European General Data Protection Regulation

ADDITIONAL DATA PROTECTION INFORMATION 

Data controller and data protection officer  Biosistemak Institute for Health System Research

Torre del BEC (Bilbao Exhibition Centre) Ronda de Azkue, 1 48902 Barakaldo, SPAIN

Telephone: (+34) 944 007 790

Data Protection Officer: dpo-dpd@kronikgune.org

Purposes of processing and storage periods 

Management of human resources and payroll, for the execution of the employment relationship.

The data will be stored during the employment relationship and once completed, they will be kept for determining any liability.

The economic data of this processing activity will be stored in accordance with the provisions of Provincial Law 2/2005, of 10 March, General Taxation of the Historical Territory of Biscay.

Legal basis of the processing  Processing is necessary for the execution of a contract to which the data subject is a party (employment contract).

Processing is necessary to comply with a legal obligation applicable to the data controller: labour law (Royal Legislative Decree 2/2015, of 23 October, approving the revised text of the Workers’ Statute Act, Royal Legislative Decree 8/2015, of 30 October, approving the revised text of the General Social Security Act) and Tax law (Provincial Law 2/2005, of 10 March, General Taxation of the Historical Territory of Biscay).

Addressees  Personal data may be transferred to the Mutual Insurance company, State Public Employment Service (SEPE), Bizkaia Regional Treasury, Courts and Tribunals, Social Security and Financial Entities.
Exercise of rights  The data subjects may exercise their right of access, rectification, and erasure of their data, restriction of and objection to their processing, as well as the right to data portability by sending a written communication to the address of the entity, including a document accrediting their identity or to the email dpo-dpd@kronikgune.org. They also have the right to seek the protection of the Spanish Data Protection Agency.

ADDITIONAL DATA PROTECTION INFORMATION 

Data controller and data protection officer  Biosistemak Institute for Health System Research

Torre del BEC (Bilbao Exhibition Centre) Ronda de Azkue, 1 48902 Barakaldo, SPAIN

Telephone: (+34) 944 007 790

Data Protection Officer: dpo-dpd@kronikgune.org

Purposes of processing and storage periods  Administrative, tax and economic management of the entity.

The data will be stored during the employment relationship and once completed, they will be kept for determining any liability.

The economic data of this processing activity will be stored in accordance with the provisions of Norma Foral 2/2005, of 10 March, General Taxation of the Historical Territory of Biscay.

Legal basis of the processing  Processing is necessary for the execution of a contract to which the data subject is a party (contracts with suppliers).

The processing is necessary in order to comply with a legal obligation applicable to the data controller: (Provincial Law 2/2005, of 10 de March, General Taxation of the Historical Territory of Biscay, Provincial Law 7/1994, of 9 November, on Value Added Tax)

Processing is necessary for the satisfaction of legitimate interests pursued by the data controller: keeping a record of regular suppliers and creditors and their contact persons.

Addressees  Personal data may be transferred to Hacienda Foral de Bizkaia, Courts and Tribunals and Financial Entities.
Exercise of rights  The data subjects may exercise their right of access, rectification, and erasure of their data, restriction of and objection to their processing, as well as the right to data portability by sending a written communication to the address of the entity, including a document accrediting their identity or to the email dpo-dpd@kronikgune.org. They also have the right to seek the protection of the Spanish Data Protection Agency.

ADDITIONAL DATA PROTECTION INFORMATION 

Data controller and data protection officer  Biosistemak Institute for Health Service Research

Torre del BEC (Bilbao Exhibition Centre) Ronda de Azkue, 1 48902 Barakaldo, SPAIN

Telephone: (+34) 944 007 790

Data Protection Officer: dpo-dpd@kronikgune.org

Purposes of processing and storage periods  Management of the selection processes for candidates to work at the entity

The data shall be kept for the duration of the selection process and thereafter for up to one year.

Legal basis of the processing The data subject consented to the processing of his/her personal data for this purpose.
Addressees  The data will not be transferred to third parties, except for the fulfilment of legal obligations.
Exercise of rights The data subjects may exercise their right of access, rectification, and erasure of their data, restriction of and objection to their processing, as well as the right to data portability by sending a written communication to the address of the entity, including a document accrediting their identity or to the email dpo-dpd@kronikgune.org. In addition, they may withdraw their consent by the means indicated above. Finally, they also have the right to seek the protection of the Spanish Data Protection Agency.

ADDITIONAL DATA PROTECTION INFORMATION 

Data controller and data protection officer Bioistemak Institute for Health System Research

Torre del BEC (Bilbao Exhibition Centre) Ronda de Azkue, 1 48902 Barakaldo, SPAIN

Telephone: (+34) 944 007 790

Data Protection Officer: dpo-dpd@kronikgune.org

Purposes of processing and storage periods Management and administration of the Biosistemak Research Groups.

The data will be kept until objection to their processing or withdrawal of the consent of the data subject.

Legal basis of the processing  The data subject consented to the processing of his/her personal data for this purpose.
Addressees The data may be provided to the rest of the participants of the Groups.
Exercise of rights The data subjects may exercise their right of access, rectification, and erasure of their data, restriction of and objection to their processing, as well as the right to data portability by sending a written communication to the address of the entity, including a document accrediting their identity or to the email dpo-dpd@kronikgune.org. In addition, they may withdraw their consent by the means indicated above. Finally, they also have the right to seek the protection of the Spanish Data Protection Agency.
CATEGORY IDENTIFICATION
Name and contact details of the data controller and, where applicable, the joint data controller, the data controller’s representative, and the data protection officer HEALTH SYSTEMS RESEARCH INSTITUTE ASSOCIATION – BIOSISTEMAK

TAX ID CODE (CIF): G95646014

Torre del BEC (Bilbao Exhibition Centre) Ronda de Azkue, 1 48902 Barakaldo

Telephone: 944007790

Data Protection Officer Contact: dpo-dpd@kronikgune.org 

Purposes and legitimacy of the processing Management and administration of the people who collaborate with the Association. The legitimacy of the processing lies in the fact that the data subject has given their consent to the processing of their personal data for this purpose.
Description of data subject categories People who engage with the Association
Categories of personal data
  • Identifying information: Name and surname, e-mail, National ID/Tax ID Number/Foreigner’s Identification Number, telephone, signature
  • Academic and professional: Education, qualifications
  • Job Details: Workplace and Work History
The categories of recipients to whom the personal data were or will be disclosed, including recipients in third countries or international organisations Other participants in the research groups
Where possible, the deadlines foreseen for the deletion of different categories of data The data will be kept until the data subject objects or withdraws their consent.
Where possible, a general description of technical and organisational security measures Security policies regarding the processing of personal data
CATEGORY IDENTIFICATION
Name and contact details of the data controller and, where applicable, the joint data controller, the data controller’s representative, and the data protection officer HEALTH SYSTEMS RESEARCH INSTITUTE ASSOCIATION – BIOSISTEMAK

TAX ID CODE (CIF): G95646014

Torre del BEC (Bilbao Exhibition Centre) Ronda de Azkue, 1 48902 Barakaldo

Telephone: 944007790

Data Protection Officer Contact: dpo-dpd@kronikgune.org

Purposes and legitimacy of the processing Management of the information received in accordance with the criteria of Law 2/2023 of 20 February on the protection of persons who report regulatory infringements and the fight against corruption.

The processing is legitimised by Article 6(1)(e) of the GDPR, in accordance with Article 30(2) of Law 2/2023.

Description of data subject categories
  • Reporting persons
  • Reported persons
  • Head of Internal Information System
  • Collaborators of the data controller
Categories of personal data
  • Identifying information: Name and surname, e-mail, National ID/Tax ID Number/Foreigner’s Identification Number, telephone, signature
  • Data relating to the facts reported
The categories of recipients to whom the personal data were or will be disclosed, including recipients in third countries or international organisations
  • Security Forces
  • Competent administrative bodies
  • Public Prosecutor’s Office, Courts and Tribunals
Where possible, the deadlines foreseen for the deletion of different categories of data Only for the time necessary to decide whether to open an investigation into the reported facts, as provided for in Article 32 of Law 2/2023.
Where possible, a general description of technical and organisational security measures Security policies regarding the processing of personal data
CATEGORY IDENTIFICATION
Name and contact details of the data controller and, where applicable, the joint data controller, the data controller’s representative, and the data protection officer HEALTH SYSTEMS RESEARCH INSTITUTE ASSOCIATION – BIOSISTEMAK

TAX ID CODE (CIF): G95646014

Torre del BEC (Bilbao Exhibition Centre) Ronda de Azkue, 1 48902 Barakaldo

Telephone: 944007790. Data Protection Officer Contact: dpo-dpd@kronikgune.org

Purposes and legitimacy of the processing Manage information to promote the activity undertaken by the Association. The legitimacy of the processing lies in the fact that the data subject has given their consent to the processing of their personal data for this purpose.
Description of data subject categories Persons consenting to participate in promotional activities
Categories of personal data Identifying information: Name and surname, e-mail, National ID/Tax ID Number/Foreigner’s Identification Number, telephone, signature. Image/voice
The categories of recipients to whom the personal data were or will be disclosed, including recipients in third countries or international organisations
  • Advertising, dissemination and promotional activities.
  • Social media.
Where possible, the deadlines foreseen for the deletion of different categories of data The data will be kept until the data subject objects or withdraws their consent.
Where possible, a general description of technical and organisational security measures Security policies regarding the processing of personal data

Download Biosistemak’s Data Protection Policy by clicking here.