Privacy Policy

In the MOVAVIA Project, the privacy and protection of your personal data are fundamental pillars for trust in the Data Space. Below, we detail the processing information in accordance with the EU General Data Protection Regulation (GDPR).

A. BASIC INFORMATION ON DATA PROCESSING RELATED TO THE WEBSITE AND THE MOVAVIA PROJECT

B. BASIC INFORMATION ON DISSEMINATION AND COMMUNICATION ACTIONS OF THE MOVAVIA PROJECT

C. BASIC INFORMATION FOR THE PURPOSE OF SENDING INFORMATIVE AND DISSEMINATION COMMUNICATIONS

1. Data controller

The data controller for personal data collected through this website is:

ITI is committed to compliance with current data protection regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (General Data Protection Regulation or GDPR), as well as applicable national legislation.

2. Purpose of processing

Personal data provided through this website will be processed for the following purposes:

• To manage and respond to enquiries, information requests or communications made through the contact channels available on the website.
• To provide information related to the MOVAVIA project, its activities, results, events, publications or initiatives linked to the Data Space.
• To ensure the correct operation, maintenance, security and continuous improvement of the website.
• To analyse navigation and use of the website through analytical or statistical tools, with the aim of improving user experience and optimising the content offered.
• To manage, where applicable, the sending of communications related to activities or initiatives linked to the project, provided there is an appropriate legal basis.
• To manage requests related to collaborations, participation in initiatives, demonstrations, pilots or activities linked to the MOVAVIA data ecosystem.

Personal data provided will be treated confidentially and solely for the purposes described in this Privacy Policy.

2.1 Mandatory or optional nature of the information provided

Users guarantee that the personal data provided through the forms or contact channels available on this website are truthful, accurate and kept up to date, and are responsible for communicating any modifications.

Fields identified as mandatory in the forms available on the website will be necessary to properly attend to requests made, manage enquiries or provide the services and information requested.

Refusal to provide data considered necessary may prevent proper attention to the request or the provision of certain services related to the MOVAVIA project.

The inclusion of data in the remaining fields is voluntary.

3. Legal basis for processing

The legal basis legitimising the processing of personal data depends on the specific purpose for which they are processed:

• The consent of the data subject, given when contacting ITI through forms, email or other available channels.
• The legitimate interest of ITI to ensure the security of the website, prevent misuse and improve the services and content offered.
• Compliance with legal obligations applicable.
• The execution of pre-contractual measures when the user requests information about participation, collaboration or initiatives related to the MOVAVIA project.

When processing is based on consent, it may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4. Data retention

Personal data will be retained for the time strictly necessary to fulfil the purpose for which they were collected.

Subsequently, data may be kept duly blocked for the legally established periods to address possible liabilities arising from the processing or to comply with legal obligations.

In the case of data processed for analytical or statistical purposes, these may be retained in aggregated or anonymised form.

In the case of subscription or receipt of informative communications, data will be processed until the data subject withdraws their consent or requests to unsubscribe from said communications.

5. Data recipients

As a general rule, personal data will not be disclosed to third parties, except where required by law or when necessary for the provision of services related to the operation of the website or the development of the MOVAVIA project.

However, certain technology providers may access data as data processors, exclusively to provide services necessary for the operation of the website, hosting, maintenance, technical support, analytics or electronic communications.

These providers will act at all times following ITI's instructions and under the guarantees established by current data protection regulations.

Likewise, data may be disclosed to Public Administrations, Law Enforcement, judges and courts where there is a legal obligation.

In the event that the MOVAVIA project is developed in collaboration with other participating or funding entities, certain data may be shared when strictly necessary for the management, coordination or justification of the project, always in accordance with applicable regulations.

6. International transfers

In the event of using tools or technology providers located outside the European Economic Area, ITI will ensure that such international data transfers are carried out in accordance with the appropriate safeguards provided for in the General Data Protection Regulation.

In particular, the necessary measures will be adopted to ensure a level of protection equivalent to that required by European regulations, including standard contractual clauses approved by the European Commission or other legally authorised mechanisms.

7. User rights

Data subjects may exercise, at any time, the following rights in relation to their personal data:

• Right of access: To know what personal data is being processed.
• Right to rectification: To correct any inaccurate or incomplete data.
• Right to erasure: To request the deletion of data when it is no longer necessary.
• Right to object: To object to processing on legitimate personal grounds.
• Right to restriction of processing: To request the suspension of processing in certain circumstances.
• Right to data portability: To obtain data in a structured format for transfer to another entity.
• Right to withdraw consent previously given at any time.

To exercise these rights, users may send a request to the email address indicated in this Privacy Policy or to the Data Protection Officer at dpo@iti.es. The request must adequately identify the applicant and indicate the right they wish to exercise.

Data subjects also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) through its website: www.aepd.es.

8. Information Security

ITI adopts appropriate technical and organisational measures to ensure the security, confidentiality, integrity and availability of personal data, preventing their alteration, loss, unauthorised processing or access.

In accordance with the provisions of Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), ITI guarantees that the processing of personal data is carried out in a lawful, fair and transparent manner, in accordance with the principles established in current regulations.

ITI has also implemented the necessary policies, procedures and security measures to protect the rights and freedoms of users, applying the appropriate technical and organisational measures according to the nature of the data processed and the associated risks.

9. Amendments

ITI reserves the right to modify this Privacy Policy to adapt it to legislative, jurisprudential or technical changes, as well as to modifications in the operation of the website or in the processing carried out.

In the event of significant changes, these will be communicated to users through the usual channels or through the website itself.