The INSTITUCIÓ CATALANA DE RECERCA I ESTUDIS AVANÇATS (ICREA) is a foundation funded by the Catalan government that works closely with universities and research centres to integrate ICREA research professors into the Catalan research system.

We consider the privacy of individuals, including both visitors to our website, www.icrea.cat (hereinafter, the “website”), and anyone else who provides information to us through the website, an important matter. The data obtained are processed by ICREA to provide services to users (hereinafter referred to individually as “you” or the “user” and collectively as “you” or the “users”).Accordingly, ICREA undertakes to process your data in accordance with the applicable personal data protection regulations in force at any given time. Specifically, ICREA will comply with the principles set out in REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and with other applicable national regulations in force.

ICREA is providing information on its Privacy Policy in order to make users aware that their data will be processed and to inform them of the basic principles that it applies with respect to personal data protection. However, certain services that are provided or may be provided in the future via the website may be subject to special conditions of use that include provisions on the protection of personal data. Any such provisions shall take precedence over this Privacy Policy.

We encourage all users to read this Privacy Policy carefully to find out about the rules and practices we have developed to protect personal data and to learn more about our relationships with third parties that may have access to such data.

In any event, users are solely responsible for the information they provide on the website, and if in the future ICREA wishes to use this information for purposes other than those referred to, we will inform you of these new purposes and request your consent if it is required.

By using our website, you acknowledge that you have read and agree to this Privacy Policy, the provisions of our Legal Notice, and our Cookies Policy.

1. Who is responsible for processing your personal data?
   Identity of the controller: INSTITUCIÓN CATALANA DE INVESTIGACIÓN Y ESTUDIOS AVANZADOS (ICREA)
   VAT number:  G62515838
   Postal address: Paseo Lluís Companys, 23, 08010, Barcelona
   Phone number: +34 935 67 06 86
   Email address: dpd@icrea.cat
2. What are the purposes of processing your data?
   The personal data provided and collected through the forms on the website, or emails and/or telephone calls will be used for the following purposes: (a) to answer, respond and attend to the queries, questions and/or requests made by the different users (including managing your curriculum vitae for present and/or future selection processes); (b) to provide our services in accordance with the Legal Notice; (c) to guarantee the correct technical operation of the website; and (d) to use them for any other purpose required or authorized by the applicable legislation or for which you have provided the information.
3. What is the legitimacy for the treatment of your data?
   The legal bases for processing your personal data are: (a) a pre-contractual and/or contractual relationship; (b) if necessary – for the purposes of legitimate interests pursued by ICREA; (c) when you have provided your consent; and (d) if necessary – to comply with the legal and regulatory obligations of ICREA.
4. How long do we keep your personal data?
   The data obtained will be kept for the time necessary to answer your query or request, and even later for the time necessary for the formulation, exercise or defense of claims, and legal and contractual obligations, always being duly blocked. Personal data related to selection processes (resumes) will be kept as long as you do not tell us otherwise in order to facilitate the management of future selection processes. Remember that if your data or curriculum vitae have undergone any modification with respect to the last time you provided them to us, you must make the appropriate modifications in the corresponding call.
5. Who do we share your data with?
   Depending on the purposes for which personal information is collected, such information may be accessed by, without limitation, the following recipients:
   Authorized staff by ICREA or its representatives acting on behalf of ICREA, who are subject to the General Data Protection Regulation;
   Regulatory authorities or other third parties, in accordance with Applicable Data Protection Laws;
   Third parties (service providers that process information as data processors, under the instructions of ICREA. All of that after taking all the necessary measures to ensure that such information can be shared and having entered into an order processing contract, in accordance with Applicable Data Protection Laws.
   Your data are processed within the European Economic Area (hereinafter “EEA”) as a general rule, are contracted to service providers located within the European Economic Area or countries whose Data Protection Laws are deemed to provide adequate protection.
   If it is necessary to transfer personal data to service providers outside the European Economic Area (EEA) or in countries that have not been identified as providing an adequate level of protection, will only be done if data protection is sufficiently guaranteed.
   Such guarantees may include:
   • a. Standard contractual Clauses approved by the European Commission. The Standard Clauses provide sufficient guarantees safeguards to meet the adequacy and security requirements of the GDPR or
   • b. Certifications which demonstrate that third parties outside the EEA process personal data in a way that is consistent with the GDPR. These certifications are approved either by the European Commission, a competent supervisory authority or a competent national accreditation body in terms of GDPR.
   • We will not sell or disclose to third parties any personal information or data collected on our website, that could directly or indirectly identify you.
6. What are your data rights?
   • Right of access to your personal information: You have the right to request confirmation of whether ICREA is processing your data and, if so, to have access to that data.
   • Right to request rectification of inaccurate personal data or supplementation of incomplete personal data.
   • Right to request the deletion of your data.
   • Right to request the limitation of the processing of your personal data: Right to request limitation of their treatment, in which case the data will only be kept for the exercise or defense of claims.
   • Right to object the processing of your personal data: ICREA will stop processing personal data, with the exception that they must continue to be processed for legitimate reasons or for the exercise or defense of possible claims.
   • Right to data portability: if the users wish their data to be processed by another company, ICREA will provide them with the portability of their data to the new Data Controller.
   • Right not to be subject to a decision based solely on automated processing of personal data.

   In the event that you have given consent for a specific purpose, you have the right to withdraw it at any time, without affecting the lawfulness of the processing before its withdrawal.
   If you want to exercise your rights, please contact us by writing to us at ICREA or sending an email to dpd@icrea.cat. If there are doubts about your identity, it may be necessary to provide a copy of your ID or equivalent identification document which proves the identity and is considered legally valid. You can use the models and forms on the rights referred to above by going to the official page of the Spanish Data Protection Agency (https://www.aepd.es/reglamento/derechos/index.html).
   You also have the right to lodge a complaint directly with the supervisory authority, specifically the Spanish Data Protection Agency (https://sedeagpd.gob.es/sede-electronica-web/vistas/formNuevaReclamacion…), and with other competent authorities, for any complaints about data protection.

7. How do we keep your information safe?
   In order to ensure the security of the personal data, ICREA use appropriate technical or organisational measures to ensure appropriate security, in accordance with Applicable Data Protection Laws. In any case, ICREA shall take appropriate technical and organizational measures, both at the time of the design of the processing system and at the time of the processing itself, particularly in order to maintain security and thereby to prevent any unauthorized processing. However, although we use such security measures, the user should be aware that Internet security measures are not foolproof. ICREA is not responsible for the actions of third parties who access these data and information by violating these measures.
8. Confidentiality
   The professionals who work at ICREA and have access to personal data, shall not disclose or make use of any information that might be given to. All information provided to us will be treated, in any case, as confidential, and shall not be used for purposes other than those related to related to the processing of your requests and the services provided by ICREA, as appropriate. In this regard, we shall not disclose or reveal any information about your claim, the reasons of the required advice or the duration of the provided service.
9. Links to other websites
   Please note that the website may contain links to other websites. ICREA is not responsible for their privacy practices. This website Privacy Policy applies only to our website. ICREA encourages you to pay attention when you leave our website for the website of such third parties and to read the privacy policy relating to that website.
10. Use of social media
    ICREA is currently present in some of the main social media and assumes to be responsible for processing the personal data you provide to us.
    ICREA will treat your personal data on each social network according to the rules they set in their own privacy policies. ICREA can therefore provide followers on social media platforms with information relevant to our activities, events and related matters, including follower assistance through the social media channels.
    ICREA shall not collect data from social media, unless you give us your express consent.
11. Updates and Amendments to our Privacy Policy
    Your personal data will only be used in accordance with the current privacy policy in force at the time. ICREA reserves the right to modify this privacy policy at any time, publishing such modifications on the Website, so please review it frequently. If at any time it is decided changes to this Privacy Policy, you will notify you by email, provided that it is available. At this stage you will be given the option to authorize other uses or disclosures of data provided at the original point of collection. In the event that any clause of this Privacy Policy is annulled or held to be invalid, the remaining conditions shall nevertheless remain full force and effect, ensuring its validity and effectiveness, in accordance with current legislation applicable at all times.

Date of last update: October 2023.