Introduction
On certain occasions, and due to the nature of our activity, the FEOR Research Institute in Radiation Oncology, hereinafter IRAD, will process personal data.
In the following sections, we answer some of the questions that may arise in relation to how such data is processed and what commitments the FEOR Research Institute in Radiation Oncology assumes when accessing, storing and handling any information that may eventually be collected.
Applicable regulations
Our activity is governed by the General Data Protection Regulation (GDPR), Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC.
It is also governed by Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights, as well as by any other applicable provisions in this area.
Data controller
This Privacy Policy applies to all personal data provided by the user through this online platform, through forms, or by other means, such as social networks.
- Controller
Spanish Society of Radiation Oncology.
- Tax ID
G58693250.
- Registered office
Calle Doctor Esquerdo 105, 28007 Madrid.
- Email address
seor@seor.es
You may contact the Spanish Society of Radiation Oncology at its registered office at Calle Doctor Esquerdo 105, 28007 Madrid. You may also contact us by email at seor@seor.es.
In accordance with current privacy regulations and the respect we owe you, you must guarantee that the data provided is true, accurate, complete and up to date, and you will be responsible for any direct or indirect damage or loss that may arise as a result of failure to comply with this obligation, both to IRAD and to third parties.
When and why personal data is processed
You may browse the website without having to provide personal data, but in some cases this information is necessary in order to provide you with the information you request.
If we need to collect personal data, IRAD, as data controller, will request your express consent before you provide your personal data, whenever this is required.
The purpose of this Privacy Policy is to provide transparency regarding how we process your data and to protect information on the Internet and any data that the user may enter on the website.
Purposes of processing
The personal data requested, or provided to us as a result of your browsing, is used for the purposes indicated below.
- We will process your personal data in order to manage and respond to the enquiries you send us, registration requests or requests for general additional information.
- We will process your personal data in order to manage your participation in recruitment processes that match your professional profile and to carry out the necessary actions for staff selection and recruitment.
- We will process your data to send you electronic communications if you have requested this from us.
Legal basis for processing
The legal basis that allows us to process the personal data you have provided for the management of enquiries and requests, for the management of recruitment processes or for the sending of commercial communications, will be your consent.
At the time data is collected, we will inform you about the identity of the controller, the purpose of the processing, the legal basis for the processing, the recipients of the information, how to exercise the rights granted to you by current data protection legislation, as well as any other information required by data protection regulations.
For this purpose, in each of the forms used to collect personal data, we will make available to you the corresponding clause containing all the necessary information and, if your consent is required for the processing, we will request it from you. You will be able to accept or reject it through a free, specific, informed and unequivocal statement.
Recipients of the services
All our services are aimed at people over 14 years of age. Therefore, although the website does not display inappropriate material, if you are a minor, please do not complete the form or forms.
Processing and disclosure of data
IRAD collects personal information only to the extent necessary to achieve a specific purpose. The information will not be used for any purpose incompatible with the one described.
IRAD only discloses information to third parties if this is necessary to fulfil the purpose of the service, and only to the persons who need to know it, or where required by law.
All of this is done so that the service can be provided while processing your personal data with confidentiality, integrity and discretion, in accordance with current legislation.
In any case, IRAD adopts security measures to protect data against possible misuse, unauthorised access, alteration or loss.
Data retention
Data is stored and processed for the time necessary to fulfil the purpose for which it was collected or for its immediate subsequent processing.
The retention period will depend on the service, and each service and data collection form will indicate the duration of the personal data processing. However, the processing duration according to the purposes indicated is set out below.
- Enquiries and requests
Data will be retained for the time necessary to respond to them, with a maximum period of one year.
- Recruitment processes
Data will be retained until a job position has been awarded, until the different recruitment processes have been completed, or until you exercise your right to erasure or objection.
- Commercial communications
Data will be retained until you notify us that you withdraw your consent.
Website user rights
- Right of access
You may ask IRAD whether it is processing your data, which data it is processing and how.
- Right to rectification
You may request that your personal data be updated if it is incorrect, and deleted if you so wish.
- Right to restriction of processing
In this case, the data will only be retained by IRAD for the exercise or defence of claims.
- Right to object
Following your request to object to processing, IRAD will stop processing the data in the indicated manner, unless compelling legitimate grounds or the exercise or defence of possible claims require the data to continue to be processed.
- Right to data portability
If you request that your data be processed by another company or organisation, IRAD will facilitate the portability of your data to the new controller.
- Right to erasure
You may request the deletion of your data when it is no longer necessary for processing, after withdrawal of your consent, if you consider that the processing is unlawful or if there is a legal obligation to do so. In any case, the situation will be analysed and the law will be applied.
- Right not to be subject to a decision based solely on automated processing
Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
How to exercise your rights
You may exercise your rights of access, rectification, erasure, restriction of processing, data portability, objection to processing and the right not to be subject to individual automated decisions, including profiling, by sending an email to seor@seor.es, accompanied by documentation and information proving your identity or that of the persons you represent.
You may also write to the Spanish Society of Radiation Oncology, Calle Doctor Esquerdo 105, 28007 Madrid, indicating the reference: “exercise of rights”.
If you consider that the processing itself, or any of its stages, does not comply with current privacy regulations, you may file a complaint with the supervisory authority through the website agpd.es.
Unsubscribing from commercial communications
As indicated in previous sections, IRAD will request your consent and the user may provide it so that, if they wish, IRAD may use their data to send them information and advertising both about the website and about different offers, special promotions and third-party service providers.
The user has the right to withdraw at any time the consent given for the sending of commercial communications by simply notifying IRAD that they no longer wish to receive commercial communications.
Protection of personal information
We are committed to protecting your personal information. We use appropriate technical and organisational measures to protect your personal information and privacy, preventing its alteration, loss, processing or unauthorised access, in accordance with applicable regulations, taking into account the state of the art, the nature of the stored data and the risks to which it is exposed, whether arising from human action or from the physical or natural environment.
In order to strengthen the confidentiality and integrity of information within its organisation, IRAD continuously supervises, controls and evaluates its processes to ensure respect for privacy and information security, in accordance with international standards.
We also ensure that our employees are properly trained to protect your personal information.
Our procedures indicate that we may ask you to provide proof of identity before sharing your personal information with you.
In line with our commitment to security and confidentiality, we are particularly committed to offering you the highest level of security and protecting the confidentiality of the personal information you provide to us.
Amendment of the Privacy Policy
We will review and update the data protection information whenever there are changes in the legislation or in any of the procedures for processing your personal information, indicating the date of the latest update and the amended content.
This data protection information was last reviewed and updated in July 2020.
