1.- Right to information The Privacy and Data Protection Policy of the Carlos III National Cardiovascular Research Center (F.S.P.) responds to the need to comply with the legal obligation to inform interested parties, under the principle of transparency required by Regulation (EU) 2016 /679 of the European Parliament and of the Council, of April 27, 2016, relating to the protection of natural persons with regard to the processing of personal data and the free circulation of these data and repealing Directive 95/ 46/CE (hereinafter, RGPD), about the circumstances and conditions of data processing to be carried out by the Carlos III National Cardiovascular Research Center (F.S.P.), as well as the rights that apply to them.
2.- Who is responsible for the processing of your personal data? The person responsible for the processing of your personal data is the Carlos III National Cardiovascular Research Center (F.S.P.) (hereinafter, CNIC), with C.I.F. G-82316753 and address on Melchor Fernández Almagro street, no. 3, 28029 Madrid. We inform you that the ownership of the web domain https://resilience-h2020.com/ (hereinafter, the “Website”) belongs to the CNIC. The personal data you provide, whether through this Website, through any form/application in paper format or by any other means, will be duly recorded and incorporated into the CNIC’s data processing systems. Email for information: email@example.com Contact details of the Data Protection Officer: firstname.lastname@example.org
3.- For what purpose will your data be processed? The purpose of the processing of the personal data that you have transferred to the CNIC through the Website and other communication channels will depend on the reason for which you have provided them:
• Data processing of the subjects participating in the RESILIENCE study, with the purpose of managing their participation in it.
• Processing of the personal data of the researchers participating in the RESILIENCE study in order to manage their relationship with the CNIC within the framework of the study.
• Processing of personal data to comply with the tax and accounting obligations of the CNIC within the framework of the RESILIENCE study.
• Treatment related to the management of data of CNIC suppliers and collaborators, who provide professional services to the institution within the framework of the RESILIENCE study.
• Processing related to corporate contacts, whose purpose is the management of personal data of people registered in the CNIC information systems for the management of contacts due to calls for public and private events, communications and notifications related to the RESILIENCE study.
• Data processing to contact information seekers, respond to their request, request or query. The personal information that you provide to the CNIC will be managed exclusively to process your relationship with the CNIC in the context of the RESILIENCE study, as well as to respond to any other type of request for information that you have made in relation to it or with the operation of the CNIC. CNIC and the rest of the activities and services published on this Website. The CNIC will treat your personal information with complete confidentiality, not using it for purposes other than or incompatible with those described in the content of this communication without previously requesting your consent. The processing of your personal information will be carried out in a lawful, fair, transparent, appropriate, relevant, limited, accurate and up-to-date manner. That is why the CNIC undertakes to adopt all reasonable measures so that these are deleted or rectified when they are inaccurate.
4.- What is the legitimacy for the processing of your data? The legal basis for the processing of your personal data lies in the management of the request that in each case you have sent to the CNIC, the contractual relationship that you maintain with the institution, your consent to participate in the processing purposes included in point 3. , or those situations in which the legitimacy for the processing of your personal data by the CNIC is provided by law or there is a legitimate interest. However, as will be reported later, you have the right to withdraw your consent at any time, as well as to exercise your right to object to the processing described, following the instructions provided by the CNIC for this purpose.
5.- How long will your data be kept? The personal data provided will be kept for the duration of your relationship with the CNIC, remaining beyond that in cases where it is relevant to the health of the interested parties, or for the time that is established by legal imperative in each case, as well as during the statute of limitations for any liabilities that the CNIC may incur.
7.- To which recipients will your data be communicated? The CNIC does not plan to make any communication or transfer to third parties of the personal information contained in its processing systems, except in those cases in which it is required or permitted by law or when you expressly authorize it. In the latter case, the CNIC undertakes, where appropriate, to previously communicate to all users the identity of the transferee entity, as well as the purpose that motivates it to obtain their consent. Likewise, you are informed that your personal data may be accessed by entities or people outside the CNIC, in those cases in which it is necessary to provide a professional service to the CNIC. In the latter case, said access to information will be carried out under the signing of a contract that regulates the processing of data, under the terms and conditions set out in article 28 of the RGPD.
8.- International data transfers In those cases in which the development of the RESILIENCE study could involve a transfer of data to destinations outside the European Economic Area, where the regulations on data protection are not as guaranteeing as the community regulations, the CNIC will adopt the appropriate guarantees. provided for in the RGPD or, where appropriate, will request and collect your explicit consent for said international data transfer.
9.- What are your rights when you provide us with your data? You have the right to access your personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. You may request the limitation of the processing of your data, in which case, the CNIC will only keep it for the exercise or defense of claims or when required by law. Likewise, you may oppose the processing of your data, in which case, The CNIC will stop processing them, unless for legitimate reasons or for reasons of defense against possible claims, it cannot agree to your opposition request. Finally, you may request the portability of your data, as well as that the processing of your data is not based on exclusively automated decisions. You may exercise the rights indicated above by sending a request letter:
To the following postal address:
• Centro Nacional de Investigaciones Cardiovasculares Carlos III C/ Melchor Fernández Almagro, 3 28029 Madrid
To the following email address:
You can use the following forms:
•Exercise of the right of access
•Exercise of the right of rectification
•Exercise of the right of deletion
•Exercise of the right to opposition
•Exercise of the right to limit processing
•Exercise of the right of portability
•Exercise of the right to object to automated decision making
•Revocation of authorization to use images In all cases, you must attach a copy of your National Identity Document to your application. Likewise, in compliance with the provisions of the RGPD, you are informed that, if you wish, you may go to the Spanish Data Protection Agency (http://www.agpd.es) to obtain additional information about your rights and/or or to file a claim when these have not been properly attended to.