The current data protection policy regulates the processing of personal data that is carried out within the framework of the project ‘Bridges to assess the production and impact of migration narratives’ — ‘BRIDGES’.

The processing of personal data is done in accordance with Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and the Spanish legislation, Organic Act 3/2018, of December 5, on the Protection of Personal Data and Guarantee of digital rights.

Information relating to the different purposes for which your personal data may be used is set out below.

1. Identity of the Data Controller:

The entity responsible for the processing of personal data collected on the website is:

2. Data Protection Officer:

In order to guarantee the compliance with Personal Data Legislation, CIDOB has a Data Protection Officer: 

3. Data processing:

The BRIDGES project involves the process of personal data. Data will be collected in the different actions and initiatives which entails the Project and by different means such as contact forms, consent forms, e-mail, surveys or procedures.

The data processing will be carried out fully and exclusively with the prior and express consent of the data subjects (participants, policy makers, representatives of institutions or entities, overall citizens).  Data subjects will be properly informed by Consortium members, before collecting data and confidential information. The Consortium processes your personal data with the sole purpose of carry out the BRIDGES Project Research, in accordance with current legislation on personal data.

The information regarding the different data processing referred above is  detailed below:

You provide your data voluntarily at all times. You should therefore ensure the personal data you provide is accurate. In any case, responding to the veracity of the data provided, we reserve the right to exclude from services any user who has provided false data, without prejudice to other actions admissible in law.

In no case will automate decisions be taken based on your data, including profiling.  

The legal basis for processing your data is the consent given by the data subject.

4. Data processing by third parties:

For the management of services within the framework of the project ‘Bridges to assess the production and impact of migration narratives’ — ‘BRIDGES’, your data may be communicated to various public administrations (European Union, etc.) both for the management of studies, presentations and other activities, as well as for the control and compliance with the principles and requirements of the project as long as a legislation enables this communication. The users expressly authorize this processing.

To ensure the provision of the services provided by CIDOB some data may be processed by third-party entities dedicated to this purpose (mailing companies, quality control surveys, accountancy, etc.). This data processing will be performed only and exclusively to guarantee the delivery, security and availability of the CIDOB services. CIDOB will be ensured that these entities apply information security measures and best practices.

In performing some of these activities (mailing campaigns), CIDOB may transfer your data to third parties located outside the European Economic Area. This transfer will only take place to a third country or an international organisation that has an adequate level of data protection according to Articles 44 to 46 of the General Data Protection Regulation (GDPR), namely countries that the European Commission considers they provide a level of protection comparable to that of Europe. In the absence of this declaration of adequacy, standard contractual clauses approved by the European Commission will be signed with the third party.

5. Your rights when providing us with personal data:

You may at any time request and obtain information on how and for what purposes we are processing your data. You may:

• Access: the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, inform the specific processing data.
• Rectification: the right to obtain from the data controller the modification or rectification of inaccurate data.
• Erasure: the right to obtain from the controller the erasure of personal data.
• Restriction of processing: the right to obtain from the controller the restriction of processing,  asking the personal data to be kept for legal needs.
• Object to processing: the right to ask that data controller not to use your data for a specific purpose.
• Portability of the data: the right to receive the personal data data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.

In order to carry out the exercise of these rights, the data subject must file a written request,  indicating the right (Access, Rectification, Erasure, Restriction of processing, Objection Portability) and attaching a copy of the ID, to the following address: CIDOB, Data Protection Officer, C/ Elisabets 12, 08001 Barcelona (Spain) or by email: dpd@cidob.org.

6. Additional information on the processing of your personal data:

If you wish to know more about the personal data processing performed by CIDOB you may contact the Data Protection Officer at the email address dpd@cidob.org or by post at the Data Protection Officer, C/ Elisabets 12, 08001 Barcelona (Spain).

7. Submitting complaints:

The Spanish Data Protection Agency (www.aepd.es) is the supervisory body that ensures compliance with data protection legislation in the Spanish state. If you consider that CIDOB has failed to comply with any of the precepts established in this regulation you may contact them to lodge a complaint.