Privacy Policy

INSTITUTE OF REGIONAL AND METROPOLITAN STUDIES OF BARCELONA, as the person responsible for the processing of personal data, through its website, iermb.uab.cat guarantees an adequate and consistent level of protection of natural persons in which it respects their personal data, object of treatment for the development of its functions, in accordance with the requirements of the General Data Protection Regulation (2016/679) and Organic Law 3/2018 on data protection and guarantee of digital rights.

IERMB processes personal data with full responsibility and loyalty, and in accordance with legal bases that allow the legality of the processing in compliance with the RGPD and the LOPDGDD.

In order to comply with the legislation on data protection, the IERMB has prepared and published its record of register of treatment activities  and has adopted the technical and organizational security measures, appropriate to the risks evaluated and objectively identified for the rights and freedoms of the interested persons, to whom the data processed and the treatments carried out by the IERMB could give rise.

IERMB applies the principle of transparency in the processing of personal data, providing interested persons with the information on the processing required by the RGPD and by the LOPDGDD, in a concise, easily accessible, complete and easy-to-understand language; at the same time, it facilitates the exercise of rights by means of forms available within the reach of interested persons. Home.

On the other hand, the IERMB has appointed a Data Protection Officer, in accordance with the provisions of article 37.1.a) of the General Data Protection Regulation (2016/679) and articles 34 and 36 of Organic Law 3 /2018 of protection of personal data and guarantee of digital rights. The electronic contact address of the Data Protection Delegate is juancarlos.migoya@uab.cat.

Extended information is then disseminated regarding each processing activity under the scope of responsibility of the IERMB, inventoried in the Record of Processing Activities that completes the basic information provided in each data collection procedure.

  1.  Responsible for the treatment. INSTITUTE OF REGIONAL AND METROPOLITAN STUDIES OF BARCELONA
  • NIF. P0800013E
  • Mailing address. Bellaterra Campus, Knowledge Square, MRA building, floor 2, 08193 Bellaterra (Cerdanyola del Vallès)
  • Telephone: 935868880
  • email: iermb@uab.cat.

2.  Contact details of the Data Protection Officer

  • NIF: 33900616L
  • Postal address: Calle de las Casas Sert, 40, 08193 Bellaterra (Cerdanyola del Vallès)
  • Telephone: 687907536
  • Email: juancarlos.migoya@uab.cat.

3. Legal bases of the treatment.

The treatment of the personal data of the interested persons, derived from the functions of the IERMB, is based, for all purposes, on the following legal bases, which are detailed for each treatment activity in the register of treatment activities.

General Data Protection Regulation 2016/679

Article 6.1. b. The treatment is necessary for the execution of a contract in which the interested party is a party or for the application at the request of the latter of pre-contractual measures.
Article 6.1.c. The treatment is necessary for the fulfillment of a legal obligation applicable to the controller.
Article 6.1.e. The treatment is necessary for the fulfillment of a mission carried out in the public interest or in the exercise of public powers conferred on the controller.

Organic Law 3/2018 on the protection of personal data and guarantee of digital rights.

Article 8. Data processing due to legal obligation, public interest or exercise of public powers.
The processing of personal data can only be considered based on the fulfillment of a legal obligation required of the person in charge, in the terms provided in article 6.1.c) of Regulation (EU) 2016/679, when so provided for by a rule of Law of the European Union or a standard with the force of law.
The processing of personal data can only be considered based on the fulfillment of a mission carried out in the public interest or in the exercise of public powers conferred on the person in charge, in the terms provided in article 6.1 e) of Regulation (EU) 2016/679, when derives from a competence attributed by a norm with the force of law.

4.Treatment purposes

The purposes of the processing of the personal data of the interested persons, which the IERMB carries out in the exercise of its functions, in accordance with the legal bases that legitimize its processing, are recorded in the Registry of Processing Activities register of treatment activities.

5. Data retention period (data deletion)

The personal data of the interested persons will be kept for the time necessary for the fulfillment of the purposes that justify the treatment, in accordance with the exercise of the functions of the IERMB, and to determine the possible responsibilities derived from these purposes. The deletion of the data will also attend to specific assumptions such as the processing of data by the video surveillance camera system, and sectoral regulations that require minimum retention periods; and subsequently in application of the legislation on archives of the public administration. The period of conservation of the data (deletion of the data) is recorded in the record of treatment activities.

6. Data protection rights and how to exercise them

The interested persons, holders of the data subject to treatment by the IERMB, have recognized the exercise of data protection rights: access to their data, rectification of erroneous, inaccurate or incomplete data, and deletion when, among other reasons , the data is no longer necessary for the purposes that had justified the treatment.

In certain circumstances, the interested parties may request the limitation of the processing of their data, in this case they will only be kept for the exercise or defense of claims.

Also for reasons related to their particular situation, the interested parties may oppose the processing of their data. In this case, the IERMB will stop processing this data except for legitimate reasons or for the exercise or defense of possible claims.

To exercise these rights, the interested person may contact the IERMB, presenting the corresponding form available to interested persons in  the Home.

Likewise, if you are not satisfied with the response to the request to exercise your rights, and in any case, whenever you consider it appropriate, you may file a claim with the Catalan Data Protection Authority.

7. Recipients of the data:

The identification of recipients of the data is recorded in the register of treatment activities that the IERMB has made public. In any case, other competent public administrations in the matter may also be recipients of the personal data, when appropriate, the assignment having been based on a legitimate legal basis, in accordance with article 6 of the RGPD and article 8 of the LOPDGDD.

8. International data transfers.

International data transfers are not planned.

The IERMB, Responsible for the treatment, contracts its virtual infrastructure according to a “cloud” computing model through Microsoft, under the Standard Contractual Clauses. MICROSOFT https://privacy.microsoft.com/es-es/privacystatement.

The cases in which there may be international data transfers will be through cookies from third parties (Google, Google Ads and Google Analytics). You can find out about data transfers to third countries that, where appropriate, are carried out by third parties identified in the cookie policy, in their corresponding policies on the treatment of collected data.

Automated profiling decisions included

The IERMB performs automated decision-making (including profiling), when you accept and give your consent to the operation of our Analytical/Advertising Cookies while browsing our website. The consequences of this treatment will be the collection and analysis of your data to create profiles and offer you personalized advertising. For more information, see our Cookies Policy.

10. Origin of personal data

The personal data processed by the IERMB, in compliance with a mission carried out in the public interest, in the exercise of public powers conferred on the data controller, in compliance with a legal obligation or in the execution of a contract, come directly from the interested persons or of their representatives.

In the event that the data does not come directly from the interested persons, for example if it comes from other public administrations, article 14 of the RGPD will be complied with, providing the interested party with the additional information required when the personal data has not been obtained from the interested party. , which specifically includes the obligation to inform about the origin of the data and about the categories of personal data subject to treatment