1. Data controller
Your personal data is processed by FUNDACIÓN IMDEA ENERGÍA, with registered office at Parque Tecnológico de Móstoles, Avda. Ramón de la Sagra, 3, 28935 Móstoles, Madrid. You may contact the data protection officer by email firstname.lastname@example.org or by phone: +34 91 737 11 20.
Every COST Action participant and visitor of our website, people who use our services, e.g. who subscribe to our newsletter, as well as people who email us or chat with us.
3. What information about you do we handle, why do we handle that information, what is the legal basis for those processings?
On top of the personal data collected and processed by the COST Association in the framework of this COST Action, for which you can consult the privacy notice for e-COST.
As COST Action Participant,
Based on your consent (article 6.1.a) of the GDPR, we:
publish your contact details on the COST Action Yeast4Bio website and other communications tools or publications for communication purposes;
take and use pictures/videos where you appear taken or made during a meeting / an event of or related to the COST Action Yeast4Bio on the COST Action Yeast4Bio website and other communications tools or publications for communication purposes.
You have the right to withdraw your consent at any time by sending an email to email@example.com. Withdrawing your consent means that the collected personal data will not be used any longer. However, use made of your data in the past remains valid.
When you register for newsletters:
Based on your consent (article 6.1.a) of the GDPR:
We collect and process your identification data (name, first name, title and email address) for registration and delivering of our newsletters.
You may unsubscribe from our newsletters at any time. We will not keep your data once you have unsubscribed.
When you email us, chat with us or otherwise contact us:
We process your contact details, when required, in order to provide you with the requested support. This data processing is based on your consent (article 6.1.a of the GDPR). That consent is facilitated by the affirmative action of contacting the Yeast4Bio COST Action team and that no databases will be created with such information.
When you register for events:
Based on your consent (article 6.1.a) of the GDPR):
When you register for events, we collect your identification data (name, first name, title, email address, and phone numbers) and professional data (position and institution).
When you register for events, we also ask you
whether you have special dietary requirements or other specific needs. Those data are collected for the organisation of the event.
We do not keep your dietary requirements or other mentioned specific needs for longer than the event.
whether you are in agreement with us:
including your contact details in the list of participants to the event that is made available on the COST Action website / to all participants for networking purposes;
taking and using pictures during the event for promotional and information purposes.
Not providing your consent for taking pictures is without impact on your participation to events, workshops or webinars.
When you contact us to make use of your data subject rights:
We process your contact details and the proof of your identity you send us in order to address your request. We can also, depending on your request, process other personal data we have collected also in order to address your request.
This data processing is for compliance with legal obligations to which we are subject (article 6.1.c of the GDPR).
4. How do we protect your personal data?
Your personal data are handled in full confidentiality. We make all necessary effort to take technical and organisational measures that might be required so as to ensure security of your personal data.
5. Who can access your data?
The management of the website is carried out by researchers with whom IMDEA ENERGY has commitments to access data in accordance with Article 28 of the RGPD.
Data on participation in the project will be provided to the project’s funding bodies for the purposes of monitoring and control of the project, as well as accreditation of the activities carried out.
In the event that you request the exercise of any data protection rights, this information could be provided to the relevant control authority in case of request.
6. How long is the information retained for?
Data relating to your participation as Action participant will be kept for a maximum of two years after the end of the Action (6/11/2023); your contact details will be kept as long as you do not withdraw your consent to be participant of the Action, and pictures of the events will be filed in the IMDEA Energy’s photography archives, but you may object to this at any time.
The data necessary for the sending of the newsletters will be erased as soon as you unsubscribe, unless they need to be retained for the purpose of contacting you about other topics that you have expressed an interest in.
All incoming and outgoing emails will be deleted after we have responded to your enquiry, unless this gives rise to another type of relationship or interest, with a different retention period (ex. Participant in the Action).
When you contact us to make use of your data subject rights, this data processing is for compliance with legal obligations to which we are subject (article 6.1.c of the GDPR) and will be kept for three years after the process ends.
7. Your rights
Under the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), you have rights as an individual which you can exercise in relation to the information we hold about you:
right to request from us access to and rectification of your personal data;
right to request erasure of your data (right to be forgotten) in the cases foreseen by article 17 of the GDPR;
right to obtain from us restriction of processing where there is contestation about the data processing for a period enabling to solve the issue;
right to data portability;
where the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. Withdrawing your consent means that we will not make use of your data any longer, including pictures. However, use made of your data in the past remains valid.
Your right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on Article 6(1), (f) of the GDPR (our legitimate purposes) as mentioned above.
You may exercise these rights sending an email to firstname.lastname@example.org and including a photocopy of your national ID card.
Please note that you always have the right to lodge a complaint with the Supervisory authority of the EU country of your choice. In Spain, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).