In compliance with the provisions of EU Regulation 2016/679 General Data Protection (RGPD) and Organic Law 3/2018 on Protection of Personal Data and guarantee of digital rights (LOPDGDD) we inform you below of the privacy policy of KERN PHARMA, S.L. regarding the processing of personal data.


Users are informed that the controller responsible for the processing of personal data collected through this website is KERN PHARMA, S.L. with address at Pol. Ind. Colom II, Carrer Venus, 72, 08228 Terrassa, Barcelona (hereinafter "Kern Pharma"). Users may contact the Data Controller by post to the above address or by sending an email to

In the case of subsidiary companies located in other countries both of the European Union or outside the European Union, if you contact them directly, you assume that your data will be processed directly by these companies.


In the forms of this website, only identifying data (name, surname, contact email) of users and professionals are collected. In the case of professionals, certain information can be requested, such as the specialty in order to direct the information in a more adjusted way to the interested party.

In the case of job seekers, the necessary data is collected to be able to evaluate the offers.


Contact forms:

The purpose of this treatment will be to answer your query, answer your request or solve the question raised In this case your personal data will be kept for the time necessary to answer your query and will subsequently be blocked for as long as it is essential to comply with the legal obligations to which the company is obliged.

CV submission forms:

The purpose of this treatment will be participation in selection processes that the company has open or opens in the future. We will keep your data for a maximum of two years unless you tell us otherwise and then the time necessary for compliance with legal obligations.

Marketing communications

If you tick the corresponding box, we may use your data in order to keep you informed of our news, activities and other information that may be of interest to you and related to the activity of the company.

We will keep your data as long as you do not express your opposition and in any case a maximum of 5 years from the last confirmation of interest.


Kern Pharma organizes training sessions and workshops for healthcare professionals. The personal data collected in the corresponding registration forms will be processed in order to manage attendance and participation in them (either in distance or face-to-face format) and, where appropriate, to inform you of upcoming training events.

Your data will be kept for the time necessary to comply with the purpose and with our legal obligations.

Health professionals:

Certain sections of the website may be aimed exclusively at health professionals (doctors, pharmacists, etc.). This will indicate and collect identifying data of these professionals and their contact in order to provide them, if requested, information of scientific interest, events, training through any means including electronic means.

If applicable, you will be asked for information about your specialty in order to direct communications with content more in line with your professional profile.

Customers and suppliers:

In the context of relations with our customers and suppliers, personal data will be managed solely for the purpose of guaranteeing the good end of said commercial relationship, providing the products and all those procedures related to the process of acquisition and provision of products and services, including compliance with the corresponding legal obligations.

Personal data will be kept for the time necessary to comply with the contract and with the corresponding legal obligations.


Kern Pharma can organize events of interest that involve registration in them and the corresponding management of assistance. 

The data will be used for such purposes and will be kept for a minimum time thereafter that will be specifically indicated in each event.

Whistleblowing channel

A specific site has been set up for the formulation of complaints in compliance with the provisions of Law 2/2023 of February 20, regulating the protection of people who report on regulatory infractions and the fight against corruption.

We will keep the data for the periods indicated in the aforementioned regulations.


The legal basis that legitimizes the processing of personal data will be the following:

  • Contact forms: The consent of the interested party and the correct execution of the query or request made.
  • CV collection forms: the consent of the interested party.
  • Sending commercial communications: the consent of the interested party.
  • Training: provision of training (execution of contract).
  • Professionals: consent to the submission of information of scientific interest and other information about Kern's activities.
  • Customers and suppliers: execution of the contractual relationship.
  • Events: contract execution.
  • Whistleblowing channel: compliance with a legal obligation in accordance with the provisions of Law 2/2023.


The Data Controller may communicate the user's personal data to group companies provided that such communication is related to the request or query made or for internal administrative matters. Likewise, the recipients of the data may be the Public Administrations or other entities (financial, insurance), courts, State security forces and bodies in order to comply with the  contracts with customers and suppliers and the  legal obligations to which the company is obliged.

In the case of CVs, the data may be communicated to other companies of the Indukern Group; Grupo Indukern, S.L. (, Laboratorios Calier, S.A. ( and Acta Farma, S.L. (, with the same purposes and duration.

Kern Pharma may work with certain service providers who have access to personal data (hosting services, consultancies, training companies, external professionals, etc.). With all of them, the corresponding data processing agreements have been signed in order to regulate such access and demand compliance with personal data protection regulations.

Tools and suppliers located outside the European Union (Microsoft 365 or Salesforce) may be used, but we have ensured that the measures and guarantees established in the General Data Protection Regulation have been adopted for international transfers (standard contractual clauses, among others).


Users of the website have no obligation to provide their personal data, but if they do not, it is possible that the services provided through our website cannot be carried out.

The Responsible informs that users have the right to access, rectify, delete their data as well as the right to limitation of treatment, opposition and portability of their data in the cases included in Regulation (EU) 216/679 General Data Protection (RGPD).

In the event that the treatment is based on consent, the user may always revoke consent for the processing of their data.

To exercise these rights, a postal mail must be sent to the addresses of the Responsible indicated above or through an email to To do this, you must prove your identity by expressing what right you wish to exercise.

In the event that users see their rights violated, they may file the corresponding claim with the Spanish Agency for Data Protection ( In any case, we have a strong commitment to privacy and we will do everything possible to solve any data protection issues in the direction.

Updated April 2023