Close

Privacy policy

FUNDACIÓ PRIVADA INSTITUT DE RECERCA DE LA SIDA-CAIXA, (hereinafter, IrsiCaixa), with Spanish tax identification number G60813227 and a registered address at Hospital Germans Trias i Pujol, Ctra del Canyet, s/n, 08916 Badalona (Barcelona, Spain), is aware of the importance of protecting your privacy, and, via this Privacy Policy, informs you in a transparent way regarding how any personal data we collect from you will be used.

 

1. Principles governing the processing of your personal data

Your personal data will be processed by IrsiCaixa according to the following principles:

  • Lawfulness: your personal data will only be processed if you have given your consent or if there is a legitimate legal basis for its processing.
  • Transparency: before your personal data are processed, you will receive concrete, transparent and accessible information regarding the circumstances of the processing.
  • Loyalty: your personal data may not be processed in any manner other than that communicated to you.
  • Data minimization: we only request personal data that is adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
  • Storage limitation: your personal data will only be processed for as long as is necessary for the purposes for which they are processed.

 

2. Transparency

In addition to this privacy policy, website sections and forms contain specific information about the processing of personal data collected through those channels.

 

2.1. Description of the information provided

The information that you will find in each website form, supplemented by the “Additional Information” provided in this Privacy Policy, is as follows:

  • Data controller: this identifies the company that is responsible for your personal data, in this case, IrsiCaixa.
  • Purpose: you will be informed of the purpose or purposes for which your personal data will be processed.
  • Legal basis: you will be informed of the legal basis for processing your personal data, both in cases in which your consent is required and for other legal bases recognized by the current legislation.
  • Other parties with access to your data: you will be informed of the identity or categories of parties that may have access to your personal data.
  • Storage duration and criteria: you will be informed of the duration of and criteria used for storage of your personal data for the indicated purpose.
  • Automated decision-making and profiling tools: we may use segmentation tools in order to be able to offer commercial communications adapted to differing interests. You will be informed about these tools in any website forms through which you submit personal data.
  • Ways of giving consent: if your consent is necessary for the processing of your personal data, you will be informed regarding how to grant your consent.
  • Consequences of withholding consent: if you do not grant your consent, we may not be able to provide the requested service.
  • Third-country processing: in the event that your data has to be processed in a country outside the European Union, you will be informed of the existence or not of a decision to adapt to the European Commission and/or the guarantees provided regarding the protection of your personal data.
  • Exercising your rights: see section 3.
  • Data Protection Officer (DPO) contact details: see section 4.

 

2.2. Specific information on the processing of personal data provided in website sections

 

a) “CONTACT” section

ADDITIONAL DATA PROTECTION INFORMATION

  • Data controller: the entity responsible for your personal data is IrsiCaixa, with Spanish tax identification number G60813227 and a registered address at Hospital Germans Trias i Pujol, Ctra del Canyet, s/n, 08916 Badalona (Barcelona, Spain).
  • Purpose: the purpose of processing the personal data provided through this form is to respond to your query regarding the products, services and other activities of IrsiCaixa. If you decide not to agree to the processing of your personal data, we will not be able to perform the requested service. Since ongoing improvement of internal response processes is a legitimate interest, we may also use your personal data, suitably anonymized, to monitor statistics related to our customer attention service.
  • Other parties with access to your data: the personal data that you provide through this website will not be communicated to third parties, unless requested by an administrative or judicial authority. However, service providers, including those providing website development and maintenance services, may have access to your personal data. Third countries are contractually obliged to both ensure the confidentiality of your personal data and not to use them for a purpose other than for the service they provide. You may write to the address indicated in this Privacy Policy to request a complete listing of the categories of service providers that have access to your personal data.
  • Storage duration: your personal data will be processed until your query is resolved. They may subsequently be retained in anonymized form for statistical purposes and to improve the quality of our services.
  • Exercising your rights: you may exercise your rights to access, rectification, deletion, opposition, limitation and portability, and also ask about how your personal data are processed, by contacting the Data Protection Officer (DPO) by postal mail or email:
    • Postal mail: Hospital Germans Trias i Pujol. Ctra del Canyet, s/n 08916 Badalona (Barcelona).
    • Email: dpo@irsicaixa.com

Include a copy of your ID so that we can verify your identity.

Further information on your rights is provided in Sections 3 and 4 of this Privacy Policy.

If you do not agree with how your personal data are processed, you have the rights to lodge a complaint with the Spanish Data Protection Agency (Agència Espanyola de Protecció Dades, AEPD).

 

b) “NEWSLETTER” section

ADDITIONAL DATA PROTECTION INFORMATION

  • Data controller: the entity responsible for your personal data is IrsiCaixa, with Spanish tax identification number G60813227 and a registered address at Ctra del Canyet, s/n, 08916 Badalona (Barcelona, Spain).
  • Purpose: the purpose of processing the personal data is to keep you informed of IrsiCaixa activities, promotions and scientific and educational innovations. If you decide not to agree to the processing of your personal data, we will not be able to perform the requested service.
  • Personalization of communications: we may use segmentation tools for outgoing communications in order to personalize communications and to avoid sending information that may not be of interest to you. To personalize communications, we use and analyse data from different sources, such as the personal data that you have provided (age, sex, etc), historical information on products and services acquired by you from IrsiCaixa and browsing data collected through cookies installed in your browser (see our Information on cookies). While segmentation itself is computerized, the criteria used are always decided by people.
  • Other parties with access to your data: the personal data that you provide through this website will not be communicated to third parties, unless requested by an administrative or judicial authority. However, service providers, including those providing website development and maintenance services, may have access to your personal data. Third countries are contractually obliged to both ensure the confidentiality of your personal data and not to use them for a purpose other than for the service they provide. You may write to the address indicated in this Privacy Policy to request a complete listing of the categories of service providers that have access to your personal data. Your data will be processed within the European Union, however, for sending emails we use the MailChimp web platform (Rocket Science Group, LLC.), so your data will be transferred to the United States. Rocket Science Group, LLC offers guarantees for the processing of your personal data, and has subscribed to the Standard Contractual Clauses approved by the European Commission. Additional information about MailChimp's processing of your data can be found at this link.
  • Storage duration: your data will be processed until you unsubsribe. If you unsubscribe, your personal data will be blocked to avoid sending you unwanted communications. You can easily cancel your subscription at any time by clicking on the link that appears at the bottom of each email you receive.
  • Exercising your rights: you may exercise your rights to access, rectification, deletion, opposition, limitation and portability, and also ask about how your personal data are processed, by contacting the Data Protection Officer (DPO) by postal mail or email:
    • Postal mail: Hospital Germans Trias i Pujol. Ctra del Canyet, s/n 08916 Badalona (Barcelona).
    • Email: dpo@irsicaixa.com

Include a copy of your ID so that we can verify your identity.

Further information on your rights is provided in Sections 3 and 4 of this Privacy Policy.

If you do not agree with how your personal data are processed, you have the rights to lodge a complaint with the Spanish Data Protection Agency (Agència Espanyola de Protecció Dades, AEPD).

 

c) “WORK WITH US” section

ADDITIONAL DATA PROTECTION INFORMATION

  • Data controller: the entity responsible for your personal data is IrsiCaixa, with Spanish tax identification number G60813227 and a registered address at Hospital Germans Trias i Pujol, Ctra del Canyet, s/n, 08916 Badalona (Barcelona, Spain).
  • Purpose: the purpose of processing your personal data is to manage your participation in staff recruitment processes. You will need to consent to the processing of your personal data for this purpose, as otherwise we will be unable to include you in IrsiCaixa recruitment processes.
  • Other parties with access to your data: the personal data that you provide through the website will not be communicated to third parties, unless required by an administrative or judicial authority. However, service providers, including those providing website development and maintenance services, may have access to your personal data. Third countries are contractually obliged to both ensure the confidentiality of your personal data and not to use them for a purpose other than for the service they provide.
  • Storage duration: your data will be kept for a year, unless you authorize us to keep them for longer during the recruitment processes in which you participate.
  • Exercising your rights: you may exercise your rights to access, rectification, deletion, opposition, limitation and portability, and also ask about how your personal data are processed, by contacting the Data Protection Officer (DPO) by postal mail or email:
    • Postal mail: Hospital Germans Trias i Pujol. Ctra del Canyet, s/n 08916 Badalona (Barcelona).
    • Email: dpo@irsicaixa.com

Include a copy of your ID so that we can verify your identity.

Further information on your rights is provided in Sections 3 and 4 of this Privacy Policy.

If you do not agree with how your personal data are processed, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agència Espanyola de Protecció Dades, AEPD).

 

d) “IRSICAIXA ALUMNI NETWORK” section

ADDITIONAL DATA PROTECTION INFORMATION

  • Data Controller: IrsiCaixa, with tax ID number G-60813227, is responsible for your processed data.
  • Purposes:
    • To contact and send information to interested applicants on IAN services and on any events and/or activities organized by IAN.
    • To create a database of IrsiCaixa alumni and of former employees involved in the research field.
    • To bring together alumni and former employees involved in the research field.
    • To assess the (clinical, technical, therapeutic or conceptual) impact of research activities, at a later stage.
    • To help promote IrsiCaixa’s image as a training centre for young researchers.

Additionally, IrsiCaixa will also process your data for the expressly indicated specific purposes.

  • Recipients: the personal data you provide through the website form will not be communicated to third parties, except when requested by an administrative or judicial authority. However, we may share your personal data to companies providing specific services on behalf of IrsiCaixa, such as computer service providers or website developers. Said third-party service providers are contractually obliged to maintain your information confidential and to use and process your data only for the provision of the agreed services. In case you wish to receive information on the categories of said third-party providers, please contact the above-mentioned address. Your data will be processed within the European Union, however, for sending emails we use the MailChimp web platform (Rocket Science Group, LLC.), so your data will be transferred to the United States. Rocket Science Group, LLC offers guarantees for the processing of your personal data, and has subscribed to the Standard Contractual Clauses approved by the European Commission. Additional information about MailChimp's processing of your data can be found at this link.
  • Data conservation: your data will be processed until you unsubscribe from the IAN via email to dpo@irsicaixa.com. The data will be subsequently blocked during the legally established period.
  • Rights: you may exercise your rights of access, rectification, deletion, opposition, limitation and portability, and address any query you may have about the processing of your personal data by contacting the Data Protection Officer (DPO) through any of the following channels:
    • By post: Hospital Germans Trias i Pujol, Ctra del Canyet s/n, 08916 Badalona (Barcelona)
    • By email: dpo@irsicaixa.com

Do not forget to include/attach a copy of your ID so we can verify your identity.

Further information on your rights is provided in Sections 3 and 4 of this Policy.

If you are not satisfied with the processing of your personal data, you can contact the Spanish Data Protection Agency.

 

3. Your rights by law

In accordance with current legislation, you have the following rights in relation to the processing of your personal data.

  • Rights of access and rectification: you have the right to know how your personal data are used, how they are being processed and, where appropriate, the purpose of the processing, the origins of the data and any communications made or planned regarding your personal data. You also have the right to request that your personal data be modified and updated.
  • Right to erasure: you have the right to request that your personal data be erased, provided there is no other compelling legitimate grounds for keeping them.
  • Right to opposition: you have the right to state your opposition to the processing of your personal data at any time, provided there is no other compelling legitimate grounds for processing.
  • Right to portability: you have the right to be provided with your personal data in a structured, commonly used and mechanically readable format. Your right to portability applies as follows:
    • When data are processed by automated means.
    • When processing is based on consent or a contract.
    • When requested by you regarding data provided by you and, when they concern you, data derived from your own activity.
  • Right to data minimization: you have the right to limit the processing of your personal data to their conservation by the data controller and to prohibit them from being processed in any other way or for any other purpose. Your right to data minimization applies as follows:
    • When your personal data are not accurate.
    • When your personal data are not being processed legitimately.
    • When the processing of the data is not necessary for the purpose for which they were collected, but you have an interest in their conservation in order to formulate, exercise or defend against a claim.
    • When you have exercised your right of opposition, in which case your data will not be processed for any other purpose beyond its conservation until your request is resolved.
  • Right to lodge a complaint with the supervisory authority: : If you do not agree with the processing of your personal data, you may lodge a claim with the Spanish Data Protection Agency (Agència Espanyola de Protecció Dades, AEPD).

 

4. Data Protection Officer

IrsiCaixa has a designated Data Protection Officer (DPO) registered with the Spanish Data Protection Agency (Agència Espanyola de Protecció Dades, AEPD). You can exercise any or all of your rights (see previous section) and make queries or suggestions by contacting the IrisCaixa DPO as follows:

  • Postal mail: Hospital Germans Trias i Pujol. Ctra del Canyet, s/n 08916 Badalona (Barcelona).
  • Email: dpo@irsicaixa.com

Include a copy of your ID so that we can verify your identity.

 

5. Security of your personal data

IrsiCaixa makes every effort to guarantee the security of your personal data and to protect them from unauthorized access by implementing suitable computer security measures that are updated on an ongoing basis to adapt to technological advances.

 

6. Access to your personal data by third parties

The personal data that you provide through the IrsiCaixa website will not be communicated to third parties, unless requested by an administrative or judicial authority. However, service providers, including those providing website development and maintenance services, may have access to your personal data. Third countries are contractually obliged to both ensure the confidentiality of your personal data and not to use them for a purpose other than for the service they provide. You may, at any time, write to the address indicated in this Privacy Policy to request a complete listing of the categories of service providers that have access to your personal data.

 

7. Where your personal data are processed

Your personal data will be processed within the European Union. However, the data may be transferred to third countries for the provision of a specific service. If this is the case, you will receive specific information on the service provider, the country or countries where your data will be processed and the guarantees provided regarding the protection of your personal data.

IrsiCaixa will respond to any request from you regarding the exercise of your rights as quickly as possible and, bearing in mind the nature of the personal data processing, will comply with the request without undue delay.

Not available in
This is not available in . You can go to the translated versions in these languages: