General Data Protection Regulation (GDPR) – December 2018.

We inform you that the personal data of our clients will be processed in accordance with current legislation on personal data protection, user privacy, and the secrecy and security of personal data, in compliance with the provisions of Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD) and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data (GDPR).

In order to comply with the aforementioned Regulation, we have updated our Privacy Policy:

Data Controller: IQAC-CSIC with NIF Q-2818002D.

PURPOSE OF PROCESSING

We process the information you provide us in order to provide the requested service and send you communications regarding the content of our products and services.

• Origin and category of processed data: the personal data we will process are the identifying details that you provide us through the registration form found on our website.
• Retention period: the data provided will be kept as long as the commercial relationship is maintained or for the years necessary to comply with legal obligations.
• Lawfulness: we process your data only if we have your express and informed consent to do so, and always in accordance with the described purposes.
• Recipients: the data you provide us will not be transferred to third parties except in cases where there is a legal obligation.

However, to carry out certain functions necessary for the provision of the service, your data may be processed by third parties acting as data processors who will be contractually bound to comply with their legal obligations as processors, and to maintain the confidentiality and secrecy of the information.

RIGHTS

You are the holder of the following rights regarding your personal data:

• Right to request access to personal data.
• Right to request its rectification or erasure.
• Right to request the restriction of or objection to its processing.
• Withdrawal of the consent provided.
• Right to data portability

To exercise these rights, you must send us a written communication via email to the address iqac@iqac.com specifying the right you wish to exercise.

Furthermore, we inform you that you may seek protection for your rights before the Spanish Data Protection Agency, located at Calle de Jorge Juan, 6, 28001 Madrid.