1.- Right to information

The Privacy Policy of the Biomedical Research Foundation of the University Hospital Puerta de Hierro in Majadahonda, hereinafter the FIB HUPHM, refers to the need to regulate access by the general public to knowledge of the activities it carries out, as well as to facilitate contact with people related to the world of research, make their services and scientific events known, their various research platforms, their governing bodies, job offers, as well as their own purposes as a Foundation dedicated to the management of research at a public hospital such as the University Hospital Puerta de Hierro in Majadahonda, highlighting its commitment to transparency; all of this, whether through the website https://investigacionpuertadehierro.com/fundacion-para-la-investigacion-biomedica-del-hospital-puerta-de-hierro/, As well as through any request for information in paper form.

2.- Who is the Data Controller for your personal data?

In accordance with the provisions of Regulation (EU) 2016/679 on the protection of individuals with regard to personal data (GDPR), we inform you that the personal information you provide will be duly recorded and incorporated into the data processing systems for which the Fundación de Investigación Biomédica del Hospital Universitario Puerta de Hierro de Majadahonda (C/Joaquín Rodrigo, 2 – 28222 Majadahonda – Madrid) is responsible.

Email for information: secretaria@idiphim.org

Contact details of the Data Protection Officer: dpd@idiphim.org

3.- For what purpose will your data be processed?

The purpose of processing the personal data you have provided to FIB HUPHM will depend on the reason you provided it through its various communication channels, such as its different training and scientific management activities, attendance at or collaboration in events organised by or involving FIB HUPHM, the development of collaborations, scientific services, participation in clinical or biomedical research studies or projects, or through the signing of the corresponding contracts with FIB HUPHM.

The personal information you provide to FIB HUPHM will be managed to process exclusively your relationship with FIB HUPHM itself, as well as to respond to any other type of information request you have submitted in relation to it or the functioning of the Foundation itself, as well as the other activities and services published on this website.

The personal data provided will be retained for as long as your relationship with FIB HUPHM lasts, and beyond that in cases where it is relevant to the data subjects' health, for as long as your relationship with FIB HUPHM lasts, or for the period established by law in each case. We also inform you that your personal data will not be used by FIB HUPHM to create commercial profiles, or for purposes incompatible with those stated here. The processing of your personal information will be carried out lawfully, fairly, transparently, adequately, relevantly, in a limited manner, and kept accurate and up to date. For this reason, FIB HUPHM undertakes to take all reasonable measures to ensure that such data is erased or rectified without delay when inaccurate.

4.- Security Measures

Taking into account the state of the art, implementation costs, and the nature, scope, context and purposes described in point 3 of this privacy policy, as well as the risks of varying likelihood and severity for users' rights and freedoms, FIBHPH, in compliance with the provisions of Article 32.1 of the GDPR, has applied appropriate technical and organisational measures to guarantee an adequate level of security, which, where applicable, includes, among others: pseudonymisation, encryption of personal data, measures to guarantee the ongoing confidentiality, integrity, availability and resilience of processing systems and services, measures to restore the availability of and access to personal data quickly in the event of a physical or technical incident, and the implementation of a process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures to ensure the security of processing.

5.- What is the legal basis for processing your data?

The legal basis for the processing of your personal data lies in the management of the request that you have submitted to FIB HUPHM in each case, your consent to participate in the activities, projects, training courses and events organized by FIB HUPHM, your consent to participate in projects promoted or in which FIB HUPHM collaborates, your contractual relationship with FIB HUPHM itself, or those situations in which the legitimacy for the processing of your personal data by FIB HUPHM is provided by law.

However, as explained further below, you have the right to exercise your right to object to the processing described, following the instructions provided by FIB HUPHM for this purpose.

6.- What recipients will your data be shared with?

The FIB HUPHM does not plan to make any transfers or transfers of personal information held in its processing systems to third parties, except in those cases where you explicitly authorize it or are required or permitted by law. In such a case, the FIB HUPHM undertakes, where appropriate, to inform all users in advance of the identity of the transferring entity and the purpose of the transfer in order to obtain their consent. Furthermore, it is reported that your personal information may be accessed by entities or persons outside the FIB HUPHM in those cases where it is necessary for the provision of professional services to the FIB HUPHM. In this latter case, such transfer or access of information will be carried out under the signature of a service provision contract in accordance with the terms and conditions set out in Article 28 of the GDPR. In this regard, the FIB HUPHM informs that for the contracting of services with external entities, its information may be transferred to non-secure destinations (countries that are not part of the European Economic Union), such as the United States, where the data protection regulations are not as robust as those within the European Economic Union. However, the FIB HUPHM, when contracting these entities, as well as when transferring its information in the context of these types of contracts, will adopt all the technical, organizational, and security measures imposed by the GDPR.

7.- What are your rights when you provide us with your data?

You have the right to access your personal data, as well as to request the rectification of inaccurate data or, where applicable, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected. You may request the restriction of the processing of your data, in which case FIB HUPHM will only retain it for the exercise or defence of claims. Likewise, you may object to the processing of your data, in which case FIB HUPHM will stop processing it, unless there are legitimate grounds or grounds for the defence of possible claims that prevent it from complying with your objection request. You may also request the portability of your data.

To exercise these rights, you may do so through several channels:

• You may visit the FIB HUPHM premises in person to request the relevant form at reception (see address in point 1 of this privacy policy).
• If you prefer, you can download the form for the specific right you wish to exercise (provided below):
  • Right of Access (PDF)
  • Right of Rectification (PDF)
  • Right of Erasure (PDF)
  • Right to Data Portability (PDF)
  • Right to Restriction of Processing (PDF)
  • Exercise of the right to object to automated decision-making (PDF)
  • Right to Object (PDF)
• Likewise, you may also refer the matter to the FIB HUPHM if you wish; a separate request in which you must include the following reference: “Exercise + the applicable right”

In cases where the request is not submitted at the FIB HUPHM reception desk, it must be sent by post to the address: C/Joaquín Rodrigo, 2 – 28222 Majadahonda – Madrid, or, as an alternative, by email to the address: secretaria@idiphim.org or directly to the email address of the Data Protection Delegate: dpd@idiphim.org.

In all cases, remember to attach a copy of your National Identity Document.

Likewise, in compliance with the provisions of the GDPR, you are informed that, should you wish, you may contact the Spanish Data Protection Agency (http://www.agpd.es/portalwebAGPD/index-ides-idphp.php) for additional information about your rights and/or to file a complaint if they have not been duly addressed.

FIB HUPHM reserves the right to modify this Privacy and Data Protection Policy in accordance with any regulatory changes that may occur, as well as with the guidelines set by the Spanish Data Protection Agency. Any such changes will be duly updated on this website in order to inform all registered users, or those interested in FIB HUPHM's services and activities.

Finally, as stated above, FIB HUPHM will treat your personal information with complete confidentiality, and will not use it for purposes other than or incompatible with those described in this notice without first requesting your consent

8.- User consent

The sending of personal data through the use of electronic or paper forms to FIB HUPHM or, where applicable, e-mail messages or other similar means, constitutes the sender's express consent to the automated processing of the data included in communications related to FIB HUPHM. However, you may revoke this consent at any time, without needing to justify your decision, by exercising the rights described above in point 7 of this Privacy and Data Protection Policy.

9.- Links

This privacy policy only applies to the FIB HUPHM website. This privacy policy is not guaranteed for access via links to this site, nor for links from this site to other websites.

FIB HUPHM has taken all legally required security measures; however, it should be noted that these measures are not impregnable, and for this reason FIB HUPHM cannot be held responsible for the use of data resulting from theft, robbery or any unlawful use by third parties.