Through our Privacy Policy, we inform you of the way in which your personal data will be treated on our Website.

In accordance with the personal data protection regulations and in accordance with the principle of transparency, we want all the information and communication related to the processing of your personal data to be understandable and easily accessible.

On this Website we respect and take care of the personal data of users. As a user you should know that your rights are guaranteed.

Respect for your privacy is important to us and you should know that this Website is a safe and reliable space and therefore:

• We never request personal information unless it is really necessary to provide you with the services you require.
• We never share personal information of our users with anyone, except to comply with our legal obligations or in case we have your express authorization.
• We never use your personal data for a purpose other than that expressed in this Privacy Policy.

1. For what purpose are we going to treat your personal data and what is the legal basis that legitimizes the treatment?

When you visit this Website, for example, to make a comment, subscribe to our newsletter or contract a service, you are providing us with personal information for which we, FUNDACIÓ SANT JOAN DE DÉU, are responsible. You can consult the identification data of FUNDACIÓ SANT JOAN DE DÉU, in our Legal Notice.

Below we detail what type of data processing we carry out, associated with its purpose(s), the legitimacy of the processing and the data retention period.

We treat the data of:

• Web users and subscribers, in order to respond to queries, requests, complaints or suggestions made to us through the web contact form, send them our newsletter if they have registered in our database and/or send them commercial and/or promotional communications, always based on your consent (art. 6.1a of the GDPR and art. 21 of the LSSI-CE). The data will be kept as long as the interested party does not revoke their consent.
• Clients, with the purpose of carrying out the administrative, accounting and fiscal management of the contracted services, the legal basis being the execution of a contract (art. 6.1b of the GDPR) and sending commercial communications about our products and/or services, including electronically, based on our legitimate interest in accordance with Recital 47 of the GDPR and art. 21.2 of the LSSI-CE.

The data will be kept as long as the interested party does not request its deletion and, where appropriate, for the years necessary to comply with legal obligations.

• Potential customers and contacts, in order to manage potential customers who have been interested in our products and/or services, the legal basis being the adoption of pre-contractual measures (art. 6.1b of the GDPR), manage other business contacts, based on our legitimate interest pursuant to art. 19 of the LOPDGDD and art. 6.1f of the RGPD and send, where appropriate, commercial communications, including electronically, always based on your consent, in accordance with art. 21.1 of the LSSI-CE and art. 6.1a of the GDPR

The data will be kept as long as the interested party does not request its deletion or revoke their consent.

• Suppliers, in order to carry out the administrative, accounting and fiscal management of suppliers, the legal basis being the execution of a contract (art. 6.1b of the GDPR) and processing professional contact data, based on our legitimate interest in accordance with to art. 19 of the LOPDGDD and art. 6.1f of the GDPR.

The data will be kept as long as the interested party does not request its deletion and, where appropriate, for the years necessary to comply with legal obligations.

• Complainants of the exercise of personal data, in order to manage and attend to the requests of the claimants in the exercise of the rights established in the data protection regulations, the legal basis being the fulfilment of a legal obligation (art. 6.1c of the GDPR).

The data will be kept for the time necessary to resolve the claims.

• Candidates for a job, in order to manage the Curriculum vitae received and carry out the personnel selection processes, interviews and other procedures necessary to search for the best possible candidate for a given job, always based on your consent. (art. 6.1a of the GDPR).

The data will be kept as long as the interested party does not revoke their consent for a maximum period of two years.

If you do not provide us with your personal data, we will not be able to fulfil the functionalities described above.

No automated individual decisions will be made based on the data provided.

International data transfers are not foreseen.

2. What are your rights when you provide us with your data?

Anyone has the right to obtain confirmation on whether or not FUNDACIÓ SANT JOAN DE DÉU deals with personal data that concerns them.

Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate or incomplete data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which they were picked up. Likewise, the interested party has the right to the portability of their data.

In certain circumstances, the interested parties may request the limitation of the processing of their data, in which case they will only be kept for the exercise or defence of claims.

In certain circumstances and for reasons related to their particular situation, the interested parties may oppose the processing of their data. In this case, FUNDACIÓ SANT JOAN DE DÉU will stop processing the data, except for compelling legitimate reasons, or the exercise or defence of possible claims.

You may materially exercise your rights, previously proving your identity, by sending an email to contact@tecsam.org or by sending a letter to C/Santa Rosa 39 08950 Esplugues de Llobregat (Barcelona).

When commercial communications are sent using the legal basis of the legitimate interest of the person in charge, the interested party may oppose the processing of their data for that purpose.

If you have given your consent for a specific purpose, you have the right to withdraw it at any time, without affecting the legality of the treatment based on the consent prior to its withdrawal.

In the event that you feel your rights have been violated with regard to the protection of your personal data, especially when you have not obtained satisfaction in the exercise of your rights, you can file a claim with the competent Data Protection Control Authority through from its website: www.aepd.es.

3. What is the origin of your data?

The personal data that we process comes from the interested party.

The personal data obtained from the web page, we obtain it directly from the user when he browses our website and fills in any of the forms.

Finally, we remind you that, as a user of the Website, you will be responsible, in any case, for the veracity of the data you provide us, and you must notify us of any changes in them.

04-26-2022