Linkedin-in X-twitter

Privacy Policy

1. Preliminary information

Centre of Innovation for Data Tech and Artificial Intelligence – hereinafter, CIDAI considers your personal information is very important. We therefore process it confidentially and securely. We are committed to ensuring the privacy of personal data at all times and not to collect unnecessary information.

You do not need to previously sign up in order to access our website. If you require any further information, you can contact us through the form available on our website, providing you agree with our privacy policy, which you must accept in order to record your express consent to the data processing for the specified purposes.

Pursuant to Regulation (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and Act 3/2018 of 5 December on the protection of personal data and guarantee of digital rights, we provide you with information about the processing of your data through this Privacy Policy.

2. Who processes the data?

The user is informed that CIDAI is composed of entities that can be consulted in the partners section of the website, acting as joint data controllers, the main entity being the management:

Identity: FUNDACIÓ EURECAT (hereinafter referred to as “Eurecat“)

Tax Identification Code (NIF): G66210345

Registered office: Parc Tecnològic del Vallès. Avinguda Universitat Autònoma, 23 – 08290 Cerdanyola del Vallès

Legal department email address: legal@eurecat.org

Telephone number: + 34 93 238 14 00

3. Data Protection Officer

Email address of the Data Protection Officer: dpd@eurecat.org

4. What data do we collect, for what purposes and for how long do we store them?

 

DATA PROCESSING PURPOSE AND LEGAL BASIS STORAGE PERIOD
Contact form To respond to requests and enquiries made by the interested party, the legal basis of the processing being the data subject’s express consent pursuant to Article 6.1.a) of the GDPR. The data collected will be stored for the time strictly necessary to fulfil the purpose for which they were collected and, in any case, to determine the possible liabilities that could arise from such purpose, taking into account the periods specified in the relevant regulations
Sending informative messages about the company and the Newsletter

 

 To subscribe to information, promotions and offers of the company, the legal basis for the processing being the data subject’s express consent pursuant to Article 6.1.a) of the GDPR. The data will be stored for the period the data subject has subscribed to the Newsletter or until he/she exercises the right to object to or erase the data. However, they may be stored in order to determine the possible liabilities that could arise from such purpose
Email management To respond to the enquiries received and to manage the commercial or professional relationship, the legal basis being the contractual relationship between the Data Controller and the data subject, pursuant to Article 6.1.b) of the GDPR The data collected will be stored for the time strictly necessary to fulfil the purpose for which they were collected and, in all cases, to determine the possible liabilities that could arise from such purpose, taking into account the periods specified in the relevant regulations
CVs To deal with applications as part of the company’s recruitment processes. The legal basis for processing of personal data for this purpose is application of pre-contractual measures at the request of the data subject, pursuant to the provisions in Article 6.1.b) of the GDPR The data will not be stored longer than necessary for the purpose for which they were collected, unless there is a legal obligation to do so. In such case, they will be stored for a maximum term of one year.
Taking part in projects/studies To process the assessment of applications received from data subjects to take part in projects or studies, the legal basis of the processing being the data subject’s express consent pursuant to Article 6.1.a) of the GDPR The data will be stored during the time needed to assess the participation in the project. Once the assessment has been completed, they will be erased. In all cases, they may be stored in order to determine the possible liabilities that could arise from such purpose, taking into account the periods specified in the relevant regulations
Activities, conferences and events To manage the registration to participate in activities, conferences and events, the legitimacy of the processing being the application of pre-contractual measures at the request of the interested party, in accordance with art. 6.1.b) of the GDPR. The sending of informative communications related to the activity is based on legitimate interest (art. 6.1.f) GDPR. The data will be stored for the time strictly necessary to fulfil the purpose for which they were collected and, in all cases, to determine the possible liabilities that could arise from such purpose, taking into account the periods specified in the relevant regulations
Training To manage the registration to take part

in training activities through the form enabled for this purpose,. The data will be processed for such purpose, the legal basis of which is the data subject’s express consent pursuant to Article 6.1.a) of the GDPR

 The data will be stored for the time strictly necessary to fulfil the purpose for which they were collected and, in all cases, to determine the possible liabilities that could arise from such purpose, taking into account the periods specified in the relevant regulations
Request for quotation To respond to your request for quotation, being the legitimacy of the treatment the express consent in accordance with art. 6.1.a) of the RGPD. The data will be stored for the time strictly necessary to fulfil the purpose for which they were collected and, in all cases, to determine the possible liabilities that could arise from such purpose, taking into account the periods specified in the relevant regulations

 

5. To whom will the data be disclosed?

In general, the transfer of personal data to third parties is not foreseen. The data may be communicated to public administrations, funding bodies, entities that grant grants and project partners when such communication is necessary for compliance with legal obligations or for the management, execution, supervision, control, auditing and justification of projects, activities or actions funded. Likewise, the data may be accessed by service providers who act as data controllers on behalf of the data controller. In the event that the data is transferred to collaborators, sponsors, etc. of CIDAI’s activities, their express consent will be requested at the time of registration.

6. Are data transferred internationally?

There are no international data transfers to countries outside the European Union.

7. What are your rights a and how can you exercise them?

  • Right to access the data

You can ask us to explain what we do with your personal data.

You can also ask us for information about the purpose of the processing of your personal data, the period of time for which we store them, your rights, the transfer of the data to a third country or an international organisation, the existence of automated decisions or profiling on the website, among others.

  • Right to rectification

If the personal data you have provided to us are inaccurate or incomplete, you are entitled to rectify or supplement them. Please contact us and we will rectify the data according to your request.

  • Right to restrict the processing

You can request restriction of the processing of your personal data in the following cases:

  • If you question the accuracy of your personal data, for a period of time that allows us to verify their accuracy.
  • If the processing is unlawful and you object to the erasure of your personal data, instead of erasure, you request that their use is restricted.
  • If we no longer need your data for the purposes of processing, but they are needed for the establishment, exercise or defence of legal claims.

  • Right to erasure

You can request us to erase your personal data immediately. We are obliged to erase the data immediately if they are no longer required for the purpose for which they were collected. In addition, you can ask us to erase your data if you change your mind about the consent you granted, if you object to the processing and there are no justified grounds for it, if your data are processed incorrectly, if the data must be erased in order to comply with a legal obligation or if the data has been obtained related to a legal offer.

  • Right to information

If you have exercised a right to rectify, erase or restrict your data, we are obliged to inform all the recipients to whom your personal data have been disclosed of such rectification, erasure or restriction of processing, unless this proves impossible or involves a disproportionate effort.You are entitled to be informed by the data controller about who these recipients are.

  • Right to data portability

You are entitled to receive the personal data you have provided to us in a structured, commonly used and machine-readable format. You are also entitled to transfer this data to another data controller without us being able to prevent this.

  • Right to object to the data processing

You are entitled to object to our use of the personal data made available to us at any time for reasons related to your personal situation.

We will stop processing your personal data unless we have compelling legitimate grounds to use them, if such grounds override your interests, rights and freedoms or if the processing is for the establishment, exercise or defence of legal claims.

  • Right to withdraw the declaration of consent related to data protection

You are entitled to change your declaration of consent related to data protection at any time. This change of decision regarding the consent will not affect the legality of the processing that took place on the basis of the consent provided prior to its withdrawal.

  • Automated individual decisions, including profiling

You are entitled not to be subject to a decision solely based on automated processing, including profiling, which has legal effects for you or significantly affects you in a similar way.

  • Right to submit a complaint to a supervisory authority

You are entitled to submit a complaint to a supervisory authority, in particular in the Member State of your residence, place of work or place of infringement, if you consider the processing of your personal data implies a violation of the GDPR.

  • Where can you exercise your rights?

You can request to exercise your rights at the following e-mail address: legal@eurecat.org

 8. Is it mandatory to provide all the information requested in the data collection forms?

Regarding the forms posted on the website, you must fill in the fields marked as “required”. Failure to complete the required personal data or only partial completion could mean that Eurecat will be unable to deal with your requests and, therefore, Eurecat will be held harmless for any liability due to not rendering or only partially rendering the requested services.

The personal data provided by the interested party to Eurecat must be current information so that our records are up to date and error-free. The interested party is responsible for the veracity of the data provided.

9. What security measures have we implemented?

Eurecat protects and uses your personal data according to the regulations in force on data protection and information society services.

We have implemented the necessary technical and organisational security measures to guarantee the security of the interested party personal data and prevent their alteration, loss, unauthorised processing and/or access thereto, bearing in mind the state of the art, the kind of data provided and the risks to which they could be exposed, whether due to human action or physical or natural factors, in accordance with the provisions in the regulations in force.