Legal

Privacy Policy

Last updated: July 30, 2026

GSN FARMA LABS, S.L.U. (hereinafter, "GSN FARMA") with Tax ID B10958932 and registered office for these purposes at Calle del Llobregat nº 28, CP 08223 Terrassa (Barcelona), declares that it is responsible for the processing of data collected on the website www.gsnfarma.com (hereinafter, the "Website") in accordance with the obligations provided for in Regulation (EU) 2016/679 General Data Protection Regulation (hereinafter, the "GDPR"), Organic Law 3/2018, of December 5, on Protection of Personal Data and Guarantee of Digital Rights (hereinafter, the "LOPDGDD") and Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (hereinafter, the "LSSICE").

The completion of all data requested as mandatory through the Website is necessary to achieve optimal provision of the services made available to the User. If all data required by GSN FARMA is not provided, it cannot be guaranteed that the information and services provided can be provided, are provided correctly or adjust to the User's needs.

The term User/s is used here to refer to all adults who access the Website.

BASIC INFORMATION ON DATA PROCESSING

Data Processing Manager	GSN FARMA LABS, S.L.U.
Purpose of processing	Contact
Purpose of processing	Use of cookies
Legal basis of processing	The processing of your data may be based on the express consent of the interested party, manifested through a clear affirmative action, such as checking the box accepting the Privacy Policy before submitting any form on GSN FARMA's website.
Recipients	Data will not be transferred to third parties, except to our collaborators necessary for service provision or by legal obligation.
Rights	Access, rectification, deletion, opposition, limitation of processing, data portability, not being subject to automated individual decisions, withdrawal of given consent, and filing a complaint with the Spanish Data Protection Authority, if deemed appropriate.
Additional information	You can find detailed information about the protection of your data below.

DETAILED INFORMATION ON DATA PROCESSING

1. Identity and contact information of the Data Processing Manager

In accordance with applicable data protection regulations and, in particular, Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and Organic Law 3/2018, of December 5, on Protection of Personal Data and guarantee of digital rights, the Data Processing Manager is:

Data Processing Manager	GSN FARMA LABS, S.L.U.
Address	Calle del Llobregat nº 28, C.P. 08223 Terrassa (Barcelona)
Telephone	+34 680 310 655
Email contact	[email protected]

GSN FARMA has appointed a Data Protection Officer who can be contacted at [email protected].

2. Compliance with applicable regulations

GSN FARMA has adapted the Website to the GDPR and LOPDGDD. To do this, it has implemented the policies, means and technical and organizational procedures to guarantee and protect the confidentiality, integrity and availability of its personal data.

The transmission of data by the user of GSN FARMA services (hereinafter, the "User") through the Website is carried out voluntarily and with prior information about the use and purposes of the processing.

3. Principles we apply to your personal information

Data provided to GSN FARMA through different means, online or offline contact forms or any other procedure used to collect your data will be processed in accordance with applicable data protection regulations, and solely for the purpose of providing the service you have been informed about.

In the processing of your personal data, we apply the following principles that comply with GDPR requirements:

Principle of lawfulness, fairness and transparency: We will always have a legal basis for processing your personal data for one or more specific purposes that we will inform you about in advance with complete transparency. GSN FARMA informs you that only information necessary to achieve the purpose of processing is collected and only the data you have provided for the purpose(s) you were informed about will be processed.
Principle of data minimization: We will only request the strictly necessary data in relation to the stated purposes.
Principle of storage period limitation: Personal data will be retained for the strictly necessary time until the purpose for which they were collected ends and as long as the cause that legitimized the processing of this personal data is maintained. Once the cause that legitimized the processing has ended, personal data will be retained properly locked for the prescription period of actions that could arise from the relationship maintained between the parties and/or the legally established retention periods.
Principle of integrity: Your data will be processed in such a way as to guarantee adequate security of personal data and ensure confidentiality. You should know that we take all necessary precautions to prevent unauthorized access or misuse of data by third parties.
Principle of confidentiality: GSN FARMA, as the data controller, guarantees confidentiality in the processing of all personal data of the User to which it has access. The data controller, as well as any other person involved in any phase of processing, is subject to the strictest professional secrecy, with a special commitment to adopt the necessary levels of protection and measures, both technical and organizational, to guarantee the security of personal data and prevent its alteration, misuse, loss, theft, processing or unauthorized access.
Principle of data accuracy: All information provided by the User to GSN FARMA must be truthful and the User will be solely responsible for false or inaccurate statements and for any damage caused to GSN FARMA or to third parties.

GSN FARMA reserves the right to exclude from services any User who has provided false data, without prejudice to other legal actions that may apply.

4. Processing of personal data

4.1. Collection and processing of personal data

By providing your data through the Website or any other means, the User guarantees that this data is true, accurate, complete and up to date, and assumes responsibility for any direct or indirect damage or loss that could result from failure to comply with this obligation.

If you provide GSN FARMA with data of third parties, the User must have their consent and commit to transfer them the information contained in this Policy, exempting GSN FARMA from any responsibility in this regard. However, GSN FARMA may carry out verifications to confirm this fact, adopting the due diligence measures that correspond, in accordance with data protection regulations.

4.2. Purposes of processing

The purposes of the processing that GSN FARMA carries out of the User's personal data are:

Data processing	Purpose of processing	Legal basis of processing	Retention period
Contact	To respond to contact requests made by Users through the corresponding form on the Website.	Consent of the interested party.	Data will be retained for 12 months after inquiries are made or until the interested party withdraws their consent.
Use of cookies	Analyze user navigation and ensure the proper functioning of the Website.	Consent of the interested party.	Depending on the cookie duration. See Cookies Policy at the bottom of the Website.

4.3. Category of data and interested parties

According to the stated purposes, GSN FARMA collects and processes the following categories of user data:

Identification data: name, surnames, email address and telephone number.
Also, through cookies we collect certain information linked to User navigation. Its processing and purposes are explained in our Cookies Policy at the bottom of the Website

Personal data collected belong to the following categories of interested parties: Website User.

Regarding inquiries or requests made through the data collection forms available on the Website, Users are allowed to briefly explain the reason for their inquiry or contact. Please note that GSN FARMA will not respond to any personal inquiries, except those strictly established by applicable legislation. Under no circumstances should the User communicate data of special categories (for example: health data, religion, etc.) through the forms enabled on the Website. If you do so, the User exempts GSN FARMA from all responsibility. If inappropriate inquiries or content are submitted, GSN FARMA will proceed to delete them.

4.4. Automated individual decision-making, including profiling

No automated individual decision-making, including profiling, is envisaged.

5. Processing of data by third parties and transfer

Depending on the purposes for which personal data is collected, your personal data may be processed by:

Authorized personnel of GSN FARMA or its representatives acting on its behalf, subject to applicable data protection regulations.
Administrations, Authorities and Public Bodies, including Courts and Tribunals, when required by applicable regulations.
External service providers contracted by GSN FARMA who have the status of data processor [IT service providers who process information, data storage, database support maintenance, mailing, software and applications]. All this only after carrying out the necessary measures to ensure we can share this information and after having signed a data processing agreement with our processors, in compliance with data protection regulations.

If there is a sale, merger, consolidation, change in corporate control, substantial asset transfer, reorganization or liquidation of GSN FARMA, at our discretion, we may transfer, sell or assign information collected on the Website to one or more relevant parties.

6. Security measures

GSN FARMA adopts the levels of security required by the GDPR appropriate to the nature of the data being processed at any given time for its activity. In this regard, it uses encryption techniques that do not allow a third party to trace the identity of the User interacting with our services. Likewise, it may also carry out secure anonymization techniques of the personal data it processes to carry out its activity. However, technical security in a medium like the Internet is not impregnable and there may be malicious acts by third parties, although GSN FARMA provides you with the means to prevent such acts.

7. International data transfer

We do not transfer User's personal data to third parties outside the European Union. In the event that international data transfers are carried out, all appropriate technical and organizational measures will be taken to guarantee data security.

8. Rights of interested parties and their exercise

In accordance with the GDPR and LOPDGDD, Users can exercise the following rights:

Right of access: The User may ask GSN FARMA if it is processing your data and, if so, access to it.
Right to rectification: The User may request correction of data if it is inaccurate or incomplete.
Right to request deletion of your data, when possible. In any case, when the User exercises this right, all personal data linked to their account, as well as the information and content that integrates their profile, will be deactivated and will remain blocked until the legal period expires.
Right to request limitation of its processing: In this case we will only keep it for the exercise or defense of claims.
Right to object to processing: GSN FARMA will stop processing personal data, with the exception that it must continue to be processed for reasons of overriding legitimate interest or for the exercise or defense of possible claims.
Right to data portability: If the User wants their data to be processed by another data controller, GSN FARMA will facilitate the transfer of their data to the new controller if both have the technical means necessary for this.
Right not to be subject to a decision based solely on automated processing of your personal data.
Right to withdraw consent: If the User has given consent for a specific purpose, they may withdraw it at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
Right to file a complaint with the Spanish Data Protection Authority: If you believe that a violation of data protection legislation has occurred regarding the processing of your personal data (www.aepd.es).

To exercise your rights, you can use the models and forms available on the official page of the Spanish Data Protection Authority (https://www.aepd.es/es/derechos-y-deberes/conoce-tus-derechos), and contact GSN FARMA in writing at its address or by email to [email protected], REF: "Data Protection".

9. User consent

The User declares that they have read and expressly accepted this Privacy Policy, when the legal basis for processing is their consent. You may withdraw consent at any time. Withdrawal of consent will not affect the lawfulness of processing prior to its withdrawal.

The User is obliged to keep GSN FARMA indemnified against any possible claim, fine or sanction that may be required to bear as a consequence of the User's failure to comply with the duty described in this paragraph.

10. Links to other websites

This Website contains links or links to other websites not managed by GSN FARMA, so GSN FARMA does not exercise any control over these, nor is it responsible for the information they provide access to. We ask you to visit these websites directly to obtain information about their privacy policy, which provides information about the protection of your data, security, data collection and provisions relating to data transmission.

If you follow us on our social networks, review their privacy policies for information about how they treat and share your personal data, as GSN FARMA does not exercise any control over them nor has any responsibility regarding the information these websites provide access to.

11. Changes to privacy policy

We will only use personal data as established in the Privacy Policy that is in force at the time such data is collected.

GSN FARMA reserves the right to modify this Privacy Policy at any time with effect from the date of publication of such modifications on the Website, so it is recommended that you visit it each time you access it. In any case, if at any time we decide to process personal data differently than what was declared at the time of collection, we will inform the User of this, collecting their consent if necessary.

If any clause of this Privacy Policy is annulled or considered null, the rest of the conditions will not be affected, fully retaining their validity and effectiveness, in accordance with applicable regulations in force at any given time.

12. Applicable law

The privacy of all information provided, both by the User through the different personal data request forms and that accessible through the Website, is governed by applicable data protection regulations, in particular, by the GDPR and LOPDGDD.

13. Cookies

Access to the Website may involve the use of cookies. Cookies are small amounts of information that are stored in the browser used by each user so that the server remembers certain information that may subsequently be used. This information allows you to be identified as a specific user and allows you to save your personal preferences, as well as technical information about the use and operability of the Website.

For more information, you can consult our Cookies Policy at the bottom of the Website.