1. Who we are
We are the European Foundation for Cluster Excellence, a Barcelona-based spanish think-tank and training institution with offices at Pujades, 1, 08003 Barcelona, Spain.
For more information, please see our website under ‘About’.
We offer training programs in cluster-based, value-chain-based, economic development. For the processing of your personal data in relation to these programs the European Foundation for Cluster Excellence is solely responsible, with the exception of the training programs jointly organized with Partners, in which cases the European Foundation for Cluster Excellence and its Partners are jointly responsible.
We have determined our respective responsibilities for compliance with the obligations under applicable privacy legislation for processing your personal data in relation to our missions and activities. In summary, we have arranged that if you want to exercise your rights, such as your right to access, correct, erase, restrict, object or port personal data or to withdraw your consent, or if you have any questions or complaints about the processing of your personal data, you can either contact us in accordance with ‘Your rights’ (please see below) or contact the European Foundation for Cluster Excellence Data Protection Officer. The European Foundation for Cluster Excellence will assist you where necessary to ensure that you can exercise your rights and your questions and complaints will be handled.
2. The types of personal data we process
2.1 General. We may collect and process the following categories of personal information:
a. Name, employer and other identifying information
For example, we may record your name, title, gender and date of birth, your nationality, and country of residence.
b. Your contact details and personal account or registration details
Your contact details may include your address, telephone number and email address. When you register for a service, we may also record your registration details and other information you fill out on your registration form. We also collect information relating to your company such as company name and business location.
c. Information about your training registration
When you make a training reservation with us, we process your reservation information. This information may include details about your training price and the date of your reservation. We may also record any specified medical needs or dietary requests you have and any additional assistance you require.
d. Our communication with you
When you send us an email or chat with us online or via social media, we register your communication with us. We also register your communication preferences. For example when you unsubscribe from one of our newsletters or when you choose to receive your training purchase related communication (such as confirmation and updates) via other channels than email (such as WhatsApp, Facebook Messenger or Skype). When you call us, our customer support will register your questions or complaints in our database. We may also record telephone calls for training purposes or to prevent or combat fraud.
e. Information we collect when you use our websites, apps and other digital media
• We may receive an automatic notification when you open our emails or click on a link in such emails.
• With your permission, we may also receive your location data.
f. Information in relation to social media
g. Information you choose to share with us
You may choose to share information with us, for example when you share your interests and preferences with us, leave a comment for us on Facebook, or fill out a customer survey.
2.2 Special categories of data. Certain categories of personal information we collect and use, such as data revealing racial or ethnic origin or data concerning health, can be considered ‘special categories of personal data’ under applicable data protection law.
3. How we collect your data
3.1 We collect the aforementioned categories of personal data in the following ways:
a. We collect data you provide to us
When you book a training with us, register for one of our courses, contact our administrative support, subscribe to receive our emails or mobile push notifications, or register for one of our events.
b. We collect data through technology
c. Social networks
Depending on your social network settings, we may receive information from your social network provider. Please see ‘The types of personal data we process’ above.
We also share your personal information with these third parties (please see ‘Disclosing or sharing data with third parties’ below).
4. For which purposes we use your data
4.1 The main purposes for which we use your personal information are:
a. To provide our services to you
To handle your training programs we need to process most of the information described above. For example, we need your name, surname and other identifying information to proceed to your enrollment. To confirm your coming and to inform you about changes, we need your contact details. And, to ensure that you receive the required care, we require your specified medical (dietary) needs.
c. To provide our online services and mobile apps to you
• For example, we use your name and details when you register to a training by email.
• To ease your use of our online services or apps, we may analyze the data we collect when you use our digital media and combine it with information collected via cookies and similar technologies (please see above). For example, to understand which digital channel (email, social media) or device (desktop, tablet or mobile) you prefer, so we can restrict our communication to that channel or device.
d. For statistical research
• General. We use automatic tools to perform statistical research into general trends regarding the use of our services, websites, apps and social media and the behavior and preferences of our customers and users.
• Legal basis. We process your personal data for our legitimate interests to develop better services and offers for our customers, to provide more responsive customer support and to improve the design and content of our websites and mobile apps.
• Right to object. You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data for statistical research (please see below ‘Your rights’).
e. To send you updates and special offers tailored to your interests
• Communication. For example, you can subscribe to the European Foundation for Cluster Excellence newsletter which keeps you informed on new trainings and the latest news. With your consent, we may also send you emails on specific occasions, such as a special trainings.
We may also use other communication channels to send you personalized messages and special offers, such as postal mail or, with your consent, social channels (such as Facebook Messenger or WhatsApp).
• Personalized offers. In our communication (see under above), we include personalized offers from us and our partners relating to our services and products. All communication is sent by the European Foundation for Cluster Excellence alone or in combination with our partners, no contact details are shared with our partners for this purpose without your consent. More information on our partners and the products and services they offer is provided when you subscribe and can be found on our websites.
• Legal basis. We process your personal data as described in this paragraph for our legitimate interest and the interests of third parties to provide you with relevant updates and offers.
• Opt-in and opt-out, unsubscribe and right to object. We only send you emails and notifications with updates and special offers with your prior opt-in. You can opt-out from receiving more messages from us or unsubscribe from any time by clicking the unsubscribe link in the email or by contacting us (please see ‘Your Rights’ below). You may object to the use of your personal data for direct marketing purposes anytime (please see below ‘Your rights’).
f. To communicate with you
We use your contact details to communicate with you in relation to our services, to answer your questions or to handle your complaints.
g. For record keeping and to comply with statutory obligations
We collect, store and use your data for internal business purposes, such as record keeping and to comply with our legal and fiscal obligations. We may be required by law to collect and share your identifying information with public authorities or governmental organizations for the purpose of control, security or combating terrorism.
4.2 Legal basis. We collect, use and store your personal data to provide services and our programs to you, to comply with the legal obligations we are subject to, if necessary for our legitimate interests or the interests of a third party or on the basis of your consent.
You may withdraw your consent at any time by following the specific instructions in relation to the processing for which you provided your consent. For example, by clicking the unsubscribe link in the email, adjusting your communication preferences in your account (if available) or by changing your smart phone settings (for mobile push notifications and location data). You may also contact us to withdraw your consent (please see ‘Your Rights’ below).
If you refuse to provide personal data that we require for the performance of the contract or compliance with a legal obligation, we may not be able to provide all or parts of the services you have requested from us. For example, we may have to cancel your registration to a training or we may not be able to provide you with the ancillary services requested by you (such as special meals).
When we process your personal data for our legitimate interests or the interests of a third party, we have balanced these interests against your legitimate interests. Where necessary we have taken appropriate measures to limit implications and prevent unwarranted harm to you. Our legitimate interests may for example include security and safety purposes or to provide better services and offers to you. For more information on these interests, please see the ‘For which purposes we use your data’ above. Where we process your personal data for our legitimate interests or the interests of a third party, you have the right to object at any time on grounds relating to your particular situation (please see ‘Your Rights’ below).
5. Disclosing or sharing data with third parties
5.1 General. We may disclose or share your personal data with our partners, service providers or subcontractors for the following purposes.
a. To facilitate your registration and general arrangements
To handle your registration to our trainings we may have to share your personal data with our partners and other companies involved in facilitating your stay with us. For more information on the partners we work with, please see our website under the adequate section.
b. For support services
We use third parties to provide our services, such as IT suppliers, social network providers, marketing agencies, credit and charge card companies and anti-fraud screening service providers. All such third parties will be required to adequately safeguard your personal data and only process it in accordance with our instructions.
c. Statistical research and direct marketing
We may share your personal data with group companies and third parties for statistical research and direct marketing. Please see above ‘Statistical research’, ‘To send you updates and special offers’ and ‘Other direct marketing purposes’ for more information.
d. To secure order and safety in the premises of our trainings
5.2 Public authorities. We may also be required by law to collect and share your identifying information with public authorities or governmental organizations for the purpose of control, security or combatting terrorism.
6. Security and retention
6.1 The European Foundation for Cluster Excellence will take appropriate technical and organizational measures to protect your personal data against loss or unlawful use.
7. International transfer of your data
7.1 The European Foundation for Cluster Excellence may transfer your personal data to countries other than your country of residence (including countries outside the European Economic Area). This may occur because our partners or service providers have operations in countries across the world. The laws of these countries may not afford the same level of protection to your personal data.
7.2 The transfer of personal data to countries other than your country of residence is often necessary to provide our services to you. In other cases, the European Foundation for Cluster Excellence will ensure that adequate safeguards are in place to comply with the requirements for the international transfer of personal data under applicable privacy laws. For transfers of personal data outside the European Economic Area, the European Foundation for Cluster Excellence may use Commission approved Standard Contractual Clauses as safeguards.
7.3 We may also be required to disclose your personal data to foreign public or government authorities
Laws in some other countries may require us to give government agencies access to your information. In addition, laws in several countries require the European Foundation for Cluster Excellence to collect your associated information prior to travel to or from those countries. When required, we will provide this information to the relevant customs and immigration authorities. We may also disclose your personal data to government authorities if applicable law requires disclosure.
8. Your rights
8.1 You may contact our Privacy Officer (please see below) to exercise any of the rights you are granted under applicable data protection laws, which includes (1) the right to access your data, (2) to rectify them, (3) to erase them, (4) to restrict the processing of your data, (5) the right to data portability and (6) the right to object to processing.
1. Right to access
You may ask us whether or not we process any of your personal data and, if so, receive access to that data in the form of a copy. When complying with an access request, we will also provide you with additional information, such as the purposes of the processing, the categories of personal data concerned as well as any other information necessary for you to exercise the essence of this right.
2. Right to rectification
You have the right to have your data rectified in case of inaccuracy or incompleteness. Upon request, we will correct inaccurate personal data about you and, taking into account the purposes of the processing, complete incomplete personal data, which may include the provision of a supplementary statement.
3. Right to erasure
You also have the right to have your personal data erased, which means the deletion of your data by us and, where possible, any other controller to whom your data has previously been made public by us. Erasure of your personal data only finds place in certain cases, prescribed by law and listed under article 17 of the General Data Protection Regulation (GDPR). This includes situations where your personal data are no longer necessary in relation to the initial purposes for which they were processed as well as situations where they were processed unlawfully. Due to the way we maintain certain services, it may take some time before backup copies are erased.
4. Right to restriction of processing
You have the right to obtain the restriction of the processing of your personal data, which means that we suspend the processing of your data for a certain period of time. Circumstances which may give rise to this right include situations where the accuracy of your personal data was contested but some time is needed for us to verify their (in)accuracy. This right does not prevent us from continuing to store your personal data. We will inform you before the restriction is lifted.
5. Right to data portability
Your right to data portability entails that you may request us to provide you with your personal data in a structured, commonly used and machine-readable format and to have such data transmitted directly to another controller, where technically feasible. Upon request and where this is technically feasible we will transmit your personal data directly to the other controller.
6. Right to object
You also have the right to object to the processing of your personal data, which means you may request us to no longer process your personal data. This only applies in case the ‘legitimate interests’ ground (including profiling) constitutes the legal basis for processing (see ‘Legal basis’ above).
At any time and free of charge you can object to direct marketing purposes in case your personal data are processed for such purposes, which includes profiling purposes to the extent that it is related to such direct marketing. In case you exercise this right, we will no longer process your personal data for such purposes.
8.2 You may withdraw your consent at any time
You may withdraw your consent at any time by following the specific instructions in relation to the processing for which you provided your consent. For example, you may withdraw consent, by clicking the unsubscribe link in the email, adjusting your communication preferences in your account (if available) or by changing your smart phone settings (for mobile push notifications and location data). You may also contact the Privacy Officer of the European Foundation for Cluster Excellence.
8.4 When you would like to exercise your rights, all you have to do is send your request to the Data Protection Officer at the European Foundation for Cluster Excellence:
European Foundation for Cluster Excellence
Data Protection Officer
9. How we look after this policy