SCOPE

This Privacy Policy of INSTITUT D'INVESTIGACIÓ BIOMÉDICA DE BELLVITGE (IDIBELL) regulates the collection, use, and other forms of processing of personal data provided by users on this website or in any of the Internet environments of the Entity. Thus, it also provides complementary information to the data processing carried out from different strategic areas of our institution.

Through the implementation of the forms included in the different websites, relative to services provided by INSTITUT D'INVESTIGACIÓ BIOMÉDICA DE BELLVITGE (IDIBELL), the Users accept the inclusion and processing of the data they provide in the processing of personal data, of which INSTITUT D'INVESTIGACIÓ BIOMÉDICA DE BELLVITGE (IDIBELL) is the holder, being able to exercise the related rights according to the exposed in the following clauses.

All legal texts are available to users and / or interested in the corresponding website. These texts may be modified and/or updated according to the needs and activities carried out by INSTITUT D'INVESTIGACIÓ BIOMÉDICA DE BELLVITGE (IDIBELL).

In the following sections, we answer some questions that may arise concerning how these data are processed and what are the commitments we assume when accessing, storing, and disposing of the information that may eventually be collected.

 

What regulations do we apply when we manage your data to provide you with our services?

For these purposes, our activity is governed by the commonly known General Regulation of Data Protection (RGPD), which is the Regulation (EU) 2016/679 of the Parliament and of the Council, of April 27, 2016, regarding the protection of legal people with regard to the processing of personal data and the free movement of such data and repealing Directive 95/46  / EC; Organic Law 3/2018, of December 5, Protection of Personal Data and guarantee of digital rights, and other national regulations that may be applicable.

 

How can I contact the person responsible for processing personal data?

Company name of the person in charge	CIF
INSTITUT D’INVESTIGACIÓ BIOMÈDICA DE BELLVITGE (IDIBELL)	G58863317
Address
Gran Via de l’Hospitalet, 199-203, 2a planta
City	Postal Code
Hospitalet de Llobregat	08908
Phone / e-mail
+34 93 607 38 00 / info@idibell.cat
Contact for the exercise of rights
dataprotection@idibell.cat
Contact with DPD
FUNDACIÓ TIC SALUT SOCIAL, amb CIF G64350374,  direcció postal c/ Roc Boronat 81-95, 08005, Barcelona.

 

Who collects your data?

The collection and processing of personal data that can be provided are carried out by IDIBELL, and in this case, through its data processors, who are third parties with whom IDIBELL has established an express service contract, and in which the conditions have been set so that the management of the data is by the law. These third parties are required by contract that their activity respects the law and that they implement the appropriate security measures to protect these rights.

In other cases, IDIBELL may also collect the data through co-responsible for the processing, which are entities that are part of the Board of trustees and/or are partners of IDIBELL, publicly incorporated on the IDIBELL website.

At the time of the collection of personal data, the interested party will be informed if it is done through IDIBELL or a co-responsible for processing. In any case, the interested party can request more information at dataprotection@idibell.cat.

 

What is the legal basis of the processing of your personal data?

The primary legal basis of the processing of your personal data for browsing through the IDIBELL website is your consent, provided by the acceptance of the notice of the use of cookies, or in the case of not accepting or rejecting, for continuing browsing knowing their existence.

Regardless of the information collected through cookies, you can browse most of the pages of IDIBELL without providing any persona information. However, in some cases, this information may be necessary to provide you the registration of the Intranet’s service or to be able to respond to your request made through the contact form or IDIBELL’S enabled e-mails. In these cases, the legal basis of processing will be your consent and/or the need to fulfill an obligation derived from the provision of services by the Entity.

In the event that the processing of your personal data could be based on some other basis of legitimacy, you would be expressly informed prior to registering personal information.

 

for what purpose do we collect your data?

IDIBELL only collects the strictly necessary data to offer the services derived from its activity and other benefits, procedures, and activities attributed by law.

On this website, only the data provided by Users is processed. The data that can be obtained from the user will be processed for:

• Management of your contact data to resolve doubts or suggestions, being the legal basis of your consent.
• Management of your identification and banking data to process the process of financial donations, with your consent being the legal basis.

- Management of your identification, academic and professional training data for personnel selection processes.

As a registered user and a member of IDIBELL, the processing will be carried out to provide the services offered by the Entity, as well as to regulate and comply with the legal obligations of the relationship that binds us, either as a worker or as an affiliated member. We inform you that the information in the databases may be used to identify Users and to carry out statistical studies of registered Users.

Likewise, as a member of IDIBELL, you can also receive e-mails about training and other current aspects of IDIBELL. If you wish to unsubscribe from these communications, you can do so through the same e-mail that you receive or by requesting dataprotection@idibell.cat.

As a follower user in social networks, the processing will be carried out to manage and publish content or information that may appear your profiles or walls and that we think may be of interest.

As a user candidate for a job offered by IDIBELL, an internship or research project of IDIBELL, or any other person who has opted for an IDIBELL candidacy or has presented spontaneously for a similar purpose, you will also be accepting the processing of your personal data to apply for a position, maintain communication concerning the status of the candidature, to access the delivered CV, as well as on the candidate's social networks; to compare that your data is in accordance with the offers announced by IDIBELL and to verify, where appropriate, that the information provided is accurate. This information can be shared with other co-managers of the processing that are linked to the purpose of the application, which will be expressly informed at the time of data collection.

Finally, as a person who has given biological samples to the HUB-ICO-IDIBELL Biobank, the purposes of the processing will be expressly communicated before the collection of personal data, which, for your safety, will go through a pseudonymization process, by the current regulation.

 

How do we process your data?

L’IDIBELL collects data exclusively to the extent necessary to achieve a specific purpose. The information will not be used for a purpose incompatible with that described.

These data will be guarded and managed with the highest reasonable diligence applying the limitation and minimization criteria.

IDIBELL has included all the technical and organizational measures at its disposal to prevent the loss, misuse, alteration, unauthorized access, and theft of the personal data it guards. Likewise, in the event of a security incident that seriously jeopardizes the confidentiality and availability of your data, IDIBELL will follow the mandatory notification protocols to the competent authority, and the interested parties affected.

 

How do we process your data?

When the legitimate basis of the processing is based on the consent of the interested party, the personal data will be kept as long as it does not state otherwise, unless, for logical and evident reasons, they have lost the utility or the legitimate purpose for which they were collected. It is reported that those personal data collected through an application that does not end with the incorporation of the candidate in IDIBELL, will be kept for a maximum period of one year.

When the legitimate basis of the processing is based on the fulfillment of a legal and/or contractual obligation, the personal data will be kept, once the relationship that links the interested party with the IDIBELL for the time necessary to face the derived legal responsibilities. From the same. In this sense, it is expressly informed that the legally established conservation periods are:

- 10 years in the case of financial or in-kind donations made free of charge according to Law 10/2020, of April 28, on the prevention of money laundering and the financing of terrorism.

- 10 years in cases related to IDIBELL accounting and taxation, as established in the General Tax Law of December 16, and according to the periods of prescription of criminal liability derived and included in Organic Law 10/1995 of 23 of November.

- 10 years as regards the contractual obligations acquired by the IDIBELL, except for claims related to periodic payments that must be made for years or terms plus prices, remuneration for the provision of services and works, claims for the sale price of consumption, which will be kept for a period of 3 years, as provided in Law 29/2002, of December 30. First Law of the Civil Code of Catalonia.

- Five years as regards the obligations derived from the prevention of occupational risks as established in Royal Legislative Decree 5/2000, of August 4, which approves the consolidated text of the law on offenses and penalties in the social order.

- Four years as regards the obligations derived from social security as established in Royal Legislative Decree 5/2000, of August 4, which approves the consolidated text of the law on offenses and penalties in the order Social.

- Three years as regards the obligations derived from social security as established in Royal Legislative Decree 5/2000, of August 4, which approves the consolidated text of the law on offenses and penalties in the order Social.

- Three years regarding data that may be linked to other non-contractual obligations, as provided in Law 29/2002, of December 30. First Law of the Civil Code of Catalonia.

Finally, and regarding the specific conservation periods of the applicable legislation in the field of biomedicine, and as long as the corresponding rights of the interested parties are not exercised, the established legal conservation periods are:

- Thirty years regarding data associated with cells, tissues, and any biological material of human origin according to Law 14/2007, of July 3, on biomedical research, once the project, study, or trial is finished, for which they were collected.

- Fifteen years regarding the data included in the informed consent, according to Law 21/2000, of December 29, on the rights of information about the health and autonomy of the patient, and the clinical documentation of the Department of the Presidency of the Autonomous Community of Catalonia.

- Five years regarding genetic data, since they were obtained, except that their conservation is necessary to preserve the health of the person from whom it comes or of third parties related to it according to Law 14/2007, of July 3, of investigation biomedical.

 

To which recipients will your data be communicated?

Your data can be communicated to third parties who help us provide Information Technology services, and comply with the legal and contractual obligations assumed by IDIBELL

IDIBELL has adopted the appropriate technical and organizational measures to guarantee the adequate use of data by these third parties, and if the aforementioned data processing implies the international transfer of data, especially for the use of services hosted in the cloud, ensures that the third party complies with the obligations outlined in the current data protection regulations.

If you want more information about which third parties your data may have been transferred, you can request it through the e-mail dataprotection@idibell.cat.

 

What rights do you have about your data?

Right of access

You can ask the center if you are processing your information and in what way.

 

Right of rectification

You can ask us to update your personal information if it is incorrect, and delete it if you wish

 

Right to limitation of processing

In this case, they will only be kept by IDIBELL for the exercise of defense so claims.

 

Right of opposition

After your request to oppose the processing, IDIBELL will stop processing the data in the way indicated, unless for compelling legitimate reasons or the exercise of the defense of possible claims have to continue processing.

 

Right to data portability

In case you want your data to be processed by another company, IDIBELL will facilitate the portability of your data to the new manager.

 

Right of suppression

You may request that we delete your data when it is no longer necessary for the processing, withdraw your consent, be it illicit processing, or have a legal obligation to do so. We will analyze the assumption and apply the law.

 

Right not to be subject to automated decisions

Right not to be subject to wholly automated decisions and without human intervention if it may have legal effects on the interested party or may significantly affect it, as long as the interested party's explicit consent has not been obtained or is authorized by EU law or the State.

If you need more information about what rights are recognized in the law and how to exercise them, we recommend that you contact our Data Protection Delegate at dpd@ticsalutsocial.cat or at the Catalan Data Protection Agency, which is the control authority in terms of data protection, with whom you also have the right to request your protection before a possible data protection information.

 

IF I WANT TO EXERCISE THEIR RIGHTS TO WHOM THEY ARE GOING?

For the best management of your request, please send us the following information:

• An e-mail to the mailbox, dataprotection@idibell.cat, indicating your full name, along with a copy of your ID or similar and the right you wish to exercise over your data.
• A letter with the same information at the address: Gran Via de l’Hospitalet, 199-203, 2^nd floor, Hospitalet de Llobregat.
• If you have doubts about how to do it, you can also call us: 93 260 74 11.

 

COMMUNICATION OF INCIDENTS AND IRREGULARITIES

In the event of any conduct or situation that could be likely to generate an incident or irregularity of any kind, please contact dataprotection@idibell.cat.

 

USER'S COMMITMENT TO HAVE THEIR DATA RECORDED TO A PROCESSING 

IDIBELL recommends that, before introducing the data in any or some of the data collection sheets of this website, carefully read the legal notice, cookie policy, and privacy policy.

In any case, the user is responsible for the authenticity of the data provided, which are accurate, updated and complete for the purpose for which they are provided, assuming responsibility for damages, both for lost profits and for emerging damage, which may be generated by such inaccuracies or falsehoods. In any case, if a third party owned the data provided in the corresponding forms, the user is responsible for the correct collection of consent and information to the third party on the aspects reflected in this legal notice and privacy policies.

 

USER RESPONSIBILITY FOR USE AND CONTENT

Both the access to the websites and the use that can be made of the information and contents included in them will be of the exclusive responsibility of whoever makes it. Therefore, the use that may be made of the information, images, content and/or products reviewed and accessible through it, will be subject to the law, whether national or international, applicable, as well as the principles of good faith and lawful use by users, who will be entirely responsible for such access and proper use. Users will be obliged to make reasonable use of the services or content, under the principle of good faith and with respect for existing law, morality, public order, good customs, the rights of third parties or the IDIBELL itself, all according to the possibilities and purposes for which they are designed.

IDIBELL assumes no liability, whether direct or indirect, for consequential damages or lost profits, arising from the misuse of services or content made by users or third parties.

 

LSSI-CE INFORMATION

In fulfillment of the duty of information contemplated in the article 10 of the effective Law 34/2002, of July 11, of Services of the Society of the Information and of Electronic Commerce, we communicate to him that manager of contents of the web where it can unload different applications and/or information is INSTITUT D'INVESTIGACIÓ BIOMÉDICA DE BELLVITGE (IDIBELL) with domicile in and with the management of the domain of Internet http://www.idibell.cat/ registered in the corresponding registry, attending to communications of the users and/or interested parties through the e-mail info@idibell.cat.