PLEASE NOTE: The original version of this text is in English. In case of disagreement, the English version will prevail.
DATA OF THE DATA CONTROLLER
Name of the entity: FUNDACIÓN CENTRO DE SERVICIOS Y PROMOCIÓN FORESTAL Y DE SU INDUSTRIA DE CASTILLA Y LEÓN (hereinafter CESEFOR). Address: Polígono Industrial Las Casas C/ C Parcela 4 - 42005 Soria, Spain. Telephone: 0034 975212453 E-mail: cesefor@cesefor.com
1. “Join an iNet” form.
a. Purpose. The purpose of this form is to respond to your request for information made through the contact form.
b. Legitimation. The legitimacy for the treatment of personal data is the expressed consent of the interested party.
c. Addressees. No data will be transferred to third parties unless legally obliged to do so. Further information in “To whom will your data be disclosed” paragraph.
2. Newsletter subscription form
a. Purpose. Manage the sending of INCREDIBLE Project Newsletter to users who subscribe to it.
b. Legitimation. The legitimacy for the processing of personal data is the express consent of the interested parties who subscribe to this service by ticking the box intended for this purpose.
c. Addressees. No data will be transferred to third parties unless legally obliged to do so.
Further information in “To whom will your data be disclosed” paragraph.
3. Blog subscription form
a. Purpose. Manage notifications when a new post is published in INCREDIBLE Blog.
b. Legitimation. The legitimacy for the processing of personal data is the express consent of the interested parties who subscribe to this service by ticking the box intended for this purpose.
c. Addressees. No data will be transferred to third parties unless legally obliged to do so.
Further information in “To whom will your data be disclosed” paragraph.
4. User registration form (private purposes)
a. Purpose.
- Manage your user registration on our website.
- Provide you with information about our activity.
b. Legitimation. The legitimacy for the treatment of personal data is the execution of a contract and the expressed consent of the interested party.
c. Addressees. No data will be transferred to third parties unless legally obliged to do so.
5. Stakeholder database (private purposes)
Stakeholders must sign the 'Letter of consent GDPR INCREDIBLE' to give express authorization in order to:
a. Purpose.
- Inform you about and invite you to upcoming events organised by the INCREDIBLE project that might be professionally relevant for you according to the sector of your activity and your geographical scope.
- Ask and provide you feedback for the events organised by the INCREDIBLE project and their deliverables
- Send you the INCREDIBLE project newsletter;
- Generate anonymous statistics about the attendance to the events organised by the INCREDIBLE Project.
b. Consent: By signing this letter, stakeholders consent processing the following personal information:
- Your name, your position in the organisation where you work, the address of the organisation where you work, your professional e-mail address, your professional phone number, the address of your professional website;
- The sector of the organisation where you work;
- The exchanges you have with the INCREDIBLE project (through the events the project will organise);
- Feedback you have provided for the events organised by the INCREDIBLE project.
c. Legitimation. The legitimacy for the processing of personal data is the express consent of the interested parties who subscribe to this service by ticking the box intended for this purpose.
d. Addressees. No data will be transferred to third parties unless legally obliged to do so.
Further information in “To whom will your data be disclosed” paragraph.
DATA PROCESSING RIGHTS
For all data processing present in this privacy policy, you may exercise your rights of access, rectification, deletion, opposition, as well as other rights developed in additional information.
ADDITIONAL INFORMATION ON DATA PROTECTION
Any data that CESEFOR may collect through the use, navigation of the website, through our forms, via email or through the contractual relationship with CESEFOR, are personal data. At the moment of completing each one of the forms contained in our web page there will be a series of obligatory data, whose fields are marked with the symbol *. If you do not fill in these fields, you will not be able to carry out the purposes described in each of the forms. In some occasions, we inform you that for the simple use and navigation in our web page, CESEFOR will store data related to:
- IP address
- Browser version
- Operating system
- Duration of the visit or browsing of the Website.
CESEFOR reserves the right to modify or adapt this Privacy Policy at any time. Therefore, we recommend that you review it each time you access the Web Page.
In case of a registered user accesses his/her user account or profile, he/she will be informed in the event that there have been substantial modifications in relation to the processing of his/her personal data.
- For what purposes do we process your personal data?
The purpose of the data processing -collected through the forms available on our website, via email or by virtue of the contractual relationship with CESEFOR-, will be described, in each case, in the basic information on data protection.
- How long will we keep your personal data?
CESEFOR will keep your personal data for the periods established in the box below:
- Web contact form: Your personal data will be processed for the time strictly necessary to meet your request.
- User registration: Your personal data will be kept until you cancel your user account. After the cancellation of the user account, the data will remain blocked in our databases but kept until the prescription of possible legal responsibilities. Your personal data used to send information about our activity will be kept until you revoke the consent given for this purpose.
- What is the legitimacy of the processing of your data?
The legitimacy for the data processing covered by this privacy policy is:
1. Explicit consent of the applicant in the following data processing:
- Data processing in web contact forms.
- The submission of information about our activity.
- To whom will your data be disclosed?
As stated in the basic information, no data will be given to third parties unless legally obliged to do so.
CESEFOR may furthermore use all of this personal information if needed to comply with applicable laws and regulations. The personal information may be shared by CESEFOR with third parties, also outside of the European Union, for processing for the above mentioned purposes. More precisely, CESEFOR will share this personal information with the beneficiaries of the H2020 Grant Agreement number 774632 for the action entitled ‘Innovation Networks of Cork, Resins and Edibles in the Mediterranean basin — INCREDIBLE’:
- European Forest Institute (EFI), Finland
- Forest Research Centre in the National Institute for Agricultural and Food research and Technology (INIA, Spain)
- Union of the Mediterranean Forest (UNAC, Portugal)
- ETIFOR, srl, (ETIFOR, Italy)
- Croatian Forest Research Institute (CFRI, Croatia)
- Forest Science Technology Centre of Catalonia (CTFC, Spain)
- University of Ioannina (UOI, Greece)
- National Research Institute of Rural Engineering, Water and Forests (INRGREF, Tunisia)
- Service Center and Forestry Promotion and its industry of Castile and Leon (CESEFOR, Spain)
- Higher Institute of Agronomy (ISA, Portugal)
- National Centre for Forest Ownership (CNPF, France)
- Esset Energy Systems (ESSET, Belgium)
- Regional Forestry Agency for Land Development and the Environment of Sardinia (FoReSTAS, Italy)
The personal information provided by you or collected by CESEFOR will not be kept for longer than is needed to fulfil these purposes. You can withdraw your consent at any moment by contacting CESEFOR cesefor@cesefor.com.
- What are your rights regarding data processing?
As a data subject, you have the right to obtain confirmation of the existence of a processing of your data; to access your personal data; to request the rectification of data that are inaccurate or, where appropriate; to request deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected; or until you, as a data subject, withdraw your consent.
CESEFOR will process and conserve your data in accordance with current legislation, without prejudice to the fact that you, as an interested party, may request in any case the limitation of your data processing. In certain cases you may exercise your right to the portability of the data, which will be delivered in a structured format, of common use or mechanical reading to you or to the new data controller you designate. You will have the right to revoke at any time the consent for any of the treatments for which you have granted it.
To exercise your rights, please contact us at the following e-mail address cesefor@cesefor.com.
You will have the right to make a complaint with the Spanish Data Protection Agency in case you consider that the exercise of your rights has not been properly attended to. The maximum period to resolve will be one month from the date of receipt of your request. In case of any modification to your data, please notify us in writing in order to keep your data updated.