Fundació Hospital Universitari Vall d’Hebron Institut de Recerca (VHIR)

Website: vhir.vallheron.com

In accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), we inform you of the following aspects:

Who is the controller?

Fundació Hospital Universitari Vall d’Hebron Institut de Recerca (VHIR) is the controller of the processing of your data, as this entity manages the courses of the Teaching Department.

Fundació Hospital Universitari Vall d’Hebron Institut de Recerca (VHIR)

Passeig de la Vall d’Hebron, 119-129, edifici Central, 08035 Barcelona

Purpose

We will process your data in order to manage your registration and participation in the course of the Teaching Directorate for which you have registered. Specifically:

• Enroll you in the course.
• Register your Moodle account username, our course management platform.
• Manage course payment.
• Prepare and send you the certificates of the courses taken.
• Send you the invoice for the course, if you request it.

Data collected and processing of information

We may process the data we collect through the forms and means of contact on this website. Specifically:

• Identification and demographic data: Name, surname, ID card, date of birth, nationality.
• Contact details: email and telephone number.
• Professional and academic data: job position, previous studies carried out.

Once you submit the form for your course registration, you will receive a copy of your registration to the email address you have provided.

In case you request the invoice for the payment of the course, it will be sent to you by email. The certificates will be posted on Moodle for each person to download directly.

We do not process your payment card details, as this is managed directly by the Redsys POS terminal. You can access Redsys' privacy policy through this link: Privacy Policy - Redsys.

The data requested and processed are strictly necessary, adequate, pertinent and limited to the purpose for which they are collected, and will be processed in a lawful, loyal and transparent manner. These are optional, however, without all the required data we may not be able to respond correctly to your request.

You guarantee that the data provided is true and personal, and the VHIR is not responsible for the consequences that may arise for you and third parties from the processing of inaccurate data that you have provided to us.

Legitimate basis for data processing 

We will process your data based on your express consent, which you provide by accepting the consent box on the registration form, in accordance with Article 6.1 a) of the General Data Protection Regulation (EU) 2016/679 (GDPR), which states that "the data subject has given their consent to the processing of their personal data for one or more specific purposes".

The processing of data to manage the payment and invoicing of the course will be covered by article 6.1 b) of the GDPR, which indicates that "the processing is necessary for the execution of a contract to which the interested party is a party or for the application at the request of the latter of pre-contractual measures".

Data transfer and international transfer

Your information will not be transferred by VHIR to third parties without your prior consent, except for those that are necessary to comply with your request or those provided for in current legislation. No international data transfers are planned.

Term of retention of your information

Your personal data will be retained for the time necessary to manage your request. Once this management has been completed, the data will be duly blocked for the period necessary to meet possible legal responsibilities arising from the processing, in accordance with the applicable regulations.

For information, the legally established retention periods are:

• 10 years for all matters related to the accounting and taxation of the VHIR, as provided for in the General Tax Law and according to the limitation periods for criminal liability provided for in Organic Law 10/1995, of 23 November.
• 10 years for all contractual obligations acquired by the VHIR, except for periodic payment obligations made for years or shorter periods.
• 5 years with respect to the obligations arising from the prevention of occupational risks, as provided for in Royal Legislative Decree 5/2000, of 4 August, which approves the revised text of the Law on infractions and sanctions in the social order.
• 4 years in terms of the obligations arising from social security as provided for in Royal Legislative Decree 5/2000, of 4 August, which approves the revised text of the Law on infractions and penalties in the social order.
• 3 years with respect to data linked to other non-contractual obligations, in accordance with the provisions of Law 29/2002, of 30 December, Book One of the Civil Code of Catalonia.

After this period, your information will be conveniently deleted.

Rights

You may exercise your rights of access, rectification and deletion of your data, oppose the processing of the same, limit the processing, or request its portability in those cases provided, and not to be subject to automated decisions by writing with reasons, indicating that the request refers to the processing of your data for the management of the courses of the Teaching Directorate, to lopd@vhir.org.

In the event that your rights are not satisfied, you may file a complaint with the data protection supervisory authority APDCAT.

DPD data: dpd@ticsalutsocial.cat