The whole of the website and its components are protected by Spanish and international law on intellectual and industrial property rights.

The intellectual property rights of the website contents belong to the Fundació Privada Institut d’Investigació Oncològica de Vall d’Hebron, except for those of companies with which a corresponding contract has been signed for providing content which are protected by intellectual and industrial norms.

The exercise of the rights of reproduction, distribution, public communication and transformation of contents is exclusive to the IMPPC, without prejudice to the exercise by third parties of the right to quote.

The user accessing this website may not copy, modify, distribute, transmit, reproduce, publish, yield, sell the elements previously mentioned or create new products or services derived from the obtained information without expressly quoting its source.

Authorisation is given solely for display and loading for personal and not commercial use by the user, who may not pass it on to third parties or entities.

Alteration of the content or structure of the website by the user without specific written permission from the IMPPC is expressly forbidden. Any use of the website or its contents contrary to the rules in force may be prosecuted.

All the images of this site have been handed over for their author (person), to use them, to Fundació Privada Institut d’Investigació Oncològica de Vall d’Hebron.

FUNDACIÓ PRIVADA INSTITUT D’INVESTIGACIÓ ONCOLÓGICA DEL VALL D’ HEBRON (hereinafter, VHIO) is committed to ensuring that the personal data of its users, customers and any interested person are treated with the utmost care, in accordance with current laws and regulations on personal data protection.

When you register in our website, you only will be requested to enter data that is necessary for the proper fulfillment of our services, in compliance with the provisions of personal data protection laws.

Please, read the Data Protection Policy of any website you access via www.vhio.net, as these websites have their own data protection policies. VHIO accepts no responsibility with regard to the information or contents published in websites accessed through our website.

By accepting our data protection policy, you are guaranteeing that the personal data entered in our registration form is truthful and up-to-date. In case you want to update your personal data, please contact VHIO or edit your data directly in the appropriate section of our website. In any case, the user assumes full responsibility for any inaccurate, untruthful statement or data provided to VHIO and for any damages or loss caused to VHIO as a result of data inaccuracy.

We reiterate our commitment to strictly complying with current laws and regulations on personal data protection. More specifically, VHIO is committed to protecting the privacy of any personal data provided to us and adopting all reasonable measures to prevent unauthorized access, modification or cancellation of your data.

Who’s responsible for data protection?

The entity responsible for the processing of data received from, but not limited to, collaborators, employees, users, web users, patients, suppliers, and customers is VHIO, with registered address at C/ NATZARET 115-117 (08035) BARCELONA and tax identification number G64384969.   

You can contact our Data Protection Officer at dpd.cliente@conversia.es or on +0034 902877192.

What personal data do we collect? How did we obtain your data?

Please, find below a list of the different categories of personal data collected by VHIO:

• Personal data
• Postal or e-mail address
• Economic and transaction data
• Professional data
• Commercial data
• Personal circumstances
• Special-category personal data (genetic, clinical and biometric)
• Data of individuals in a position of vulnerability (minors).

The data listed above was directly disclosed to us through an informed consent or contract offer, among other, or by your employer to fulfill the purposes of an agreement between the parties. Keeping your personal data updated is your responsibility or your company’s responsibility. Personal data of job applicants are obtained from the CV submitted by them either directly or through an application on a job portal. In the latter case, by entering your CV in a job portal, you are agreeing to your data being disclosed to our Entity.

How long is my data stored for?

Personal data of collaborators, employers, users, web users, patients, suppliers, customers, among other, obtained by VHIO through contact and/or data collection forms will be stored indefinitely or until the data subject requests its cancellation.

In any case, VHIO will store your personal data for as long as it is reasonably necessary to respond to or solve any question or problem, make improvements, activate our research studies and/or meet the requirements of applicable laws.  This means that your personal data will be stored for a reasonable time even after you are no longer an active user of our services or website. After this period, your personal data will be deleted from all VHIO systems.

What is my personal data used for? On what legal grounds is my data processed?

In VHIO, the data disclosed to us by our users is processed to carry out activities related to the purposes of our Foundation, research studies and consultations, among other activities. Your data will be used to carry out the following actions in compliance with current laws:

Data profiling will not be performed. You will not be subject to a decision made based on the automated processing of your personal data (profiling).

Who will my data be shared with?

Your personal data may be transferred to the governmental agencies or relevant authorities pursuant to a lawful requirement of these entities. Your personal data may also be disclosed to voluntarily cooperate in a legal proceeding, in defense of a claim or prosecution, or to protect the rights of VHIO or its customers and the public in general.

VHIO may transfer your data to a third party (i.e. website masters, suppliers that help us provide our services, supported service providers,  administrative service providers, tax consultants, accountants, among other agents). In any case, these third parties are required to maintain the same level of data protection as VHIO does. Where appropriate, Third Parties will be bound by an agreement of confidentiality where they undertake to treat your personal data in compliance with the instructions given by VHIO.

Your personal data may be transferred to a third country to fulfill an agreement, establish the precontractual terms of a research project, or when there is a decision from the European Commission that the Third Country ensures an adequate level of protection.

What are my rights as data subject?

Data subjects have the right to obtain confirmation of whether VHIO is processing their personal data.

Data subjects have the right to request access to their personal data and receive them in a common, machine-readable format, in case data have been processed using electronic media (right of portability).

Data subjects have the right to request rectification of inaccurate data or, where appropriate, request cancellation of data that are no longer necessary for the purposes they were collected for.

In some circumstances, the data subject can request limitation of processing or object to processing of their personal data on grounds relating to his or her particular situation. In this case, VHIO will stop processing the data, unless it is necessary for compelling legitimate reasons or for the exercise or defense of legal claims.

You can withdraw your consent at any moment. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

You can exercise your rights by contacting us at the contact details specified in Section 1, ‘Data processing Officer’ of this Personal Data Protection policy. Please, attach a copy of your National Identity Card Number or Passport Number. You can also contact us at lopdvhio@vhio.net.

You can file a claim with the Spanish Data Protection Agency, especially when a request to exercise your rights has not been satisfactorily met.