Hegoa, Institute for International Cooperation and Development Studies, is an organization in which transparency of information is essential to establish a relationship of trust with the people involved in our project, as well as with our suppliers and clients. The protection of personal data of those who trust us is of vital importance, which is why, through this Privacy and Data Protection Policy, we aim to inform you how we collect and process or use such data.

Hegoa, Institute for International Cooperation and Development Studies, is an organization in which transparency of information is essential to establish a relationship of trust with the people involved in our project, as well as with our suppliers and clients. The protection of personal data of those who trust us is of vital importance, which is why, through this Privacy and Data Protection Policy, we aim to inform you how we collect and process or use such data.

This Policy will always apply when data is provided to Hegoa, Institute for International Cooperation and Development Studies, which will be the data controller, through any of the contact or subscription forms where personal data is collected (name, email, etc.).

OUR COMMITMENTS

• To respect the privacy of our users and to process their personal data only with their consent.
• To process only the personal data strictly necessary to provide the requested service, and to handle it securely and confidentially, taking the necessary measures to prevent unauthorized access and misuse.
• Not to use personal data for purposes for which prior consent has not been obtained.
• Not to disclose or share personal data with third parties.
• To retain personal data only for the time strictly necessary for the specific purpose for which it was provided.

WHAT PERSONAL DATA WE USE

Through our website, we may collect personal data for the following purposes:

• Request for information by the user

It is important that users are aware of the data they provide and the purpose for which they do so, because by submitting it, they are agreeing to our collection, storage, and use of the data for the requested purpose. Users may withdraw their consent at any time through the appropriate channels, with the data subject’s consent being the legal basis and authorization for the processing of their personal data.

ACCURACY AND TRUTHFULNESS OF DATA

By providing the requested data in the forms, the user is solely responsible for the truthfulness of the submitted information, guaranteeing and being accountable for the accuracy, validity, and authenticity of the personal data provided, and committing to keep it properly updated.

DATA SECURITY AND STORAGE

We will retain the data for the time strictly necessary to provide the requested service and for as long as the data subject does not request its deletion. We adopt appropriate technical and organizational measures against unauthorized or unlawful processing, and against accidental loss, destruction, or damage, doing everything possible to protect and keep the data secure.

WHAT PERSONAL DATA WE SHARE WITH THIRD PARTIES

No data disclosures are foreseen unless there is a legal obligation to do so. There are no planned international data transfers.

WHAT RIGHTS YOU HAVE REGARDING YOUR PERSONAL DATA

Once your personal data is provided, you have the right to:

• Right of access: You may ask us what personal data we are processing and even request a copy of it.
• Right to rectification: You may ask us to rectify inaccurate personal data or to complete incomplete data, including by means of an additional statement.
• Right of erasure (right to be forgotten): You may request that we erase your personal data when: it is no longer necessary for the purposes for which it was collected, you withdraw your consent, it has been processed unlawfully, or to comply with a legal obligation.
• Right to restriction of processing: You may request that we restrict the processing of your data, in which case we will only retain it for the exercise or defense of claims.
• Right to data portability: You may request that we return your personal data (to you or to a third party designated by you) in a structured, commonly used, and machine-readable format.
• Right to object: You may object to the processing of your data if such processing is based on the legitimate interest of the data controller or is for advertising purposes.

At any time, you may exercise these rights by submitting a written request along with proof of identity to Hegoa (Lehendakari Aguirre, 81, Zubiria Etxea, 48015, Bilbao, Bizkaia), or by email: hegoa@ehu.eus.

You may also lodge a complaint with the Spanish Data Protection Agency. For more information about the rights you can exercise and to request form templates for exercising your rights, please visit the Spanish Data Protection Agency's website at www.aepd.es.