Privacy Policy

At KYMOS GROUP we work to offer you the best possible experience through our products and services. In some cases, it is necessary to collect information to achieve this. We are concerned about your privacy and we believe that we must be transparent about it.

Therefore, and for the purposes of the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (hereinafter “GDPR”), the Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), the Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI), and the EU Artificial Intelligence Act (AI Act), Kymos Group, S.L. informs the User that, as data controller, it will incorporate the personal data provided by Users into an automated processing system.

Such data will be processed in accordance with applicable data protection and AI regulations, ensuring lawful, transparent, and secure handling, and Users are informed of their rights to access, rectify, erase, restrict, and object to the processing of their data, as well as the right to withdraw consent where applicable.

1. Data Controller

KYMOS GROUP (hereinafter referred to as “Kymos Group” or the “Organization”) is the company that created this website and is responsible for the processing of the personal data you share with us. The following is general information about the Organization:

• Identity: Kymos Group, S.L.

• Address: Parc Tecnològic del Vallés, Ronda Can Fatjó, nº 5-D, 08290-Cerdanyola del Vallés (Barcelona)

• TAX ID: B-70843693

• Email: legal@kymos.com

If you want to make a query regarding the processing of your personal data, you can contact us through the email indicated above.

1.1 Kymos Group

The scope of this policy is to inform the user of this website operated by KYMOS GROUP, which is composed by the following entities:

• Kymos Group, S.L. B-70843693 Parc Tecnològic del Vallés, Ronda Can Fatjó, nº 5-D, 08290-Cerdanyola del Vallés (Barcelona), Spain

• Kymos S.L.U. B-62170337 Parc Tecnològic del Vallés, Ronda Can Fatjó, nº 5-D, 08290-Cerdanyola del Vallés (Barcelona), Spain

• PHARMAPROGRESS S.R.L. 01564160420 Via Emilia Romagna, 28-30-32, 60030 Monsano AN, Italia

• Prolytic GmbH Ust-IdNr: DE226546121. Register No: 56529, Weismüllerstraße 45. 60314 Frankfurt, Allemagne

2. Personal data collected and their processing.

The following is an indication of the personal data that we may process on our website and the legal basis that justifies such data processing.

• Client Data Management. To manage and maintain the data of clients who have established a contractual or precontractual relationship with us, we may process information such as your name, contact details, preferences, usage data, and any information you provide during these interactions. This processing enables us to fulfill our contractual obligations, offer personalized services, improve our offerings, and respond to your requests.

• Legal Obligations. In order to comply with applicable legal, regulatory, or contractual obligations, we may process personal data such as identification information, billing details, and correspondence records. This ensures compliance with tax, corporate, and data protection regulations.

• Cookies and Similar Technologies. To improve your browsing experience, analyze usage, we may collect information through cookies and similar technologies, including your IP address, browser type, device identifiers, and usage patterns. You can manage your cookie preferences at any time through our cookie settings.

• “Contact us” form. To manage this form will be processed data such as your name and surname, email as well as phone and text message is optional.

• Customer and/or User Service through instant messaging. In order to manage any kind of support in case of doubts related to the services we offer, we will process your data such as your email as well as any other information you decide to communicate to us through the chat enabled.

• “Work with us” form. Job applications are submitted through our website, which redirects to the Talent Clue platform for application management. In order to process your application, we will handle data such as your name and surname, e-mail, telephone number and curriculum vitae. Additionally, applications may also be managed through third-party providers such as LinkedIn, whose processing of personal data will be governed by their own privacy policies.

• Marketing and Communications. If you provide your personal data when creating an account or subscribing to our newsletter, we may use it to send you marketing communications about our products, services, promotions, or events. You can opt out of receiving such communications at any time by following the instructions provided in each email or contacting us directly.

We do not knowingly collect or process special categories of personal data unless explicitly provided by the Customer under their responsibility.

3. Personal data legal basis

The legal basis that justifies the processing of your data mentioned above is:

• Consent of the data subject, for processing related to application forms, newsletter registrations, management of job applications, user support, and optional cookies accepted by the user.

• Performance of a contract, to manage and maintain the contractual relationship with the client, provide the requested services, and fulfill the obligations arising from such relationship.

• Legitimate interests of Kymos Group, to improve our services, provide personalized experiences, maintain platform security, and ensure operational efficiency.

• Compliance with legal obligations, including fraud prevention, communication with public authorities, and responding to claims from third parties.

4. Data Retention

We only keep your Personal Data for as long as necessary for the purposes for which they were collected with your express consent, to meet your needs or to comply with our legal obligations.

To determine how long we keep your Personal Data, we use the following criteria:

• Personal Data obtained when you contact us regarding an inquiry or request: for the time necessary to resolve your inquiry;

• Personal Data obtained when you have given us consent to send communications or because it is necessary to comply with regulations: until the end of the period for which it has been requested.

We may retain some of your Personal Data to comply with our legal or regulatory obligations, as well as to administer our rights or for statistical or historical purposes.

If we no longer need to use your Personal Data, it will be deleted from our systems and records or anonymized so that you can no longer be identified.

For further information, please contact us by e-mail at legal@kymos.com.

5. Conservation of your personal data

In general, data is stored within the EU. However, in the event that the processing of your data involves an international transfer of data outside the European Economic Area (EEA) Kymos Group undertakes to implement the necessary security measures to ensure an adequate level of safeguarding of such transfers by means of data processor contracts and, where appropriate, will ensure that they offer an adequate level of protection, either because they have Binding Corporate Rules (BCR) or because we have signed up to the European Commission’s model clauses.

6. Data subject’s rights

You can address your communications and exercise your rights by sending a request to the following email address: legal@kymos.com or by sending it by post to the address indicated above. In both cases, you must include a copy of your valid identification document (DNI, passport, or equivalent) to verify your identity.

Under the GDPR you can request:

• Right of information: you can request information about those personal data we have about you.

• Right of rectification: you can communicate any change in your personal data.

• Right to erasure and to be forgotten: you can request the prior blocking of the deletion of personal data.

• Right to limitation of processing: this is to restrict the processing of your personal data.

• Right to data portability: in some cases, you may request a copy of the personal data in a structured, commonly used, and machine-readable format for transmission to another data controller.

• Right to object and automated individual decision-making: you may request that decisions based solely on automated processing, including profiling, that produce legal effects or significantly affect the data subject not be made.

In some cases, the request may be denied if you request the deletion of data necessary for compliance with legal obligations. Also, if you have a complaint about data processing, you can file a complaint with the competent data protection authority: https://www.aepd.es/.

7. Responsible for the accuracy and veracity of the data provided.

The user is solely responsible for the truthfulness and accuracy of the data included, exonerating Kymos Group from any liability in this regard. Users guarantee and are responsible, in any case, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep them duly updated. The user undertakes to provide complete and correct information in the registration or subscription form Kymos Group reserves the right to terminate the services contracted with users, in the event that the data provided is false, incomplete, inaccurate or not up to date.

Kymos Group is not responsible for the veracity of the information that is not of its own elaboration and of which another source is indicated, so it does not assume any responsibility for hypothetical damages that may arise from the use of such information.

Kymos Group reserves the right to update, modify or delete the information contained in its web pages and may even limit or deny access to such information to Kymos Group if the claimants are exonerated.

8.Recipients to whom we communicate your data.

In some cases, only when necessary, Kymos Group will provide your data to third parties. However, the data will never be sold to third parties. The external service providers that Kymos Group relies on to provide auxiliary services for the processing of your data may have access to your data in accordance with the instructions given by Kymos Group and for the sole purpose of properly performing the contractual relationship that exists between Kymos Group and its providers.

To obtain information regarding the providers that access your personal data, you can e-mail us to legal@kymos.com.

Kymos Group seeks to ensure the security of personal data when it is sent outside the company, and ensures that third party service providers respect confidentiality and have adequate measures in place to protect personal data. These third parties have an obligation to ensure that the information is handled in accordance with data privacy regulations. In order to comply with these safeguards, Kymos Group enters into data processor agreements with these providers in accordance with Article 28 of the GDPR.

Kymos Group does not sell, rent, or otherwise disclose personal data to third parties for marketing purposes.

In some cases, the law may require that personal data be disclosed to public administrations or other parties, only what is strictly necessary for the fulfillment of such legal obligations will be disclosed.

9. Modification of the Policy

This privacy policy may be modified. We recommend that you review the privacy policy from time to time.

Customers will be notified of significant updates with reasonable advance notice prior to their effective date.