INFORMATION IN COMPLIANCE WITH THE ESTABLISHED IN THE ORGANIC LAW ON PERSONAL DATA PROTECTION

FOTONICA21 Personal Data Protection Policy

In compliance with current regulations on data protection, Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR) and Organic Law 3/2018, of December 5, of Data Protection and Digital Rights Guarantee (LOPDGDD), we inform you about our Personal Data Protection Policy.

Responsible for personal data processing

The data controller is the legal person that determines the purposes and means of processing personal data. In other words, the controller decides how and for what purposes personal data is processed. For the purposes of this Protection PolicyData, the person responsible for the processing of personal data is:

Identity: Universitat Politècnica de Catalunya. CD6 Centro de Desarrollo de Sensores, Instrumentación y Sistemas (UPC).
CIF: Q0818003F
Address: Jordi Girona, 31. 08034 Barcelona, España.
Telephone contact: +34 937 398 314
Contact e-mail: info.cd6@upc.edu

What personal data do we process and how do we protect it?

A personal data is any information about an identified or identifiable natural person. For the purposes established in this Privacy Policy, the person in charge collects and processes the personal data that is explained in each type of treatment, and that will depend on the different services requested or the contractual relationship that it maintains with our entity.

Our organization undertakes to treat with total confidentiality and to apply the appropriate physical, technical and organizational security measures for the protection of your personal data.

You guarantee and respond, in any case, to the veracity, accuracy, validity and authenticity of the personal data provided and undertake to keep them duly updated.

Data processing of “Members”

What type of personal data do we process?

  • Identification data: name, ID, address, telephone, email address.
  • Academic and professional data: profession, position, experience, qualifications.

For what purpose do we process your personal data?
We process your personal data provided in order to fulfil the objectives of the Platform. The objectives are based on the management of the data of the members of the Platform to maintain the relationship and communications with each of them, sending monthly Newsletters and specific commercial shipments.

UPC undertakes to treat with total confidentiality and to apply appropriate physical, technical and organizational security measures for the protection of your personal data.

The personal data provided will be kept as long as the relationship of member registered on the Platform is maintained. If you decide to cancel your personal data, these may be kept in our databases during the periods established by the legislation in order to comply with the tax and accounting obligations that may be generated, and they will be eliminated once said legal periods or those that are of app.

What is the legitimacy for the processing of your data?
The legal basis for the processing of your data is the requested express consent.

To which recipients will your data be communicated?
Your personal data will not be transferred to any other entity, except those that are necessary to public bodies by legal obligation. Nor have international transfers of personal data been foreseen.

What are your rights when you provide us with your data?

In accordance with the applicable regulations on data protection, you have a series of rights in relation to the processing of your personal data. The exercise of these rights will be free for you, except in cases where manifestly unfounded or excessive requests are made, especially repetitive ones.

These rights are as follows:

a. Right to information: You have the right to be informed in a concise, transparent, intelligible and easily accessible manner, in clear and simple language, about the use and processing of your personal data.

b. Right of access: You have the right to ask at any time to confirm whether we are processing your personal data, to provide you with access to your personal data and information about the processing and to obtain a copy of your personal data. The copy of your personal data that we provide to you will be free of charge but requests for additional copies may be subject to a reasonable charge based on administrative costs. We may ask you to provide proof of your identity or require further information that is necessary to process your request.

c. Right of rectification: You have the right to request the rectification of inaccurate, out-of-date or incomplete personal data concerning you. You may also request that personal data which is incomplete be completed, including by means of an additional statement.

d. Right of deletion: You have the right to request the deletion of your personal data when, among other reasons, the data is no longer necessary for the purposes for which it was collected. However, this right is not absolute, so that our organization may continue to keep them duly blocked in the cases provided for by the applicable regulations.

e. Right to limit the processing: You have the right to request that we limit the processing of your personal data, which means that we may continue to store it, but not continue to process it if any of the following conditions are met:

  • that you challenge the accuracy of the data, for a period that allows the controller to verify the accuracy of the data;
  • the treatment is unlawful and you oppose the deletion of the data and request instead the limitation of its use;
  • your entity no longer needs the data for the purposes of the treatment, but you need it for the formulation, exercise or defense of claims;
  • you have objected to the treatment, while it is being verified if the legitimate reasons of our entity prevail over yours.

f. Right to data portability: You have the right to have your data transmitted to another data controller in a structured, commonly used and machine-readable format. This right applies when the processing of your personal data is based on consent or the execution of a contract and such processing is carried out by automated means.

g. Right of opposition: This right allows you to oppose the processing of your personal data, including profiling. We will not be able to attend to your right only when we process your data in the event that we prove legitimate reasons for the treatment or for the formulation, exercise or defense of claims.

h. Right not to submit to automated decisions, including profiling: This right allows you not to be the subject of a decision based solely on automated processing, including profiling, which produces -said decisions- legal effects or affects you in a similar way. Unless said decision is necessary for the conclusion or performance of a contract, is authorized by law or is based on consent.

i. Right to withdraw consent: In cases where we have obtained your consent for the processing of your personal data in relation to certain activities (for example, in order to send you commercial communications), you may withdraw it at any time. In this way, we will stop carrying out that specific activity for which you had previously consented, unless there is another reason that justifies the continuity of the processing of your data for these purposes, in which case, we will notify you of this situation.

j. Right to file a claim with a supervisory authority: You have the right to file a claim with the APDCAT (Autoridad Catalana de Protección de Datos, www.apdcat.cat), C/ Rosselló, 214, Esc. A, 1º 1ª, 08008 Barcelona, Tel. 93 552 78 00, or at the e-mail address: apdcat@gencat.cat

You can exercise the aforementioned rights, by sending us a communication to the physical or electronic address of the person in charge, accompanying a document proving your identity and providing the necessary details to process your request.