FUNDACIÓ PRIVADA INSTITUT D’INVESTIGACIÓ ONCOLÓGICA DE VALL-HEBRON (hereinafter, VHIO) is fully aware of the importance of the fundamental right to the protection of personal data of all its users, clients and those interested in its work, and consequently complies with the regulations on the protection of personal data in force.

That is why only the data necessary for the provision of the service will be collected, in accordance with the provisions of current regulations on the protection of personal data.

Additionally, we recommend that you review the privacy policies of any website accessed through the website, as such websites are beyond VHIO’s control and will have different privacy policies. VHIO is not responsible for such websites nor for the information and content published in them.

By accepting this privacy policy, the user declares that all the information provided in the forms is true and up-to-date, being the user’s responsibility to contact VHIO in case they wish to modify any personal data, or alternatively editing it directly in the corresponding section of the website. In any case, the user will be solely responsible for any false or inaccurate statements or information provided to VHIO, as well as for all damages that this may cause to the entity.

Likewise, we reiterate VHIO’s commitment to strictly comply with all the provisions of current regulations regarding the protection of personal data. And, specifically, VHIO undertakes to keep the duty of secrecy regarding the data to which it has access as well as to adopt the necessary security measures to prevent unauthorized access, modification or deletion of data.

Who is responsible?

The person in charge of the data processing referring to the different processes regarding the management of collaborators, employees, users, web users, patients, suppliers, clients, etc. is VHIO, with registered office at C / NATZARET 115-117 (08035) BARCELONA and CIF G64384969.

In turn, we inform you that you can contact our VHIO Data Protection Delegate by writing to the email address or by calling (+)(34)902877192.

What kind of data do we have about you and how have we obtained it?

The categories of personal data that VHIO deals with regarding its collaborators, employees, users, web users, patients, suppliers, customers, etc. is the following:

– Identification data

– Postal or electronic addresses

– Economic and transaction data

– Professional data

– Commercial information

– Personal circumstances

– Special categories of data (genetic data,

health and biometric data)

– Data of people in vulnerable situations (data of minors)

All the aforementioned data we have obtained or directly from you by submitting an informed consent, contractual proposal, etc. or through your company by providing us with identification data and other information necessary to carry out the purpose of the contractual relationship between the parties. It will be an obligation of you or your company to provide us with updated data in case of modification. Regarding the data of job candidates, we have obtained their data through their submission of a résumé or an application through the services of an employment portal. In the latter case, you have authorized said transfer of your data to our organization by inserting your curriculum data in the employment portal.

How long will we keep your data?

Personal data relating to individuals that are collaborators, employees, users, web users, patients, suppliers, customers, etc. that VHIO obtains through different forms and/or information collection will be kept as long as their deletion is not requested by the interested party.

In any case, VHIO will keep your personal data for the period of time that is reasonably necessary, taking into account our needs to respond to questions that arise or solve problems, make improvements, commence new research and/or meet legal requirements in force. This means that we can retain your personal data for a reasonable period of time even after you have stopped using our services or have stopped using this website. After this period, your personal data will be deleted from all VHIO systems.

For what purpose and on what basis of legitimacy do we process your data?

At VHIO we treat the data provided by interested persons in order to manage different activities derived from the registered purposes of the foundation, research, queries, etc. Therefore, we will use your data to carry out some of the following actions based on the respective legitimation basis:

Management of human resources Legitimate interest
Management of the clinical file diagnosis and research Consent of the interested party
Administrative management, billing, accounting and legal obligations Execution of a contract
Management of users of information society services and installation of cookies Consent of the interested party
Answer your questions and send you related information that may be of interest to you Legitimate interest
Oncology specialist datamanagement Execution of a contract
Management of analytical studies and/or commissions Consent of the interested party
Raising funds for projects and related activities Consent of the interested party

We will not create profiles based on the information provided and consequently we will not make automated decisions about you based on an elaborated profile.

To which recipients will your data be communicated?

We inform you that we can provide your personal data to Public Administration bodies and competent Authorities in those cases that VHIO receives a legal requirement from said Authorities or in cases where, acting in good faith, we consider that such action is reasonably necessary to comply with a judicial process; to answer any claim or legal demand; or to protect the rights of VHIO or its customers and the general public.

VHIO may provide your personal data to third parties (eg Internet service providers that help us to administer our website or carry out the contracted services, computer support and maintenance companies, tax and accounting advice and agencies, etc.). In any case, these third parties must maintain, at all times, the same security levels as VHIO in relation to their personal data and, when necessary, they will be bound by legal commitments in order to keep their personal data private and secure, and in order to only use the information following specific instructions from VHIO.

We inform you that international data transfers may occur in order to execute a contract or establish pre-contractual conditions for a research project, or based on the existence of a decision of the European Commission regarding the adequacy of the personal data regulations in a third country.

What are your rights as an affected or interested party?

Anyone has the right to obtain confirmation as to whether VHIO is treating personal data that concerns them, or not.

Specifically, interested persons can request the right of access to their personal data, as well as to receive it in a common format and mechanized reading if the treatment is carried out by electronic means (right of portability).

Likewise, interested persons may exercise the right to rectify inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

Additionally, in certain circumstances, the interested parties may request the limitation of the processing of their data, or in certain circumstances and for reasons related to their particular situation, the interested parties may exercise their right to object to the processing of their data. VHIO will stop processing the data., except for compelling legitimate reasons, or the exercise or defense of possible claims or in those exceptions established in applicable regulations.

Likewise, we inform you that you have the right to withdraw your consents granted at any time, without affecting the legality of the treatment based on the consent prior to its withdrawal.

The User is informed that at any time they can exercise the aforementioned rights by writing to us using the contact information that appears above in relation to the Responsible for treatment, attaching a copy of your ID card. Similarly, you can send us an email to the address:  .

You will also have the right to file a claim with the Spanish Data Protection Agency, especially when you have not obtained a satisfactory response to the exercise of your rights.