IRB Barcelona, as data controller, guarantees an adequate and comprehensive level of protection for individuals with regard to their personal data being processed by the company, in accordance with General Data Protection Regulation 679/2016.
IRB Barcelona only processes personal data in a highly responsible manner and lawfully, and in accordance with the legal grounds that result in the legality of the processing. It has also adopted the relevant and appropriate security measures given the objectively identified and assessed risks to the rights and freedoms of the data subjects which may derive from the processing carried out by our company.
Offered below is additional and extended information regarding the specific processing activities carried out by IRB Barcelona through its website:
The data controller is:
FUNDACIÓ INSTITUT DE RECERCA BIOMÈDICA DE BARCELONA (IRB BARCELONA)
Tax Identification No. (NIF): : G-63971451
Address: C/ Baldiri Reixac, núm. 10 (Parc Científic de Barcelona), CP: 08028, Barcelona
E-mail address: info@irbbarcelona.org
Telephone no.: 93 402 05 50 / 93 403 71 11
The contact details of our Data Protection Officer are:
dataprotection@irbbarcelona.org
1. WHY DO WE COLLECT YOUR PERSONAL DATA?
We collect data to:
- Attend your questions, provide information you may require, and manage your requests.
- Manage your participation in and registration for events organised by IRB Barcelona.
- Send you commercial communications (newsletters), as well as information on news, events, fundraising campaigns, and scientific advances, or other topics of interest related to IRB Barcelona.
- Manage your position in the selection process if you have applied for one of our job offers.
- Manage and issue invoices for donations received.
- Manage events organised by IRB Barcelona.
- Manage the online shop.
- Manage the Alumni Network and register in the private areas of the web.
2. LEGITIMATION FOR DATA PROCESSING
The legal grounds that enable us to process your personal data are:
- The consent you gave when you contacted us electronically.
- The consent you gave and legitimate interest for sending commercial communication.
- The consent you gave for recruitment processes for job offers.
- The execution of a contract and consent you gave for the management of donations made.
- The execution of a contract and consent you gave for the management of your participation in events organised by IRB Barcelona.
- The execution of a contract for a purchase made in our online shop.
- The consent you gave to form part of the Alumni Network and register in the private areas of the web.
3. PROHIBITION ON SHARING PERSONAL DATA WITH THIRD PARTIES AND THEIR RETENTION
We inform you that if you agree to join the Alumni Network, your contact details will be visible to other members of this network
IRB Barcelona will not provide data to third-party users, except in the event of a legal obligation. We also inform you that we will retain your personal data for as long as the purpose for which they were collected lasts. Once this period has ended, the data will only be retained in the event of a legal obligation or until you express a wish to be removed from our Newsletter and Alumni network databases or register in personal areas (Ex: Alumni).
4. YOUR RIGHTS OF ACCESS, RECTIFICATION, ERASURE, OBJECTION, PORTABILITY AND RESTRICTION OF PROCESSING.
European Data Protection Regulation 679/2016 has implemented a series of legal guarantees that allow users to exercise rights and perform actions related to the processing of their data. IRB Barcelona offers you that legal guarantee, so at any time and/or when deemed appropriate you can make use of your rights of access, rectification, erasure, objection, portability and restriction of processing by writing to the contact e-mail address we have enabled for this: dataprotection@irbbarcelona.org, or by sending your request by post to c/ Baldiri Reixac, núm. 10 (Parc Científic de Barcelona), CP: 08028, Barcelona; attaching, in both cases, a copy of your passport or national identification card (owner of the data) and expressly indicating in the subject the request you wish to make: access, rectification, erasure, objection, portability or restriction of processing.
We will briefly explain what each of the rights you can exercise consists of:
|
Access |
You can obtain confirmation about whether or not your personal data are being processed and, if they are, exercise your right of access to them and other information such as, for example, the purposes of the processing, their possible transfer to third parties, the rights you have in relation to your data or information about their source. |
|
Rectification |
You can modify any personal data that are inaccurate or incomplete, specifying in your request which data you wish to be modified. |
|
Objection |
You can object to the processing of your data in cases such as advertising and commercial prospecting activities or when this processing is aimed at a decision in relation to you based solely on the automated processing of your personal data. |
|
Portability |
You can receive the personal data that you had previously provided to us in a structured format, of common use and machine readable and transmit them to another controller, provided that this is technically possible. |
|
Erasure or the right to be forgotten |
You can request the erasure of your personal data without undue delay when any of the legally established cases occur, such as, for example, illegal data processing, or when the purpose for which they were processed or collected has ended |
|
Restriction of processing |
You can restrict the processing of your personal data when certain legally established conditions are met, such as, for example, due to contesting the accuracy of your personal data or their illegal processing. |
We also remind you that if you believe your data protection rights have been violated, you can lodge a complaint with the Catalan Data Protection Agency, called Autoritat Catalana de Protecció de Dades (www.apdcat.gencat.cat).
5. SOCIAL MEDIA POLICY
IRB Barcelona has a corporate profile on the following social networking sites: Facebook, Linkedin, Youtube, Twitter and Instagram. Therefore, by virtue of the provisions of the European Data Protection Regulation 679/2016, the entity is “Data controller for the processing of your personal data” as a result of the existence of these profiles on social media and the fact that you follow us and we can follow you. This means that if you decide to join our corporate profile as a follower or “like” our content or profile, you accept this policy where we will explain your rights and how we use your data.
As the data controller for the processing of your data, we guarantee confidentiality in the processing and respect for your rights, always based on the aforementioned regulation.
We also inform you that we will use these social networking sites to announce any relevant news or information related to the projects that we are carrying out or topics we consider may be of interest to you. By using the features of these platforms you may receive news with this type of information on your wall or profile.
However, we also inform you that there is no link between IRB Barcelona and these social networking platforms or sites, so you will accept their policy of use and conditions when you access them and/or accept their notices, terms and conditions in the registration procedure. IRB Barcelona will not be responsible for any use or processing of your data that is made outside of the strict relationship and provision of services indicated in this policy.
6. INTEGRATION WITH THE OTHER LEGAL TEXTS
This Privacy Policy is complemented by the Legal Notice, the Cookies Policy and the General Terms and Conditions associated with this website.