Privacy Policy

www.mikelasensio.net

I. PRIVACY AND DATA PROTECTION POLICY

In compliance with current legislation, the Research Team Website (hereinafter, also “the Website”) undertakes to adopt the technical and organisational measures appropriate to the level of security required by the risks of the data collected.

Laws covered by this privacy policy

This privacy policy is adapted to current Spanish and European data-protection legislation. It complies in particular with the following laws:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
  • Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (LOPD-GDD).
  • Royal Decree 1720/2007 of 21 December approving the implementing regulation of Organic Law 15/1999 of 13 December on the Protection of Personal Data (RDLOPD).
  • Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the data controller

The data controller for the personal data collected on the Research Team Website is: Mikel Asensio Brouard, with Spanish ID (NIF): 14568162P (hereinafter, the Data Controller). Contact details:

Address: Department of Basic Psychology, Autonomous University of Madrid, c/ Pavlov, 6. 28049 — Madrid, Spain.

Phone: +34 914 974 096

Email: mikel.asensio@uam.es

Personal data records

In compliance with the GDPR and LOPD-GDD, we inform you that the personal data collected by the Research Team Website through the forms on its pages will be incorporated into and processed in our records in order to facilitate, expedite and fulfil the commitments established between the Website and the User, or to maintain the relationship arising from the forms the User completes, or to respond to a request or query. In line with the GDPR and LOPD-GDD — unless the exception in Article 30.5 of the GDPR applies — a record of processing activities is maintained, specifying, by purpose, the processing activities carried out and the other circumstances required by the GDPR.

Principles applicable to the processing of personal data

The processing of the User’s personal data is governed by the following principles, set out in Article 5 of the GDPR and in Articles 4 and following of Spanish Organic Law 3/2018:

  • Lawfulness, fairness and transparency: the User’s consent is required at all times, following fully transparent information about the purposes for which personal data are collected.
  • Purpose limitation: personal data are collected for specified, explicit and legitimate purposes.
  • Data minimisation: only personal data strictly necessary for the purposes of processing are collected.
  • Accuracy: personal data must be accurate and kept up to date.
  • Storage limitation: personal data are kept in a form which permits identification of the User only for as long as necessary for the purposes of processing.
  • Integrity and confidentiality: personal data are processed in a manner that ensures their security and confidentiality.
  • Accountability: the Data Controller is responsible for ensuring that the above principles are met.

Categories of personal data

The categories of data processed on this Website are limited to identifying data. No special categories of personal data within the meaning of Article 9 GDPR are processed.

Legal basis for processing

The legal basis for the processing of personal data is consent. The Website undertakes to obtain the User’s express, verifiable consent for processing for one or more specific purposes.

The User has the right to withdraw consent at any time. Withdrawing consent is as easy as giving it. As a general rule, withdrawing consent does not condition use of the Website.

Where the User has to provide data through forms to make queries, request information or for reasons related to the content of the Website, they will be informed if completing any field is mandatory because it is essential for the proper handling of the request.

Purposes of processing

Personal data are collected and managed by the Website to facilitate, expedite and fulfil the commitments between the Website and the User, to maintain the relationship arising from the forms the User completes, or to respond to a request or query.

Data may also be used for personalisation, operational and statistical purposes, and for activities within the Website’s remit, as well as for data extraction, storage and marketing studies aimed at adapting Content to the User and improving the Website’s quality, performance and usability.

At the moment personal data are collected, the User will be informed of the specific purpose(s) of processing.

Retention periods

Personal data are retained only for the minimum time necessary for the purposes of processing and, in any event, for no longer than: 6 months, or until the User requests their deletion.

At the moment personal data are collected, the User will be informed of the period for which the data will be stored or, where this is not possible, the criteria used to determine that period.

Recipients of personal data

The User’s personal data are not shared with third parties.

In any case, when personal data are obtained, the User will be informed of the recipients or categories of recipients of the personal data.

Personal data of minors

In line with Article 8 GDPR and Article 7 of Spanish Organic Law 3/2018, only persons aged 14 or over may give their consent to the lawful processing of their personal data by the Website. For minors under 14, the consent of parents or guardians is required, and processing will only be considered lawful to the extent that they have authorised it.

Confidentiality and security of personal data

The Website undertakes to adopt the technical and organisational measures appropriate to the level of security required by the risks of the data collected, so as to guarantee the security of personal data and prevent the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or the unauthorised disclosure of, or access to, such data.

Because the Website cannot guarantee that the Internet is impregnable or fully free from hackers or other malicious actors fraudulently accessing personal data, the Data Controller undertakes to notify the User without undue delay when a personal-data security breach occurs that is likely to result in a high risk to the rights and freedoms of natural persons. As defined in Article 4 GDPR, a personal-data breach is any breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

Personal data will be treated as confidential by the Data Controller, who undertakes, by means of legal or contractual obligation, to ensure that confidentiality is respected by employees, associates and any person to whom the information is made accessible.

Rights regarding the processing of personal data

The User has the following rights with respect to the Data Controller, as recognised in the GDPR and in Spanish Organic Law 3/2018:

  • Right of access: the right to obtain confirmation as to whether or not the Website is processing the User’s personal data and, if so, to obtain information about that data and its processing, including, among other things, available information on the origin of the data and the recipients of any disclosures.
  • Right to rectification: the right to have personal data corrected when inaccurate or, taking into account the purposes of processing, incomplete.
  • Right to erasure (the “right to be forgotten”): where the law permits, the right to have personal data deleted when no longer necessary for the purposes for which they were collected; when consent is withdrawn and there is no other legal basis; when the User objects and there is no overriding legitimate ground; when data have been processed unlawfully; when erasure is required to comply with a legal obligation; or when data have been collected in connection with the offer of information-society services to a child under 14. In addition to deleting the data, the Data Controller will, taking account of available technology and the cost of implementation, take reasonable steps to inform other controllers processing the data of the User’s request to erase any links to that personal data.
  • Right to restriction of processing: the right to restrict the processing of personal data when the User contests their accuracy; when processing is unlawful; when the Data Controller no longer needs the data but the User needs them for legal claims; or when the User has objected to processing.
  • Right to data portability: where processing is carried out by automated means, the User has the right to receive their personal data from the Data Controller in a structured, commonly used, machine-readable format, and to transmit them to another controller. Where technically feasible, the Data Controller will transmit the data directly.
  • Right to object: the right to object to the processing of personal data or to request that the Website cease processing them.
  • Right not to be subject to a decision based solely on automated processing, including profiling: the right not to be subject to a decision based solely on automated processing of personal data, including profiling, except where current law provides otherwise.

Users may exercise their rights by written communication to the Data Controller with the reference “GDPR-www.mikelasensio.net”, specifying:

  • User’s name, surname and a copy of national ID. Where representation is permitted, identification of the representative by the same means is also required, together with proof of representation. The copy of the national ID may be replaced by any other legally valid proof of identity.
  • The specific request, with reasons, or the information sought.
  • Address for service of notices.
  • Date and signature of the applicant.
  • Any document supporting the request.

This request and any accompanying documents may be sent to the following address and/or email:

Postal address: Department of Basic Psychology, Autonomous University of Madrid, c/ Pavlov, 6. 28049 — Madrid, Spain.

Email: mikel.asensio@uam.es

Links to third-party websites

The Website may include hyperlinks or links that allow access to third-party websites that are not operated by the Website. The owners of those websites have their own data-protection policies and are responsible for their own files and privacy practices.

Complaints to the supervisory authority

If the User considers that there is a problem or breach of current legislation in the way personal data are processed, they have the right to effective judicial remedy and to lodge a complaint with a supervisory authority — in particular, in the Member State of habitual residence, place of work or place of the alleged infringement. In Spain, the supervisory authority is the Spanish Data Protection Agency (https://www.aepd.es/).

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

The User must have read and agreed to the conditions on the protection of personal data contained in this Privacy Policy and accept the processing of their personal data so that the Data Controller may proceed with such processing in the manner, for the periods and for the purposes indicated. Use of the Website implies acceptance of its Privacy Policy.

The Website reserves the right to modify its Privacy Policy at its discretion or as a result of legislative, judicial or doctrinal changes by the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be notified explicitly to the User; users are advised to consult this page regularly to keep up with the latest changes or updates.

This Privacy Policy was updated to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights.