PRIVACY POLICY

FUNDACIÓ PRIVADA INSTITUT DE RECERCA DE LA SIDA-CAIXA, (hereinafter, IrsiCaixa), with VAT number G60813227 and having its registered office at Hospital Germans Trias i Pujol. Ctra del Canyet, s/n 08916 Badalona (Barcelona), is aware of the importance of protecting your privacy. Therefore, it has a privacy policy to be as transparent as possible in how personal data will be used in case you decide to provide them.

  1. 1.      Principles that govern the processing of your personal data.

The treatment of your personal data by IRSICAIXA will be based on the following principles:

  • Principle of legality: Will only be treated your personal data in the case you have given your consent or there is another basis of legitimacy for the treatment established by the law.
  • Principle of transparency: Before processing your data, you will receive specific, transparent and accessible information about the circumstances of the treatment.
  • Principle of loyalty: Your personal data cannot be treated differently than the one communicated.
  • Principle of minimization of data: The personal data we request is adequate, pertinent and limited to what is necessary in relation to the purposes for which they are treated.
  • Principle of limiting the conservation period: Your data will only be treated during the time necessary to achieve the purposes of the treatment communicated.
  1. 2.      Transparency.

In addition to this policy, each of the sections and forms provided on the website through which personal data is collected has specific information about the processing of data obtained through that channel.

2.1.Description of the information provided.

The information that you will find in each form and that will be complemented by the "Additional Information" provided in this Policy for each web form, will be the following:

Information

Description

Responsible for the treatment

It refers to the identification of the company that will treat your personal data. In this case is Fundació Privada Institut de Recerca de la Sida-Caixa.

Purposes

The purpose or purposes pursued with the processing of your personal data will be included.

Legal basis of the treatment

Each form includes the legal basis that legitimates the treatment of your personal data, in those cases in which it is referred to your consent and any other basis recognized by current legislation.

Recipients

Identity or categories of those who can receive the communication of their personal data.

Data conservation periods or criteria for its determination

Period or criteria to determine the period during which your data will be processed for the communicated purposes.

Existence of automated decisions or profiling

It is possible that we use segmentation tools in order to offer you commercial communications adapted to your interests. In case it occurs, we will offer you specific information on the form on the website through which you provide your data.

The way of providing consent

In case that your consent is necessary for the processing of your data, you will be informed of the action required to consider that you have given such consent.

Consequences of the non-provision of consent

It is possible that if you do not give us your consent, we cannot provide the required service.

Treatments in third countries

In case your data is going to be processed in countries outside the European Union, you will be informed of the existence or not of a decision to adapt the European Commission and/or the guarantees adopted for the protection of your data.

Exercise of your rights

See section 3.

Data of the Delegate of Protection of Data or Data Protection Officer (DPO)

See section 4.

2.2.Specific information about the treatment of your personal data provided through each web section.

a)      Section “CONTACT”

ADDITIONAL DATA PROTECTION INFORMATION

Responsible

The responsible of processing your data will be Fundació Privada Institut de Recerca de la Sida-Caixa, with VAT number  G60813227 and having its registered office at Hospital Germans Trias i Pujol. Ctra del Canyet, s n 08916 Badalona (Barcelona).

Purposes

The purpose of the processing of personal data provided through this form is to resolve the query that you raise about the activities of IrsiCaixa. In case you do not accept the processing of your personal data, we will not be able to attend your inquiry.

Additionally, we may use your data anonymously to perform statistical monitoring of our customer service, considering that we have a legitimate interest in the continuous improvement of internal response processes.

Recipients

The personal data that you provide us through the web page will not be communicated to third parties, except in case they are required by an administrative or judicial authority. However, those companies that provide us services that require such access, such as computer services or web development companies, will have access to their data. All of them are contractually bound to maintain the confidentiality of their data and not to use them for any purpose other than the service they provide us.

If you wish, you can request a complete list of the categories of suppliers that will have access to your data at the address indicated in this Policy.

Conservation deadlines

Your data will be processed until the query resolution. Later, they may be kept anonymized for statistical purposes and to improve the quality of the service.

Rights

You can exercise your rights of access, rectification, deletion, opposition limitation and portability, as well as make any query about the treatment of your personal data, by contacting the Data Protection Officer (DPO) through the following channels:

-          Post mail: Hospital Germans Trias i Pujol. Ctra del Canyet, s/n 08916 Badalona (Barcelona).

-          E-mail: dpo@IrsiCaixa.com

Remember to attach a copy of your ID so we can verify your identity.

You can get more information about your rights in sections 3 and 4 of this Policy.

In case of not being satisfied with the treatment of your personal data, you can contact the Spanish Agency for Data Protection.

b)     Section “NEWSLETTER”

ADDITIONAL DATA PROTECTION INFORMATION

Responsible

The responsible of processing your data will be Fundació Privada Institut de Recerca de la Sida-Caixa, with VAT number  G60813227 and having its registered office at Hospital Germans Trias i Pujol. Ctra del Canyet, s n 08916 Badalona (Barcelona).

Purposes

To keep you informed of communications about activities, promotions and scientific and training news of IrsiCaixa. In the event that you do not accept the processing of your data, we will not be able to perform the requested service.

Personalization

of communications 

It is possible that we use segmentation tools to send communications in order to personalize communications and avoid sending information that may not be of interest. In order to personalize communications we use data from different sources, such as the analysis of the data you have provided (age, gender, etc.), the historical information of the products and services of the company you have acquired and the navigation data obtained through the cookies that are installed in your browser (see our Cookies Policy)

Although we rely on computer tools to carry out the segmentation, the criteria is always determined by people.

Recipients

The personal data that you provide us through the web page will not be communicated to third parties, except in case they are required by an administrative or judicial authority. However, those companies that provide us services that require such access, such as computer services or web development companies, will have access to their data. All of them are contractually bound to maintain the confidentiality of their data and not to use them for any purpose other than the service they provide us.

If you wish, you can request a complete list of the categories of suppliers that will have access to your data at the address indicated in this Policy.

Your data will be processed in the territory of the European Union, however, to send emails we use the MailChimp web platform (Rocket Science Group, LLC.), so your data will be transferred to the United States.

Rocket Science Group, LLC offers guarantees for the treatment of your personal data since it is certified by the Privacy Shield standard. You can check the accession of Rocket Science Group LLC to the Privacy Shield, as well as additional information about the processing of your data in MailChimp at the following link:

https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG

Conservation deadlines

Your data will be processed until you cancel your subscription to the receipt of information. Later, they will be kept under the proper blocking in order to avoid sending unwanted communications.

Remember that you can cancel your subscription in a simple way in the link that appears at the bottom of each e-mail you receive.

Rights

You can exercise your rights of access, rectification, deletion, opposition limitation and portability, as well as make any query about the treatment of your personal data, by contacting the Data Protection Officer (DPO) through the following channels:

-          Post mail: Hospital Germans Trias i Pujol. Ctra del Canyet, s/n 08916 Badalona (Barcelona).

-          E-mail: dpo@IrsiCaixa.com

Remember to attach a copy of your ID so we can verify your identity.

You can get more information about your rights in sections 3 and 4 of this Policy.

In case of not being satisfied with the treatment of your personal data, you can contact the Spanish Agency for Data Protection.

c)      Section “COMMENTS”

ADDITIONAL DATA PROTECTION INFORMATION

Responsible

The responsible of processing your data will be Fundació Privada Institut de Recerca de la Sida-Caixa, with VAT number  G60813227 and having its registered office at Hospital Germans Trias i Pujol. Ctra del Canyet, s n 08916 Badalona (Barcelona).

Purposes

To publish your comment and your identification data on the website. In case you do not accept the processing of your data we will not be able to publish your comment.

Recipients

The personal data that you provide us through the web page will not be communicated to third parties, except in case they are required by an administrative or judicial authority. However, those companies that provide us services that require such access, such as computer services or web development companies, will have access to their data. All of them are contractually bound to maintain the confidentiality of their data and not to use them for any purpose other than the service they provide us.

If you wish, you can request a complete list of the categories of suppliers that will have access to your data at the address indicated in this Policy.

Conservation deadlines

Your data will be kept until the event is deleted in relation to which you have published your comment.

Rights

You can exercise your rights of access, rectification, deletion, opposition limitation and portability, as well as make any query about the treatment of your personal data, by contacting the Data Protection Officer (DPO) through the following channels:

-          Post mail: Hospital Germans Trias i Pujol. Ctra del Canyet, s/n 08916 Badalona (Barcelona).

-          E-mail: dpo@IrsiCaixa.com

Remember to attach a copy of your ID so we can verify your identity.

You can get more information about your rights in sections 3 and 4 of this Policy.

In case of not being satisfied with the treatment of your personal data, you can contact the Spanish Agency for Data Protection.

  1. 3.      Rights you dispose.

In accordance with current legislation, you have a series of rights in relation to the processing of your personal data. These recognized rights are the following:

Rights of access and rectification: You have the right to know the use made of your personal data, and in particular, the right to obtain information about whether they are being processed and, where appropriate, the purpose thereof, as well as the information available on the origin of this data and the communications made or anticipated.

Likewise, you have the right to request the modification and update of your data.

Right to suppression: You have the right to request to delete your data, if no other legitimate reasons for the preservation of your data do not prevail.

Right of opposition: You have the right to object to the processing of your personal data at any time, provided that other legitimate reasons for the processing of your data do not prevail.

Right to portability: This is the right to have your personal data provided in a structured format, commonly used and mechanically read. The right to portability and personal data will proceed when:

  • When data processing is carried out by automated means;
  • When the treatment is based on consent or a contract;
  • When the user requests it with respect to the data she or he has provided to the person who is treating them and who are concerned, including the data derived from their own activity;

Right to limitation of the treatment: You have the right to limit the processing of your personal data, so that they can only be kept by the person in charge, without it being possible to carry out another treatment or use them for a different purpose. The right to limitation of treatment will be appropriate when:

  • The personal data that we have available are not exact;
  • Personal data is not being treated legitimately;
  • The treatment of the data is not necessary to achieve the purpose for which they were collected, but you have an interest in its preservation for the formulation, exercise or defense in case of claims;
  • In case you have exercised your right of opposition, so that your data is not treated for another purpose, beyond its conservation, until we can resolve your request;

Right to file a complaint with the competent authority: In the case of not being satisfied with the processing of your personal data, you can make a claim with the Spanish Agency for Data Protection.

IRSICAIXA will work to respond to your requests for the exercise of your rights as soon as possible, proceeding to execute the request as soon as it is appropriate, based on the characteristics of the processing of personal data.

  1. 4.      Delegate of Data Protection or Data Protection Officer (DPO).

IRSICAIXA has a DPO designated on behalf of the Spanish Agency for Data Protection. You can exercise your rights (see previous section), as well as make any query or suggestion, by contacting the IRSICAIXA DPO through:

-          Post mail: Hospital Germans Trias i Pujol. Ctra del Canyet, s/n 08916 Badalona (Barcelona).

-          E-mail: dpo@IrsiCaixa.com

Remember to attach a copy of your ID so we can verify your identity.

  1. 5.      Security of your data.

IRSICAIXA makes a big effort to guarantee the security of its data and to preserve them from any unauthorized access through the application of computer security measures and their continuous updating in order to adapt it to technological advances.

  1. 6.      Access to your data by third parties.

The personal data that you provide us through the web page will not be communicated to third parties, except in case they are required by an administrative or judicial authority. However, those companies that provide us services that require such access, such as computer services or web development companies, will have access to their data. All of them are contractually bound to maintain the confidentiality of their data and not to use them for any purpose other than the service they provide us.

If you wish, you can request a complete list of the categories of providers that will have access to your data at the address indicated in this Policy.

  1. 7.      Where your personal data will be processed.

Your data will be processed in the European Union, however, it is possible that they can be transferred to third countries for the provision of a service by a provider. In this case, you will receive specific information about the provider, the country or countries in which your data will be processed and the guarantees offered for the protection of your personal data.