Fundació Hospital Universitari Vall d’Hebron Institut de Recerca (VHIR)

Website: vhir.vallheron.com

In accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), we inform you of the following aspects:

Who is the controller?

Fundació Hospital Universitari Vall d’Hebron Institut de Recerca (VHIR) is the controller of the processing of your data, as this entity manages the courses.

Fundació Hospital Universitari Vall d’Hebron Institut de Recerca (VHIR)

Passeig de la Vall d’Hebron, 119-129, edifici Central, 08035 Barcelona

Purpose

We will process your data in order to manage your registration and participation in the course for which you have registered. Specifically:

• Enroll you in the course.
• Register your Moodle account username, our course management platform.
• Manage course payment.
• Prepare and send you the certificates of the courses taken.
• Send you the invoice for the course, if you request it.

Data collected and processing of information

We may process the data we collect through the forms and means of contact on this website. Specifically:

• Identification and demographic data: Name, surname, ID card, date of birth, nationality.
• Contact details: email and telephone number.
• Professional and academic data: job position, previous studies carried out.

Once you submit the form for your course registration, you will receive a copy of your registration to the email address you have provided.

In case you request the invoice for the payment of the course, it will be sent to you by email. The certificates will be posted on Moodle for each person to download directly.

We do not process your payment card details, as this is managed directly by the Redsys POS terminal. You can access Redsys' privacy policy through this link: Privacy Policy - Redsys.

The data requested and processed are strictly necessary, adequate, pertinent and limited to the purpose for which they are collected, and will be processed in a lawful, loyal and transparent manner. These are optional, however, without all the required data we may not be able to respond correctly to your request.

You guarantee that the data provided is true and personal, and the VHIR is not responsible for the consequences that may arise for you and third parties from the processing of inaccurate data that you have provided to us.

Legitimate basis for data processing 

We will process your data based on your express consent, which you provide by accepting the consent box on the registration form, in accordance with Article 6.1 a) of the General Data Protection Regulation (EU) 2016/679 (GDPR), which states that "the data subject has given their consent to the processing of their personal data for one or more specific purposes".

The processing of data to manage the payment and invoicing of the course will be covered by article 6.1 b) of the GDPR, which indicates that "the processing is necessary for the execution of a contract to which the interested party is a party or for the application at the request of the latter of pre-contractual measures".

Data transfer and international transfer

Your information will not be transferred by VHIR to third parties without your prior consent, except for those that are necessary to comply with your request or those provided for in current legislation. No international data transfers are planned.

Term of retention of your information

The personal data provided will be kept for the duration of the contractual or pre-contractual relationship that gives rise to the processing of personal data, and may be kept for a longer period to determine the possible responsibilities that may arise. 

The data relating to the academic record and official degrees will be kept indefinitely. The data relating to the payment of courses will be kept for at least 5 years or these periods established by current tax legislation. 

However, in the case of payment by credit/debit card, the VHIR does not keep the data associated with it. 

The contact details for sending information about academic activities organised or in which VHIR participates will be kept as long as you do not tell us otherwise, if you have given your consent to do so.

After this period, your information will be conveniently deleted.

Rights

You may exercise your rights of access, rectification and deletion of your data, oppose the processing of the same, limit the processing, or request its portability in those cases provided, and not to be subject to automated decisions by writing with reasons, indicating that the request refers to the processing of your data for the management of the courses of the Teaching Directorate, to lopd@vhir.org.

In addition, you can revoke your consent to the sending of information about the VHIR training offer at any time, without retroactive effect. In the event that your rights are not satisfied, you may file a complaint with the data protection supervisory authority APDCAT.

DPD data: dpd@ticsalutsocial.cat