Locate a plasma donation center

1. Scope

Grifols, S.A. and its subsidiaries ("Grifols") undertake to protect the privacy of its customers and users accessing this website which home page is located at www.grifols.com (the "Website"). The contents of the Website are owned, operated, licensed or controlled by Grifols, S.A. or by any of its subsidiaries.

The user can browse and use the Website without having to provide any detailed personal data. The only personal data that Grifols will have access to is the information that users provide voluntarily through the forms provided, by contacting Grifols by e-mail or through any other way facilitated on the Website. If the Website collects personal data through cookies, the user will be adequately informed through Cookies Policy as well as by the means as the legislation requires.

This document sets out our policy on enforcement and use of personal data collected through our Website. The use of the Website implies acceptance by the user of the provisions of this Privacy Policy and that personal data may be processed as stated herein. Please note that although there may be links on our Website to other websites, this Privacy Policy applies only to the Website and websites under the control of Grifols or its subsidiaries  and not to websites of other companies or organizations to which the Website is redirected. Grifols does not control or endorse the content of third party websites nor accept any liability for the content or the privacy policies of such websites.


2. Data Controller

According to current regulations, the user is informed that the personal data collected through this Website will become part of a file owned by Grifols, S.A., a company based in Spain, unless otherwise indicated on the Website. If the user addresses to any of the subsidiaries of Grifols through the contact details provided on the Website (e-mail, postal address, phone), the user consents to having his/her personal data processed by the subsidiary appointed, in which case, the latter shall be responsible for processing his/her personal data in accordance with the regulations governing in the country in which it is located. Data from subsidiary companies are duly listed on the Website. The user shall take this into account in exercising his/her rights of access, rectification, cancellation and opposition when he/she has addressed directly to a group company through these means.


3. Purposes

Personal data collected on the Website will be processed and/or used only for the legitimate purposes of respond to the requests and information demands of the user,  sending you information relating to Grifols, as well as communicating, including by electronic means, any news relating to its products and services. Grifols may also process the provided personal data to ensure the security and safe operation of the Website and underlying business infrastructure, and in request to legitimate governmental responses and court orders.  Any other purpose shall be communicated to the user before proceeding to the processing of personal data.


4. Transfers to third parties

In order to correctly respond to your requests or queries or in order to inform you of novelties that may be of interest to you, your personal data could be transferred to other companies in the group, located in Spain or in another country, where the legislation on the processing of personal data may be different or less stringent than the legislation offered in your country. The user expressly authorizes us to make such communications and/or transfers to any companies within the Grifols group for the purposes mentioned in the previous section.

Grifols will not share your personal data with third parties unless (i) it is consistent with the terms and conditions of the privacy policy, (ii) the user consents to the transfer case, or (iii) it is required to meet legal obligations among which include, without limitation, providing data to the courts, the police or other national or international security bodies. Any transfers of data will be subject to strict safeguards regarding the obligations of the entity receiving the transfer, all of whom must be in full compliance with applicable data protection regimes.


5. Security Measures

Grifols informs you that it has adopted the technical and organizational measures necessary to maintain the level of security required in the personal data processed and also has the necessary mechanisms in place to prevent, to the extent possible, any unauthorized access, theft, illicit modification and loss of data.

In any case, Grifols only will retain user data during the time period necessary to fulfil the intended purposes. Unless applicable law states otherwise, personal data will be erased, blocked or will be rendered anonymous when they are no longer needed for the purposes for which they were collected.

Despite these safeguards, no security protocol is totally and completely secure, and therefore Grifols cannot completely guarantee the safety of any collected personal information. Nevertheless, Grifols has taken all commercially reasonable steps to ensure the safety, security, accuracy, and fidelity of all collected data.


6. Confidentiality

In compliance with current regulations, Grifols undertakes to fulfil its obligation of secrecy regarding personal data that the user provides while browsing through the Website and it is its duty to keep them confidential.


7. Third party data

In the event that the user provides personal data of third parties, he/she guarantees to have obtained their prior consent and inform them beforehand of the conditions and purposes for which Grifols may use their personal data. If required by Grifols, the user must prove that consent has been obtained. Grifols shall not be liable for personal data of third parties provided without their consent, and any damages whatsoever, including direct and indirect, special, consequential, or otherwise, shall solely be the responsibility of the user who provided the third parties' data.


8. Minors

The services and information available on the Website are intended for people over 18 years of age. Continuing usage of the Website shall be construed as an acknowledgement that the user is of the legal age to access this website, and underage users should immediately cease using the Website.


9. Data quality

Data provided by the user must be accurate and truthful. In any case, the user has the obligation to notify Grifols of any changes to their data in order to keep them up to date at all times.


10. Data subjects rights

At any time users may exercise the rights of access, rectification, cancellation and opposition to the processing of their personal data under the terms established by the current legislation, as well as more information about those rights under current legislation by writing to the address below or through the email address privacy@grifols.com.

Grifols, S.A.
Ref.: Protección de Datos
C/ Can Guasch, 2.
08150 Parets del Vallés (Barcelona- Spain)


11. Update of the Privacy Policy

Grifols may modify and update this Privacy Policy at any time without prior notice. Please always check that you are aware of our Privacy Policy in order to remain informed at all times of the information collected through the Website, how we use this information and the circumstances in which it may be disclosed to third parties. Grifols has no obligation to notify users of the Website of any changes and while it may elect to do so, users of the Website should not rely on notice to learn of any changes and should instead review this Privacy Policy before they use, browse, or otherwise interact with this Website.

Last update: May 2018.