Privacy policy for the use of images

1. Who is the data controller?

The data controller is Grifols, S.A., with address for contact purposes at Avenida de la Generalitat 152, 08174, Sant Cugat del Vallés, Barcelona (Spain) ("Grifols").

2. Who is the data protection officer at Grifols and how can I contact him/her?

The data protection officer acts as an interlocutor between you and Grifols to ensure Grifols' compliance with the data protection legislation and to guarantee your rights under such legislation. You can contact the data protection officer at the following email address

3. How does Grifols use your personal data?

The personal data you provide Grifols with are used to manage the authorization you grant us to use your image, voice and any other identifying features.

4. Why does Grifols use your personal data?

The legal basis that allows Grifols to process your personal data is the consent you have given when signing the authorization document.

5. For how long will Grifols retain your personal data?

Grifols will only process your personal data during the period indicated in the authorization document.

Afterwards, Grifols will keep your personal data until the statutes of limitation of any liabilities arising from the relationship with you or due to legal obligations. This term will be, at least, five years.

6. Will Grifols share your personal data?

Grifols may share your personal data with group companies and, as the case may be, with the owners of the media in which the images are included.

If your personal data are transferred to third parties that do not offer an adequate level of data protection, Grifols will adopt appropriate safeguards to protect the personal data.

7. What are your rights when you provide Grifols with your personal data?

Right Content Notification channel
Access You can access your data stored in Grifols' files.
Rectification You can modify your personal data if these are inaccurate.
Erasure You can request the erasure of your personal data.
Objection You can request not having your personal data processed.
Portability You may receive, in an electronic file, the personal data that you provided Grifols with, as well as send it to different entities.
Restriction of processing You may request a restriction on how your data are processed when:
  • your personal data are being verified after you have contested its accuracy,
  • processing of your data is unlawful and you oppose to the erasure of these,
  • Grifols does no longer need to process your personal data but you need these to establish, exercise or defend a legal claim,
  • you object to having your data processed in order to comply with a task in the public interest or achieve a legitimate interest, while verifying if the legitimate reasons for processing your data override your rights.


Furthermore, you may withdraw your consent at any time, without this affecting the lawfulness of processing based on consent before its withdrawal. To exercise your rights and withdraw your consent, please send an email to the subject line "Authorization for the use of images and other identifying features " together with a copy of your ID card, passport or any other valid document confirming your identity.

Your personal data will be processed neither for automated individual decision-making that may have an impact on you nor for any profiling activities based on your personal data.

In any event, you may lodge a complaint with the Spanish Data Protection Agency ( or with any other data protection supervisory authority.

Date of creation: March 2019