posted on this website so that you will always know what personal information we collect and how we use it. Any future access to this website following the publication of such changes will be deemed your acceptance of this Privacy Statement as amended. We reserve the right to modify this Privacy Statement at any time.
If you have any questions about this Privacy Statement, please contact dpo@oncomatryx.com