Updated as of 10 April 2024
1.- Who is responsible for the processing of the personal data provided?
In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights.
- The data provided through this contact form will be processed by CONSORCIO CENTRO DE INVESTIGACIÓN BIOMÉDICA EN RED (hereinafter CIBER), with Tax Identification Code G85296226 and address at Calle Monforte de Lemos, 3-5; Pabellón 11; Planta baja, 28029 Madrid.
- CIBER has appointed a Data Protection Officer (DPO) in accordance with the provisions of articles 37 to 39 of the General Data Protection Regulation.
- The Data Protection Delegate (DPD) appointed by CIBER is Ms. Olga Martínez Rodríguez, with e-mail address datos@ciberisciii.es, and with postal address for these purposes at Calle Monforte de Lemos, 3-5; Pabellón 11; Planta baja, 28029 Madrid.
2.- For what purpose do we process your personal data?
The treatment that CIBER is going to make of your data is the management of the requests made by the interested parties through our contact forms, as well as the management of the sending of our Newsletters, provided that this has been previously consented to by the interested parties.
3.- What is the legal basis for the processing of your personal data?
The legal basis for processing your personal data is the user’s consent, provided through the check box provided for this purpose. The interested party shall be entitled to withdraw his or her consent at any time by contacting CIBER and exercising his or her right to suppression of the data under the terms established in section 6 of this Policy.
4.- How long will we keep your personal data?
The data will be kept for the time necessary to conduct the activities described above.
5.- To which recipients will your personal data be communicated?
Your personal data will not be disclosed to third parties, except in the cases provided for by law.
6.- What are your rights when you provide us with your personal data?
The interested party may exercise the rights detailed below, accompanying their request with a copy of a reliable document of identification (DNI, NIE, etc.) and contacting our Data Protection Delegate, Ms. Olga María Martínez Rodríguez, by e-mail at datos@ciberisciii.es:
- Right of access: This is the data subject’s right to obtain confirmation from CIBER as to whether or not personal data concerning him/her are being processed and, if so, the right of access to the personal data.
- Right of rectification: This is the right of the data subject to request the rectification of inaccurate personal data concerning him or her. The data subject shall also, taking into account the purposes of the processing, have the right to have incomplete personal data supplemented, including by means of an additional statement.
- Right to erasure: This is the right of the data subject to obtain the erasure of his or her personal data, provided that one of the circumstances provided for in Article 17 of the General Data Protection Regulation applies.
- Right to restriction of processing: This is the right of the data subject to obtain the restriction of the processing of personal data, provided that any of the conditions set out in Article 18 of the General Data Protection Regulation are met. In this case, the data may only be processed, with the exception of their retention, with the consent of the data subject or for the formulation, exercise, or defence of claims.
- Right to object: This is the right of the data subject, in certain circumstances and on grounds relating to his or her particular situation, to object to the processing of his or her personal data, in accordance with the provisions of Article 21 of the General Data Protection Regulation.
- Right to data portability: This is the right of the data subject to receive personal data relating to him/her, which he/she has provided to a controller, in a structured, commonly used and machine-readable format, and to transmit them to another controller without being prevented from doing so by the controller to whom he/she has provided them, provided that the conditions set out in Article 20 of the General Data Protection Regulation are met.
7.- Changes to the Privacy Policy
CIBER reserves the right to modify this Privacy Policy in order to adapt it to new legislation, jurisprudence, or interpretation by the Spanish Data Protection Agency. In this case, CIBER will announce these changes, clearly indicating the modifications made sufficiently in advance, and requesting you, if necessary, to accept these changes.