Grifols Corporate Website Privacy Policy

1. Who is the data controller?

The data controller is the Grifols' group company to which you have submitted the request and is clearly identified in the right side of the form. ("Grifols").

2. Who is the data protection officer of Grifols and how can I contact him/her?

The data protection officer acts as an interlocutor between Grifols and you in order to ensure Grifols' compliance with the data protection legislation and guarantee your rights under such legislation. You can contact the data protection officer of Grifols at the following e-mail address

3. How Grifols uses your personal data?

Grifols processes your personal data to answer the requests of information, services and any suggestions you make through the means provided in the website, unless otherwise stated.

4. Why does Grifols use your personal data?

The legal basis to process your personal data is your consent as expressed in the data collection form.

5. How long Grifols will retain your personal data?

Grifols will process your personal data until your request has been answered. Afterwards, Grifols will retain your personal data for a maximum period of five (5) years from the date your request was answered for the purposes of dealing with any potential claim or legal obligation.

6. With whom Grifols will share your personal data?

We will share your personal data with the relevant Grifols' group company that may be in the best position to respond your query and/or with any other third party in case we are required by applicable law. You can consult the list of Grifols' group companies here.

7. Which are your rights when you provide us with your personal data?

Right Content Notification channel
Access You may consult the personal data included in the files of Grifols.
Rectification You may modify your personal data when these are inaccurate.
Opposition If applicable, you may request that your personal data are not processed.
Erasure You may request the erasure of your personal data.
Restriction of processing You may request restriction of data processing when:
  • The accuracy of personal data is being verified after you have contested such accuracy,
  • The processing is unlawful and you oppose to the erasure of the personal data,
  • Grifols does no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims,
  • You have objected to the processing for the performance of a task carried out in the public interest or necessary for the purposes of a legitimate interest, whilst it is being verified whether the legitimate grounds of Grifols override yours.
Portability You may receive in electronic form the personal data you have facilitated as well as transmit these data to a different entity.


Moreover, at any time, you may withdraw your consent without affecting the data processing carried out before such withdrawal by sending your request to, indicating as reference "Corporate website form", as well as to the Grifols' group company where you addressed your request. In order to exercise your rights and withdraw your consent you should send us a copy of your ID or document evidencing your identity. In any case, you have the right to lodge a complaint with the competent supervisory authority.

Date of creation: May 2018