Privacy notice

Introduction

Aragonese Agency for Research and Development Foundation (hereinafter ARAID) informs users of the website about its policy regarding the processing and protection of personal data of users and clients that may be collected through browsing its website. In this regard, ARAID guarantees compliance with current regulations on personal data protection, reflected in the General Data Protection Regulation (GDPR) (EU) 2016/679 and in Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights.

Who is responsible for the processing of personal data?

For what purpose are personal data processed?

ARAID processes the information provided through this website for the following purposes:

• To resolve any questions and comments submitted through the contact form.
• To maintain the relationship with users of the website.

ARAID will under no circumstances process personal data for purposes other than those indicated above.

Will commercial information be sent?

At no time will ARAID use the information provided by the user and/or collected through the website to send commercial information. If it were to be used for this purpose, prior consent from the user would always be obtained and under the guidelines of compliance with current data protection regulations.

How long will personal data be retained?

The personal data provided will be retained while the relationship between the parties is maintained, until deletion is requested by de data subject, or for the years necessary to comply with legal obligations.

Subsequently, the data will be deleted in accordance with the provisions of data protection regulations, which implies their blocking, remaining available only to requests from Judges and Courts, the Ombudsman, the Public Prosecutor's Office, or competent Public Administrations during the limitation period for any actions that may arise, and once this period has elapsed, they will be completely deleted.

How have the personal data been obtained and what categories of data are processed?

The personal data processed by ARAID come from the data subject themselves, at the moment they are entered into the contact form.

The category of data processed in the contact form is:

• Identifying data: Email, first name and surname (mandatory fields).

However, as it is a communication channel, the data subject may include other types of personal data in their message when providing their opinion and asking questions or making comments.

What is the legal basis for using your data?

The legal basis for processing personal data is the explicit consent granted by the data subject at the moment they accept this privacy policy prior to sending their personal data through the contact form (art. 6.1.a GDPR).

To whom will the data be communicated?

Personal data will not be transferred to any third party, except to those for whom their involvement is necessary for the proper management of the service provision.

Personal data will not be sent outside the European Economic Area, therefore no international data transfer will take place.

What are your rights when you provide your consent?  

Any person has the right to obtain confirmation as to whether ARAID is processing their personal data.

Data subjects have the right to:

• Request access to personal data concerning them
• Request rectification or deletion
• Request restriction of processing
• Object to processing
• Request data portability

Data subjects may access their personal data, as well as request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, data subjects may request the restriction of the processing of their data, in which case they will only be retained for the exercise or defense of claims.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. ARAID will stop processing the data, except for compelling legitimate reasons, or for the exercise or defense of possible claims. They may also request the portability of their data.

How can rights be exercised?  

To exercise the aforementioned rights of access, rectification, deletion, objection, restriction of processing, and data portability, data subjects must contact ARAID at Avda. de Ranillas, 1-D, 2nd Floor, Office B, 50018, Zaragoza.

They may also contact ARAID via email at araid@araid.es.

The request to exercise rights must be accompanied by reliable identification of the data subject, as well as the right they wish to exercise, the content of their request, and an address for notification purposes.

Can you file a complaint with the AEPD?  

Data subjects also have the right to effective judicial protection and to file a complaint with the supervisory authority, in this case, the Spanish Data Protection Agency, if they consider that the processing of personal data concerning them infringes the Regulation. They may file a complaint by writing to the Spanish Data Protection Agency, C/Jorge Juan nº 6, 28001 Madrid, or by accessing its electronic office: https://sedeagpd.gob.es/sede-electronica-web/