Privacy Policy
Data Controller
Who is responsible for processing your data?
The Spanish Foundation for Science and Technology, F.S.P. (FECYT), located at Calle Pintor Murillo 15, 28100 Alcobendas (Madrid, ES).
You can contact the Data Protection Officer (DPO) by writing to the email dpo@fecyt.es.
The updated list of processing activities carried out by FECYT is available in the following record of processing activities.
Purpose of Processing
Why do we process your personal data?
At FECYT, we process personal data provided by interested parties for the purposes detailed in the record of processing activities. These purposes include, among others, fulfilling our legal obligations, providing services, and managing contractual or public interest relationships.
If the personal data provided pertains to a third party, the data subject guarantees that they have previously informed said third party about the contents of this Legal Notice and have obtained their consent to share their data with FECYT for the indicated purposes. The data subject also guarantees that the data provided is accurate and up-to-date, assuming responsibility for any direct or indirect damage or harm resulting from the failure to comply with this obligation.
Lawfulness
What is the legal basis for processing your data?
The legal basis for processing your data by FECYT is grounded in the following circumstances:
- The data subject has given consent to the processing of their personal data for one or more specific purposes.
- The processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract.
- The processing is necessary for compliance with a legal obligation to which FECYT is subject.
- The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in FECYT.
- The processing is necessary to protect the vital interests of the data subject or of another natural person.
- The processing is necessary for the purposes of legitimate interests pursued by FECYT or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
You may consult the specific legal basis for each processing activity carried out by FECYT in the record of processing activities.
Data Retention
How long will we keep your data?
The personal data provided will be retained for the time necessary to fulfill the purpose for which it was collected and to determine any potential liabilities arising from that purpose and from data processing. Internal regulations on archiving and documentation will apply.
For processing activities based on consent, the data will be retained until such consent is revoked, or until the data subject exercises their right to erasure or objection.
You may consult the specific retention periods for each processing activity carried out by FECYT in the record of processing activities.
Recipients
Who will your data be shared with?
As a general rule, personal data will not be shared with third parties, except in compliance with a legal obligation. However, in certain specific cases, personal data may be shared with other entities, provided that an adequate level of protection is guaranteed in accordance with GDPR.
For detailed information on these communications, you may review the record of processing activities of FECYT.
International data transfers
To which countries do we transfer personal data internationally?
As a general rule, we do not carry out international data transfers. However, in cases where such transfers are necessary, they are made to countries with an adequacy decision from the European Commission, or to entities that guarantee an adequate level of protection through appropriate safeguards under Article 46 of the GDPR, such as standard contractual clauses, binding corporate rules, or specific certifications.
For more information on the countries to which we transfer data internationally, you may consult the record of processing activities of FECYT.
Rights
What are your rights when you provide us with your data?
Anyone has the right to request confirmation as to whether FECYT is processing personal data concerning them and, if so, has the right to access their personal data and the legally provided information.
The data subject has the right to request the rectification of inaccurate data or, where applicable, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, data subjects may request the restriction of the processing of their data. In such cases, the data may only be processed, apart from its retention, with their consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for important reasons of public interest at the national or EU level.
The data subject has the right to receive the personal data they have provided to FECYT in a structured, commonly used, and machine-readable format and to transmit it to another controller without hindrance from FECYT, provided that the processing is based on consent or is necessary for the performance of a contract to which the data subject is a party, or for pre-contractual measures requested by the data subject, and provided that the processing is carried out by automated means. In such cases, the data subject also has the right to have their personal data transmitted directly from FECYT to the new controller where technically feasible.
Under certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. FECYT will cease to process the data unless it demonstrates compelling legitimate grounds for the processing that override the data subject's interests, rights, and freedoms, or for the establishment, exercise, or defense of potential legal claims.
The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or significantly affects them in a similar way, unless justified by certain circumstances.
These rights can be exercised through a form available at FECYT’s office, located at C/ Pintor Murillo nº 15, 28100 Alcobendas (Madrid, ES), by downloading it from this link, or by requesting it via email at protecciondatos@fecyt.es, along with proof of identity.
You can also exercise these rights before the Spanish Supervisory Authority (http://www.aepd.es) if you do not receive a response within one month or if you wish to obtain more information about your rights.
We kindly request that, in the event of any changes to your personal data, you notify us to keep them updated.
Source
How did we obtain your data?
In most cases, the personal data processed by FECYT comes from the data subject. In cases where the personal data originates from third parties, we will inform you of its source in our first communication with you, and in any case, within a maximum period of one month from when we obtained the data.
You may consult more details about the source of your data and the categories of data we process in the record of processing activities of FECYT.