Privacy Notice 1

Privacy policy

1. Scope

Grifols, S.A., ("Grifols") undertakes to protect the privacy of any users who access the website http://www.grifols.com/ (the "Website"). The contents of the Website are owned, operated, licensed or controlled by Grifols and are intended only for healthcare professionals.

The user can browse and use the Website without having to provide any personal data. Grifols will only have access to personal data which have been voluntarily supplied by users through the forms provided, or by contacting Grifols by e-mail or through any other means provided on the Website. If the Website collects personal data through cookies, the user will be adequately informed through the Cookies Policy and, as the case may be, by any other means required by applicable law.

This document sets out Grifols' policy on the processing of personal data collected through the Website. The use of the Website implies the user's acceptance of the provisions of this Privacy Policy as well as having its personal data processed as set out in said policy. Please note that, although there may be links to other websites to which the Website is redirected, this Privacy Policy applies only to the Website and not to other websites to which the Website is redirected. Grifols does not control or endorse the content of third party websites nor does it accept any liability for the content or the privacy policies of such websites.

2. Data Controller

According to current regulations, the user is informed that the personal data collected through this Website will become part of a file owned by Grifols, S.A., a Spanish company with address at c/ Jesús y María, 6 08022 Barcelona (Spain).

3. Purposes

If users contact Grifols through the Website or by e-mail, their personal data will be used to respond their requests of information and any other queries.

Any other purpose shall be communicated to users before processing personal data.

4. Transfers to third parties

In order to reply correctly to your requests or queries, the user'spersonal data maybe transferred to other companies within the group, located in Spain or in another country, where legislation on personal data protectionmay be less stringent than the legislation in the European Economic Area. The user expressly authorizes us to make such communications and/or transfers to any companies within the Grifols group for the aforementioned purposes. Please check countries of Grifols worldwide at http://www.grifols.com.

User's data will be treated with utmost confidentiality and in compliance with the applicable security measures.

5. Security Measures

Grifols adopts the technical and organizational measures which are necessary to maintain the level of security required for personal data being processed. Grifols has also the necessary mechanisms in place to prevent, to the extent possible, any unauthorized accesses, thefts, illicit modifications and losses of data.

6. Confidentiality

In compliance with current regulations, Grifols undertakes to fulfill its obligation of secrecy regarding the personal data that users provide while browsing through the Website and its duty to keep and store said data confidential.

7. Data quality

Data provided by users must be accurate and truthful. In any case, users have the obligation to notify Grifols of any changes to their data in order to keep said data up to date at all times.

8. Rights of data subjects

At any time, users may exercise the rights of access, rectification, cancellation and opposition to the data processing under the terms set out in the current legislation, by sending a written communication to privacy@grifols.com, together with a copy of their identity document and specifying the right exercised.

9. Update of the Privacy Policy

If it does not contravene the applicable legislation on data protection, Grifols may modify and update the Privacy Policy at any time without prior notice to users. Users must always check the content of the Privacy Policy in order to remain informed at all times of the information collected through the Website, how this information is used and the circumstances in which it may be disclosed to third parties.

July 2016