Careers Privacy Notice

基立福是一个全球性的医疗保健集团，于1909年在巴塞罗那成立，致力于改善全世界人民的健康和福祉。它的三个主要业务部门——生物制药、诊断和生物用品——开发、生产和销售的创新解决方案和服务在100多个国家销售。

基立福尊重将个人数据委托给基立福的所有数据主体的隐私权，并承诺遵守各国家/地区适用的数据保护法规。

This privacy notice has been prepared in accordance with the European Union General Data Protection Regulation (the "GDPR") and applicable privacy and data protection laws; see Section 7 for specific provisions. It outlines Grifols' data collection practices and data subjects’ rights in the context of Grifols' collection, use and sharing of their personal data.

This privacy notice applies to the processing of personal data of candidates or potential candidates that apply for and/or are offered a job position within a Grifols' group company.

1，个人数据控制方/所有方的身份识别

数据控制方/所有方是：

(a) Grifols, S.A.,

(b) The Grifols' group company or foundation with an open job position to which you have applied for or which has been offered to you (the "Employer"), or

Grifols, S.A. and the Employer will jointly be the data controllers/owners of the personal data. Grifols Viajes, S.A., if applicable, will act as independent data controller/owner of the personal data.

The identity and contact details of Grifols, S.A. and of the applicable Employer are available here. The Grifols' group company/ies or foundations acting as controller/s or joint controller/s will be referred to as "Grifols".

2，明确数据保护专员

The data protection officer acts as an interlocutor between Grifols and you in order to ensure Grifols' compliance with the data protection legislation and best protect your rights under such legislation. 您可以通过dpo@grifols.com联络数据保护专员，除非数据控制者为Grifols Deutschland GmbH或Haema AG，对于这两家公司，您可以分别通过dsb@grifols.com 和dsb@haema.de联系其数据保护专员。

The data subjects may ask, if they wish so, the data protection officer for more information on the essential aspects of the joint controllership agreement resulting from what is set out in Section 1.

3，目的、处理的合法依据、个人数据的类别和接收方

目的

To manage and assess your application or interest in a job position and, if applicable, the recruiting process. This processing includes without limitation:
- Manage your access and use of the recruitment platform
- Creation and edition of your profile, employment alerts and searches
- Application to job offers through the recruitment platform, social network functionalities or any other third-party feature embedded in the platform
- Communication with you in respect of the recruitment process
- Performance of questionnaires, interviews, language, personality and other tests as needed

个人数据的类别和接收方

To manage and assess your application or interest in a job position and, if applicable, the recruiting process. This processing includes without limitation:
- Manage your access and use of the recruitment platform
- Creation and edition of your profile, employment alerts and searches
- Application to job offers through the recruitment platform, social network functionalities or any other third-party feature embedded in the platform
- Communication with you in respect of the recruitment process

Performance of questionnaires, interviews, language, personality and other tests as needed

合法依据

Pre-contractual measures: when the processing is carried out by the Employer.

合法权益： when the processing is carried out by Grifols, S.A.

To perform background screening and reference checks to assess your suitability for a specific job position. This screening may be legally mandatory for certain job positions and may include but is not limited to:
- Identity and academic verification
- Employment verification with current and past employers
- Media searches including social networks
- Criminal background checks

个人数据的类别和接收方

个人数据类别：

身份识别信息和个人特征¹。
Contact details².
职业数据³。
受教育信息⁶。
Convictions and criminal offences data.

接收者：

基立福集团公司。
产品和服务供应商。
Workers' legal representation.

合法依据

合法利益

法律义务

To offer you a job position if you have been selected by sending you the job offer letter and other relevant documentation.

个人数据的类别和接收方

个人数据类别：

身份识别信息和个人特征¹。
Contact details².
职业数据³。
财务数据⁴。
受教育信息⁶。

接收者：

基立福集团公司。
产品和服务供应商。
Workers' legal representation.

合法依据: Pre-contractual measures

To send surveys or similar

个人数据的类别和接收方

个人数据类别：

身份识别信息和个人特征¹。
Contact details².
职业数据³。
受教育信息⁶。
兴趣和偏好。

接收者：

基立福集团公司。
产品和服务供应商。

合法依据: 合法利益

To contact you for future job positions of the Employer and/or of other Grifols' group companies based on your preferred selection and send you general company and job-related information by any means, including electronic ones. As set out in Section 6 you can withdraw your consent to have your data processed for this purpose.

个人数据的类别和接收方

个人数据类别：

身份识别信息和个人特征¹。
Contact details².
职业数据³。
浏览历史数据⁵。

接收者：

基立福集团公司。
产品和服务供应商。

合法依据: 同意

To manage and control your registration, participation and attendance to recruitment fairs, conferences, webinars, or similar events, in person or online, organized by Grifols or third parties.

个人数据的类别和接收方

个人数据类别：

身份识别信息和个人特征¹。
Contact details².
职业数据³。
受教育信息⁶。

接收者：

基立福集团公司
产品和服务供应商。

合法依据: 同意

To analyse and, where appropriate, respond to any requests for information, suggestions and/or queries made through the means provided for this purpose.

个人数据的类别和接收方

个人数据类别：

身份识别信息和个人特征¹。
Contact details².
职业数据³。

接收者：

基立福集团公司
产品和服务供应商。

合法依据: 合法利益

To interact (i.e., respond to messages or comments related to recruitment processes, generate reactions, share content, etc.) with users of Grifols' profiles on social networks, which would involve the communication of certain data (i.e., IP address and browsing history data) to the providers of these social networks.

个人数据的类别和接收方

个人数据类别：

身份识别信息和个人特征¹。
Contact details².
浏览历史数据⁵。

接收者：

基立福集团公司。
产品和服务供应商。

合法依据: 合法利益

To carry out maintenance tasks in the recruiting platform, websites, landing pages and apps to offer a secure environment to its users.

个人数据的类别和接收方

个人数据类别：

浏览历史数据⁵。

接收者：

基立福集团公司。
产品和服务供应商。

合法依据: 合法利益

To customize certain features of the recruiting platform, websites, landing pages, and apps based on your browsing preferences and analyse your browsing behaviour with the aim of improving the services offered through these platforms. If applicable, the information about behavioural analysis is available in the Cookies Policy of the relevant website, landing page, or app.

个人数据的类别和接收方

个人数据类别：

浏览历史数据⁵。
兴趣和偏好。

接收者：

基立福集团公司
产品和服务供应商。

合法依据: 同意

To create profiles based on your attributes and characteristics identified through personality tests and on the information provided by you and other third-party sources. Grifols will use these profiles to assess your competencies and qualifications as a potential employee and evaluate whether your profile matches the specific position within the company. 但将不会根据个人资料自动做出决策。

个人数据的类别和接收方

个人数据类别：

身份识别信息和个人特征¹。
Contact details².
职业数据³。
受教育信息⁶。
兴趣和偏好。

接收者：

基立福集团公司。
产品和服务供应商。

合法依据: 合法利益

管理公司重组活动。

个人数据的类别和接收方

个人数据类别：

身份识别信息和个人特征¹。
Contact details².
职业数据³。
浏览历史数据⁵。
受教育信息⁶。
兴趣和偏好。
Special categories of data⁷.

接收者：

基立福集团公司。
产品和服务供应商。
潜在投资者或购买者。

合法依据: 合法利益

To manage travel arrangements in relation to the assessment of a candidacy.

个人数据的类别和接收方

个人数据类别：

身份识别信息和个人特征¹。
Contact details².
健康数据。

接收者：

基立福集团公司。
产品和服务供应商。
Public bodies.

合法依据

Pre-contractual measures: when the processing is carried out by the Employer.

合法权益： when the processing is carried out by Grifols Viajes, S.A.

Consent: for the processing of health data.

For example, name, last name, username.
For example, home address, personal e-mail address and telephone number.
例如，专业联系方式、工作职位、工作地点、专业协会成员。
For example, bank details.,
For example, IP address, device or user ID, browser type and version, visited sections, country from which the connection is made.
For example, training, degree, curriculum vitae.
For example, health data, racial or ethnic origin, trade union membership and religious or philosophical beliefs, as permitted by applicable laws.

For example, name, last name, username.

For example, home address, personal e-mail address and telephone number.

例如，专业联系方式、工作职位、工作地点、专业协会成员。

For example, bank details.,

For example, IP address, device or user ID, browser type and version, visited sections, country from which the connection is made.

For example, training, degree, curriculum vitae.

For example, health data, racial or ethnic origin, trade union membership and religious or philosophical beliefs, as permitted by applicable laws.
目的	个人数据的类别和接收方	合法依据
To manage and assess your application or interest in a job position and, if applicable, the recruiting process. This processing includes without limitation: Manage your access and use of the recruitment platform Creation and edition of your profile, employment alerts and searches Application to job offers through the recruitment platform, social network functionalities or any other third-party feature embedded in the platform Communication with you in respect of the recruitment process Performance of questionnaires, interviews, language, personality and other tests as needed	To manage and assess your application or interest in a job position and, if applicable, the recruiting process. This processing includes without limitation: Manage your access and use of the recruitment platform Creation and edition of your profile, employment alerts and searches Application to job offers through the recruitment platform, social network functionalities or any other third-party feature embedded in the platform Communication with you in respect of the recruitment process Performance of questionnaires, interviews, language, personality and other tests as needed	Pre-contractual measures: when the processing is carried out by the Employer. 合法权益： when the processing is carried out by Grifols, S.A.
To perform background screening and reference checks to assess your suitability for a specific job position. This screening may be legally mandatory for certain job positions and may include but is not limited to: Identity and academic verification Employment verification with current and past employers Media searches including social networks Criminal background checks	个人数据类别：身份识别信息和个人特征¹。 Contact details². 职业数据³。受教育信息⁶。 Convictions and criminal offences data. 接收者：基立福集团公司。产品和服务供应商。 Workers' legal representation.	合法利益法律义务
To offer you a job position if you have been selected by sending you the job offer letter and other relevant documentation.	个人数据类别：身份识别信息和个人特征¹。 Contact details². 职业数据³。财务数据⁴。受教育信息⁶。接收者：基立福集团公司。产品和服务供应商。 Workers' legal representation.	Pre-contractual measures
To send surveys or similar	个人数据类别：身份识别信息和个人特征¹。 Contact details². 职业数据³。受教育信息⁶。兴趣和偏好。接收者：基立福集团公司。产品和服务供应商。	合法利益
To contact you for future job positions of the Employer and/or of other Grifols' group companies based on your preferred selection and send you general company and job-related information by any means, including electronic ones. As set out in Section 6 you can withdraw your consent to have your data processed for this purpose.	个人数据类别：身份识别信息和个人特征¹。 Contact details². 职业数据³。浏览历史数据⁵。接收者：基立福集团公司。产品和服务供应商。	同意
To manage and control your registration, participation and attendance to recruitment fairs, conferences, webinars, or similar events, in person or online, organized by Grifols or third parties.	个人数据类别：身份识别信息和个人特征¹。 Contact details². 职业数据³。受教育信息⁶。接收者：基立福集团公司产品和服务供应商。	同意
To analyse and, where appropriate, respond to any requests for information, suggestions and/or queries made through the means provided for this purpose.	个人数据类别：身份识别信息和个人特征¹。 Contact details². 职业数据³。接收者：基立福集团公司产品和服务供应商。	合法利益
To interact (i.e., respond to messages or comments related to recruitment processes, generate reactions, share content, etc.) with users of Grifols' profiles on social networks, which would involve the communication of certain data (i.e., IP address and browsing history data) to the providers of these social networks.	个人数据类别：身份识别信息和个人特征¹。 Contact details². 浏览历史数据⁵。接收者：基立福集团公司。产品和服务供应商。	合法利益
To carry out maintenance tasks in the recruiting platform, websites, landing pages and apps to offer a secure environment to its users.	个人数据类别：浏览历史数据⁵。接收者：基立福集团公司。产品和服务供应商。	合法利益
To customize certain features of the recruiting platform, websites, landing pages, and apps based on your browsing preferences and analyse your browsing behaviour with the aim of improving the services offered through these platforms. If applicable, the information about behavioural analysis is available in the Cookies Policy of the relevant website, landing page, or app.	个人数据类别：浏览历史数据⁵。兴趣和偏好。接收者：基立福集团公司产品和服务供应商。	同意
To create profiles based on your attributes and characteristics identified through personality tests and on the information provided by you and other third-party sources. Grifols will use these profiles to assess your competencies and qualifications as a potential employee and evaluate whether your profile matches the specific position within the company. 但将不会根据个人资料自动做出决策。	个人数据类别：身份识别信息和个人特征¹。 Contact details². 职业数据³。受教育信息⁶。兴趣和偏好。接收者：基立福集团公司。产品和服务供应商。	合法利益
管理公司重组活动。	个人数据类别：身份识别信息和个人特征¹。 Contact details². 职业数据³。浏览历史数据⁵。受教育信息⁶。兴趣和偏好。 Special categories of data⁷. 接收者：基立福集团公司。产品和服务供应商。潜在投资者或购买者。	合法利益
To manage travel arrangements in relation to the assessment of a candidacy.	个人数据类别：身份识别信息和个人特征¹。 Contact details². 健康数据。接收者：基立福集团公司。产品和服务供应商。 Public bodies.	Pre-contractual measures: when the processing is carried out by the Employer. 合法权益： when the processing is carried out by Grifols Viajes, S.A. Consent: for the processing of health data.

Without prejudice of the categories of personal data shown in the table above, please be informed that the categories of personal data that are processed for compliance with legal obligations may differ depending on the jurisdiction of the potential Employer.

3.1，Additional information about the lawful basis to process personal data

上表按用途显示了处理个人数据的适用法律依据。在本节中，您可以找到有关处理合法性的其他详细信息：

Application of pre-contractual measures at data subjects' request: applies when the processing of your personal data is necessary for managing your job application with the intention of offering you an employment agreement at Grifols. If you refuse to provide the personal data requested by the Employer, from time to time, the Employer may find it impossible to initiate the employment relationship with you.
法律义务: applies when processing your personal data is necessary to comply with the legal obligations that apply to Grifols. Section 7 includes details of the specific regulations applicable to Grifols that require the processing of your personal data. Failure to provide the personal data requested could result in Grifols being unable to comply with such legal obligations.
同意: applies when you decide to give your consent –it must be obtained through a clear affirmative action, for example, by clicking acceptance buttons or similar and for a particular purpose. You may withdraw your consent at any time, as detailed in Section 6. Your refusal to grant the consent requested will not negatively affect the recruiting process.
Legitimate interest (of Grifols and/or any third party): Grifols seeks to ensure the robust and effective selection of qualified personnel to enhance the expansion of its business operations in line with its corporate values. Therefore, Grifols pursues the following legitimate interests which override the fundamental rights and freedoms of candidates, given that the processing is within the individual reasonable expectations:
- Prevention of fraud;
- Daily management of a multinational group of companies and internal administration, which means sharing information with the companies of the Grifols group;
- Creation of a secure information system infrastructure for preventing unlawful or malicious activities that may compromise the personal data stored in the information systems.

In any event, you may request further information on the legitimate interest or exercise your right to object to the processing of your personal data based on legitimate interest by addressing your request to privacy@grifols.com.

The processing of special categories of personal data and data related to criminal convictions and offences is permitted only according to the regulations in each country. See Section 7 for details.

3.2，个人数据接收方

The table above shows categories of recipients with whom Grifols may share your personal data by purpose. 本节包括有关这些接收者的其他信息（如适用）：

基立福集团公司：点击此处可查看公司列表。
产品和服务的提供者：for example, information technology providers, event organizers, human resources service providers, lawyers, auditors.

Grifols' website may include social network plugins, which can be recognised by the social network's logo or name, so that you can access Grifols' profile on these platforms. By clicking these buttons, your personal data (including, IP address and browsing data) will be transferred to the providers of said social networks. Grifols will not be liable for any further processing that the providers of the social networks may carry out with your personal data. 有关这些社交网络提供商收集数据与后续处理和使用的目的和范围，以及相关权利和配置隐私设置的可能性，可在这些公司的数据保护信息中进行查阅。

Legal representation of workers: work councils, staff representatives, trade union sections and representatives.
Public bodies: such as health, labour, social, tax or judicial authorities, among others.
Financial entities for the reimbursement of travel expenses when applicable.

Grifols will endeavour that your personal data is only transferred to countries that offer an adequate level of data protection. If your personal data is processed in countries that do not offer said level of protection, Grifols and/or the providers (as the case may be) will adopt, if necessary, the appropriate safeguards (e.g. the standard contractual clauses included in the Commission Implementing Decision (EU) 2021/914 of 4 June 2021, if GDPR is applicable) to carry out such international data transfers in accordance with the applicable data protection legislation. 有关适用于各项国际数据传输的适当保障措施的具体信息，可通过基立福网站 privacy@grifols.com获取。

Grifols does not share your personal data with any other third party unless it is authorized by you or required by the applicable law.

4，保留期限

Grifols will retain your personal data for the time strictly necessary for the fulfilment of the purposes for which it has been collected or, if applicable, until the end of the statutes of limitation of any liabilities that may arise, and during the term required to comply with any applicable legal obligation.

Data stored in the recruitment platform will be retained for 3 years since your last access to the platform or the end of the recruitment process where you participate.

5，个人数据来源

If you do not directly provide Grifols with your personal data, Grifols may obtain your personal data from recruitment agencies, present or former employers, other Grifols' employees, event organizers, databases and public sources, such as websites, social networks and publications, among others.

6，数据保护权利

以下数据保护权利在GDPR规定下适用。基立福承诺尊重依照各国家/地区适用的数据保护法规可能适用的其他数据保护权利。

权利

访问

内容: 您可以要求确认是否正在处理您的个人数据，如果确实如此，您可以获取访问基立福文件中包含的个人数据的权限。

纠正

内容: 如果您的个人数据不准确，您可以要求纠正。

删除

内容: 您可以要求删除个人数据。

反对

内容: 您可以要求在特定情况下不处理您的个人数据。

可移植性

内容: 您可以要求以电子文件的形式接收您向基立福提供的个人数据，并有权将这些数据传输给其他当事方。

限制处理

内容

在以下情况下，您可以要求对如何处理您的个人数据进行限制：

在您对个人数据的准确性提出异议后，核实这些数据的准确性。
您的个人数据受到非法处理，并且您反对删除这些数据。
Grifols no longer needs the personal data for the purposes of processing it, but you need it in order to prepare, exercise or defend a legal claim.
您已反对为执行出于公共利益或合法权益目的所必需的任务而处理个人数据，同时正在核实基立福的合法理由是否高于您的理由。

撤回同意

内容: 您可以撤回同意，而不影响在撤回之前基于同意的合法处理。

权利	内容
访问	您可以要求确认是否正在处理您的个人数据，如果确实如此，您可以获取访问基立福文件中包含的个人数据的权限。
纠正	如果您的个人数据不准确，您可以要求纠正。
删除	您可以要求删除个人数据。
反对	您可以要求在特定情况下不处理您的个人数据。
可移植性	您可以要求以电子文件的形式接收您向基立福提供的个人数据，并有权将这些数据传输给其他当事方。
限制处理	在以下情况下，您可以要求对如何处理您的个人数据进行限制：在您对个人数据的准确性提出异议后，核实这些数据的准确性。您的个人数据受到非法处理，并且您反对删除这些数据。 Grifols no longer needs the personal data for the purposes of processing it, but you need it in order to prepare, exercise or defend a legal claim. 您已反对为执行出于公共利益或合法权益目的所必需的任务而处理个人数据，同时正在核实基立福的合法理由是否高于您的理由。
撤回同意	您可以撤回同意，而不影响在撤回之前基于同意的合法处理。

You may exercise, when appropriate, your data protection rights by, for example, sending a written communication to Grifols at privacy@grifols.com with the subject line "Recruiting". To that end, Grifols may request further information or documents if necessary and appropriate to identify you.

对于美国居民，请联系隐私办公室：US-PrivacyRights@Grifols.com。

此外，您可以向数据保护机构提出投诉，包括您的住所、工作地点或涉嫌侵权行为发生地的数据保护机构。

7，具体规定

欧盟

The lawful basis to process personal data identified in Section 3 are regulated in the following provisions of the GDPR:

Application of pre-contractual measures at data subjects' request: article 6.1(b) of GDPR
Legal obligation: article 6.1(c) of GDPR
Consent: article 6.1(a) of GDPR
Legitimate interest (of Grifols and/or any third party): article 6.1(f) of GDPR

The processing of special categories of personal data is covered by your explicit consent (article 9.2(a) of the GDPR), the fulfilment of obligations and the exercise of specific rights in the field of employment, social security and social protection law (article 9.2(b) of the GDPR) or the processing is necessary for the assessment of the working capacity of the employee (article 9.2 (h) of the GDPR).

The processing of personal data related to criminal convictions and offences is permitted only under the control of official authority or covered by the fulfilment of legal obligations (article 10 of the GDPR).

The legal obligation referred to in Section 3 with respect to the performance of criminal background checks by Grifols is regulated in the following laws and in any other laws that develop, complement and/or replace them:

Regulation (EC) No 300/2008 of the European Parliament and of the Council of 11 March 2008 on common rules in the field of civil aviation security and repealing Regulation (EC) No 2320/2002.
Regulation (EU) 2015/1998 of 5 November 2015 laying down detailed measures for the implementation of the common basic standards on aviation security.

法国

如果 Grifols FranceS.A.R.L. 为数据控制者，数据主体有权就其身故后的数据管理提供指导。

德国

In Germany, any processing of a candidate’s personal data necessary for the decision about establishing an employment relationship with that respective candidate may be based on Sec. 26 Par. 1 S. 1 of the Federal Data Protection Act in addition to Art. 6.1(b) of the GDPR.

According to Sec. 26 Par. 3 S. 1 of the Federal Data Protection Act, this legal basis also covers the processing of sensitive data normally prohibited under Art. 9.1 GDPR.

Furthermore, there are additional German provisions on data subject rights (cf. Secs. 32 to 37 of the Federal Data Protection Act).

葡萄牙

如果 Grifols Portugal – Produtos Farmacêuticos e Hospitalares,Lda. 为数据控制者，数据主体有权就其身故后的数据管理提供指导。如果已故数据主体生前未就其数据管理提供指导，则可由其继承人行使第 6 节所界定的数据保护权利。数据主体还可决定在其身故后不能行使这些权利。

如果存在保密的法律义务，将不能行使数据主体的权利。

西班牙

The legal obligation referred to in Section 3 with respect to the performance of criminal background checks by Grifols is regulated in Law 21/2003 of 7 July 2003 on Aviation Safety and in any other laws that develop, complement and/or replace it.

泰国

如果 Grifols (Thailand) Ltd. 为数据控制者，请参阅此处的完整隐私声明。

英国

本文件中所有的GDPR引用在适用时也指GDPR，因为它是英格兰和威尔士、苏格兰和北爱尔兰法律的一部分。

Grifols UK Ltd. will usually undertake DBS checks on personnel involved in the supply of services to UK hospitals in order to meet its contractual obligations to hospitals in the UK to comply with NHS and regulatory requirements in relation to background checks on staff. Where we undertake DBS checks: (a) we consider that we have a legitimate interest in doing so in accordance with Article 6.1(f) of the UK GDPR, and (b) we may share the results of the DBS check with the UK hospitals to which our services are being provided and with which we have a contract, and to Grifols, S.A.

美国

When Grifols Shared Services North America, Inc. on behalf of itself and its affiliated companies under common ownership and control, is the data controller, see the California Personnel Privacy Policy here.

隐私声明提供其他语言版本

DE – DATENSCHUTZHINWEIS – KARRIERE

ES – AVISO DE PROTECCION DE DATOS - VACANTES DE EMPLEO

上次更新： 2024年3月