Privacy Policy and Data Protection
1.- Right to information
La Política de Privacidad de la Fundación de Investigación Biomédica del Hospital Universitario Puerta de Hierro de Majadahonda, en adelante la FIB HUPHM, alude a la necesidad de regular el acceso, del público en general, al conocimiento de las actividades que lleva a cabo, así como facilitar el contacto con personas relacionadas con el mundo de la investigación, poner en conocimiento sus servicios y eventos científicos, sus distintas plataformas de investigación, sus órgano rectores, ofertas de empleo, así como sus propios fines como Fundación dedicada a la gestión de la investigación de un centro hospitalario público, como es el Hospital Universitario Puerta de Hierro de Majadahonda, destacándose su compromiso con la trasparencia; todo ello, ya sea a través de la web https://investigacionpuertadehierro.com/fundacion-para-la-investigacion-biomedica-del-hospital-puerta-de-hierro/, como a través de cualquier solicitud de información en forma papel.
2.- Who is the Data Controller for your personal data?
In accordance with the provisions of Regulation (EU) 2016/679 on the protection of individuals with regard to personal data (GDPR), we inform you that the personal information you provide will be duly recorded and incorporated into the data processing systems for which the Fundación de Investigación Biomédica del Hospital Universitario Puerta de Hierro de Majadahonda (C/Joaquín Rodrigo, 2 – 28222 Majadahonda – Madrid) is responsible.
Email for information: secretaria@idiphim.org
Contact details of the Data Protection Officer: dpd@idiphim.org
3.- For what purpose will your data be processed?
The purpose of processing the personal data you have provided to FIB HUPHM will depend on the reason you provided it through its various communication channels, such as its different training and scientific management activities, attendance at or collaboration in events organised by or involving FIB HUPHM, the development of collaborations, scientific services, participation in clinical or biomedical research studies or projects, or through the signing of the corresponding contracts with FIB HUPHM.
La información personal que facilite a la FIB HUPHM será gestionada para tramitar, exclusivamente, su relación con la propia FIB HUPHM, así como para atender cualquier otro tipo de solicitud de información que haya formulado en relación con la misma o con el funcionamiento de la propia Fundación y el resto de actividades y servicios publicados en la presente website.
The personal data provided will be retained for as long as your relationship with FIB HUPHM lasts, and beyond that in cases where it is relevant to the data subjects' health, for as long as your relationship with FIB HUPHM lasts, or for the period established by law in each case. We also inform you that your personal data will not be used by FIB HUPHM to create commercial profiles, or for purposes incompatible with those stated here. The processing of your personal information will be carried out lawfully, fairly, transparently, adequately, relevantly, in a limited manner, and kept accurate and up to date. For this reason, FIB HUPHM undertakes to take all reasonable measures to ensure that such data is erased or rectified without delay when inaccurate.
4.- Security Measures
Taking into account the state of the art, implementation costs, and the nature, scope, context and purposes described in point 3 of this privacy policy, as well as the risks of varying likelihood and severity for users' rights and freedoms, FIBHPH, in compliance with the provisions of Article 32.1 of the GDPR, has applied appropriate technical and organisational measures to guarantee an adequate level of security, which, where applicable, includes, among others: pseudonymisation, encryption of personal data, measures to guarantee the ongoing confidentiality, integrity, availability and resilience of processing systems and services, measures to restore the availability of and access to personal data quickly in the event of a physical or technical incident, and the implementation of a process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures to ensure the security of processing.
5.- What is the legal basis for processing your data?
La base legal del tratamiento de sus datos personales reside en la gestión de la solicitud que en cada caso usted haya remitido a la FIB HUPHM, su consentimiento para participar en las actividades, proyectos, formaciones y eventos organización por la FIB HUPHM, su consentimiento para participar en los proyectos promovidos o en los que colabore la FIB HUPHM, su relación contractual con la propia FIB HUPHM, o aquellas situaciones en las que la legitimación para el tratamiento de sus datos personales por parte de la FIB HUPHM venga dispuesta por una ley.
However, as explained further below, you have the right to exercise your right to object to the processing described, following the instructions provided by FIB HUPHM for this purpose.
6.- What recipients will your data be shared with?
La FIB HUPHM no tiene previsto realizar ninguna cesión o transferencia a terceros de la información personal que obre en sus sistemas de tratamiento, salvo en aquellos casos en los usted lo autorice expresamente o venga exigido o permitido por una ley. En tal supuesto, la FIB HUPHM se compromete, en su caso, a comunicar previamente a todos los usuarios la identidad de la entidad cesionaria, así como la finalidad que motive la misma para recabar su consentimiento. Asimismo, se informa que su información personal puede ser accedida por entidades o personas ajenas a la FIB HUPHM en aquellos casos en los que sea necesario para la prestación de un servicio profesional a la FIB HUPHM. En este último caso, dicha trasferencia o acceso de información se llevará a cabo bajo la firma de un contrato de prestación de servicios en los términos y condiciones recogidos por el artículo 28 del RGPD. A este respecto, la FIB HUPHM informa que para la contratación de servicios con entidades ajenas, su información puede transferirse a destinos no seguros (países que no formen parte de la Unión Económica Europea), como por ejemplo Estados Unidos, donde la normativa en materia de protección de datos no es tan garantista como la normativa comunitaria dentro del espacio de la Unión Económica Europea. No obstante, la FIB HUPHM, en la contratación de estas entidades, así como en la trasferencia de su información con ocasión de este tipo de contratos, adoptará todas las medidas técnicas, organizativas y de seguridad impuestas por el RGPD.
7.- What are your rights when you provide us with your data?
You have the right to access your personal data, as well as to request the rectification of inaccurate data or, where applicable, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected. You may request the restriction of the processing of your data, in which case FIB HUPHM will only retain it for the exercise or defence of claims. Likewise, you may object to the processing of your data, in which case FIB HUPHM will stop processing it, unless there are legitimate grounds or grounds for the defence of possible claims that prevent it from complying with your objection request. You may also request the portability of your data.
To exercise these rights, you may do so through several channels:
- You may visit the FIB HUPHM premises in person to request the relevant form at reception (see address in point 1 of this privacy policy).
- If you prefer, you can download the form for the specific right you wish to exercise (provided below):
- Igualmente, usted también puede remitir a la FIB HUPHM si lo desea, una solicitud propia en la cual, deberá incluir la siguiente referencia: “Ejercicio + the applicable right”
En los casos en los que no se presente la solicitud en la recepción de la FIB HUPHM, deberán hacerla llegar por correo postal a la dirección: C/Joaquín Rodrigo, 2 – 28222 Majadahonda – Madrid, o en su defecto, por correo electrónico a la dirección: secretaria@idiphim.org, o directamente a la dirección de correo electrónico del Delegado de Protección de Datos: dpd@idiphim.org.
In all cases, remember to attach a copy of your National Identity Document.
Likewise, in compliance with the provisions of the GDPR, you are informed that, should you wish, you may contact the Spanish Data Protection Agency (http://www.agpd.es/portalwebAGPD/index-ides-idphp.php) for additional information about your rights and/or to file a complaint if they have not been duly addressed.
FIB HUPHM reserves the right to modify this Privacy and Data Protection Policy in accordance with any regulatory changes that may occur, as well as with the guidelines set by the Spanish Data Protection Agency. Any such changes will be duly updated on this website in order to inform all registered users, or those interested in FIB HUPHM's services and activities.
Finally, as stated above, FIB HUPHM will treat your personal information with complete confidentiality, and will not use it for purposes other than or incompatible with those described in this notice without first requesting your consent
8.- User consent
The sending of personal data through the use of electronic or paper forms to FIB HUPHM or, where applicable, e-mail messages or other similar means, constitutes the sender's express consent to the automated processing of the data included in communications related to FIB HUPHM. However, you may revoke this consent at any time, without needing to justify your decision, by exercising the rights described above in point 7 of this Privacy and Data Protection Policy.
9.- Links
This privacy policy only applies to the FIB HUPHM website. This privacy policy is not guaranteed for access via links to this site, nor for links from this site to other websites.
FIB HUPHM has taken all legally required security measures; however, it should be noted that these measures are not impregnable, and for this reason FIB HUPHM cannot be held responsible for the use of data resulting from theft, robbery or any unlawful use by third parties.