Privacy Policy

1. Introduction

At Zerintia HealthTech, we strive to provide you with the best possible experience through our products and services. In some cases, it is necessary to collect information to achieve this. We care about your privacy and believe that we must be transparent about it.

Therefore, in accordance with the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (hereinafter, the “GDPR”), on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (hereinafter, the “LSSI”).

2. Data Controller

Identity of the controller: Zerintia HealthTech S.L. (hereinafter “Zerintia HealthTech”)

Address: Calle Téllez No. 60, Ground Floor, 28007 Madrid, Spain

Tax Identification Number (NIF): B44648418.

Email: privacy@zerintiahealthtech.com

3. Collection and Processing of Personal Data

Below is a description of the personal data that may be processed through our website, as well as the legal basis for such processing.

• Contact form. To manage this form, personal data such as your first name, last name, company, and email address will be processed, as well as any additional information you choose to include in the message field.
• Commercial communications. To manage commercial communications and/or subscriptions to newsletters about our products and services, we will process your first name, last name, company, and email address.
• Browsing information via cookies. If you accept the installation of cookies while browsing our website, we may process personal data such as your IP address, as well as other non-personal data such as user agent, date and time of access to our services, the web browser used, and information about the operating system of your device. This information is further detailed in our Cookie Policy.
• “Work with us” form. To manage this form, personal data such as identification data, contact details, and any additional information you choose to include in the message field will be processed.
• Demo requests. To manage demo requests, personal data such as first name, last name, company, and email address will be processed.

4. Legal Basis for the Processing of your Data

The legal basis that justifies the processing of your data mentioned above is as follows:

• The data subject’s consent for the provision of services and products, for contact forms, careers (“Work with us”) forms, demo requests, information requests, newsletter subscriptions, and the processing of optional cookies accepted by the user.
• Compliance with legal obligations, including fraud prevention, communication with public authorities, and handling of third-party claims.
• 5. Retention of your Personal Data

The processing of data for the purposes described will be maintained for the time necessary to fulfill the purpose for which it was collected, as well as to comply with any legal obligations arising from such processing. Notwithstanding the above, data may be retained where necessary for the formulation, exercise, or defense of potential claims and/or whenever permitted by applicable legislation. For further information, please contact us via email at: privacy@zerintiahealthtech.com. 

6. Recipients to whom we Disclose your Data

In some cases, and only when necessary, Zerintia HealthTech may disclose your data to third parties. However, personal data will never be sold to third parties.

External service providers engaged by Zerintia HealthTech to perform auxiliary services related to the processing of your data may have access to such data, in accordance with the instructions provided by Zerintia HealthTech and solely for the purpose of properly executing the contractual relationship between Zerintia HealthTech and its providers.

Zerintia HealthTech works with the following service providers:

Zerintia HealthTech strives to ensure the security of personal data when it is transferred outside the company and ensures that third-party service providers respect confidentiality and implement appropriate measures to protect personal data. These third parties are required to guarantee that the information is processed in accordance with applicable data privacy regulations.

In some cases, the law may require personal data to be disclosed to public authorities or other parties. In such cases, only the data strictly necessary to comply with those legal obligations will be disclosed.

7. Storage of your Personal Data

In general, personal data is stored within the European Union. However, if the processing of your data involves an international transfer of data outside the European Economic Area (EEA), Zerintia HealthTech undertakes to implement the necessary safeguards to ensure an adequate level of protection for such transfers through data processing agreements and, where applicable, to ensure that an adequate level of protection is provided, either because Binding Corporate Rules (BCRs) are in place or because the Standard Contractual Clauses approved by the European Commission have been executed. For more information about our service providers, please contact us at: privacy@zerintiahealthtech.com. 

8. Exercise of your Rights and How to Exercise Them

You may submit communications and exercise your rights by sending a request to the following email address: privacy@zerintiahealthtech.com.

Under the GDPR, you may request:

• Right to information: you may request information about the personal data we hold about you.
• Right to rectification: you may notify us of any changes to your personal data.
• Right to erasure (“right to be forgotten”): You may request the deletion of your personal data, subject to prior blocking where required.
• Right to restriction of processing: You may request the limitation of the processing of your personal data.
• Right to data portability: In certain cases, you may request a copy of your personal data in a structured, commonly used, and machine-readable format for transmission to another controller.
• Right to object and to automated individual decision-making: You may request that decisions not be made based solely on automated processing, including profiling, that produce legal effects or significantly affect you.

In some cases, requests may be denied if you request the deletion of data necessary to comply with legal obligations. If you have a complaint regarding the processing of your personal data, you may file a complaint with the competent data protection authority.

9. Responsibility for the Accuracy and Truthfulness of the Data Provided

The user is solely responsible for the accuracy and correctness of the data provided, releasing Zerintia HealthTech from any liability in this regard. Users guarantee and are responsible, in all cases, for the accuracy, validity, and authenticity of the personal data provided and undertake to keep it duly updated. The user agrees to provide complete and accurate information in registration or subscription forms. Zerintia HealthTech reserves the right to terminate the contracted services with users if the data provided is false, incomplete, inaccurate, or not up to date.

Zerintia HealthTech is not responsible for the accuracy of information that is not of its own creation and that is attributed to other sources, nor does it assume any liability for any potential damages arising from the use of such information.

Zerintia HealthTech reserves the right to update, modify, or delete the information contained on its web pages and may even limit or deny access to such information.

10. Security Measures Applied to Protect your Personal Data

Zerintia HealthTech has adopted the legally required levels of security for the protection of personal data and endeavors to implement additional technical measures within its means to prevent loss, misuse, alteration, unauthorized access, and theft of the personal data provided to Zerintia HealthTech.

Zerintia HealthTech shall not be liable for any potential damages that may arise from interferences, omissions, interruptions, computer viruses, telephone failures, or disconnections in the operational functioning of this electronic system due to causes beyond its control; nor for delays or blockages in the use of this electronic system caused by deficiencies or overloads in telephone lines, data processing centers, the Internet system, or other electronic systems; nor for damages caused by third parties through unlawful interference beyond the control of Zerintia HealthTech. However, users should be aware that Internet security measures are not infallible.

In particular, the website is secured with a TLS certificate using RSA encryption, which means that all information transmitted to the website is encrypted via the HTTPS protocol.

11. Modification of the Privacy Policy

This Privacy Policy may be modified. We recommend that you review it periodically.

Version: February 2026.