Information on the processing of personal data

Both data privacy and information confidentiality are important aspects for the Pasqual Maragall Foundation. This data protection policy establishes the manner in which personal data obtained from its clients, partners, contacts, suppliers and collaborators are treated and may vary over time due to possible legislative or jurisprudential changes or the criteria followed by the Spanish Data Protection Agency and/or the competent authority at any given time. For this reason, the Pasqual Maragall Foundation reserves the right to modify this policy to adapt it to legislative or jurisprudential developments that are in force at the precise moment in which the website is accessed.

Last update date: 10/27/2022

1. Who is responsible for the processing of your data?

The person responsible for processing your data is:

• The Pasqual Maragall Private Foundation for Alzheimer's Research (hereinafter, the "Foundation").
• Address: Calle Wellington, 30, Barcelona (08005).
• Tax identification number (NIF): G-64869290.
• Data Protection Officer: gdpr@fpmaragall.org.

2. Identification of treatments

For what purpose will we process your data, with what legitimacy will we do so and for how long will we keep it?

The Foundation processes your data based on the collaborative relationships you maintain with us. The data we collect is only the data strictly necessary to manage the established relationships, and is appropriate, pertinent and not excessive, limited to what is necessary in relation to the purposes for which it is processed. In order to keep the data current, accurate and up to date, we ask that you inform us of any changes or modifications that may occur.

Next, we describe the activities carried out by the Foundation so that you can identify in which database your personal data is processed and for what purposes.

2.1 Web forms

The personal data that you provide us through any of the forms enabled on the website or any other means of contact indicated will be treated with the purpose of attending to your queries and requests. When necessary, we will forward your request internally to the corresponding department for its correct management. We will use your data to send you communications of interest if you have subscribed to our newsletters or have checked the corresponding box enabled for this purpose.

We inform you that you can unsubscribe from this type of communications at any time in the manner indicated in each shipment received or by sending an email to gdpr@fpmaragall.org.

Legitimation: The legal basis for the processing of your data is the consent that is considered to be granted when you provide us with your data and accept this data protection policy.

Deletion period: The data will be deleted once your request has been attended to. The data for sending information of interest will be kept indefinitely as long as its deletion is not requested.

2.2 Partners and donors

The personal data that you provide us when you become a member or donor of the Foundation as an individual or company will be processed for the following purposes:

• Manage your status as a member and/or donor.
• Answer your questions via the Web or any other common means of communication.
• Send you communications of interest about the Foundation, by electronic and conventional means.

We inform you that you can unsubscribe from this type of communications at any time in the manner indicated in each shipment received or by sending an email to gdpr@fpmaragall.org.

Legitimation: The legal basis for the processing of your data is the contractual relationship established with the partner, the consent given as a donor by accepting this data protection policy and the legitimate interest of the Foundation to send you communications of interest.

Deletion period: Your data as a partner and/or donor will be kept for the duration of the established collaboration relationships and will subsequently be deleted once the legally established periods for the prescription of civil, criminal and tax obligations have elapsed.

The data for sending information of interest will be kept indefinitely as long as its deletion is not requested.

2.3 Communication and fundraising

We will process your contact details, as an interested party, to keep you informed about the activities and projects of the Foundation through our newsletters and email campaigns when you maintain a collaborative or institutional relationship with the Foundation, or when you subscribe to some of our forms for this purpose, such as:

• “I want to stay up to date” form.
• Download our magazine, digital guides or documents of interest.
• Our blog.
• Sign the Foundation's campaigns.

We inform you that you can unsubscribe at any time in the manner indicated in each shipment received or by sending an email to gdpr@fpmaragall.org.

Legitimation: The legal basis for the processing of your data is your consent in the cases in which you have subscribed to the indicated forms, the contractual relationship in the cases in which you maintain a relationship as a partner, donor or collaboration relationship with the Foundation, and the legitimate interest of the Foundation in promoting its activities and projects.

Deletion period: The data will be kept as long as its deletion is not requested.

2.4 Volunteering

The personal data that you provide us when you register as a volunteer of the Foundation will be processed for the following purposes:

• Communication and management of volunteers to participate in the Foundation's activities and events such as:
  • Awareness-raising or fundraising events dedicated to partners where you can participate as a volunteer.
  • Leisure activities dedicated to families of Alzheimer's patients in which you could participate as a volunteer.
• Send you follow-up communications to inform you about volunteer projects and communications about activities of interest to the Foundation related to your profile.

We inform you that you can unsubscribe from this type of communications at any time in the manner indicated in each shipment received or by sending an email to gdpr@fpmaragall.org.

Legitimation: The legal basis for the processing of your data is your consent, which is considered to be granted when you register as a volunteer, and the legitimate interest of the organization in sending communications of interest.

Deletion period: The data will be kept as long as its deletion is not requested.

2.5 Therapeutic groups

The personal data that you provide us when you register as a participant in our therapeutic groups will be processed for the following purposes:

• The creation of a directory of people who can be part of a therapeutic group (caregivers, assistants and volunteers).
• Evaluate the suitability of candidates.
• Sending information about therapeutic groups.
• Manage therapeutic groups and communications with all those involved.
• Sending communications about activities of interest to the Foundation related to your profile.

We inform you that you can unsubscribe from this type of communications at any time in the manner indicated in each shipment received or by sending an email to gdpr@fpmaragall.org.

Legitimation: The legal basis for the processing of your data is the consent given when you sign up as a participant in therapeutic groups and the legitimate interest of the Foundation in sending communications of interest.

Deletion period: Your contact information will be kept as long as you do not request its deletion.

2.6 Clients

The personal data that you provide us when you begin your relationship as a client of the Foundation will be processed for the following purposes: customer management, product sales and sending communications of interest.

Legitimation: The legal basis for the processing of your data is the existence of a contractual relationship and the legitimate interest of the Foundation to send you communications of interest.

Deletion period: The data will be kept in any case for the duration of the contractual relationship and subsequently for the legal periods established in civil legislation for the prescription of contractual obligations and accounting and tax legislation.

2.7 Contests and events

The personal data you provide us when you register for a contest or event will be processed for the following purposes:

• Manage the event (registration, participation, and/or voting, raffles, and related activities).
• Sending information related to the event.
• Sending communications about future events and activities of interest.

We inform you that you can unsubscribe from this type of communications at any time in the manner indicated in each shipment received or by sending an email to gdpr@fpmaragall.org.

Legitimation: The legal basis for the processing of your data is consent, which is considered to be granted by participating in the contest or event and the legitimate interest of the Foundation to keep you informed about it.

Deletion period: Contact data will be kept as long as its deletion is not requested.

2.8 Inheritances and legacies

The personal data you provide us will be processed for the following purposes:

• Respond to your queries and send you information related to the management of inheritances and legacies in favor of the Foundation.
• Collaborate in hereditary processes as an involved party.
• Manage the goods received.

Legitimation: The legal basis for the processing of your data is your consent and the legal obligation of the Foundation to manage it.

Deletion period: The data will be kept by legal obligation.

2.9 Suppliers

The personal data that you provide us when you initiate collaboration relationships and/or as a supplier of the Foundation will be processed for the following purposes:

• Management of contracted services: supplier registration, management of contracts, orders and payments,
• Maintain a database of contacts for possible future hiring and/or collaborations.

Legitimation: The legal basis for the processing of your data is the existence of a contractual relationship.

Deletion period: The data will be kept in any case for the duration of the contractual relationship and subsequently for the legal periods established in civil legislation for the prescription of contractual obligations and accounting and tax legislation.

2.10 Employment: CV management

The personal data you provide us when you send us or provide your CV will be processed for the following purposes:

• For the selection of personnel during the processes that the company maintains open.
• To maintain a file with curricular information of candidates to provide services to our company and whose profile fits the characteristics requested by the company.

Legitimation: The legal basis for the processing of your data is your consent, which is considered to be granted with the voluntary submission of your CV.

Deletion period: the data will be kept for a maximum period of 2 years and will subsequently be deleted.

2.11 Access and visit log

To access the Foundation's facilities, you must identify yourself in the access register. The purpose of processing your data is to control visits and manage external personnel with access to the building.

Legitimation: The legal basis for the processing of your data is the legitimate interest of the Foundation for access control and security of the workplace.

Deletion period: The personal data collected will be kept for a maximum period of one year and will be deleted afterwards.

2.12 Video surveillance

The Foundation has a closed circuit of video surveillance cameras. The purpose of processing your image is for video surveillance and security of the facilities.

Legitimation: The legal basis for the processing of your image is the legitimate interest of the Foundation for Video Surveillance and Security of the Workplace.

The storage period: Images will be kept for a maximum period of one month and will be deleted afterwards.

2.13 Pasqual Maragall Researchers Programme (PMRP)

The personal data that you provide us within the “Pasqual Maragall Researchers Programme” will be processed for the following purposes:

A. REGISTRATION AND APPLICATION FORMS

They correspond to data registered on the programme platform, via email or other indicated contact methods.

Purpose: Manage your queries and requests and send you communications of interest about the Programme.

Legitimation: The legal basis for the processing of your data is your explicit consent when registering your data and accepting the PMRP privacy policy.

Deletion period: the data will be kept indefinitely as long as its deletion is not requested.

B. CV MANAGEMENT

The personal data you provide us when you send us your CV will be processed for the following purposes:

• For selection while the PMRP process is open.
• To maintain a file with information about applicants and their team members.

Legitimation: The legal basis for the processing of your data is your consent, which is considered granted with the voluntary submission of your CV.

Deletion period: Your CV will be kept for a maximum of 5 years and will subsequently be deleted, except for project or scholarship requirements.

3. To whom will we communicate your personal data?

The Foundation will communicate your data in the following cases:

• By legal obligation: to the tax administration for payment of taxes, to judges and courts that request it through judicial means.
• Transfer required for the performance of the contracted services: financial institutions to make the appropriate collections and payments. We inform you that your data may be transferred to the Barcelonaβeta organization, a collaborating entity of the Foundation with which it shares projects, services and benefits.
• The data of candidates for employee positions who have sent their CV may be communicated, depending on their profile and the position they are applying for, to organisations, companies or institutions at both national and international levels, with which the Foundation has agreements or pre-agreements for collaboration or common projects, so that they can assess their suitability as a candidate.
• Your data will not be disclosed to third parties by the PMRP or the FPM except for purposes of evaluating applications by the public agency coordinating the external evaluation process or by the members of the selection committee of the Pasqual Maragall Researchers Programme.

International data transfer: The Foundation will not carry out any international transfer of your data.

4. What are your data protection rights and how can you exercise them?

Any person has the right to obtain information about what data is being processed about them by an organization. To this end, the Foundation tells you what your rights are:

• Right of access, rectification and deletion: Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• Right to restriction of processing: In certain circumstances, you may request that the processing of your data be restricted, in which case it will only be retained for the exercise or defence of claims.
• Right to object to processing: In certain circumstances and for reasons relating to your particular situation, you may object to the processing of your data. The Foundation will stop processing the data, except for compelling legitimate reasons, or the exercise or defence of possible claims.
• Right to data portability: You will have the right to receive the personal data concerning you, which you have provided to the entity, in a structured, commonly used and machine-readable format when: a) the processing is based on consent or a contract, and b) the processing is carried out by automated means.
• Right to complain to the supervisory authority: We inform you of your right to file a claim with the control authority (AEPD – www.aepd.es) in the event that you have not seen the exercise of your rights indicated here satisfied.

To exercise the aforementioned rights, you can contact us by post or email at the addresses indicated in section 1, identifying the following information in your request:

• Applicant's details (name and surname).
• Contact address.
• Right you want to exercise.
• Specific data on which you are making your request.

We will resolve your request within a maximum period of one month, notifying you through the same means you used initially.

5. What security does the Foundation apply when processing your data?

Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risks of varying likelihood and severity for the rights and freedoms of natural persons, the Foundation shall implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, preventing accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or unauthorised disclosure of or access to such data.

6. Privacy Policy – Email Confidentiality

All emails sent from the domains of the Pasqual Maragall Foundation may contain confidential or legally protected information and are exclusively addressed to the person or entity to which they are addressed. Their content does not constitute a commitment on the part of the sender. If you are not the final recipient or the person in charge of collecting it, you are not authorized to read it, retain it, modify it, distribute it, copy it or reveal its content. If you have received an email in error, we ask that you inform the sender and delete the message and any attached material it may contain from your system.