Linkedin-in X-twitter

Privacy Policy – Mapping

In accordance with Regulation (EU) 2016/679, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and the free movement of such data (RGPD), and with Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPD), we inform you that the data obtained for the purpose of the survey, mainly, are not of a personal nature. Despite the above, some questions may request contact details from the respondent, which are considered personal data and for which specific consent is requested.

The following provides privacy information and data processing, in general terms, when participating in the survey “Mapping and dynamization of the AI ​​ecosystem in Catalonia”

Who is the Data Controller?

The survey Mapping and dynamization of the Artificial Intelligence (AI) ecosystem in Catalonia (hereinafter “the Survey”), is a joint initiative of the CIDAI represented by the Eurecat Foundation, the Department of Digital Policies and Public Administration of the Generalitat, the Agency for Business Competitiveness (ACCIÓ), the Digital Cluster of Catalonia and the i2Cat Foundation and, consequently, will process the data under a co-responsibility regime, complying with the legal guarantees established in article 26 of the GDPR.

Below, the specific data of each of the co-responsible persons of the Survey is provided:

Digital Policies Department of the Generalitat of Catalonia

CIDAI (initiative integrated by different promoter partners that you can consult: https://cidai.eu/es/socios-promotores/ ) led and represented by EURECAT FOUNDATION

ACTION

Digital Cluster of Catalonia

i2Cat Foundation

The co-responsible parties, in order to facilitate and expedite communication for interested parties, inform that any contact regarding the Survey should be directed to the aforementioned details of the i2Cat Foundation, without prejudice to the fact that the interested party may contact any of the other co-responsible parties. In any case, the co-responsible parties undertake to coordinate internally to be able to respond properly to interested parties.

Hereinafter, the co-responsible persons for the Survey will be referred to collectively as the “Responsible for the Treatment“.

For what purpose do we process personal data? Which categories of data do we process?

The Survey, in general terms, has as its main purposes mapping agents and companies, identifying challenges, needs and opportunities for innovation, encouraging synergies between supply and demand and, finally, promoting the entire Artificial Intelligence ecosystem and the data economy in Catalonia, as an international benchmark; The categories of data processed for these purposes are basically non-personal data in relation to legal persons and professional contact data of the respondent, specifically the email, which are of a personal nature and belong to the category of professional identification data.

The entities jointly responsible for the processing will process your corporate contact details (corporate email) in order to send you information, by electronic means, about activities and initiatives similar to those that are the subject of this Survey, and which are related to the following initiatives in the business field: the promotion of business competitiveness, internationalization, innovation and the attraction of productive business investment in all its aspects. The co-responsible parties are legally authorized by the regulations on information society services and electronic commerce. The interested party may object to the processing of their data for this purpose at any time in accordance with what is indicated in the section “What are your rights in relation to your personal data?”

Additionally, some of the Survey questions request the use of the respondent’s professional contact details (professional email), which are personal data belonging to the category of professional identification data, for ancillary purposes for which express consent is required, otherwise these purposes will not be carried out. The accessory purposes that can be found in the Survey are detailed below:

  • Send general information about the co-responsible parties or their projects outside of the Survey.
  • Provide contact details to the entities that make up the CIDAI (you can consult them at https://cidai.eu/es/socios-promotores/)

How long will we keep personal data?

The personal contact details of respondents will be retained as long as they are necessary for the purposes for which they were requested and, in any case, until the respondent requests their deletion.

What is the basis of legitimacy for the processing of personal data?

The legal basis for the processing of personal data requested for the sending and management of the Survey is consent through acceptance for this purpose. The Data Controller will not, under any circumstances, process personal data for ancillary purposes without having previously informed and requested your consent or without having been authorised by the regulations.

The legal basis on which the Data Controller processes corporate data (corporate emails) for the sending of information, by electronic means, on activities and initiatives similar to those that are the subject of this Survey, and which are related to the following initiatives in the business field, is legitimized by being expressly authorized by the regulations on information society services and electronic commerce.

Who are the recipients of personal data?

The personal data provided will be processed, mainly, by the Data Controller. Notwithstanding the above, personal data may be made available to the Data Controller’s service providers for the provision of services related to the purposes of the processing, such as, for example, providers for sending communications or for storing and managing databases. In this sense, access and possible processing of data by service providers will be carried out with the legally required contractual supports and, in any case, third parties will not sell, transfer, rent, make the data available to third parties or process the data for their own or different purposes.

In the event that the respondent has expressly consented to the transfer of contact details, the recipients of the data will be the members of CIDAI, who can be consulted at https://cidai.eu/es/socios-promotores . The Data Controller is exempted from any liability resulting from the processing of the data by the recipients.

Personal data may be transferred in the event of legal obligation without the need for consent. The rest of possible transfers, not foreseen, will require the express and duly informed authorization of the interested parties.

Are there any international data transfers?

In principle, data is not subject to international data transfers outside the European Economic Area. Without prejudice to the foregoing, the Data Controller may have service providers that are located outside the European Union, or that provide their services outside. In this sense, the Data Controller ensures that personal data will be processed in accordance with the requirements that the legislation requires for this purpose.

Is personal data subject to automated decisions or profiling?

The personal data obtained by the respondent are not subject to automated decisions nor are they subject to profiling.

What are your rights when you provide us with your personal data?

Current legislation on data protection grants a series of rights to interested parties, due to the processing of their data, which are summarized below:

  1. Right of access: The interested party will have the right to know their personal data processed by the controller and the purposes.
  2. Right of rectification: The interested party may request the rectification/update of their data at any time.
  3. Right of deletion: The interested party may request, at any time, that their personal data be deleted from the controller’s files. However, and as indicated in the data retention section, in certain circumstances, compliance with current legislation may prevent the effective exercise of this right.
  4. Right of opposition: The interested party may object to the processing of their data in relation to any of the purposes for which the controller processes their data, in accordance with the privacy policies applicable in each case.
  5. Right to limitation of processing: The interested party may request the limitation of processing in the following cases:
    1. If you consider that the data is not correct or accurate;
    2. If you consider that your data is not being processed legitimately, but you prefer that we limit the processing of the same to its elimination;
    3. If the data is no longer necessary for us in accordance with the purpose for which it was collected but it needs to be retained to file legal claims;
    4. If, having exercised the right to object to any pending processing, there is a response from the person responsible.
  1. Right to data portability: The interested party will have the right, whenever technically possible and reasonable, to request that the personal data they have provided directly be communicated to another data controller.

The Data Controller, in order to facilitate the exercise of rights and communication with interested parties, in an exercise of transparency and proactivity, has established as the main contact channel: i2Cat Foundation via postal mail to 2-4 Gran Capità Street. Nexus I Building, 2nd floor, Office 203, 08034 Barcelona or via e-mail at rgpd@i2cat.net

Notwithstanding the above, the respondent may also exercise their rights or communicate directly with any of the co-responsible persons of the Survey, whose details are detailed in the section “Who is responsible for the processing of your personal data? of this Privacy Policy.

Regardless of the channel chosen by the interested party to exercise their rights, the direct contact channel with Fundació i2Cat or directly to any of the co-responsible for the treatment, the management and exercise of the right will be carried out in a coordinated manner by the co-responsible parties and for the benefit of the interested party, complying with the legal specifications.

The interested party, in the event that they do not obtain a satisfactory response and wish to make a complaint, or obtain more information regarding privacy, may contact the Control Authority: the Spanish Data Protection Agency, through its postal address C/ Jorge Juan 6, Madrid (Spain) (www.agpd.es) and/or, the Catalan Data Protection Authority, through its postal address C/ Rosselló, 214, CP08008, Barcelona (Spain) (www.apdcat.gentcat.cat)