Privacy Policy

1. Data Controller

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR), and Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), users of this website are informed that the entity responsible for the processing of personal data is:

Fundació Hospital Universitari Vall d’Hebron – Institut de Recerca (VHIR)
Tax Identification Number (NIF): G-60594009
Registered address: Passeig Vall d’Hebron 119-129, Edifici Central, 08035 Barcelona, Spain
Contact email: miquel.vila@vhir.org

Website: vilalab.org

2. Personal Data We May Collect

Personal data may be collected when users voluntarily provide information through the website, for example when contacting us by email or through any contact forms that may be available.

Depending on the interaction with the website, the personal data processed may include:

  • Name and surname.
  • Email address.
  • Organisation or institution.
  • Professional information.
  • Any other information voluntarily provided by the user.
  • Technical information necessary for the proper functioning and security of the website.

Users should not provide personal data relating to third parties unless they are authorised to do so.

3. Purposes of Processing

Personal data provided through this website may be processed for the following purposes:

  • To respond to enquiries, requests or communications submitted by users.
  • To manage communications related to the activities, research projects or initiatives presented on the website.
  • To maintain professional or institutional relationships with interested parties.
  • To ensure the proper functioning, security and technical maintenance of the website.
  • To comply with applicable legal obligations.

Personal data will not be used for purposes incompatible with those for which it was collected.

4. Legal Basis for Processing

The legal basis for processing personal data may be:

  • The consent provided by the user when submitting information or contacting us.
  • The application of pre-contractual measures or the management of a relationship requested by the user.
  • Compliance with legal obligations applicable to VHIR.
  • The legitimate interest of VHIR in ensuring the security, proper functioning and management of the website and its communications.

Where processing is based on consent, users may withdraw their consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Retention

Personal data will be retained only for as long as necessary to fulfil the purpose for which it was collected.

Once the data is no longer required, it may be retained in a restricted or blocked form for the periods necessary to comply with applicable legal obligations or to address possible liabilities.

6. Data Recipients

Personal data will not be disclosed to third parties unless:

  • Such disclosure is required by law.
  • It is necessary for the provision of a service requested by the user.
  • A service provider processes data on behalf of VHIR under an appropriate data processing agreement.

Certain technology providers, hosting providers or other suppliers may have access to personal data solely where necessary to provide their services.

7. International Data Transfers

As a general rule, personal data will be processed within the European Economic Area.

If any service provider processes personal data outside the European Economic Area, VHIR will ensure that appropriate safeguards are in place in accordance with the GDPR, including, where applicable, adequacy decisions or Standard Contractual Clauses approved by the European Commission.

8. Users’ Rights

Users may exercise the rights recognised under applicable data protection legislation, including:

  • Right of access: to obtain information about whether their personal data is being processed and to access such data.
  • Right to rectification: to request correction of inaccurate or incomplete personal data.
  • Right to erasure: to request deletion of personal data where legally applicable.
  • Right to restriction of processing: to request that processing be restricted in certain circumstances.
  • Right to object: to object to the processing of personal data in certain circumstances.
  • Right to data portability: to receive personal data in a structured, commonly used and machine-readable format where applicable.
  • Right to withdraw consent: where processing is based on consent.

Requests relating to the exercise of these rights may be sent to:

miquel.vila@vhir.org

The applicant may be required to provide sufficient information to verify their identity and identify the data concerned by the request.

Users also have the right to lodge a complaint with the competent supervisory authority, in particular the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD), if they consider that the processing of their personal data infringes applicable data protection legislation.

9. Data Security

VHIR applies appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.

However, users should be aware that no system connected to the Internet can guarantee absolute security.

10. Third-Party Links

This website may contain links to external websites operated by third parties.

VHIR is not responsible for the privacy practices, content or security of third-party websites. Users are encouraged to review the privacy policies of any external websites they visit.

11. Cookies and Similar Technologies

This website may use technical cookies or other similar technologies necessary for its proper functioning.

Where analytics, advertising or other non-essential cookies are used, users will be informed and, where required by applicable law, their consent will be requested before such cookies are installed.

Further information, where applicable, will be available in the website’s Cookie Policy.

12. Changes to this Privacy Policy

VHIR reserves the right to update this Privacy Policy in order to reflect legislative, regulatory, technical or operational changes.

The version published on this website will be considered the current version.

>