This is the data protection policy for the SIENHA project.
Who is responsible for the processing of personal data?
The person responsible for the processing of personal data is the Blanquerna Foundation, with address at Passeig de Sant Gervasi, 47 in Barcelona (CP 08022), CIF R5800622B, tel. 932533000, email email@example.com, registered in the Register of Religious Entities of the Ministry of Justice, with registration number 000286 (103-SE / F).
For what purpose and legitimacy do we process the data and to whom is it communicated?
Contact. We attend to inquiries from people who contact us via email, contact forms on our website or by telephone. We process this information with the consent of the addressee.
Institutional directories. We record the data of individuals, including representatives of legal entities, public and private, with whom there are relationships in order to establish institutional relationships and communication for the exercise of the Foundation’s own functions. The data is processed in fulfillment of a public interest mission. They are not communicated to other people outside the Foundation.
Research management. Personal data of people who have agreed to participate in research projects or their legal representatives are recorded for the purpose of analyzing the results and statistical treatment. Data are processed on the basis of the consent of the person concerned and in compliance with a mission of public interest (research and higher education). The data is not communicated to other people.
How long do we keep the data?
We comply with the legal obligation to limit the retention period of data to the maximum. For this reason, we keep the data only for the time necessary and justified by the purpose. In certain cases, such as the data contained in the institutional directory are kept as long as the interested parties maintain their professional or representative status, or as long as they do not request their deletion. In the case of personal data processed for research purposes, they are deleted when the dynamics of the project allow it and only anonymised data are kept.
What rights do people have in relation to the data we process?
As provided in the General Data Protection Regulations, the persons from whom we process data have the following rights:
- To know if they are treated. Everyone has, in the first place, the right to know whether we process their data, regardless of whether a previous relationship has existed.
- To be informed in the collection. When personal data is obtained from the data subject, at the time of providing it, it must have clear information about the purposes for which it will be used, who will be responsible for the processing and the main aspects arising from this processing.
- To access it. A very broad right that includes knowing exactly what personal data are being processed, what the purpose is for which they are processed, communications to other people that will be made (if any) or the right to obtain them. ne copy or know the expected shelf life.
- To request rectification. It is the right to rectify inaccurate data that is processed by us.
- To request its deletion. In certain circumstances, there is the right to request the deletion of the data when, among other reasons, they are no longer necessary for the purposes for which they were collected and justified their processing.
- To request the limitation of the treatment. Also in certain circumstances the right to request the limitation of data processing is recognized. In this case, they will no longer be processed and will only be kept for the exercise or defense of claims, in accordance with the General Data Protection Regulations.
- To portability. It is the right to receive personal data in a structured, commonly used, machine-readable and interoperable format, or to request that it be transferred in this way to another Data Controller. This right is recognized when the data subject has provided the personal data by giving consent or when the processing is necessary to execute a contract. It is not recognized when the treatment has a legal basis other than consent or contract.
- To oppose treatment. A person may adduce reasons related to his particular situation, reasons that will lead to the cessation of processing of his data to the extent or to the extent that it may cause him harm, except for legitimate reasons or the exercise or defense against claims.
- Not to receive information. We immediately respond to requests not to continue receiving information about our activities and services, when these shipments were based solely on the consent of the recipient.
How can rights be exercised or defended?
The rights we have just listed can be exercised by sending a request to the Blanquerna Foundation to the postal address or other contact details indicated in the heading. If a satisfactory response has not been obtained in the exercise of the rights, it is possible to submit a complaint to the Catalan Data Protection Authority, through the forms or other channels accessible from its website (www.apd.cat).
In all cases, whether to file complaints, request clarification or send suggestions, it is possible to contact the Data Protection Officer by e-mail at firstname.lastname@example.org.