Privacy Policy

This Privacy Policy (hereinafter “PRIVACY POLICY”) regulates, as a general rule, the collection and processing by ELHUYAR FUNDAZIOA (hereinafter “ELHUYAR FUNDAZIOA”) of the personal data you provide to us as a user of the website accessible through the domain name www.elhuyar.eus This is without prejudice to the specific provisions laid down in certain sections, forms or services available on the WEBSITE for the purpose of providing the relevant information and, where appropriate, seeking its consent.

ELHUYAR FUNDAZIOA reserves the right to modify the PRIVACY POLICY in order to adapt it to legislative, jurisprudential and/or administrative developments, as well as to the practices it develops at every time through the WEBSITE, taking into account its rights and interests.

In any event, ELHUYAR FUNDAZIOA will provide you with the appropriate technical resources so that you can access the PRIVACY POLICY in order to comply with the information obligations that we must observe in accordance with the applicable data protection rules.

1. Who is the Data Controller?

The Controller of his data is ELHUYAR FUNDAZIOA, an entity domiciled in Usurbil (Gipuzkoa), Zelai Haundi, 3, Poligono industrial Osinalde, registered in the Registry of Foundations of the Basque Country with F134 and C.I.F. G-20780896.

For any issue related to PRIVACY POLICY and/or the processing of your personal data you can contact us at the postal address above and/or through the email address datuensegura@elhuyar.eus

2. How did we get your data?

The data we process in ELHUYAR FUNDAZIOA have been obtained from yourself, through (i) the different forms you fill out during browsing through the WEBSITE and/or through other channels (e.g. registration as a user of the WEBSITE – if any –, contact forms, registration forms in contests, events and/or activities organised by ELHUYAR FUNDAZIOA, forms referring to job offers and/or selection processes, etc. ); (ii) by referral of a query email; or (iii) by other duly identified collection systems, such as the video surveillance system implemented in our premises.

In the event that the personal data provided belonged to a third party, you ensure that you have informed that third party of the PRIVACY POLICY and have obtained your permission to provide your data to ELHUYAR FUNDAZIOA for the purposes set out below.

We also inform you of the possible processing of your social network data through the corporate profiles that ELHUYAR FUNDAZIOA keeps available in each social network in which it is present, all in terms and conditions established in each social network.

3. What kind of data do we deal with?

The data we process at ELHUYAR FUNDAZIOA are those that you have provided us during your browsing of the WEBSITE, through the appropriate forms that we use to formalize our contact with you and/or through email, as well as those others that, if any, we obtain through the corporate profiles of ELHUYAR FUNDAZIOA in the social networks in which we are present or otherwise.

In particular, ELHUYAR FUNDAZIOA addresses the following data categories:

  • Identifying and contact data (e.g. surname, surname, ID, postal and electronic address, telephone, etc. ).
  • Bank and economic transaction data.
  • Identification codes and keys as registered user of the WEBSITE.
  • Internet browsing data (e.g. IP address, website visits, Wi-Fi network connections, etc. ).
  • Images captured in the context of an event or activity organized by ELHUYAR FUNDAZIOA.
  • Personal characteristics, training, employment, etc. (in the case of applications/job offers and/or selection processes for ELHUYAR FUNDAZIOA in which you participate voluntarily.
  • Images captured by the video surveillance system implemented in the access to our facilities.

4. For what purpose do we process your data and under what legitimacy?

The processing of your personal data aims to:

  • Manage and process your registration as a user of the WEBSITE, where possible.
  • Manage access and use by you of the content and services that ELHUYAR FUNDAZIOA makes available to you through the WEBSITE, including blog services, social networks or any other features that are accessible from the WEBSITE at any time.
  • Process and manage the procurement of products or services that, where appropriate, formalise with ELHUYAR FUNDAZIOA through the WEBSITE or by any other means, manage the shipment of such products and, in general, maintain, manage and contract the contractual relationship that it establishes with us as acquirer of our products or services.
  • Process and manage your request for information, suggestions, complaints or complaints through the WEBSITE or email.
  • Send you by different means, including electronic means, commercial and advertising communications from ELHUYAR FUNDAZIOA and other entities of the group in which it is incorporated (duly identified on the website www.elhuyar.eus), in respect of products, services, offers, promotions and any other relevant information relating to these entities, provided that you have consented.
  • Manage your subscription to our “Aldizkariko-buletina” service and the sending of the corresponding electronic communications, provided you had consented.
  • Manage your participation in the contests, activities and events organized by ELHUYAR FUNDAZIOA in which you voluntarily register.
  • In cases in which it had consented, manage and disseminate the contests, activities and events organized by ELHUYAR FUNDAZIOA.
  • Manage your job application or your listing in a job offer and your participation in the selection process.
  • Ensure the safety and integrity of people and goods by capturing images through the video surveillance system in the access and inside our facilities.

The processing of your personal data by ELHUYAR FUNDAZIOA, in accordance with the applicable regulations, is based (i) on your consent, given at the time of collection of your personal data that you voluntarily provide us through the mechanisms enabled for this purpose in the WEBSITE; (ii) on the relationship established with us in the cases of hiring of our products and services; or (iii) in the interest of legitimate ZIDAZIDAZIDAZIDAA system.

We remind you that, at any time, in cases where the treatment is based on your consent, you can revoke it freely and free of charge, as indicated in Section 7 below.

5. Who do we communicate their data to?

We inform you that your personal data may be communicated to the following third parties:

  • Public Bodies and Administrations to which ELHUYAR FUNDAZIOA may have a legal obligation to communicate its data.
  • Where you have agreed, entities of the business group in which ELHUYAR FUNDAZIOA is integrated (duly identified on the website www.elhuyar.eus), with the aim of meeting your requests and queries and/or sending you commercial communications concerning those entities and their respective activities or products.
  • When you had agreed to do so, ELHUYAR FUNDAZIOA collaborating entities with the aim of allowing the dissemination of contests, events and/or activities organized together with ELHUYAR FUNDAZIOA in their own channels. Assignment entities shall be identified at the time of data collection.

On the other hand, we inform you that ELHUYAR FUNDAZIOA uses the services of third parties (Processors) located in the United States to manage the sending of communications within the Newsletter service and other electronic commercial communications, so the contact details of the recipients of such communications will be the subject of international transfer of data covered by the use of standard contractual clauses for the transfer of personal data established by the European Commission.

6. How long will we keep your data?

In general, personal data will be kept until you withdraw your consent to the treatment or request its deletion, as well as the time necessary to comply with the legal obligations that ELHUYAR FUNDAZIOA must observe.

In any event, we inform you that ELHUYAR FUNDAZIOA has established internal data processing policies aimed at controlling the time limits for the retention of personal data in its possession, so they can be cancelled when they are no longer necessary and/or appropriate for the purpose for which they were collected.

In particular:

  • As regards the video surveillance system in place at our premises, it is noted that the images captured will be deleted within a maximum of one month.
  • For the management of applications for employment, their data shall be kept for a maximum period of two years.

7. What are your rights?

The applicable data protection legislation gives you a number of rights concerning your personal data that you may exercise during the processing of the data. Those rights are as follows:

  • Access to your data: you have the right to access your data to know what personal data concerns you we are dealing with.
  • Request the rectification or deletion of your data: in certain circumstances, you have the right to rectify any inaccurate personal data concerning you that are the subject of processing by us or, indeed, to request deletion when, among other reasons, the data were no longer necessary for the purposes that were collected.
  • To request limitation of the processing of your data: in certain circumstances, you have the right to request limitation of the processing of your data, in which case we inform you that we will only keep them for the exercise or defence of claims as provided for in the applicable data protection rules.
  • To the portability of your data: in certain circumstances, you have the right to receive your personal data, and to have provided us, in a structured format, with common use and mechanical reading, and to transmit it to another controller.
  • To oppose the processing of your data: in certain circumstances and for reasons relating to your particular situation, you have the right to oppose the processing of your data in which case, we would no longer treat them unless, for compelling legitimate reasons, or the exercise or defence of possible claims, they should be retained.

It also has the right to withdraw consent at any time, without affecting the lawfulness of the treatment based on prior consent to its withdrawal.

It may exercise those rights by written request addressed to ELHUYAR FUNDAZIOA at the postal address referred to in paragraph 1 or by sending an e-mail addressed to the address datuensegura@elhuyar.eus

Finally, please indicate that you can lodge a complaint with the competent Supervisory Authority (in Spain, the Spanish Data Protection Agency), especially when you have not been satisfied in the exercise of your rights. You can contact the Authority via its website: www.aepd.es.

8. Security measures

ELHUYAR FUNDAZIOA shall process its data at all times in an absolutely confidential manner and shall keep the necessary obligation of secrecy with regard to it, in accordance with the data protection implementing rules, by adopting for that purpose the necessary technical and organisational measures to ensure the security of its data and to prevent its alteration, loss, treatment or unauthorised access, taking into account the nature of the data stored, and the nature of the data.

9. Cookies policy

We also indicate that ELHUYAR FUNDAZIOA has established a Cookies Policy that is accessible through the following link.