Privacy Policy

On this page we inform you about which personal data Trialtech SL, Avda. De los Charcos 19, 28860 Madrid, processes when you use this website and its offerings. We also explain the purpose for which this data is processed when you:

• Visit and register on our website (cf. section 2),

• Give us your consent to receive information about current studies (cf. section 3), or

• Request to participate in a study through the Un Ensayo para Mí portal (cf. section 4).

You will also receive information about your rights in relation to the processing of your data.

We process your data in accordance with applicable data protection legislation, including:

• Regulation (EU) 2016/679 (General Data Protection Regulation: “GDPR”), in force since 25 May 2018.

• Brazil's General Data Protection Law (LGPD), Law No. 13.709/2018.

• Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

• Argentina's Personal Data Protection Law (Law No. 25.326).

• Chile's Personal Data Protection Law No. 21.719, which amends Law No. 19.628.

• Peru's Law No. 29733, Personal Data Protection Law, and its Regulation (Supreme Decree No. 016-2024-JUS).

Trialtech SL is hereinafter referred to as “Un Ensayo para Mí”.

1. Who is responsible for processing your data?

The entity responsible for processing your personal data within the meaning of Article 4(7) GDPR, Article 5(VI) of the LGPD, Article 3(XIV) of the LFPDPPP, Article 2 of Law No. 25.326, Law No. 21.719 of Chile and Article 2 of Law No. 29733 of Peru is:

Trialtech SL

Avda. De los Charcos 19

28860 Madrid

2. Data protection information for visitors to the Un Ensayo para Mí websites

2.1 What data is processed during a visit to the websites?

Each time you access the Un Ensayo para Mí website, the Un Ensayo para Mí servers automatically store various data about the accessing system (“server log files”).

These are:

IP address (anonymized where necessary)

Browser type and version

Operating system used

Referrer URL

Time of the server request

Un Ensayo para Mí uses this data to make the website accessible, to identify and resolve any technical problems that may arise, and to prevent and, where necessary, pursue any misuse of the Un Ensayo para Mí offering.

Furthermore, Un Ensayo para Mí reserves the right to use access data in anonymized form, that is, without the possibility of identifying the user, for statistical purposes and to improve the website (cf. also section 5 in this regard).

The legal basis for processing access data as the user's personal data is Article 6(1)(f) GDPR, Article 7(IX) of the LGPD, Article 16 of the LFPDPPP, Article 6 of Law No. 25.326, the provisions on lawful bases for processing of Law No. 21.719 of Chile and the Regulation of Law No. 29733 of Peru (Supreme Decree No. 016-2024-JUS). The legitimate interest is that, by processing this data, we can make the website accessible to the user and improve the services of Un Ensayo para Mí.

2.2 How is the data entered during registration processed?

Registration is required in order to use the Un Ensayo para Mí website. To register, the user must provide their email address as well as their first and last name (“required data”). The user provides this data being aware of these data protection provisions. Without this (required) data, it is not possible to use the Un Ensayo para Mí website.

In addition to the required data, users may voluntarily provide further information (e.g., sex, date of birth, postal code, telephone number, main study interests) (“additional data”). The data collected during registration (required and additional data) is stored by Un Ensayo para Mí in the user's personal profile and is processed to identify the user when they access the services of the Un Ensayo para Mí website and to personalize the content of the service offering.

The legal basis for processing the user's data is Article 6(1)(f) of the GDPR, Article 7(IX) of the LGPD, Article 12 of the LFPDPPP, Article 6 of Law No. 25.326, the provisions on lawful bases for processing of Law No. 21.719 of Chile and the Regulation of Law No. 29733 of Peru (Supreme Decree No. 016-2024-JUS). Our legitimate interest consists of making the website's services available to the user.

2.3 What are the consequences of using so-called cookies?

During your visit to the website, information in the form of so-called “cookies” will be placed in the browser of the user's computer. “Cookies” are small files containing configuration information that are stored via the browser on the computer's hard drive and facilitate the use of the website. The cookies used are so-called session cookies, which the browser deletes once the session is closed. Un Ensayo para Mí uses certain advertising partners that help make the internet offering and the websites more interesting for you. Therefore, during a visit to the websites, cookies from partner companies are also stored on your hard drive. These are temporary / permanent cookies that are automatically deleted after a certain period of time (lifespan of 1 month to 10 years). The cookies of our partner companies also do not contain personal data. They collect data exclusively under a pseudonymous user ID. For example, this involves data about the topics you have been interested in, whether you have registered for a study, which study indications you have searched for, etc. In this case, some of our advertising partners also record, through the pages, information about which page you previously visited or which products you were interested in, in order to show you the advertising that best matches your interests. This pseudonymized data is never linked to your personal data.

The Un Ensayo para Mí pages use re-targeting technologies such as, for example, the pixel from Facebook Ireland Limited. We use these technologies to make the internet offering more interesting for you. This technique makes it possible to attract internet users who have already shown an interest in Un Ensayo para Mí and clinical studies to our partners' websites through advertising. We are convinced that the integration of personalized advertising tailored to the user's interests is generally more interesting for the internet user than advertising that has no personal reference. The integration of this advertising material into our partners' pages is based on cookie technology and an analysis of the user's previous behavior. This form of advertising is carried out completely anonymously. No personal data is stored and no user profile is linked to your personal data. If you visit one of our websites and have accepted the storage of cookies in your browser settings, this means to us that you wish to use the products and services of Un Ensayo para Mí and that you therefore agree to the use of cookies and other technologies as described in our data protection statement.

In your browser you can configure the option to only accept the storage of cookies when you agree. If you wish to accept cookies from Un Ensayo para Mí but not those from our service providers and partners, then select the browser setting “Block third-party cookies”. On shared computers that are set to accept cookies and flash cookies, we recommend that you always log out completely when you finish.

The legal basis for the use of cookies is Article 6(1)(f) of the GDPR, Article 7(IX) of the LGPD, Article 14 of the LFPDPPP, Articles 4 and 6 of Law No. 25.326, the provisions on lawful bases for processing of Law No. 21.719 of Chile and the Regulation of Law No. 29733 of Peru (Supreme Decree No. 016-2024-JUS). Our legitimate interest lies in being able to carry out, through data processing, statistical evaluations of the use of our website and to optimize the internet offering for users.

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of the website is generally transmitted to a Google server in the United States and stored there. The IP address transmitted by your browser within the framework of Google Analytics will not be linked to other Google data. On this website we have additionally extended Google Analytics with the “anonymizeIP” code. This ensures the masking of your IP address, so that all data is collected anonymously. Only in exceptional cases will the full ID address be transmitted to a server in the United States and shortened there.

On behalf of the operator of this website, Google uses this information to evaluate your use of the website, to compile reports on website activity, and to provide further services related to the use of the websites and the internet. You can prevent the storage of cookies by adjusting your browser settings accordingly. However, we point out that in this case it is possible that not all functions of this website will work fully.

You can also prevent the recording by Google of the data generated by the cookie and related to your use of the website (incl. your IP address), as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. As an alternative to the browser add-on, especially on mobile device browsers, you can click on the following link). An opt-out cookie will be installed that will prevent the future recording of your data when you visit this website. The opt-out cookie is valid only for this browser and only for our website and will be placed on your device. If you delete the cookies in this browser, you will have to install the opt-out cookie again. [Note: Instructions for integrating the opt-out cookie can be found here: https://developers.google.com/analytics/devguides/collection/gajs/?hl=en#disable].

We also use AdWords to evaluate data for statistical purposes. If you do not wish this, you can deactivate it through the ad display preferences manager (http://www.google.com/settings/ads/onweb/?hl=en).

This website uses the Google Analytics reports on demographic characteristics, which use data from Google's personalized advertising as well as visitor data from third-party providers (e.g., age, sex, and interests). This data cannot be traced back to a specific person and can be deactivated at any time through the ad display settings.

More information about the use of data for advertising purposes by Google, as well as setting and revocation options, can be found on Google's websites: https://www.google.com/intl/de/policies/privacy/partners/ (“How Google uses data when you use our partners' sites or apps”), http://www.google.com/policies/technologies/ads (“Use of data for advertising purposes”), http://www.google.de/settings/ads (“Manage the information Google uses to show you advertising”) and http://www.google.com/ads/preferences/ (“You decide which advertising Google shows you”).

The use of Google Analytics is carried out in accordance with the requirements agreed upon between the Spanish data protection authorities and Google. Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Privacy policy: http://www.google.com/analytics/learn/privacy.html

2.4 What options arise from logging in via social media and what data is then processed?

You can register quickly and easily with Un Ensayo para Mí using your Facebook or Google account. The prerequisite for this is that you are already registered with Facebook or Google or that you create a Facebook or Google account. If you wish to use this function, you will first be redirected to Facebook / Google. There you will be asked to log in with your username and password. Of course, we do not take note of your login details. If you are already logged in to Facebook or Google, this step will be skipped. Facebook / Google will then inform you which data will be transmitted to us. You confirm this with the “OK” button. We create your user account with the transmitted data. There is no permanent link between your user account and your Facebook / Google account beyond this. The purpose and scope of the data collection and of further processing and use of the data by Facebook, as well as your rights and setting options to protect your privacy, can be found in the data protection notices of Facebook (https://www.facebook.com/about/privacy/) and Google (https://www.google.com/policies/privacy/). Un Ensayo para Mí processes the personal data transmitted by each provider (Facebook, Google) in the course of user registration (cf. the aforementioned section 2.2).

The legal basis for processing this data is Article 6(1)(f) of the GDPR, Article 7(IX) of the LGPD, Article 15 of the LFPDPPP, Article 4 of Law No. 25.326, the provisions on lawful bases for processing of Law No. 21.719 of Chile and the Regulation of Law No. 29733 of Peru (Supreme Decree No. 016-2024-JUS).

2.5 How long is personal data stored?

The required and voluntary data entered during registration (cf. section 2.2) will be deleted when the account is deleted, provided that there are no legal provisions requiring longer storage.

With regard to the deletion of cookies, please refer to the explanations in section 2.3.

The legal basis for processing anonymized data is Article 6(1)(f) of the GDPR, Article 7(IX) of the LGPD, Article 16 of the LFPDPPP, Article 4 of Law No. 25.326, the provisions of Law No. 21.719 of Chile and the Regulation of Law No. 29733 of Peru (Supreme Decree No. 016-2024-JUS). Our legitimate interest consists of the principle of data minimization established in Article 5(1)(c) of the GDPR, Article 6(III) of the LGPD, Article 11 of the LFPDPPP, Article 9 of Law No. 25.326 and the principle of proportionality of Article 7 of Law No. 29733 of Peru.

3. Data protection information for subscribers to the Un Ensayo para Mí newsletter

On the Un Ensayo para Mí website, users have the option of subscribing to a newsletter on a selected topic as well as on current studies. For this purpose, the user must give their consent within the meaning of Article 6(1)(a) of the GDPR, Article 7(I) of the LGPD, Article 8 of the LFPDPPP, Article 5 of Law No. 25.326 of Argentina, the provisions on consent of Law No. 21.719 of Chile and Article 5 of Law No. 29733 of Peru, for the processing of their personal data relevant to this purpose.

3.1 What happens when the user subscribes to a newsletter?

When subscribing to the newsletter, the required and voluntary data (see section 2.2 above) stored in the user profile is processed for the purpose of sending the newsletter (email address) with formal personalization (first and last name) as well as content-based personalization (e.g., postal code and main study-related interests indicated by the user).

The user gives their consent to subscribe to the newsletter with full knowledge of these data protection provisions and the processing operations mentioned above.

3.2 Right of revocation at any time

The user has the right to revoke their consent at any time, without this affecting the lawfulness of the processing carried out up to that point on the basis of the consent given. This declaration can be made through a link included in the newsletter; in addition, the user has at their disposal the option described in section 8 of contacting the responsible body.

In the event of revocation, the user will no longer receive the newsletter.

The legal basis for exercising the right of revocation is found in Article 7(3) of the GDPR, Article 8(V) of the LGPD, Article 8 of the LFPDPPP, Article 6 of Law No. 25.326, the provisions on revocation of consent of Law No. 21.719 of Chile and Article 5 of Law No. 29733 of Peru.

4. Data protection information for the user's request to participate in studies

The Un Ensayo para Mí website can be used not only to obtain general information about clinical studies, but registered users can also request to participate in a study (“Study request”).

To submit a study request, it is necessary to give explicit consent for the data processing associated with the study request, within the meaning of Article 6(1)(a) of the GDPR, Article 7(I) of the LGPD, Article 8 of the LFPDPPP, Article 5 of Law No. 25.326, the provisions on consent of Law No. 21.719 of Chile and Article 5 of Law No. 29733 of Peru. In addition, with regard to sensitive data, the consent must meet the requirements established in Article 9(2)(a) of the GDPR, Article 11(I) of the LGPD, Article 9 of the LFPDPPP, Article 7 of Law No. 25.326, the provisions on the processing of sensitive data of Law No. 21.719 of Chile and Article 13(6) of Law No. 29733 of Peru (express and written consent for sensitive data).

Specific consent must be given for each particular study. In the case of requests for several studies, separate consent must be given for each of them.

4.1 What personal data is collected in connection with study requests?

In connection with a study request, the user's personal data is requested insofar as it is relevant to the user's suitability for a specific study. This generally includes data about the user's health (“special categories of personal data” within the meaning of Article 9(1) of the GDPR, Article 11 of the LGPD, Article 9 of the LFPDPPP, Article 2 of Law No. 25.326, the provisions on sensitive data of Law No. 21.719 of Chile and Article 2(5) of Law No. 29733 of Peru).

The user provides Un Ensayo para Mí with the corresponding data on the basis of explicit consent given voluntarily and with full knowledge of these data protection provisions. Without knowledge of the requested data, in certain circumstances Un Ensayo para Mí cannot provide, in general or in full, certain services and offerings.

The legal basis for processing the user's data is Article 6(1)(a) of the GDPR, Article 7(I) of the LGPD, Article 8 of the LFPDPPP, Article 5 of Law No. 25.326, the provisions on consent of Law No. 21.719 of Chile and Article 5 of Law No. 29733 of Peru, in conjunction with Article 9(2)(a) of the GDPR, Article 11(I) of the LGPD, Article 9 of the LFPDPPP, Article 7 of Law No. 25.326, the provisions on sensitive data of Law No. 21.719 of Chile and Article 13(6) of Law No. 29733 of Peru.

4.2 What other processing operations are carried out?

The user data collected in connection with a study request is stored by Un Ensayo para Mí in the user's personal profile and is processed to verify the user's suitability for the study in question. The data will also be used for communication between Un Ensayo para Mí and the user as part of the request process.

Finally, the user's data, when the user has given explicit consent for its disclosure and where Un Ensayo para Mí considers it appropriate for the study, will be transmitted to one of the centers associated with the study. The disclosed data may be used by the study center to contact the user.

In addition, the data stored at Un Ensayo para Mí may be presented for further information about the status of the request (“Status information”). Un Ensayo para Mí uses this information exclusively to assist the study center staff in contacting the user and/or to evaluate the user's request, as well as to carry out statistical evaluations (cf. the following section 5 in this regard).

4.3 Right of revocation at any time

The user has the right to revoke, at any time and with effect for the future, their consent to the processing of their personal data related to the study request, within the meaning of Article 6(1)(a) of the GDPR, Article 7(I) of the LGPD, Article 8 of the LFPDPPP, Article 5 of Law No. 25.326, the provisions on revocation of consent of Law No. 21.719 of Chile and Article 5 of Law No. 29733 of Peru, without this affecting the lawfulness of the processing carried out until then on the basis of the consent given.

A declaration of revocation can be sent by email to privacy@trialtech.es. In addition, the user has the option described in section 8 to contact the responsible entity.

The user may also limit the revocation to certain data. However, the revocation, even if limited to certain data, may result in the user no longer being able to use certain services (in particular, their request to participate in a study can no longer be evaluated).

4.4 How long will the personal data collected in connection with a request to participate in a study be stored?

Upon revocation, the data entered by the user (cf. section 4.1) will be deleted, provided that there are no legal provisions requiring longer storage. If the user has limited the revocation to certain data, only the data affected by the revocation will be deleted.

If no revocation is made, the data will be processed for the periods specifically indicated in the consent declaration and subsequently deleted.

The legal basis for deleting the data is Article 6(1)(a) and (f) of the GDPR, Article 7(I) and (IX) of the LGPD, Articles 8 and 11 of the LFPDPPP, Articles 4 and 9 of Law No. 25.326, the provisions of Law No. 21.719 of Chile and Articles 5 and 20 of Law No. 29733 of Peru. Our legitimate interest consists of the principle of data minimization established in Article 5(1)(c) of the GDPR, Article 6(III) of the LGPD, Article 13 of the LFPDPPP, Article 4(1) of Law No. 25.326 and the principle of proportionality of Article 7 of Law No. 29733 of Peru.

5. Use of anonymized data

Un Ensayo para Mí anonymizes the data collected from the user and subsequently uses it for statistical evaluations.

The legal basis for processing anonymized data is Article 6(1)(f) of the GDPR, Article 7(IX) of the LGPD, Article 16 of the LFPDPPP, Article 4 of Law No. 25.326, the provisions on lawful bases for processing of Law No. 21.719 of Chile and the Regulation of Law No. 29733 of Peru (Supreme Decree No. 016-2024-JUS). Our legitimate interest lies in the principle of data minimization and in our interest in optimizing the inclusion criteria or the design of questionnaires for future studies, as established in Article 5(1)(c) of the GDPR, Article 6(III) of the LGPD, Article 11 of the LFPDPPP, Article 9 of Law No. 25.326 and the principle of proportionality of Article 7 of Law No. 29733 of Peru.

6. Transmission and disclosure of personal data to third parties

6.1. Un Ensayo para Mí is entitled to make user data available to third parties with whom it collaborates to provide services (e.g., telecommunications providers). The disclosure of data is limited to the purpose of the collaboration, and the third parties that collaborate with Un Ensayo para Mí are entitled to use the data insofar as it is necessary to provide services.

The legal basis for the described transmission of personal data is Article 6(1)(f) of the GDPR, Article 7(IX) of the LGPD, Article 17 of the LFPDPPP, Article 11 of Law No. 25.326, the provisions on lawful bases for processing of Law No. 21.719 of Chile and the Regulation of Law No. 29733 of Peru (Supreme Decree No. 016-2024-JUS). Our legitimate interest consists of improving our procedures and services.

6.2. Furthermore, Un Ensayo para Mí may disclose personal data to third parties,

6.2.1. When the user has expressly given their consent (e.g., to a center conducting a study for which the user has registered). The legal basis is Article 6(1)(a) of the GDPR, Article 7(I) of the LGPD, Article 8 of the LFPDPPP, Article 5 of Law No. 25.326, the provisions on consent of Law No. 21.719 of Chile and Article 5 of Law No. 29733 of Peru.

6.2.2. When there is an enforceable or final judicial or administrative order for the publication and/or disclosure of data to third parties, or when Un Ensayo para Mí, due to a legal obligation, is required to publish and/or disclose to third parties even without such an order. The legal basis is Article 6(1)(c) and (f) of the GDPR, Article 7(II) and (XI) of the LGPD, Article 17 of the LFPDPPP, Article 11 of Law No. 25.326, the provisions on lawful bases for processing of Law No. 21.719 of Chile and the Regulation of Law No. 29733 of Peru (Supreme Decree No. 016-2024-JUS). Our legitimate interest lies in compliance with legal obligations and justified claims.

6.2.3. When publication and/or disclosure is necessary to prevent misuse of the internet offering or individual services, in particular, breaches of the terms of use, in a legally permitted manner. The legal basis is Article 6(1)(f) of the GDPR, Article 7(IX) of the LGPD, Article 17 of the LFPDPPP, Article 11 of Law No. 25.326, the provisions on lawful bases for processing of Law No. 21.719 of Chile and the Regulation of Law No. 29733 of Peru (Supreme Decree No. 016-2024-JUS). Our legitimate interest lies in the detection and pursuit of improper conduct.

6.3 Except for the cases set out in this data protection statement, Un Ensayo para Mí does not disclose the user's data to third parties without their explicit consent.

The legal basis for the transmission of personal data in the case of explicit consent is Article 6(1)(a) of the GDPR, Article 7(I) of the LGPD, Article 8 of the LFPDPPP, Article 5 of Law No. 25.326, the provisions on consent of Law No. 21.719 of Chile and Article 5 of Law No. 29733 of Peru.

6.4 International data transfers

Since the data controller is established in Spain and since the assessment of the user's suitability for the studies may involve the communication of their data to research centers, sponsors or service providers located in different countries, the processing may involve an international transfer of personal data, including special categories of data (health-related data).

Such transfers are carried out on the basis of the user's explicit consent and/or the appropriate safeguards provided for in the applicable legislation. The legal basis for the international transfer of data is Article 44 et seq. of the GDPR, Article 33 et seq. of the LGPD, Article 36 of the LFPDPPP, Article 12 of Law No. 25.326, the provisions on international data transfers of Law No. 21.719 of Chile and the provisions on cross-border data flow of Law No. 29733 of Peru and its Regulation (Supreme Decree No. 016-2024-JUS). The user may request information about the applicable safeguards through the contact details indicated in section 8.

7. User rights

The user has the following rights. Their exercise will be processed without delay and will not be detrimental to the user.

Right of information (Art. 15 GDPR, Art. 18 LGPD, Art. 16 LFPDPPP, Art. 14 Law No. 25.326, Law No. 21.719 of Chile, Art. 18 Law No. 29733 of Peru): The user may, free of charge, request from Un Ensayo para Mí information about which personal data is being processed, what its source is and for which purpose(s) it is being processed and, where relevant, to which recipients or categories of recipients this data is transmitted. Requests for information made electronically will be answered electronically.

Right of objection (Art. 21 GDPR, Art. 18 LGPD, Art. 8 LFPDPPP, Art. 16 Law No. 25.326, Law No. 21.719 of Chile, Art. 22 Law No. 29733 of Peru): The user may object to the processing of their data on grounds arising from their particular situation, insofar as the data processing is based on the pursuit of legitimate interests of Un Ensayo para Mí or of a third party (Art. 6(1)(f) GDPR, Art. 7(IX) LGPD, Art. 11 LFPDPPP, and Art. 6 Law No. 25.326), as well as in cases where the data processing is carried out in the public interest (Art. 6(1)(e) GDPR, Art. 7(III) LGPD, Art. 13 LFPDPPP, and Art. 5 Law No. 25.326). If the user submits an objection, Un Ensayo para Mí will no longer process the data, unless it can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the user, or the processing serves to establish, exercise or defend legal claims.

Insofar as Un Ensayo para Mí processes personal data to provide targeted information about the range of Un Ensayo para Mí services (“Advertising purposes”), the user has the right to object to the processing of their personal data in relation to such purposes. In the event of an objection to processing for advertising purposes, Un Ensayo para Mí will no longer process the user's personal data for these purposes.

Right to data portability (Art. 20 GDPR, Art. 18 LGPD, Art. 12 LFPDPPP, Art. 14 Law No. 25.326, Law No. 21.719 of Chile, Law No. 29733 of Peru and its Regulation): The user has the right to request the personal data they have made available to Un Ensayo para Mí in a structured, commonly machine-readable format, insofar as the processing of the data is based on the user's consent (Art. 6(1)(a) GDPR, Art. 7(I) LGPD, Art. 8 LFPDPPP, and Art. 5 Law No. 25.326) or the processing is carried out for the performance of a contract entered into with the user or for the implementation of pre-contractual measures (Art. 6(1)(b) GDPR, Art. 7(V) LGPD, and Art. 12 LFPDPPP).

Right of rectification (Art. 16 GDPR, Art. 18 LGPD, Art. 16 LFPDPPP, Art. 16 Law No. 25.326, Law No. 21.719 of Chile, Art. 20 Law No. 29733 of Peru): In the event that personal data is incorrect or incomplete, its rectification or completion may be requested.

Right of erasure / deletion (Art. 17 GDPR, Art. 18 LGPD, Art. 16 LFPDPPP, Art. 16 Law No. 25.326, Law No. 21.719 of Chile, Art. 20 Law No. 29733 of Peru): The user may request the immediate deletion of their data when (i) the purpose of the data processing has ceased, (ii) the processing is based on the user's consent and this has been revoked, (iii) the user has objected to the processing and no other type of processing has taken place, or (iv) the legal basis for processing the data is non-existent.

Right to restriction of processing (Art. 18 GDPR, Art. 18 LGPD, Art. 16 LFPDPPP, Art. 16 Law No. 25.326, Law No. 21.719 of Chile, Law No. 29733 of Peru): The processing of personal data may be restricted in specific cases, such as (i) while a correction of data is being verified, (ii) when the processing was initially unlawful, or (iii) when the data is no longer needed, but the user needs it to exercise legal rights.

Right of appeal (Art. 77 GDPR, Art. 18 LGPD, Art. 18 LFPDPPP, Art. 14 Law No. 25.326, Law No. 21.719 of Chile, Law No. 29733 of Peru): The user has the right to address a supervisory authority with appeals related to the processing of their data.

Right to revoke consent (Art. 7(3) GDPR, Art. 18 LGPD, Art. 8 LFPDPPP, Art. 6 Law No. 25.326, Law No. 21.719 of Chile, Art. 5 Law No. 29733 of Peru): The user has the right to revoke at any time a consent given to Un Ensayo para Mí for the processing of their personal data.

Users subject to Chilean or Peruvian law may exercise the same rights (access, rectification, cancellation or erasure, objection and portability) in accordance with Law No. 21.719 of Chile and Law No. 29733 of Peru and its Regulation, by contacting the contacts in section 8 or the supervisory authorities indicated therein.

8. Contact details of the controller

Contact details of the responsible authority:

Trialtech SL

Avda. De los Charcos 19

28860 Madrid

Email: info@trialtech.es

User support email: support@trialtech.es

Contact details of the data protection officer of the responsible authority:

European Union & Americas

Data Privacy Office

Espanya Industrial 7, 3° 1

08014 Barcelona

Email: privacy@trialtech.es

Using the contact addresses just mentioned, the rights mentioned in section 7 can be asserted both before the responsible authority and before its data protection officer. Questions related to data protection or suggestions may also be submitted.

Spain:

The Spanish Data Protection Agency is the competent supervisory authority. It oversees compliance with data protection law in Spain. The user has the possibility of contacting the supervisory authority at any time.

Contact details:

Agencia Española de Protección de Datos

C/ Jorge Juan, 6

28001-Madrid

Tel.: +34 / 900 293 183

Complaints: https://sedeagpd.gob.es/sede-electronica-web/vistas/infoSede/tramitesCiudadano.jsf

Brazil:

The National Data Protection Authority (ANPD) is the competent supervisory authority in Brazil. It oversees compliance with data protection law as established in the General Data Protection Law (LGPD). The user has the possibility of contacting the supervisory authority at any time.

Contact details:

Autoridade Nacional de Proteção de Dados (ANPD)

SCS, Quadra 09, Lote C

Torre C - Ed. Parque Cidade Corporate

Brasília, DF - Brasil

CEP: 70308-200

Website: https://www.gov.br/anpd

Complaints: https://www.gov.br/anpd/pt-br/canais_atendimento/cidadao-titular-de-dados/denuncia-peticao-de-titular

Mexico:

The National Institute for Transparency, Access to Information and Personal Data Protection (INAI) is the competent supervisory authority in Mexico. This body oversees compliance with the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and ensures that data controllers and processors comply with the applicable legal provisions.

Contact details:

Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI)

Insurgentes Sur 3211, Col. Insurgentes Cuicuilco, Alcaldía Coyoacán

C.P. 04530, Ciudad de México, México

Phone: +52 (55) 5004 2400

Website: https://home.inai.org.mx

Complaints: https://www.plataformadetransparencia.org.mx

Argentina:

The Agency for Access to Public Information (AAIP) is the competent supervisory authority in Argentina. This body oversees compliance with the Personal Data Protection Law (Law No. 25.326) and ensures that data controllers and processors comply with the applicable legal provisions.

Contact details:

Agencia de Acceso a la Información Pública (AAIP)

Av. Pte. Gral. Julio A. Roca 710, Piso 3

C1067ABP, Ciudad Autónoma de Buenos Aires, Argentina

Phone: +54 (11) 3988-3968

Website: https://www.argentina.gob.ar/aaip

Complaints: https://www.argentina.gob.ar/servicio/denunciar-incumplimientos-de-la-ley-de-proteccion-de-datos-personales

Chile:

The Personal Data Protection Agency (APDP) is the competent supervisory authority in Chile, created by Law No. 21.719, which enters into full force on 1 December 2026 and amends Law No. 19.628. This body oversees compliance with personal data protection legislation and has supervisory and sanctioning powers. The user has the possibility of contacting the supervisory authority at any time.

Contact details:

Agencia de Protección de Datos Personales (APDP)

Santiago, Chile

Website and complaint channels: to be confirmed according to the official details published by the Agency.

Peru:

The National Authority for the Protection of Personal Data (ANPDP), under the Ministry of Justice and Human Rights, is the competent supervisory authority in Peru. This body oversees compliance with Law No. 29733, the Personal Data Protection Law, and its Regulation (Supreme Decree No. 016-2024-JUS). The user has the possibility of contacting the supervisory authority at any time.

Contact details:

Autoridad Nacional de Protección de Datos Personales (ANPDP)

Ministerio de Justicia y Derechos Humanos

Calle Scipión Llona N° 350, Miraflores, Lima, Perú

Website: https://www.gob.pe/anpd

Complaints: through the Peruvian State Platform (https://www.gob.pe/anpd)

9. Links to other websites

Insofar as the website contains links to other websites, this data protection statement does not extend to the other providers. Un Ensayo para Mí has no influence over whether their operators comply with the data protection provisions and, therefore, accepts no responsibility for the accuracy, timeliness and completeness of the information presented there.

10. Changes to the data protection statement

Un Ensayo para Mí reserves the right to adapt this statement, where necessary, to changed legal or factual conditions.

11. Service provider and responsible authority

Trialtech SL

Avda. De los Charcos 19

28860 Madrid

Email: info@trialtech.es

Tax Identification Number: ES B01808039

Last revised: June 2026