Privacy Policy
Centre of Innovation for Data Tech and Artificial Intelligence – hereinafter, CIDAI – considers your personal information to be very important. We therefore process it confidentially and securely. We are committed to ensuring the privacy of personal data at all times and not collecting unnecessary information.
You do not have to register beforehand to access our website. If you need more information, you can contact us through the form available on our website as long as you agree with our privacy policy, which you must accept to record your express consent to the data processing for the specified purposes.
Pursuant to Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and Spain’s Personal Data Protection and Digital Rights Safeguards 3/2018 Act of 5 December, we provide you with information about the processing of your data through this Privacy Policy.
1. Who processes the data?
Please note that CIDAI is made up of organisations which you can see in the partners section of the website and are joint controllers of the processing. The main management organisation is:
Identity: FUNDACIÓ EURECAT (“Eurecat“)
Tax Identification No. (NIF): G66210345
Address: Parc Tecnològic del Vallès. Avinguda Universitat Autònoma, 23 – 08290 Cerdanyola del Vallès
Legal department email address: legal@eurecat.org
Phone number: + 34 93 238 14 00
2. What is the purpose of the processing?
Your data will be processed for the purpose of responding to your request to take part in CIDAI’s personnel selection processes.
3. Data Protection Officer
Email address of the Data Protection Officer: dpd@eurecat.org
4. What data do we collect, for what purposes and for how long do we store them?
| DATA PROCESSING | PURPOSE AND LEGAL BASIS | STORAGE |
| Contact form | Responding to requests and enquiries made by the user, where the legal basis for the processing is the data subject’s express consent pursuant to Article 6.1.a) of the GDPR. | The data collected will be stored for the time strictly necessary to fulfil the purpose for which they were collected and, in any case, to determine any potential liabilities which may arise from such purpose, taking into account the periods specified in the relevant regulations. |
| Sending informative messages about the company and our Newsletter | Subscription to information, promotions and offers from the organisation, where the legal basis for the processing is the data subject’s express consent pursuant to Article 6.1.a) of the GDPR | The data will be kept for as long as the subscription to the Newsletter lasts or until the data subject exercises the right to object or erase the data. In any case, they may be retained to determine any potential liabilities which may arise from such purpose. |
| Handling emails | Responding to enquiries received and managing the commercial or professional relationship, where the legal basis is the contractual relationship between the data controller and the data subject pursuant to Article 6.1.b) of the GDPR | The data will be kept for the time strictly necessary to fulfil the purpose for which they were collected and in any case to determine any potential liabilities that could arise from such purpose, taking into account the periods specified in the relevant regulations |
| CVs | Handling applications to be part of the organisation’s selection processes. The legal basis for our processing of personal data for this purpose is application of pre-contractual measures at the request of the data subject, pursuant to Article 6.1.b) of the GDPR | The data will not be kept longer than necessary for the purpose for which they were collected, unless there is a legal obligation to do so. In this case, they will be kept for a maximum period of one year. |
| Taking part in projects/studies | Processing the assessment of your participation in the project you have registered for, where the legal basis of the processing is the data subject’s express consent pursuant to Article 6.1.a) of the GDPR | The data will be kept for the time needed to assess your participation in the project. Once the assessment has been completed, they will be deleted. In all cases, they may be retained to determine any potential liabilities that could arise from such purpose, taking into account the periods specified in the relevant regulations. |
| Activities, conferences and events | Managing registration to take part in activities, conferences and events, where the legal basis for the processing is the data subject’s express consent pursuant to Article 6.1.a) of the GDPR | The data will be kept for the time strictly necessary to fulfil the purpose for which they were collected and in any case to determine any potential liabilities which may arise from such purpose, taking into account the periods specified in the relevant regulations. |
| Training | Managing registration to take part in training activities through the form provided for this purpose, where the legal basis for the processing is the data subject’s express consent pursuant to Article 6.1.a) of the GDPR | The data will be kept for the time strictly necessary to fulfil the purpose for which they were collected and in any case to determine any potential liabilities which may arise from such purpose, taking into account the periods specified in the relevant regulations. |
| Request for a quote | Responding to your request for a quote, where the legal basis for the processing is the data subject’s express consent pursuant to Article 6.1.a) of the GDPR | The data will be kept for the time strictly necessary to fulfil the purpose for which they were collected and in any case to determine any potential liabilities which may arise from such purpose, taking into account the periods specified in the relevant regulations. |
5. Who will the data be disclosed to?
We will not disclose your personal data to third parties unless there is a legal obligation for us to do so or you give us your express consent. In the event that the data is transferred to partners, sponsors, etc. of Eurecat activities, we will ask for your express consent at the time of registration.
6. Are there any international data transfers?
There are no international data transfers to countries outside the European Union.
7. What are the data subject’s rights?
7.1. Right of access
As a user, you can ask us to explain what we do with your personal data.
You can also ask us for information about the purpose of the processing of your personal data, the period of time for which we store them, your rights as a user, transfers of the data to a third country or an international organisation, whether there is any automated decision-making or profiling on the website and more.
7.2. Right of rectification
If the personal data you have provided to us are inaccurate or incomplete, you have the right to rectify or complete them. Contact us and we will rectify the data according to your request.
7.3. Right to restrict the processing
As a user you can request restriction of the processing of your personal data when:
- You question the accuracy of your personal data, for a period of time that allows us to verify their accuracy.
- The processing is unlawful and you object to the erasure of your personal data and instead of erasing them you ask for their use to be restricted.
- We no longer need your data for the purposes of the processing, but they are needed for the establishment, exercise or defence of legal claims.
7.4. Right to erasure
You can ask us to erase your personal data immediately. We are obliged to delete the data immediately when they are no longer required for the purpose for which they were collected. You can also ask us to erase your data if you change your mind about the consent you gave, when you object to the processing and there are no justified grounds for it, if your data are processed incorrectly, if the data have to be erased to comply with a legal obligation or if the data have been obtained in relation to a legal offer.
7.5. The right to information
If you have exercised a right to rectify, erase or restrict your data, we are obliged to inform all the recipients to whom your personal data have been disclosed of such rectification, erasure or restriction of processing, unless this proves impossible or involves a disproportionate effort.
As a user, you have the right to be informed by the controller about who these recipients are.
7.6. Right to data portability
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from us.
7.7. Right to object
As a user, you have the right to object to our use of the personal data made available to us at any time on grounds related to your particular situation.
We will no longer process your personal data unless we demonstrate compelling legitimate grounds for using them which override your interests, rights and freedoms or the processing is for the establishment, exercise or defence of legal claims.
7.8. Right to withdraw the declaration of consent related to data protection
As a user, you have the right to change your declaration of consent related to data protection at any time. This change of decision regarding the consent will not affect the legality of any processing that took place on the basis of the consent provided prior to its withdrawal.
7.9. Automated individual decision-making, including profiling
You have the right not to be subject to a decision solely based on automated processing, including profiling, which has legal effects for you or significantly affects you in a similar way.
7.10. Right to submit a complaint to a supervisory authority
As a user, you have the right to submit a complaint to a supervisory authority, in particular in the Member State of your residence, place of work or place of infringement, if you consider the processing of your personal data implies a violation of the GDPR.
7.11. Where can you exercise your rights?
You can ask to exercise your rights by emailing legal@eurecat.org
8. Is it mandatory to provide all the information requested in the data collection forms?
You must fill in the fields marked as “required” in the forms posted on the website. Failure to complete the required personal data or only partial completion might mean that Eurecat will be unable to deal with your requests and, therefore, Eurecat will be held harmless for any liability due to not rendering or only partially rendering the requested services.
The personal data you provide to Eurecat must be current information so that our records are up to date and error-free. You are responsible for the veracity of the data you provide.
9. What security measures do we have in place?
Eurecat protects and uses your personal data according to the regulations in force on data protection and information society services.
We have implemented the necessary technical and organisational security measures to ensure the security of users’ personal data and prevent their alteration, loss, unauthorised processing and/or access to them, bearing in mind the state of the art, the kind of data provided and the risks to which they may be exposed whether by human action or physical or natural factors in accordance with regulations.