Geistek Pharma S.L. informs users of the website about its policy regarding the processing and protection of personal data of users and customers that may be collected through browsing or contracting services through its website or via email. In this regard, Geistek Pharma S.L. ensures compliance with current regulations on the protection of personal data, as reflected in REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

1. Data Management Controllers

Geistek Pharma S.L. has the duty to inform users of its website about the collection of personal data that may be carried out, either by sending emails or by filling out forms included on the website. In this sense, Geistek Pharma S.L., located at Av. de Brasil, 29. Madrid 28020, will be considered responsible for the data collected through the aforementioned means and their processing. Users can contact for anything related to the processing of their personal data.

The operations, management, and technical procedures that are carried out, whether automated or not, and that enable the collection, storage, modification, transfer, and other actions regarding personal data, are considered as the processing of personal data and will be treated as such by Geistek Pharma S.L..

2. Data Collected on the Website

The data collected through the website’s form includes: Name, Surname, Company, and email address, as well as any additional information that individuals wish to include in their curriculum vitae, if they choose to send it.

3. Data Transfer to Third Parties

Geistek Pharma S.L. informs users that their personal data will not be transferred to third parties, except when such transfer of data is required by law or when the provision of a service involves the need for a contractual relationship with a data processor. In the latter case, data will only be transferred to the third party when Geistek Pharma S.L. has the express consent of the user. However, technically, this data is initially processed by the hosting service provider (IONOS), which provides sufficient evidence of compliance with current legality and data security.

If the user is a candidate applying for any of our job offers, by accepting the privacy policy, the candidate gives express consent for this purpose, authorizing us to store, manage, and present their curriculum vitae to the various projects we carry out with our clients. The data is part of the information contained in a file owned by Geistek Pharma S.L.. The purpose of collecting and processing your personal data and curriculum vitae is for potential job applications. The legitimization is carried out through the consent of the interested party. The data will be kept for as long as there are projects to which your application may be suitable or until you exercise your right to delete them.

4. Storage Period

Geistek Pharma S.L. informs users that the storage period of the data received through the website will be determined by the validity or otherwise of the possible projects to which the received curricula may apply. (Art. 13-2-a of the GDPR)

5. Purpose of Data Processing

The purpose of processing the collected data includes: Inclusion in a contact list and management of the curriculum for job offers associated with projects of Geistek Pharma S.L..

6. User Rights

As long as the user’s data is processed by Geistek Pharma S.L., users may exercise their rights of access, rectification, cancellation, limitation, and opposition in accordance with the provisions of current legal regulations on the protection of personal data. To exercise these rights, the user must send a written communication, providing documentation to prove their identity (ID card or passport), to the following address: Geistek Pharma S.L., Av. de Brasil, 29. Madrid 28020, or to the email address

This communication must include the following information: Name and surname of the user, the request for the application, the address, and accrediting data.

The exercise of rights must be carried out by the user themselves. However, they may be carried out by an authorized person as the legal representative of the authorized person. In such a case, documentation accrediting this representation of the interested party must be provided. You also have the right to file a complaint with the data protection authority. You can contact for any other inquiries related to your data.

7. Definitions

In this policy, the following terms have the following meanings:

(a) Data Management Controller means the organization that determines the purposes and means for which personal data is processed.

(b) Data Processor means the person and/or organization that processes personal data on behalf of the Data Controller.

(c) Personal Data means data related to you directly or that allows your identification, such as your name, phone number, email address, etc.

(d) Processing means the collection, access, and all forms of use of your personal data.