Institute

Personal Data Protection

  • In compliance with the duty of information set out in Article 10 of Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce, we inform you that the content of this website https://www.recercasantpau.cat/ (hereinafter, the "Website") belongs to FUNDACIÓ INSTITUT DE RECERCA DE L'HOSPITAL DE LA SANTA CREU I SANT PAU (FIRHSCSP), with registered office at carrer Sant Quintí, number 77-79, 08041, Barcelona (Spain) and with tax identification number G-60.136.934. This legal notice governs the conditions of use of the aforementioned Internet portal.

  • This Legal Notice governs access to, browsing and use of the following website https://www.recercasantpau.cat/, which the FIRHSCSP makes available to Internet users. Therefore, accessing it implies acquiring the status of user and thereby accepting the website's conditions of use. In case of disagreement with the conditions, you must refrain from using the website.

    The user is informed, and accepts, that access to this website does not in any way constitute the beginning of a commercial relationship with the FIRHSCSP.

  • The user's visit to the website must be carried out responsibly and in accordance with current legislation, good faith, this Legal Notice and respecting the intellectual and industrial property rights owned by the FIRHSCSP. The website provides a wide variety of information, services and data. The user assumes responsibility for the correct use of the website.

    The use of any of the website's content for purposes that are or could be unlawful is strictly prohibited, as is the performance of any action that causes or may cause damage or alterations of any kind not consented to by the FIRHSCSP, to the website or its content.

    The entity reserves the right to make without prior notice any modifications it deems appropriate to its website, being able to change, delete or add both the content and services provided through it as well as the way in which they are presented or located on its servers.

  • The FIRHSCSP makes different contact channels available to users on its website. The use of personal information received through the different email addresses provided for communication with the FIRHSCSP is subject to its Privacy Policy. In no case does mere communication imply entering into a contract with the FIRHSCSP.

  • The FIRHSCSP declares that it has adopted the necessary measures that, within its capabilities and the state of technology, allow the correct functioning of the website as well as the absence of viruses and harmful components. However, the FIRHSCSP cannot be held responsible for the following situations, which are listed by way of example but not limitation:

    • The continuity and availability of content.
    • The absence of errors in said content or the correction of any defect that may occur.
    • The absence of viruses and/or other harmful components.
    • Damages caused by any person who breaches the FIRHSCSP's security systems.
    • The use that users may make of the content included on the website. Consequently, the FIRHSCSP does not guarantee that the use that users may make of the content included on the website will comply with this legal notice, or that the use of the website will be carried out diligently.
    • The use of the website by minors or the sending of their personal data without the permission of their guardians, the guardians being responsible for the use they make of the Internet.
    • Content that the user may access through unauthorized links or links introduced by users through comments or similar tools.
    • The introduction of erroneous data by the user or a third party.

    The FIRHSCSP may temporarily and without prior notice suspend access to the website for maintenance, repair, update or improvement operations. Consequently, the FIRHSCSP shall not, under any circumstances, be liable for any damages that may arise from the lack of availability or accessibility of the website or from the interruption of the website's operation. However, whenever circumstances permit, the FIRHSCSP will notify the user, with sufficient advance notice, of the scheduled date for the suspension of content.

    Likewise, in accordance with Articles 11 and 16 of Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSICE), the FIRHSCSP undertakes to eliminate or, where appropriate, block content that may affect or be contrary to current legislation, the rights of third parties or public morality and order.

    • The FUNDACIÓ INSTITUT DE RECERCA HOSPITAL DE LA SANTA CREU I SANT PAU is not responsible for the content of websites that the user may access through the links established on its website and declares that it will in no case proceed to examine or exercise any kind of control over the content of other sites on the network. Likewise, it does not guarantee the technical availability, accuracy, truthfulness, validity or legality of third-party sites that may be accessed through the links.

  • The FIRHSCSP is the exclusive owner of the rights relating to its website and its social networks; therefore, all content, graphic design and codes that form part of https://www.recercasantpau.cat/ are the exclusive property of the FIRHSCSP. Their reproduction, distribution, public communication, transformation or any other activity carried out with the content is prohibited, even if the sources are cited, unless the prior, express and written consent of the FIRHSCSP is obtained.

    The FIRHSCSP does not grant any authorization of use of any kind over its intellectual and industrial property rights or over any other property or right related to the website, and in no case shall users' access and browsing be understood as a waiver, transfer, licence or total or partial assignment of these rights by the FIRHSCSP. Any unauthorized use of said content shall be considered a serious breach of intellectual or industrial property rights and shall give rise to the legally established liabilities. The FIRHSCSP reserves the right to exercise against the user any applicable judicial and extrajudicial actions.

  • In accordance with current regulations on Personal Data Protection, users are informed that their data will be incorporated into the Processing Activities Register owned by the FIRHSCSP for the purpose of managing user requests.

    In compliance with current regulations, the FIRHSCSP informs you that the data will be retained for the period strictly necessary to fulfill the requested enquiry.

    Likewise, the data will be processed lawfully, fairly, transparently, adequately, relevantly, in a limited manner, accurately and kept up to date. For this reason, the FIRHSCSP undertakes to adopt all reasonable technical and security measures to ensure that data are deleted or rectified without delay when they are inaccurate or untruthful.

    In accordance with data protection regulations, users may exercise the rights of access, rectification, limitation of processing, erasure, portability and objection to the processing of their personal data as well as withdraw the consent given for their processing. Requests should be sent to the following email address dpo_ir@santpau.cat attaching an identification document. 

    For more information, you may contact the Catalan Data Protection Authority:

    https://apdcat.gencat.cat/ca/inici/index.html

    And/or the Spanish Data Protection Agency:

    https://www.aepd.es/es .

  • The website may use cookies (small text files that the server sends to the computer of the person accessing the page). This is a technique commonly used on the Internet to carry out certain functions that are considered essential for the correct operation and display of the site.

    The cookies used on the website are, in all cases, temporary in nature with the sole purpose of making subsequent transmission more efficient and they disappear at the end of the user's session. Cookies will never be used to collect personal information.

    From the client's website, it is possible to be redirected to third-party website content. Since the FIRHSCSP cannot always control the content introduced by third parties on their websites, it assumes no responsibility whatsoever for such content.

    In any case, the FIRHSCSP undertakes to immediately remove any content that may contravene national or international legislation, morality or public order, proceeding to the immediate removal of the redirection to said website and notifying the competent authorities of the content in question.

  • The FIRHSCSP reserves the right to modify this legal notice to adapt it to any regulatory change or development, for technical reasons, for changes in the services offered by the FIRHSCSP or for strategic decisions of the entity. In such cases, the changes to be made will be announced on this website with reasonable advance notice and the date from which they will take full effect will be indicated.

    If the user does not agree with the changes, they must stop using the website. Use of the website after the changes have been made will constitute acceptance of such changes by the users.

  • If any of the present provisions is deemed null, invalid or unenforceable, said provision (or the part declared null, invalid or inapplicable) shall be invalidated, without this affecting the validity and applicability of the remaining provisions.

  • Basic information on data protecion

    Data controller:  Fundació Institut de Recerca de l'Hospital de la Santa Creu i Sant Pau (FIRHSCSP)

    Purposes of processing:

    • Informational website.
    • Management of enquiries via email.
    • Management of selection processes.
    • Access to the private INTRANET area.
    • ·Management of donations received.
       

    Legal basis for processing

    • Express consent of the data subject.
    • Performance of a contract.
    • Legitimate interest in data processing.
    • Compliance with legal obligations.
       

    Data retention

    • Data will be retained for the time strictly necessary to fulfill the purposes described, provided that the data subject does not withdraw consent, as well as for compliance with legal obligations.
       

    Recipients

    • Personal data collected through the website will not be transferred to third parties. Without prejudice to those third parties providing services to the Research Institute for the purpose of processing requests made by data subjects.
       

    Rights of data subjects

    • Access, rectification, objection, erasure ('right to be forgotten'), limitation of processing, portability and the right not to be subject to automated individual decisions.


    Websites:

    Main website: https://www.recercasantpau.cat/

    Additional information

    • You may consult the additional and detailed information on Data Protection in the annexed clauses found below.

     

    Additional information of data protecion

    In accordance with the provisions of Articles 13 and 14 of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, "GDPR"), and Articles 6 and 11 of Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights (hereinafter, "LOPDGDD"), which regulates the right to information in data collection, we inform you of the following.

    Who is the data controller for your personal data?

    The personal data you have provided to us through the website and in any other communications held with you will be part of the Processing Activities Register owned by Fundació Institut de Recerca de l'Hospital de la Santa Creu i Sant Pau with registered address at carrer Sant Quintí, no. 77-79, Barcelona, 08041, Spain and email dpo_ir@santpau.cat

    The FIRHSCSP has different profiles on the main Internet social networks.

    Users, by joining the FIRHSCSP page, consent to the processing of personal data published on their profile. The FIRHSCSP will have access to the public information on the user's profile, may make publications on the user's profile of all information already published on their profile, as well as make page status updates that will be published on the user's profile. Likewise, the FIRHSCSP may use these profiles to inform its users about topics it considers of interest, including through personal and individual communications via the channels established by said social networks.

    In this regard, the FIRHSCSP acknowledges itself as the data controller for the data of its users, followers, or persons who make comments through its social networks. Without prejudice to the fact that, in accordance with the Law on Information Society Services and Electronic Commerce, the FIRHSCSP is exempt from any liability arising from any type of content published by users and followers on its social networks.

    What personal data do we collect?

    The personal data that the user may provide:

    • Identification data: First name and last name.
    • Contact data: Telephone number and email address.
    • Internet data: INTRANET username and password.
    • CV data: Academic and/or professional data
    • Financial data: Account number.
    • Any other information or data you choose to include in your CV.
       

    Why and for what purpose do we process your data?

    Depending on the purposes, we will need to process certain data or others, which in general will be, as applicable, the following:

    • The website is entirely informational about the activities of the FIRHSCSP. Data may be processed to respond to information requests about these activities.
    • The collection and automated processing of data carried out through the FIRHSCSP INTRANET access form is collected in order to verify your identity.
    • The collection and processing of data carried out through the 'Job Board' section is collected in order to assess the possibility of working with us.

    Personal data obtained through any of the website's channels will form part of the Processing Activities and Operations Register (RAT) owned by the FIRHSCSP. This will be updated periodically in accordance with the provisions of the GDPR; the FIRHSCSP has adopted all relevant security measures in this regard.

    The user is informed of the possibility of withdrawing consent in the event that it has been granted for a specific purpose, without this affecting the lawfulness of the processing prior to its withdrawal.

    What is the legal basis for processing your data?

    The processing of your data may be based on the following legal grounds:

    • Consent express consent from users in sending communications to any of the domain email addresses: @santpau.cat listed on the website and/or telephone numbers.

    Likewise, for the submission of CVs by those interested in working for the FIRHSCSP.

    • Application of contractual measures for access to the FIRHSCSP INTRANET.
    • Application of pre-contractual and/or eventually contractual measures in the context of a possible employment relationship with users who submit their applications for future selection processes of the FIRHSCSP
    • Legitimate interest in relation to the following purposes:

    Profiling through users' browsing of the website.

    The legitimate interest of the FIRHSCSP consists of being able to ensure that our website remains secure, as well as helping us to understand the needs, expectations and level of satisfaction of users and, therefore, improve our services.

    All actions are carried out with the purpose of improving the level of user satisfaction and ensuring a unique browsing experience.

    • Compliance with legal obligations for fraud prevention, collaboration with Public Authorities and/or potential claims from third parties.
       

    How long do we keep your data?

    The processing of data for the described purposes will be maintained for the time necessary to fulfill the purpose of its collection, as well as for compliance with legal obligations arising from data processing. Without prejudice to the fact that retention may be necessary for the formulation, exercise or defense of potential claims; provided that applicable legislation permits it.

    The FIRHSCSP undertakes to cease the processing of personal data once the retention period has ended, as well as to duly block them in our databases.

     Curricula vitae will be retained for a maximum of one year from the start of the selection process. Should the data subject wish to exercise any data protection right, they should contact us via email: dpo_ir@santpau.cat

    To which recipients are your data communicated?

    In general, the FIRHSCSP will not transfer personal data to third parties, except in those situations where such data may be transferred to collaborators providing services to the FIRHSCSP, for the purpose of processing requests made by users or data subjects. In such cases, we ensure that the recipients respect confidentiality and have adequate measures in place to protect personal data.

    The FIRHSCSP endeavors to guarantee the security of personal data when sent outside the entity. Third parties with whom the FIRHSCSP contracts are obliged to guarantee that the information is processed in accordance with current data protection regulations.

    In those cases where the law may require the disclosure of personal data to public bodies or other parties, only what is strictly necessary for compliance with said legal obligations will be disclosed.

    The FIRHSCSP communicates data to external providers, as data processors, to carry out certain services:

    • Donations made to the entity are managed through the banking institution CAIXABANK.
       

    Where is the data stored?

    As a general rule, data is stored in Spain (Barcelona), within the European Union (EU). To ensure a sufficient level of protection for data sent to third countries outside the EU, the FIRHSCSP will take sufficient technical and organizational measures.

    What rights do you have and how can you exercise them?

    You may send your communications and exercise your rights by means of a written communication to the following email address: dpo_ir@santpau.cat

    Under data protection regulations, you may request:

    • Right of access: you may request information about the personal data we hold about you.
    • Right to rectification: you may communicate any changes to your personal data.
    • Right to erasure and to be forgotten: you may request the deletion, with prior blocking, of personal data.
    • Right to restriction of processing: this entails the restriction of the processing of personal data.
    • Right to object: you may withdraw consent to data processing, objecting to their continued processing.
    • Right to data portability: in some cases, you may request a copy of personal data in a structured, commonly used and machine-readable format for transfer to another controller.
    • Right not to be subject to automated individual decisions: you may request that decisions are not made based solely on automated processing, including profiling, that produces legal effects or significantly affects the data subject.
       

    In some cases, the request may be refused if you request the deletion of data necessary for compliance with legal obligations. Likewise, if you have any complaint about data processing, you may file a claim with the competent data protection authority.

    Who is responsible for the accuracy and truthfulness of the data provided?

    The user is solely responsible for the truthfulness and correctness of the data provided through any means of communication, exempting the FIRHSCSP from any liability in this regard. Users guarantee and are responsible, in all cases, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep them duly updated. The user agrees to provide complete and correct information in any forms they complete.

    The FIRHSCSP is not responsible for the truthfulness of information that is not its own and for which another source is indicated, and therefore assumes no responsibility for any hypothetical damages that may arise from the use of such information.

    The FIRHSCSP is exempt from liability for any damage or loss that the user may suffer as a result of errors, defects or omissions in the information provided by the FIRHSCSP, provided that such information originates from sources external to it.

    What security measures do we apply to protect personal data?

    The FIRHSCSP has adopted the legally required levels of security for the protection of personal data, and endeavors to install additional technical means and measures within its reach to prevent the loss, misuse, alteration, unauthorized access and theft of personal data provided to the Fundació Institut de Recerca de l'Hospital Santa Creu i Sant Pau. However, the user should be aware that Internet security measures are not impregnable.

    Therefore, the FIRHSCSP is not responsible for any hypothetical damages that may arise from interference, omissions, interruptions, computer viruses, telephone breakdowns or disconnections in the operational functioning of this electronic system, caused by reasons beyond the FIRHSCSP's control; from delays or blockages in the use of this electronic system caused by deficiencies or overloads of telephone lines or overloads at the Data Processing Centre, the Internet system or other electronic systems, as well as damages that may be caused by third parties through illegitimate intrusions beyond the FIRHSCSP's control.

    How do we use cookies?

    The FIRHSCSP website and social networks use cookies in order to optimize and personalize browsing. Cookies are physical information files stored on the user's device; the information collected through cookies is used to facilitate the user's browsing of the portal and to optimize the browsing experience. Data collected through cookies may be shared with their creators, but in no case will the information obtained through them be associated with personal data or data that could identify the user. However, if the user does not wish cookies to be installed on their hard drive, they have the option of configuring their browser to prevent the installation of such files.

    Recommendation of websites/pages

    When the FIRHSCSP recommends or links to a website, it considers that these are of interest to the user.

    However, the Fundació Institut de Recerca de l'Hospital Santa Creu i Sant Pau has no obligation to supervise the websites/pages it links to or recommends. These have been created by legal persons, natural persons or entities without legal personality unrelated to the FIRHSCSP. The FIRHSCSP does not intervene in their management, finance them, decide on the content incorporated, or manage or participate in the services that the linked or recommended websites/pages provide.

    The FIRHSCSP will cancel any link and refrain from recommending the website/page when it has reliable evidence that it and/or the services it provides are unlawful or damage the assets or rights of third parties that may be eligible for compensation.

    Internal security policy

    Security breaches may be caused by employees, third parties or computer errors. Therefore, we are legally obligated to notify data subjects if their personal data has been seriously affected within a maximum period of 72 hours. Furthermore, as soon as the security breach is resolved, users will be notified.

    Modification of the privacy policy

    This privacy policy may be modified. We recommend that you review the privacy policy periodically.