PRIVACY POLICY – VITRO, S.A.

Last updated: May 2026

1. Data Controller

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), as well as Organic Law 3/2018, on Personal Data Protection and guarantee of digital rights (LOPDGDD), users of the website https://vitromasterdiagnostica.bio/ are informed that personal data provided through this website will be processed by:

• Controller: VITRO, S.A., a company registered in the Commercial Registry of Seville: Volume 1101, Folio 84, Page SE-16077.
• Tax ID: A41361544
• Telephone: 954933200
• Address: Calle Luis Fuentes Bejarano nº60, Edif. Nudo Norte (local 3), 41020, Seville
• Contact email: protecciondatos@vitro.bio
• Website: www.vitro.bio

2. Scope of Application

This Privacy Policy regulates the processing of personal data provided by users through the website https://vitromasterdiagnostica.bio/, as well as data collected via contact forms, information requests, registration or participation in activities organised or promoted by VITRO, S.A. (hereinafter, “Vitro”).

3. Categories of data we process

Data Category	Description
Identification and contact data	Name, email address and any other information voluntarily provided by the user in their communications, queries or requests sent to Vitro, including, where applicable, information related to their activity or professional profile.
Data related to activities and training	Information necessary to manage requests for registration, access and participation in courses, webinars, conferences or other activities organised or promoted by Vitro.
Candidate data	Data included in CVs or applications submitted to Vitro.
Browsing data	IP address, online identifiers and data derived from the use of cookies or similar technologies.

4. What do we use your data for?

We process your personal data in accordance with the lawful conditions provided in the General Data Protection Regulation (GDPR).

Purpose of processing	Legal basis
To respond to queries and information requests submitted via the website	Consent of the data subject (Art. 6.1.a GDPR).
To manage communications related to Vitro’s activities, training, events or content	Application of pre-contractual measures at the request of the data subject (Art. 6.1.b GDPR) and, where applicable, consent of the data subject (Art. 6.1.a GDPR).
To manage applications and selection processes	Application of pre-contractual measures at the request of the data subject (Art. 6.1.b GDPR).
To manage cookies and similar technologies	Consent for non-essential cookies (Art. 6.1.a GDPR and Art. 22 LSSI). Technical or necessary cookies are used in accordance with the exception provided in Article 22.2 LSSI.
To comply with applicable legal obligations	Compliance with legal obligations (Art. 6.1.c GDPR)

5. Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law.

Once these periods have elapsed, the data will be deleted or anonymised unless it is necessary to retain them to comply with legal obligations.

6. Recipients of the data

Vitro will not transfer data to third parties except where legally obliged or when necessary for the provision of certain services related to its activity. In these cases, certain providers may access personal data as data processors, exclusively to provide services to Vitro, such as technology services, web hosting, training management tools, communication sending platforms or administrative and support services, having signed the corresponding contracts with these providers in accordance with Article 28 of the GDPR.

7. International Data Transfers

In general, efforts will be made to use providers located in the European Economic Area. However, some technology providers may involve international data transfers. When this occurs, appropriate safeguards will be adopted in accordance with applicable regulations, including, where necessary, standard contractual clauses approved by the European Commission or other legally valid mechanisms.

8. Rights

You can exercise the following rights in relation to your personal data:

• Access: to know what data we process.
• Rectification: to request the modification of inaccurate or incomplete data.
• Erasure: to request the deletion of your data when applicable.
• Objection: to object to processing based on legitimate interest.
• Restriction of processing: to request that we process your data only for specific purposes.
• Data Portability: to receive your data in a structured format and transfer it to another controller, where applicable.
• Withdrawal of consent: where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of prior processing.

To exercise these rights, you can contact Vitro at:
protecciondatos@vitro.bio.

Furthermore, if you consider that your personal data has not been processed in accordance with applicable regulations, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es).

9. Information on the origin of data and its mandatory nature

The personal data processed by Vitro generally originates from the data subject themselves, either through forms enabled on the website, requests for information, registration or participation in activities organised or promoted by Vitro, or through communications maintained with the entity.

In the case of job applicants, the data comes from CVs or applications voluntarily submitted by the data subjects.

Data marked as mandatory in the forms are necessary to process the request or manage the corresponding activity. If such data is not provided, Vitro may not be able to provide the requested service. Data not marked as mandatory is voluntary.

10. Accuracy and Veracity of Data

The user guarantees that the personal data provided to Vitro is truthful, accurate and up-to-date, committing to communicate any modification thereof.

Vitro may adopt reasonable measures necessary to update or rectify any inaccurate data.

11. Protection Measures

Vitro applies appropriate technical and organisational measures to ensure the security of personal data and prevent its loss, alteration, unauthorised processing or access. These measures are periodically reviewed and updated in accordance with applicable regulations and technological developments.

12. Minors

In general, the website’s forms and services are not directed at children under 14 years of age. If data submission by minors without a valid basis is detected, it will be deleted as soon as possible.

13. Automated Decisions

Vitro does not make automated decisions that produce legal effects on users, nor does it carry out processing based exclusively on automated decisions in the terms provided in Article 22 of the GDPR.

14. Updates to this Privacy Policy

Vitro may modify this Privacy Policy when necessary. Updates will be published on this page, indicating the date of the last revision.