1. Who is the data controller?

The data controller is Probitas Fundación Privada, with address for contact purposes at Avenida de la Generalitat 152, Sant Cugat del Vallés, 08174, Barcelona (España) (the "Foundation").

2. Who is the data protection officer at the Foundation and how can I contact him/her?

The data protection officer acts as an interlocutor between the Foundation and you in order to ensure Foundation's compliance with the data protection legislation and guarantee your rights under such legislation. You can contact the data protection officer at the following e-mail address: dpo@grifols.com

3. How does the Foundation use your personal data?

The Foundation uses your personal data to: 
(a) send email with information about activities on social aid and on national and international health matters that Probitas organizes or otherwise controls;
(b) respond to your requests of information and/or suggestions.

4. Why does the Foundation use your personal data?

The legal basis that allows the Foundation to process your personal data is the consent you have given when completing and sending the forms found on the website.

5. How long does the Foundation store your personal data?

The Foundation will process your personal data until your request of information and/or suggestions have been answered and, should you are subscribed to the newsletter service, until you inform the Foundation that you do not wish to receive said newsletter.
Once we have responded to your request or you confirm you do not wish to receive any information, the Foundation will store your personal data, without processing it, until the end of the statutes of limitation of any liabilities arising from processing your data. The maximum period for storing your data is of five years.

6. With whom does the Foundation share your personal data?

Probitas will not share your personal data with any third party, unless necessary to comply with a legal order.

7. What are your rights when you provide the Foundation with your personal data?



Notification channel


You may access your personal data included in the Foundation files.



You may modify your personal data if it is inaccurate.


You may request that your personal data are deleted.


You may request that your personal data are not processed.


You may receive, in an electronic file, the personal data that you provided the Foundation, as well as send it to different entities.

Restriction of processing

You may request a restriction on how your data is processed when:


-     the accuracy of your personal data is being verified after you have contested its accuracy,


-     processing of your data is illegal and you oppose to the erasure of your data,


-     the Foundation does no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims,


-     you have objected to the processing for the performance of a task carried out in the public interest or necessary for the purposes of a legitimate interest, whilst it is being verified whether the legitimate grounds of the Foundation override yours.


You may withdraw your consent at any time, without this having any effect on the legitimacy of the processing of data previously carried out, by sending an email to privacy@grifols.com, with the subject line "Probitas – Data Protection". To exercise your rights you must also send a copy of your ID card or of any other document that confirms your identity.
In any event, you may lodge a complaint with the Spanish Data Protection Agency (www.agpd.es) or to any other competent data protection authority.
May 2018