Initial Information

FUNDACIÓ EURECAT considers your personal information to be very important. For this reason, we treat it in a confidential and secure manner. We are committed to ensuring the privacy of personal data at all times and to not collecting unnecessary information.

You do not need to register in order to access our website. If you require further information, you can contact us via the form available on our website, provided that you agree with our Privacy Policy, which you must accept to give your explicit consent to the processing of your data for the specified purposes.

In accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as well as Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, we provide the following information on how your data is processed in this Privacy Policy.

Who is responsible for processing your data?

• Identity: FUNDACIÓ EURECAT (“Eurecat”)
• VAT Number (NIF): G66210345
• Address: Parc Tecnològic del Vallès, Avinguda Universitat Autònoma, 23 – 08290 Cerdanyola del Vallès
• Legal Email: legal@eurecat.org
• Phone: +34 93 238 14 00

Data Protection Officer

Contact: dpo@eurecat.org

4. What data do we collect, for what purposes, and for how long?

Data Processing	Purpose and Legal Basis	Retention Period
Contact form	To respond to user requests and inquiries, based on the user’s express consent (Art. 6.1.a) GDPR).	Data will be retained only as long as necessary to fulfill the purpose it was collected for, and to determine potential liabilities as per applicable regulations.
Sending of informational communications and Newsletter	Subscription to information, promotions, and offers from the organization, based on express consent (Art. 6.1.a) GDPR).	Data will be retained as long as the subscription is active or until the user exercises their right to object or request deletion. May be retained to determine liabilities.
Email management	To respond to inquiries and manage commercial or professional relationships, based on the contractual relationship (Art. 6.1.b) GDPR).	Data will be retained only as long as necessary to fulfill the purpose it was collected for, and to determine potential liabilities as per applicable regulations.
CVs	To process applications to join selection processes. Legal basis: application of pre-contractual measures requested by the applicant (Art. 6.1.b) GDPR).	Data will not be kept longer than necessary, unless there is a legal obligation. In that case, it will be kept for a maximum of one year.
Participation in projects/studies	To evaluate participation in the selected project, based on express consent (Art. 6.1.a) GDPR).	Data will be retained during the evaluation period. Once completed, it will be deleted. May be retained to determine potential liabilities as per applicable regulations.
Activities, conferences, and events	To manage registration for activities, conferences, and events, based on express consent (Art. 6.1.a) GDPR).	Data will be retained only as long as necessary to fulfill the purpose it was collected for, and to determine potential liabilities as per applicable regulations.
Training	To manage course registration through the designated form, based on express consent (Art. 6.1.a) GDPR).	Data will be retained only as long as necessary to fulfill the purpose it was collected for, and to determine potential liabilities as per applicable regulations.

5. Who will your data be shared with?

Except where required by law or where you have given us your explicit consent, we will not share your personal data with third parties. If data is to be shared with collaborators, sponsors, etc. of Eurecat activities, your express consent will be requested at the time of registration.

6. Are international data transfers carried out?

No international data transfers are made to countries outside the European Union.

7. What rights do you have as a user and how can you exercise them?

Right of access

You may request information on how we use your personal data. You may also ask us for details about the purpose of the data processing, how long we keep your data, your rights, any data transfers to third countries or international organizations, the existence of automated decision-making or profiling, and more.

Right to rectification

If your personal data is inaccurate or incomplete, you have the right to request that we correct or complete it. Contact us and we will rectify it as requested.

Right to restrict processing

You may request that we limit the processing of your personal data when:

• You contest its accuracy, for a period allowing us to verify it.
• The processing is unlawful, and instead of deletion, you request limited use.
• We no longer need the data for processing purposes, but you need it to establish, exercise, or defend legal claims.

Right to erasure (right to be forgotten)

You may ask us to delete your personal data immediately. We are obligated to do so if the data is no longer necessary for its original purpose. You may also request deletion if you withdraw your consent, object to the processing, the data is processed unlawfully, we are required by law to delete it, or it was collected in relation to a legal offer.

Right to information

If you have exercised your right to rectification, deletion, or restriction, we must notify any recipients of your personal data unless this is impossible or requires disproportionate effort. You have the right to be informed about these recipients.

Right to data portability

You have the right to receive the personal data you provided in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance from us.

Right to object

You have the right to object, at any time and for reasons related to your personal situation, to the processing of your personal data. We will cease processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the data is necessary for legal claims.

Right to withdraw consent

You may withdraw your consent to data processing at any time. This will not affect the lawfulness of the processing carried out prior to withdrawal.

Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you.

Right to lodge a complaint with a supervisory authority

You have the right to file a complaint with a supervisory authority, particularly in the Member State of your residence, place of work, or the place of the alleged infringement, if you believe your personal data has been processed unlawfully.

8. Where can you exercise your rights?

You may exercise your rights by contacting us at the following email address: legal@eurecat.org

9. Is it mandatory to provide all requested information in the data collection forms?

For the forms on our website, fields marked as “required” must be completed. Failing to provide the necessary personal data or doing so partially may prevent Eurecat from fulfilling your request, and Eurecat will not be held responsible for the incomplete or failed provision of the requested services.

The personal data you provide must be up to date to ensure the accuracy of our records. You are responsible for the accuracy of the information provided.

10. What security measures are in place?

At Eurecat, we protect and use your personal data in accordance with current data protection and information society service regulations.

We have implemented the necessary technical and organizational security measures to ensure the protection of your personal data and to prevent its alteration, loss, or unauthorized access or processing, in accordance with the state of the art, the nature of the data stored, and the risks to which it may be exposed—whether from human action or the physical or natural environment, in compliance with applicable law.