PRIVACY POLICY

This Privacy Policy provides detailed information on how we use the personal data of people who contact, use the website or use the services of the Eduardo Anitua Foundation (http://fundacioneduardoanitua.org).

General information

 Who is responsible for the processing of your data?

The Eduardo Anitua Foundation is responsible for processing your data, and we are responsible for deciding how to use and protect your data.

You can contact us on the website via this link.

Our postal address is as follows:

· C/Jose Mª Cagigal 19 – 01007 Vitoria – Gasteiz Alava (Spain)

For what purpose do we process your personal data?

Depending on the service or feature you request, we will process your data for any of the following purposes:

  1. To send information about the products and services offered by the Eduardo Anitua Foundation and/or third parties of the dentistry and scientific research field;
  2. To manage the services to which the User decides to subscribe;
  3. To manage the Masters organized by the University Institute for Regenerative Medicine and Oral Implantology (UIRMI) and send communications to their participants;
  4. To manage the training courses provided by the Foundation;
  5. To contact you.

To fulfil the purposes described, we will process the following categories of personal data:

  • Identification data: for example, your name, surname, phone number, email, etc.;
  • Personal information: for example, your age, nationality, etc.;
  • Academic and professional data: for example, your academic records, professional experience, etc.;
  • Economic and transactional data: for example, payment or card data, information about orders placed, etc.;
  • Connection, geolocation and browsing data.

At the time of the data collection we will let you know which data are essential for us to provide our services. If you do not provide us with the data identified as necessary, we may not be able to provide the requested service satisfactorily.

What is the legal basis for the data processing?

The legal basis that legitimates the processing of your personal data depends on the purpose for which the data will be used. Specifically, the legal bases are as follows:

Purpose

Legal basis


1. To send information about the products and services offered by the Eduardo Anitua Foundation and/or third parties of the dentistry and scientific research field.

The basis that legitimates the processing of your data is the consent that you grant to us.

2. To manage the services to which the User decides to subscribe.

The basis that legitimates the processing of your data is the consent that you grant to us.

3. To manage the Masters organized by the UIRMI and send communications to their participants.

The processing of your data is necessary for the implementation of the contract.

We may request your consent for different purposes, such as the sending of information of interest to you. In this case, the basis for processing your data is your consent.

4. To manage the training courses provided by the Foundation.

The processing of your data is necessary for the implementation of the contract.

We may request your consent for different purposes, such as the sending of information of interest to you. In this case, the basis for processing your data is your consent.

5. To contact you

The basis that legitimates the processing of your data is the consent that you grant to us.

Under what circumstances will we disclose your data?

Under no circumstances will we disclose your data to third parties without informing you in advance and without the necessary legal basis.

The data will only be disclosed to comply with the purpose of managing the Masters organized by the UIRMI and its training courses. To fulfil these purposes we will disclose the data to the following entities:

  • We will disclose the data that you provide to us when enrolling in any of the Masters organized by the UIRMI to the University of the Basque Country (UPV/EHU Universidad del País Vasco/Euskal Herriko Unibertsitatea), given that the University a co-organizer of the Master and requires such data for its administrative management. Only the student’s identifying data and academic records will be disclosed;
  • We will disclose your identification data and academic records to the Basque Government for the official accreditation of diplomas obtained upon completion of the Master or training courses.
  • To companies of the BTI Group: to fulfil the purposes described in this Privacy Policy we need to grant companies of the BTI Group access to your personal data. The legitimizing basis to disclose this information is our legitimate interest in optimizing our management and corporate organization.

We occasionally hire companies that provide certain services and that need to access personal data to this end. We have signed the corresponding data processor contracts that comply with the provisions of the General Data Protection Regulation (GDPR) with these companies. These contracts ensure that these companies process the data to which they have been granted access for the sole purpose of providing us with the contracted service, never for purposes for which we have not authorized them, and that they will not transfer said data to third companies and/or administrations. In addition, we demand that they implement security measures that guarantee the confidentiality and integrity of the personal data. We only hire companies and entities that guarantee us that they comply with the data protection provisions in force.

Unless indicated otherwise, we do not carry out international data transfers.

How long will we store the data?

The data will be stored as long as required for the fulfilment of the indicated purposes, as well as to comply with any obligations derived from their processing. In any case, the data will be stored by applying the appropriate security measures. Once all possible actions have prescribed, we will proceed to delete your personal data.

What are your rights when you provide us with your data?

The General Data Protection Regulation (GDPR) and other regulations in force grant the interested parties a series of rights in relation to their personal data, which we describe below. The application of these rights will depend, in each case, on the legal basis that legitimizes each processing, and their exercise is free of charge.

If you have granted us your consent to process your data, you may withdraw it at any time by contacting the Eduardo Anitua Foundation.

You may exercise your rights by contacting the Foundation in writing, attaching a photocopy of your national ID card or a similar identification document, at the following address:

· C/ Jacinto Quincoces 39, 01007 Vitoria-Gasteiz (Álava) Spain

Upon receipt of your request to exercise these rights, we have a period of one month to respond. If you are not satisfied with our resolution, you may file a claim with the Spanish Data Protection Agency (AEPD) www.aepd.es

Click here for more information about these rights.

  1. Right of access (Article 15 of the GDPR): This right entitles you to obtain information from us regarding whether or not we are processing personal data concerning you and, if that were the case, to be granted access to the personal data in question. The requests to exercise this right will be analysed individually, since there are cases in which its exercise is not applicable.
  2. Right to rectification (Article 16 of the GDPR): This right entitles you to request the rectification of inaccurate personal data that we are processing. You also have the right to request the completion of data that you believe are incomplete. There are no exceptions in the application of this right.

  3. Right to erasure (Article 17 of the GDPR): You have the right to request us to delete your personal data under any of the circumstances set forth in Article 17 of the GDPR.

  4. Right to restriction of processing (Article 18 of the GDPR): This right allows you to request us to restrict the processing of your data in certain circumstances set forth in Article 18 of the GDPR.

  5. Right to data portability (Article 20 of the GDPR): In relation to the processing that is carried out using automated means, this right allows you to receive your personal data in a structured, commonly-used, machine-readable, interoperable format so that you can disclose the data to another data processor.

    This right only applies to processing that is based on your consent or in the framework of the implementation of a contract.

  6. Right to object (Article 21 of the GDPR): You have the right to object to the processing of your data provided that your decision is based on a legitimate interest, including profiling.