Privacy policy

This Privacy Policy describes how MedGXP Consulting S.L. ("MedGXP", "we", "us", or "our") collects, uses, and protects personal data when you visit our website or engage with our services.

We are committed to safeguarding the privacy of our clients, partners, and website visitors, in full compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR").

1. Who we are

MedGXP Consulting S.L.
NIF: B56293160
Address: Carrer de Ramon Turró 344, 5-2, 08019, Barcelona, Spain
Email: smm@medgxpconsulting.com
Website: www.medgxpconsulting.com
Registered in Spain.

We provide GCP auditing, quality assurance, and compliance consulting services for pharmaceutical and biotechnology companies.

2. What personal data we collect

We may collect and process the following categories of personal data:

• Contact details: name, email address, phone number, company name, job title
• Communication data: emails, messages, or forms you submit to us
• Website usage data: IP address, browser type, pages visited (via cookies or analytics tools)
• Client data: information required to provide services under contract (e.g., audit contact details, contractual records)

3. Why we process your data

We process your personal data for the following purposes:

• To respond to inquiries and provide information about our services
• To perform our contractual obligations as a service provider
• To maintain business relationships and client communication
• To improve our website and user experience
• To comply with legal or regulatory obligations

We do not use your data for automated decision-making or profiling.

4. Legal basis for processing

We process personal data under the following lawful bases (Art. 6 GDPR):

• Consent: When you voluntarily provide data via our website contact form
• Contract: When processing is necessary for a service agreement
• Legal obligation: To meet legal or regulatory requirements
• Legitimate interest: For business communication and service improvement

5. Data sharing and international transfers

We do not sell or rent your personal data.

We may share data with:

• Service providers (e.g., IT hosting, email platforms) under data processing agreements
• Legal or regulatory authorities if required by law

We do not transfer data outside the European Economic Area (EEA) unless adequate safeguards are in place.

6. Data retention

We retain personal data only as long as necessary:

• For contact or inquiry records: up to 12 months
• For client contracts and audit documentation: up to 10 years (to comply with regulatory requirements)
• For legal obligations: as required by applicable Spanish and EU law

7. Your rights under GDPR

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request erasure ("right to be forgotten")
• Object to processing or request restriction
• Data portability
• Withdraw consent (if processing was based on consent)
• Lodge a complaint with a supervisory authority (in Spain: AEPD – www.aepd.es)

To exercise your rights, contact us at: smm@medgxpconsulting.com

8. Cookies

Our website may use cookies or analytics tools to track usage and improve functionality. You can control cookie settings through your browser preferences.

9. Security measures

We implement appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of personal data, including secure hosting, access controls, and encryption where appropriate.

10. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last updated" date.

For questions or requests regarding this Privacy Policy, please contact:
Email: smm@medgxpconsulting.com
Address: MedGXP Consulting S.L., Carrer de Ramon Turró 344, 5-2, 08019, Barcelona, Spain