Privacy policy

1. To whom does this Privacy Policy apply?

By visiting or consulting the IEEC website and using the services offered, the user accepts the processing of their personal data, in accordance with the terms established in this document (hereinafter, the “Privacy Policy”). 

This Privacy Policy and how we process your data are governed by the General Data Protection Regulation, or Regulation [EU] 2016/679 (“GDPR”).

2. Who is responsible for data processing?

This is the relevant information of the Data Controller of the personal data that it processes and is provided by users:

3. What is the legitimacy for the processing of data?

The legal basis for the processing of the data is the execution of the  form on the IEEC website  (“Contact”).  This form is carried out by the interested party and thereby gives their full consent to the processing of their personal data. These data will be treated with the utmost confidentiality and with the sole purpose of managing the relationships we establish with users through the IEEC website.

4. What information do we process?

The information that we receive from users or that they share, and that will be treated with the utmost confidentiality, is treated and managed as explained below.

a) Information that users provide us directly: IEEC collects and stores certain information that the user enters on the Web, through the following section / form.

b) Information that users provide to us indirectly:

4.1 Data quality: The user must guarantee,  in front of IEEC and third parties, the quality of the information and personal data provided through the IEEC website. This implies that all personal data and information provided must be real, truthful, updated and belong to the user and not to third parties. In the event that they belong to third parties, we understand that it is through your consent and we request that said third party be invited to know our legal texts as soon as possible.

4.2 Modification of data: The user must notify  IEEC any modification that occurs in the personal data provided, responding in any case to the veracity and accuracy of the data provided at all times.

5. For what purpose do we process the data?

6. How long will we keep the data?

IEEC will keep the user’s personal data for  as  long as reasonably necessary to: comply with any of the objectives mentioned in this Privacy Policy and comply with current legislation, regulatory requirements and relevant orders of competent courts, or, in any case, as long as we send information or communications and the interested party does not request its deletion or opposition.

Your personal data will be anonymized or deleted once it is no longer relevant to the purposes for which it was collected.

7. To which recipients is the data communicated?

The personal data that  IEEC  collects will be exclusively used to achieve the object defined on the IEEC website. To achieve this objective and the correct provision of the service, IEEC may share certain personal data of users:

–    Upon legal request, IEEC may share information with executive authorities and/or third parties regarding requests for information relating to criminal investigations and suspected illegal activities. 

–   With the consent of the user: apart from what is established above, the user will be informed in the event that any information about the user is brought to the attention of the commercial partners of the website, or with third parties, other than the purposes set out on the IEEC Website,  so that you have the opportunity to choose not to have your information shared. None of the foregoing data communications shall include selling, renting, sharing or otherwise disclosing customer personal information for commercial purposes contrary to the commitments made in this Privacy Policy.

8. Can international data transfers be made?

In the event that we transfer your personal data to a third country, i.e. a country outside the European Economic Area (the countries of the European Union plus Liechtenstein, Iceland and Norway) or which does not have an adequate level of recognised data protection, we will comply with all laws applicable to such transfer, including ensuring that your personal data is kept secure and the presence of safeguards to ensure there is adequate protection. For this, IEEC will use Standard Contractual Clauses of data protection adopted by the European Commission.

9. What rights does the user have reading the data provided?

The user may exercise the  following rights before IEEC:

• Right to be informed: the user has the right to receive clear, transparent and easily understandable information about the way in which we use their information and their rights. For this reason, we provide you with this information in this privacy policy.
• Right of access: You have the right to obtain access to your information (if we are processing it), as well as other types of information (similar to that provided in this privacy policy), so that you are informed and can verify that we use your information in accordance with data protection legislation.
• Right to rectification: the user has the right to have their information corrected (inaccurate data) in case it is incorrect or incomplete.
• Right to erasure: It is also known as “right to be forgotten” and, ultimately, allows you to request the deletion or deletion of your information when the data is no longer necessary for the purposes that were collected.  This is not a general right of erasure; there are exceptions.
• Right to limit processing: the user has rights that allow him to “block” or prevent further use of his information. Where processing is restricted, we will only retain your information for the exercise or defence of legal claims.  We also maintain lists of users who have requested to “block” their information from further use to ensure that the restriction is respected in the future.
• Right to data portability: the user has rights that allow him to obtain and reuse his personal data for his own purposes in different services.
• Right to object: the user has the right to object to certain types of processing, including processing for direct marketing purposes.  Except for compelling legitimate reasons, or the exercise or defense of possible claims.

The exercise of the aforementioned rights is very personal, so it will be necessary for the user to prove their identity.

To exercise the aforementioned rights provided for in the legislation, the user can contact the Delegate for Data Protection by sending an e-mail to protecciodedades@ieec.cat or by writing to the address listed in section 1 of this Policy. The communication shall contain the following data and documents:

• Name and surname of the interested party, attaching a photocopy of the DNI or other valid document that identifies him and, where appropriate, of the person who represents him. However, the use of electronic signatures will exempt the presentation of these documents.
• Indication of the domicile of the interested party and request in which the request is specified (the right that is intended to be exercised).

The user will also have the right to file a claim with the Catalan Data Protection Authority (https://apdcat.gencat.cat/ca/inici/index.html)  whenever he deems it appropriate.

10. How do we protect our users’ data?

IEEC informs the user that it has adopted the necessary technical and organizational measures required by current regulations on Data Protection to guarantee the security of their data, in order to avoid alteration, loss, access or unauthorized treatment thereof.

As mentioned, the personal data provided by users through the IEEC website  will  not be transferred to other entities or companies to be used for their own purposes. However, some companies subcontracted by IEEC may have access to personal data and information, always under the exclusive control  of IEEC, with the sole purpose of providing a service necessary for the proper functioning of the IEEC Website.

11. Modifications

IEEC reserves the  right  to modify this Privacy Policy in accordance with the applicable legislation at any time. Therefore, it is recommended that the user periodically review this Privacy Policy in order to be informed of the treatment and protection of personal data, as well as the rights that assist him.

12. Applicable law

his Policy will be governed by and interpreted in accordance with Spanish law, as well as the resolution of any controversy or divergence related to this website. The use of the services of this website implies the express acceptance of the Spanish jurisdiction.

Date of last update: March 2024