Privacy and Data Protection Policy

User information

The PTS Foundation is the Controller of the personal data of the User, who is informed that his/her data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and in Basic Law 3/2018, of 5 December (LOPDGDD), on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and the User is hereby informed of the following:

What is the purpose of the processing of your personal data?

The Foundation processes the personal data of data subjects for the management and development of communications (user contact, response to consultations, the management of profiles on social media, the online office of the Foundation, etc.), to provide the services requested and to engage in our activity.

What type of data do we process?

As well as the different means of data-gathering mentioned, and the different purposes of processing detailed, you are hereby informed that we may process the following types of data on our information systems:

  • Identification details (name and telephone number)
  • e-mail addresses

How long do we retain your data?

The personal data are retained for as long as your relationship with the Foundation continues, unless you request its erasure, or for as long as there is any legal provision or requirement to store the data. When the data are no longer necessary for the purposes for which they were collected, they will be erased, ensuring their confidentiality.

What is the legitimate basis for processing your data?

The legal basis for the processing of your data may be the result of the execution of a commercial, trade or employment contract, etc., to which the data subject is party.

Another legal basis for the processing of your data is your informed consent in the case of other types of processing, for example: the contact form on the website, participation in the Foundation’s social media profiles and any other processing which necessarily entails the gathering of your personal data, for which the clear affirmative consent of the data subject is an essential requirement.

Who will receive your data?

The data of data subjects will not be revealed to any third party, except in the case of a legal obligation to do so.

What are your rights when you provide and/or we process your data?

As a data subject, you may at any moment exercise any of the following rights which you hold under data protection regulations:

  • Access to your data: You have the right to access your data and to know what personal data concerning you we process.
  • Rectification or erasure of your data: Under certain circumstances, you have the right to rectify those personal data concerning you which you consider inaccurate and which are being processed by THE ENTITIES, and the right to request the erasure of your data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
  • Restriction of the processing of your data: Under certain circumstances, you have the right to request us to restrict the processing of your data, in which case we inform you that we shall only retain the data whose processing you wish to restrict for the exercise or defence of legal claims.
  • Portability of your data: Under certain circumstances, you have the right to receive the personal data concerning you and which you have provided to us, in a structured, commonly used, machine-readable format, and for our company to transmit them to another controller.
  • The right to object to the processing of your data: Under certain circumstances and on grounds relating to your particular situation, you have the right to object to the processing of your data, in which case we would cease to process them, unless we must continue to do so on compelling legitimate grounds or for the exercise or defence of possible legal claims.
  • The right to make a legal claim before the supervisory authority if satisfaction has not been achieved in the exercise of your rights, in this case, before the Spanish Data Protection Agency (AEPD) http://www.aepd.es.

We hereby inform you that you may exercise your personal data rights by any of the following means:

  • Postal address: Avda. del Conocimiento s/n, 18016 Granada.
  • E-mail address: rgpd@ptsgranada.com.

RECORDS OF PROCESSING ACTIVITIES

  1. Identification of the Controller

Pursuant to the provisions of Regulation (UE) 2016/679 of 27 April 2016 (GDPR), the Controller is the entity which determines the purposes and means of processing of personal data (files).

Registered name Fundación Pública Andaluza Parque Tecnológico de Ciencias de la Salud de Granada
Tax Code Q1800771F
Activity Research and Development Centre of the Health Sciences Technology Park
Address Avenida del conocimiento, s/n – 18016 Granada
Telephone 958535050
E-mail rgpd@ptsgranada.com
Commercial brand name Fundación Parque Tecnológico Ciencias de la Salud de Granada
Website www.ptsgranada.com
AEPD e-mail for notifications rgpd@ptsgranada.com
E-mail for the exercise of rights rgpd@ptsgranada.com
Legal representative Ana Isabel Agudo Martínez

Data Protection Officer

Name Juan Fernández Montesinos
  1. Identification of the personal data processing carried out by the Foundation

A filing system is any set of personal data which are accessible according to specific criteria and which may be processed for a specific purpose.

Filing system Description
1 Human Resources Management of personnel employed by the Foundation
2 Website Contacts Management of the data of persons who contact the Foundation via the Foundation website
3 CVs Management of CVs received in the course of the Foundation’s possible selection processes
4 CCTV To guarantee the security of persons, property and facilities.
5 Working time records Register of working hours in compliance with Royal Decree Law 8/2019 on urgent social protection measures and to combat precariousness in the labour market.
6 Transfers The management, promotion and dissemination of activities and events and for the transfer of the knowledge generated, especially in the area of health and biomedicine.
7 Management of facilities The management of rentals and/or leases and for maintenance and security in the facilities of the foundation.

Human Resources

Description Management of personnel employed by the Foundation.
Purposes Prevention of occupational risk, payroll management, human resources.
Legitimate interest For the execution of a CONTRACT or pre-contractual agreement with the data subject
Data subjects Employees
Storage criteria Stored for NO LONGER THAN NECESSARY in order to achieve the purposes
Processing system Partly Automated (Mixed)
Categories of data
Identification data ID card number or tax code, full name, postal or electronic address, telephone, manual signature, Social Security or mutual society number
Sensitive data None
Other data Personal characteristics; academic and professional details; employment details; economic, financial and insurance details; transactions involving goods and services.
Categories of recipients
Data transferred to Social Security authorities, tax authorities, public administrations with competence in the field
International transfers
None

Contacts via the website

Description Management of the personal data of persons contacting the Foundation via the website
Purposes Publicity and commercial prospecting
Legitimate interest EXPLICIT consent for specific purposes
Categories of data subjects Contact persons, applicants
Storage criteria Stored for NO LONGER THAN NECESSARY in order to achieve the purposes
Processing system Automated (Digital)
Categories of data
Identification data Full name, telephone
Sensitive data None
Other data None
Categories of recipients
Data transferred to None
International transfers
None

CVs

Description Management of CVs received in the course of the Foundation’s possible selection processes
Purposes Human resources
Legitimate interest UNEQUIVOCAL consent through a clear action taken by the data subject
Categories of data subjects Employees, applicants for employment
Storage criteria Stored for a maximum of 1 year
Processing system Partly Automated (Mixed)
Categories of data
Identification data ID card number or tax code, full name, postal or electronic address, telephone, image, manual signature
Sensitive data None
Other data Personal characteristics, academic and professional details, employment details
Categories of recipients
Data transferred to None
International transfers
None

CCTV

Description To guarantee the security of persons, property and facilities.
Purposes CCTV
Legitimate interest In the PUBLIC INTEREST
Categories of data subjects Employees, clients and users, contact persons
Storage criteria Stored for a maximum of 30 days
Processing system Automated (Digital)
Categories of data
Identification data Imagen
Sensitive data None
Other data None
Categories of recipients
Data transferred to Judicial bodies, insurance companies, police and security forces
International transfers
None

Working Time Records

Description Register of working hours in compliance with Royal Decree Law 8/2019 on urgent social protection measures and to combat precariousness in the labour market
Purposes Payroll management, Human resources
Legitimate interest Lawful processing WITHOUT NEED FOR CONSENT as it is a LEGAL OBLIGATION of the Controller
Categories of data subjects Employees
Storage criteria Stored for 4 years in the register of working hours
Processing system Partly Automated (Mixed)
Categories of data
Identification data ID card number or tax code, full name, digitalised fingerprint, user ID
Sensitive data None
Other data None
Categories of recipients
Data transferred to Parties with a legitimate interest, social security authorities
International transfers
None

Transfers

Description The management, promotion and dissemination of activities and events and for the transfer of the knowledge generated, especially in the area of health and biomedicine
Purposes Public interest purposes, based on current legislation
Legitimate interest EXPLICIT consent for specific purposes
Categories of data subjects Contact persons, applicants
Storage criteria Stored for NO LONGER THAN NECESSARY in order to achieve the purposes
Processing system Partly Automated (Mixed)
Categories of data
Identification data Full name, postal or electronic address, telephone, image, manual signature
Sensitive data None
Other data Employment details
Categories of recipients
Data transferred to None
International transfers
None

Building management

Description The management of rentals and/or leases and for maintenance and security in the facilities of the Foundation
Purposes Management of rentals/leases
Legitimate interest For the execution of a CONTRACT or pre-contractual agreement with the data subject
Categories of data subjects Employees, owners or lessees
Storage criteria Stored for MORE THAN THE TIME NECESSARY to achieve the purposes due to a LEGAL OBLIGATION
Processing system Partly Automated (Mixed)
Categories of data
Identification data ID card number or tax code, full name, postal or electronic address, telephone, manual signature
Sensitive data None
Other data Economic, financial and insurance data
Categories of recipients
Data transferred to Tax authorities, public administration bodies with competence in the field
International transfers
None

 

 

RECORDS OF PROCESSING ACTIVITIES

ICT security policy