Privacy and Personal Data Protection

BIAL recognizes the importance of privacy and the protection of the rights of natural persons with regard to the processing of personal data and the free movement of such data.

Under the highest ethical and legal standards, BIAL governs its activity through a set of commitments according to which personal data processing must always be processed in a transparent manner and in strict respect for privacy, as well as rights, freedoms and guarantees:

Lawfulness, Fairness and Transparency

Personal data will always be processed lawfully, fairly and in a transparent manner in relation to the data subject.

Purpose limitation

Personal data will only be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.

Minimization

Personal data shall be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

Accuracy

Personal data shall be accurate and, where necessary, kept up-to-date. Appropriate measures will be taken to ensure that inaccurate data, having regard to the purposes for which they are processed, are erased or rectified.

Storage limitation

Personal data will be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which they are processed.

Integrity and Confidentiality

Integrity and Confidentiality: Personal data will be processed in a manner that ensures appropriate security, including the protection against its unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.

Responsibility

The above commitments apply to all personal data processing carried out by BIAL Group employees.

BIAL appointed a Data Protection Officer (DPO) responsible for informing and advising the Group companies and their employees, monitoring the compliance of data processing with applicable policies, procedures and legislation, and acting as a contact point with data subjects and the data protection authority.

Compliance with the applicable privacy and data protection policies, procedures and legislation is subject to constant monitoring and is complemented by a solid awareness and training program for all BIAL Group employees.