At NEIKER, INSTITUTO VASCO DE INVESTIGACIÓN Y DESARROLLO AGRARIO, S.A. we are committed to the protection of privacy and correct use of the personal data we process and provided by you, both online via this website and, if applicable, any of its sub-domains, as well as offline.
1.- Consent
Please read this policy carefully, making sure you understand and agree with it before providing us with your personal details. Should you not agree with it, do not use this website or its services or provide us with your data. Accessing this site, using any of its services or providing us with your data, whether online or offline, will be deemed a clear affirmative action whereby you give us your consent (when necessary the same) to process your data for the purposes indicated below. Should this not be necessary, the legitimacy for the data processing will be based on the legitimate interest of this body and/or on the existence of a previous legal business relationship. .
2.- Who is responsible for processing of your data?
NEIKER, INSTITUTO VASCO DE INVESTIGACIÓN Y DESARROLLO AGRARIO, S.A.
Campus agroalimentario de Arkaute s/n 01192 Vitoria, Spain.
VAT NO.: A48167902
E-mail: dbo-dpd@neiker.eus
3.- How did we obtain your data?
From the interested party: If you already take part in our activities, you have provided them to us, either off- or online when requesting our services to maintain the contractual relationship with you.
Should you have provided data to us through this website or any of its sub-domains, we collect information, for example, when you access the page, complete any form with personal data, when you register for our activities or events or when you communicate with us directly by Email.
When you provide us with your personal data, you guarantee you are enabled to provide this information and that truthful, accurate and up-to-date, moreover that it is neither confidential, nor infringes any contractual restriction or third party rights. Furthermore, you undertake not to impersonate other Users by using their registration data for the different services and/or contents of the Website.
You are responsible for keeping your data accurate and up-to-date, for which NEIKER, INSTITUTO VASCO DE INVESTIGACIÓN Y DESARROLLO AGRARIO, S.A. denies all liability in the event of your not doing so.
Obtaining from a third party: In the event it is not the interested party in question but a third party who provides us with data of the same, the data categories we process may be: identifying data, personal characteristics, economic data.
In the event it is not the interested party in question but a third party who provides us with data, then it is said third party who expressly guarantees he/she has the authorization of the interested party for such contribution, exonerating us from any liability in the event of any claim by the interested party, a liability solely and exclusively assumed by the person who has communicated the data on behalf of or in the interest of the interested party.
3.1.- Third Party data
Regarding other people’s data, their privacy shall be respected by taking special care when communicating or publishing their personal data. Only the owner can authorize the processing of your personal data. If you provide us with data of third parties, it is your responsibility to have their prior express consent to use and communicate them to us, furthermore, you are responsible for informing them of the inclusion of their data in our processes. The publication of data from third parties without their consent may not only infringe regulations on data protection but also, those rights related to the third party’s honour, privacy or image. Should you provide us with the personal data of third parties, by accepting this privacy policy, you expressly guarantee you have been authorised by the interested party for said contribution, exonerating us from any liability in the event of any claim by the interested party, a liability solely and exclusively assumed by those who have communicated the data to us on behalf of the interested party.
4.- What do we process your data for?
The data you provide us, likewise any other data generated during the execution of the contractual, commercial or other relationship we have with you, can be processed for different purposes, for example:
If you are an attendee or participant in any of our activities, events, social or cultural projects, we will use your data to maintain contact and communication, manage registration and participation in activities and events promoted or organized by NEIKER, INSTITUTO VASCO DE INVESTIGACIÓN Y DESARROLLO AGRARIO, S.A. and to send you information about our activities and / or services.
We also inform you that in those events and activities photographs and/or make videos might be taken for publishing on this web site or that of the event promoter, on our profiles on any social networks, as well as in YouTube to inform about the event/activity, document it, and form part of the photographic/videographic record of the same.
If you are merely a user of our websites, to manage the requests you make online and your registration
In both cases to maintain contact and communication with you, to carry out opinion and/or satisfaction surveys, as well as to send you information about our activities, products and/or services (including advertising and/or commercial communications for the purposes of Art. 21 LSSICE 34/2002).
5.- How long do we keep your data?
The personal data you provide us will be kept, should you be a participant in our activities, as long as the interested party does not request its erasure and even when requested, for the period of time necessary:
- to comply with the legal obligations affecting us and/or
- those provided for the statute of limitations on any liability on our part and/or
- in the exercise or defence of claims arising from the relationship between the parties.
If you are merely a user of the website, we shall keep them as long as you do not request us to remove them, and even if requested, we may keep them, limiting their processing, solely in compliance with legal obligations and/or the exercise or defence of claims.
Even once these periods have expired, we may keep them, limiting their processing, solely in compliance with legal obligations and/or the exercise or defence of claims.
6.- Why is processing your data legitimate?
In the case of participants involved in payment activities the legal basis that legitimates us to process your data is the relationship arising from the contract binding us if you are a party in our payment activities, or the request or pre-contractual relationship of any kind existing between the parties if you are a prospective party, or for example, your consent if you have sent us a request/query through our website if you are merely a user thereof. Such consent is given to us unequivocally by providing us with your data online or offline, such contribution being considered a clear affirmative act of expressing such consent.
The contribution of the requested data is compulsory as it is essential for the foregoing purposes, should you not provide them, we shall be unable to carry them out.
Given the pertinent appropriate relationship you maintain with us as a participant in our activities, user of our website …, we have a legitimate interest in processing your data in order, within the maintenance and management thereof:
- to be able to send you information about our activities, products and services (including advertising and/or commercial communications for the purposes of Art. 21 LSSICE 34/2002);
- in the activities or events, to take photographs and/or videos that may be posted on this website and, where appropriate, any of its sub-domains, on the profiles of the body on any social networks, as well as on YouTube, to inform about the event, document it, and be part of its photographic / video record. So your image may be published on advertising posters, brochures, programmes, as well as the body’s stationery;
- conducting opinion and/or satisfaction surveys
These purposes are compatible with the initial purpose for which we collected your data (to manage, contact, and communicate with you, and maintain the relationship uniting us), in any event; however, the provision of your data for the purposes mentioned, derived from our legitimate interest, is always voluntary and, your interests, rights or freedom shall always prevail over our legitimate interest. Should you request us to erase and stop processing your data for these purposes (by sending an e-mail to this effective to: dbo-dpd@neiker.eus) we shall comply with said request, being able to keep your data blocked for the formulation, exercise or defence of claims. Said withdrawal does not condition the processing of your data for the other purposes described.
In the event of providing us with sensitive data subject to special protection, the right to process depends on your express consent. This consent is given to us unequivocally on providing us with your data, and such provision is considered to be a clear affirmative act expressing such consent. The provision of the requested data is compulsory since it is essential to attend to your request; should you not do so, we will be unable to carry it out. You may withdraw this consent at any time by sending us an e-mail to :dbo-dpd@neiker.eus, however, such withdrawal does not condition the processing of your data for the other purposes described.
7.- To whom might we communicate your data?
We hereby inform you the data you provide may be communicated to third parties for purposes directly related to legitimate functions of assignor and assignee such as:
- Banking bodies for the management of collections and payments.
- NEIKER, INSTITUTO VASCO DE INVESTIGACIÓN Y DESARROLLO AGRARIO, S.A. to which billing and contact details of customers, suppliers and personnel are transferred for the centralised management of their respective manufacturing services, marketing and management of similar products pursuant to their respective legitimate interests.
International Data Transfers
We hereby inform you that in the event of using providers outside the European Economic Area to render auxiliary services for our activity (hosting, SaaS, remote backup, computer support or maintenance services, email management, sending e-mails and e-mail marketing, etc …) that may have access to personal data, we shall choose companies adhered to the ES-US Privacy Shield, meaning they are obliged to comply with requirements equivalent to those of Europe in terms of data protection. In any event, by accepting this data protection policy you expressly and unequivocally authorise the communication of data to these companies, knowing this involves an international transfer of data to a country outside the European Economic Area and that you have given your unequivocal consent to such transfer.
Our services include certain Social Network features and widgets, such as the ’Connect to Facebook‘ features or Facebook’s ’Like‘ button, the ’Share It‘ button or other common interactive social media mini-programs. These Social Network Features may collect information such as your IP address or which page you are visiting on our Website and may establish a cookie to enable them to function properly. Social Network Features are not hosted by either a third party or directly by our Services. Your interactions with these third parties are governed by their policies, not ours.
In addition, our Services may allow you to share your Personal Information with third parties directly, such as through framing techniques to serve content to or from Third Party Services or others, preserving the appearance of our Website and Services. Please note that such information is in fact being provided to these third parties and not to us, therefore these interactions and this exchange are also governed by the policies of those third parties and not ours.
8.- What are your rights when providing us with your data?
Right of access: You may request us which personal data we are processing and even request a copy of the same.
Right of rectification: You may request us to rectify inaccurate or incomplete personal data, including by means of an additional declaration.
Right of erasure (right to forget): You may request us to erase your personal data when not required for the purposes for which they were collected and you may also withdraw your consent, there were unlawfully processing or in order to fulfil a legal obligation.
Right to limitation of processing:</strong: You may request us to limit the processing of your data, in which case we shall only keep them to exercise or defend claims.
Right to data portability: You may request us to return (to you or a third party you indicate to us) your personal data in a structured format, of common use and mechanical reading.
Right to object: You may object to the processing of your data should such processing be based on the legitimate interest of the party responsible for the file or is for advertising purposes.
To exercise all these rights you may contact us with a signed written request, attaching a copy of your ID card/passport, at the postal address or via Email indicated in section 2 of this privacy policy. In the event of modifying of your data you must notify us at the same address, otherwise the company denies any liability should you not do so.
On receipt of any of the foregoing requests, we shall reply to you within 10 days maximum.
You may lodge a complaint with the Spanish Data Protection Agency. Should you require further information about the rights you may exercise and requesting model forms for the exercise thereof, please visit the website of the Spanish Data Protection Agency,www.aepd.es