Privacy Policy

This Privacy Policy applies to users of this website owned by GlaxoSmithKline, SA (hereinafter, "GSK"). It may also apply to the processing of personal data carried out by the entity through other means, media, or technologies.

1. Identity of the Data Controller

In compliance with the information obligation contained in Article 10 of Law 34/2002 on Information Society Services and Electronic Commerce, GSK provides the following information to website users:

― Owner: GlaxoSmithKline, SA

― NIF: A28228526

― Registered office: C/ Severo Ochoa, 2, Madrid Technology Park, 28760 Tres Cantos (Madrid)

― Contact email: GDPR.Espana@gsk.com

― Data Protection Officer: GDPR.Espana@gsk.com

2. Information about the processing of personal data

2.1. Data subject to processing

The collection of information from startups will be carried out exclusively for their registration in the "GSK Gate2Health" challenge, with GSK acting as the Data Controller.

The user agrees to provide accurate and truthful data. If you provide personal data of third parties, you are required to obtain the express and informed consent of the data subjects to provide their data, in accordance with the provisions of this Privacy Policy.

Users are informed of the need to provide all mandatory data to ensure the proper functioning of the website or application, as well as for the proper execution of the relationship between the parties. These fields are identified with an asterisk (*). Failure to provide this data may result in GSK being unable to fulfill these purposes.

2.2. Purposes and legitimacy of the processing

INNSOMNIA will process your personal data for the purposes indicated below:

― To assess your application for the GSK Gate2Health open innovation program. This processing is legitimized by the data subject's consent by submitting the form found on the website associated with the GSK Gate2Health challenge.

― To manage your participation in the GSK Gate2Health open innovation program. This processing is legitimized by the execution of the contractual relationship arising from the acceptance of the program's Legal Bases or, failing that, the acceptance of the submitted application.

― Respond to requests for information and petitions submitted by data subjects through the contact channels provided. This processing is legitimized by the consent granted by the data subject through its submission.

― Enable the website to function effectively through the technical cookies installed, based on the company's legitimate interest.

2.3. Data retention

Personal data provided by users, as well as any other data collected for GSK and processed by INNSOMNIA, will be strictly retained until the entire process associated with the GSK Gate2Health challenge is completed.

In particular, GSK will retain personal data for the periods identified below:

― Data relating to applications for the “GSK Gate2Health” open innovation program. For as long as necessary to carry out the evaluation of the application.

― Data relating to participation in the “GSK Gate2Health” open innovation program. While the program remains active or, failing that, for the duration of the startup's participation.

― Data relating to information requests and petitions: As long as they are necessary for processing the request and, subsequently, for the period during which claims may arise from it.

2.4. Recipients and international data transfers

If you wish to participate and register for the GSK Gate2Health challenge, your data may be shared with partners and other collaborating entities for the purpose of managing the challenge.

Additionally, your data will only be disclosed to the extent necessary or required by current legislation. Thus, your data may be disclosed to address potential legal liabilities and to respond to requests from competent public authorities, particularly the competent data protection supervisory authority, judges, courts, or the public prosecutor's office, in accordance with European Union law and/or domestic law.

Whenever it is necessary to share your data, such as for invitations to events associated with the challenge, GSK is committed to complying with applicable data protection regulations and using suppliers and collaborators who guarantee data security.

No international data transfers are planned. In the event that an international data transfer is necessary, GSK undertakes to comply with the necessary technical and organizational measures, without prejudice to the obligations arising from current data protection regulations.

3. Use of cookies

GSK requires the installation of cookies to offer its content and ensure the functioning of the Website. Cookies are small data storage and retrieval devices that are downloaded to users' devices to store information or retrieve previously stored information.

GSK only uses technical cookies, which allow our users to navigate the website and use the various features or services offered. In any case, GSK guarantees that the cookies used do not store personal data or sensitive information about users, such as credit cards, bank details, photographs, or identification documents.

This website may also contain links to websites other than ours that may require the installation of cookies, based on their own Privacy Policy.

4. Minors

Use of the Website by minors without adult supervision is prohibited. GSK will not be liable for any misuse of the Website by minors. If GSK detects users who may be under fourteen years of age, it reserves the right to request authorization from their legal guardians.

5. Rights of interested parties

At any time, users may exercise the following rights recognized by current data protection regulations:

• Right of Access: allows the user to know what information GSK has, where it was obtained from, to whom it was provided, and for what purposes it was processed.

• Right of Rectification: allows the user to rectify any incorrect or outdated data.

• Right to Deletion: allows the user to request that their data no longer be used.

• Right of Restriction: allows the user to restrict the processing of their data, but in such a way that they are retained for a subsequent purpose (a legal claim, for example).

• Right to Data Portability: allows the user to obtain a copy of their data electronically and, under certain circumstances, request that it be communicated to another service provider.

• Right to Object: allows the user to object to GSK's legitimate interest and thus request the cessation of the processing of their data.

• The right to withdraw consent, at any time, regarding the processing of your personal data. Withdrawal of consent will not affect the lawfulness of any data processing carried out prior to withdrawal.

You may exercise these rights by emailing eu.dpo@gsk.com, indicating which right you wish to exercise and providing proper proof of identity. You may also contact our GSK Data Protection Officer at the same email address.

Finally, we inform you that you can file a complaint with the Spanish Data Protection Agency through its website.

6. Security measures

GSK has adopted appropriate technical and organizational measures to ensure an adequate level of security for the personal data it processes and has implemented other additional technical means and measures within its reach to prevent the loss, alteration, processing, or unauthorized access to its users' data.

7. Modification of the Privacy Policy

GSK reserves the right to modify this Privacy Policy, always in accordance with the terms permitted by current Spanish legislation and with the corresponding notification to users, by publication in this section or by any other means of communication or dissemination it deems appropriate.

You can also find more information about the different ways in which GSK processes your personal data in its General Privacy Policy.