PRIVACY POLICY:

This Privacy Policy of the Salamanca Biomedical Research Institute (IBSAL) governs the collection, use, and other forms of processing of personal data provided by users through this website or other digital platforms operated by the organization. It also includes additional information on data processing carried out in various strategic areas of our institution.

By using the forms provided on this website and on the various IBSAL sites, users consent to the inclusion and processing of the personal data they provide in databases owned by IBSAL, and may exercise their rights in accordance with the provisions of this policy.

All legal texts will be available to users on the website and may be modified or updated as needed based on IBSAL’s activities.

The following sections provide answers to the most frequently asked questions regarding the processing of personal data, as well as the commitments IBSAL makes regarding access to, storage of, and use of the information collected.

Applicable Regulations

The processing of personal data is governed by the provisions of:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (General Data Protection Regulation – GDPR).
• Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights.
• And any other applicable national or European regulations in effect at any given time.

Who is responsible for processing your data?

Data Controller: SALAMANCA BIOMEDICAL RESEARCH FOUNDATION, the entity representing the Salamanca Biomedical Research Institute (hereinafter, IBSAL)

CIF: G-16692907

Address: Salamanca University Hospital, Virgen de la Vega Building, Paseo de San Vicente, 58-182, 37007, Salamanca.

Email and contact information for exercising your rights and/or obtaining further information regarding the protection of personal data: protecciondedatos@ibsal.es

Phone: 923 29 11 00, ext. 55905.

At the Salamanca Institute for Biomedical Research (IBSAL), we take the protection of your personal data very seriously. We want to let you know, in a clear and simple way, what information we collect, what we use it for, and what rights you have.

What do we use your data for?

We process your personal data in order to provide you with the services related to our research, patient care, and teaching activities. Specifically, we may use it to:

• To comply with our legal and contractual obligations.
• Handle any inquiries, suggestions, or issues you send us.
• Processing and managing registrations for courses, activities, or programs.
• To send you communications related to services you have already used or signed up for.
• Support research projects and collaboration with the institutions that are part of IBSAL.
• Compile website usage statistics and conduct internal analyses.
• Organize and manage recruitment processes, internships, or research projects.
• To publicize the work of IBSAL and its staff.
• To prevent fraud or misuse of our services.
• Manage the events organized by IBSAL.
• To comply with legal requirements imposed by public agencies or competent authorities.
• Manage communications sent via email.

What data do we process?

The data we process depends on your relationship with us. This includes:

• Identifying and contact information.
• Academic and professional information (for hiring processes).
• Bank account information (for payments or donations).
• Health data (in biomedical research projects).
• Email data (including attachments).

You are responsible for ensuring that the information you provide to us is accurate, correct, and up to date. If you provide us with information about another person, you must have informed that person beforehand and obtained their consent.

What is the legal basis?

We process your data because:

• You have given us your consent (for example, by enrolling in a course or sending us an inquiry).
• We must comply with legal obligations (regarding tax, labor, health, and other matters).
• We need to enter into a contract with you or take steps leading up to its signing.
• In some cases, to protect vital interests in the context of biomedical research.
• Because we have a legitimate interest, such as improving our services or ensuring their security.

On each form, we will clearly explain the applicable legal basis.

Who do we share your information with?

Your personal data will not be disclosed to third parties, except where required by law, in which case it may be disclosed to:

• Government agencies and judicial bodies, when required by law.
• The institutions that are part of IBSAL and collaborating centers in research projects.
• Technology or IT service providers who help us manage our website and internal systems (under contracts that guarantee the security of your data).

In the case of international data transfers (e.g., cloud services), we ensure compliance with data protection regulations.

How long do we retain your data?

It will depend on the purpose and the applicable regulations:

• As long as there is a relationship with you.
• As long as you do not request its deletion.
• For the statutory periods required in each case (e.g., taxation, biomedical research, occupational hazard prevention).

In any case, we will not retain your data any longer than necessary.

What rights do you have?

You may exercise the following rights at any time:

• Access → Find out what data we have and how we use it.
• Correction → Correct inaccurate data.
• Deletion → Request that we delete your data.
• Limitation → Temporarily restrict its use.
• Refusal → Refusing a specific treatment.
• Portability → Transferring your data to another provider.
• Not to be subject to automated decisions → Avoid decisions made without human intervention.

To exercise these rights, please send us your request along with a copy of your ID to:

Instituto de Investigación Biomédica de Salamanca (IBSAL)

Hospital Universitario de Salamanca, Edificio Virgen de la Vega, Paseo de San Vicente, 58-182, 37007, Salamanca

Or by email: protecciondedatos@ibsal.es

How do we protect your data?

We have implemented technical and organizational measures to ensure the security of your information:

• Access is restricted to authorized personnel only and is subject to confidentiality.
• Data processing agreements with vendors that comply with applicable data protection regulations.
• Risk analysis and protocols for security incidents.
• Ongoing training for our staff on data protection.

What is our social media policy?

IBSAL has corporate profiles on Facebook, LinkedIn, X (formerly Twitter), and Instagram.

In accordance with Regulation (EU) 2016/679 (GDPR), IBSAL is responsible for processing your data in connection with any interaction that takes place on these profiles (for example, when you decide to follow us, “like” our content, or interact with our posts). By doing so, you accept this Privacy Policy, in which we explain your rights and how we use your data.

As the entity responsible, IBSAL guarantees confidentiality and respect for your rights at all times. We use these social media platforms to share news, activities, and projects related to our research work, as well as information we believe may be of interest.

However, please note that there is no affiliation between IBSAL and social media platforms. Therefore, when you access these platforms, you are subject to their own policies, terms, and conditions, and IBSAL is not responsible for how these platforms process your data outside the scope of the relationship described in this policy.

Miscellaneous

This text, together with the Legal Notice and the Cookie Policy, constitutes the terms and conditions that apply when you use our website.

In short: IBSAL handles your data responsibly, transparently, and in accordance with the law.