The purpose of this document is to provide interested persons with basic information on the processing of personal data by the Fundación de la Comunitat Valenciana Center for Mediterranean Environmental Studies – CEAM (hereinafter, the Foundation), for the exercise of their powers; all of this in compliance with articles 13 and 14 of the General Data Protection Regulation.
The personal data collected by the Foundation will be treated in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (hereinafter RGPD), relating to the protection of personal data. natural persons with regard to the processing of personal data and the free circulation of these data and which repeals Directive 95/46/EC, and the provisions of Organic Law 3/2018, of December 5, on Protection of Personal Data and guarantee of digital rights.
This information applies to fully or partially automated processing, as well as non-automated processing of personal data contained in a file or intended to be included.
In accordance with the provisions of article 4.7 of the RGPD, the Data Controller will be considered “the natural or legal person, public authority, service or other body that, alone or together with others, determines the purposes and means of the treatment”; In this case, the Foundation must be considered responsible.
In accordance with Decree 130/2012 of August 24, of the Consell, which establishes the organization of the information security of the Generalitat, this responsibility will be exercised in general by the management body that has attributed powers over the common services of the Foundation, without prejudice to the fact that in cases of specific matters it is exercised by the competent administrative body or unit. This circumstance will be recorded in the Foundation’s Registry of Treatment Activities (hereinafter RAT).
In accordance with the provisions of article 30 of the RGPD, the updated list of the processing activities that the Foundation carries out is available in the Register of Data Processing Activities published by the Foundation on its website:
The personal data collected directly or indirectly from the interested parties will be treated confidentially and will be incorporated into any of the processing activities owned by the Foundation that appear in its RAT.
When the personal data of the interested person is obtained from them, at the time of collection, the processing information will be provided in a clear and intelligible manner. If appropriate, the essential information about the treatment will be provided in the collection form and a second layer of information with a greater level of detail will be indicated or linked from it.
The processing of personal data will be in accordance with the Foundation’s own functions and its use will be limited to those purposes for which it was expressly collected.
If it is planned to subsequently process the personal data for a purpose different from that for which it was collected, before further processing the interested party will be informed of this other purpose and will be provided with any other relevant additional information, provided that the interested party does not already have this information. information.
The purpose of the processing of personal data will be that necessary for the administrative management and processing of the administrative procedures for which your data is requested, which will correspond to each of the processing activities carried out by the Foundation and which are accessible in the RAT.
No automated decisions will be made based on the processing of your personal data.
In general, the legal basis that covers the processing of personal data by the Foundation is the fulfillment of legal obligations or the performance of actions in the public interest or in the exercise of public powers conferred on the Generalitat, in accordance with the rules that regulate the actions of public administrations and, in particular, Law 39/2015, of October 1, on the Common Administrative Procedure of Public Administrations and Law 40/2015, of October 1, on the Legal Regime of the Public Sector, the Statute of Autonomy and the Government Law.
However, some treatments may require the consent of the people affected by it. In those cases, the Foundation will put in place the mechanisms that allow it to be granted through clear affirmative action by this person and so that evidence of this can be preserved.
In treatments based on consent, the interested person may withdraw their consent at any time, by going to the offices of the Foundation at Parque Tecnológico C/ Charles R. Darwin, 14 – 46980 – PATERNA – VALENCIA – SPAIN, or by sending an email to info@ceam.es. The Foundation, in these cases, will cease the processing activity for that data. The withdrawal of consent does not affect the legality of the treatment based on consent prior to withdrawal.
The legal basis that expressly enables each of the processing activities carried out by the Foundation can be consulted in the RAT , not considering it advisable to list all the regulations that establish the general framework of action of the person responsible, such as the Statute of Autonomous Community and other regulations that determine the powers and obligations of the administration of the Generalitat and its instrumental public sector. In this way, interested parties will be able to easily access and consult the standard that legitimizes each treatment.
According to the provision established in article 14, section 5.c) of the RGPD, the data of the treatments that are the responsibility of the administration of the Consell or its instrumental public sector may be processed by bodies that have a supervisory, inspection or control related to the exercise of public authority, provided that this access to data is expressly contemplated in the regulations that regulate them (General Intervention, General Inspection of Services, Data Protection Delegation).
In general terms and without prejudice to the specific information published in the RAT, the personal data processed by the Foundation will be kept for the time necessary to fulfill the purpose for which it is collected.
The Foundation, once the data has been canceled or deleted from processing, may retain it in order to make it possible to determine the possible responsibilities that may arise from its processing or to allow its subsequent use, after adopting appropriate protection measures. for historical, statistical or scientific purposes.
The data controller will not communicate or publish personal data without the consent of the affected persons, except in those circumstances provided for by current legislation. The recipients of data transfers planned for each of the processing activities can be consulted in the RAT.
Without prejudice to those indicated in the RAT because they are identified in the rules that legitimize the processing, it may be necessary to communicate data or allow access, in certain circumstances and even if they are not expressly stated in the RAT, to the Ombudsman, the Ombudsman. Greuges, to the Judges and Courts, to the Court of Accounts, Sindicatura de Comptes, to the State Security Forces and Bodies. In short, these are recipients to whom data communication must be carried out at the request of investigation procedures, infringements or supervision or control. The Data Protection Delegate of the Generalitat is in this same situation.
Under no circumstances will the Foundation use the data for commercial, advertising or any other purposes not related to its public powers.
The interested party can exercise at any time the rights that the RGPD guarantees to data owners, in accordance with articles 15 to 22, which are the following:
RIGHT OF ACCESS: The interested person has the right to obtain from the Foundation confirmation of whether personal data that affects him or her is being processed, and if so, he or she has the right to access this data and information related to the purposes, recipients, categories of processed data, its origin and retention period, claims, existence of automated decisions with their consequences and all additional rights of rectification, deletion, limitation, opposition and portability.
RIGHT OF RECTIFICATION AND DELETION: The interested person has the right to obtain from the Foundation the rectification of inaccurate or incomplete personal data that affects them, without undue delay.
Likewise, she has the right to request the deletion of personal data that affects her. If there is no other legal basis that protects its conservation, the Foundation will proceed to delete the data when it is no longer necessary or has been processed unlawfully, when the interested party withdraws its consent to treatments that require it or when it opposes the treatment.
RIGHT OF LIMITATION: The interested person has the right to obtain from the Foundation the limitation of the processing of the data, in cases of contestation of the accuracy of the data, when the treatment is illicit and the person opposes the deletion of personal data. and request instead the limitation of its use, when the affected person needs to keep the data to formulate or exercise claims or while it is verified whether the legitimate reasons of the administration prevail over those of the interested person in case the latter objects to the treatment.
RIGHT TO OBJECT: The interested party has the right to oppose the personal data that affects him or her being processed. The Foundation will stop processing these personal data, unless it proves compelling legitimate reasons for the processing that prevail over the interests, rights and freedoms of the interested person, or for the formulation, exercise or defense of claims.
RIGHT OF PORTABILITY: The interested person has the right to receive their personal data in a structured, commonly used, machine-readable and interoperable format and to transmit them to another person responsible for the treatment, provided that this is legitimized based on consent or within the framework of the execution of a contract and the treatment is carried out by mechanized means. You will also have the right, when technically possible, to have the data transmitted directly from controller to controller. It will not apply when the processing is necessary for the fulfillment of a mission of public interest in the exercise of public powers conferred on the controller.
RIGHT NOT TO BE THE SUBJECT OF AUTOMATED INDIVIDUAL DECISIONS: Every interested person has the right not to be the subject of a decision based solely on automated processing, including profiling, that produces legal effects on them or significantly affects them in a similar way. It refers to any form of processing of your personal data that evaluates personal aspects. The person responsible must guarantee the right to obtain human intervention, express his or her point of view and challenge the decision. It will not be applicable not to be the subject of a decision if it is necessary for the conclusion or execution of a contract, is based on explicit consent or is authorized by a rule that applies to the person responsible and that establishes appropriate measures to safeguard rights and freedoms. and the legitimate interests of the interested person.
All of the above rights, including withdrawal of consent, are highly personal in nature, so they can only be exercised by the affected person. However, it may act through a representative in the cases and under the conditions provided for by current legislation.
The exercise of all these rights may be carried out by contacting the Foundation offices at
Technology Park – C/ Charles R. Darwin, 14 – 46980 – PATERNA – VALENCIA – SPAIN, or by sending an email to info@ceam.es. AEPD application models accessible at https://www.aepd.es/reglamento/derechos/index.html.
POSSIBILITY OF CONTACTING THE DATA PROTECTION DELEGATION
Interested persons may contact the data protection delegate of the Generalitat Valenciana regarding all issues relating to the processing of their personal data and the exercise of their rights under the RGPD.
Your contact details are:
Data protection delegate of the Generalitat
Paseo de la Alameda, 16. 46010 Valencia
Email: dpd@gva.es
CLAIM BEFORE THE AGENCY
SPANISH DATA PROTECTION LAW
Interested persons also have the possibility of filing a complaint with the national data protection control authority (Spanish Data Protection Agency – AEPD), especially when they have not obtained a satisfactory response in the exercise of their rights.
You can contact her through the following link https://www.aepd.es, or through her physical address: C/ Jorge Juan, 6, 28001-Madrid.
