Privacy policy – Polymat

1.- WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?

Name: BASQUE CENTER FOR MACROMOLECULAR DESIGN AND ENGINEERING POLYMAT FUNDAZIOA

CIF/NIF: G75067454

Registered Office: Avda. Tolosa 72 , 20018 San Sebastián (Gipuzkoa)

Registered in the Register of Foundations of the Department of Justice of the Basque Government with number F 336

Telephone: 943506061

Email: info@polymat.eu

2.- FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?

In accordance with the provisions of EU Regulation 679/2016 and Organic Law 3/2018 of December 5, on the protection of personal data and guarantee of digital rights, we inform you that the personal data you provide to us and those generated during the development of our relationship with you are processed for the following purposes:

1. Data provided through contact forms:

Manage, process and respond to your requests, applications, incidents or inquiries.
The offering of products and services.
To analyze the use of the Website and to check the preferences and behaviors of users.

2. Data provided for participation in personnel selection processes or spontaneous applications:

Evaluate your candidacy in personnel selections

3. Data provided through the ethics channel:

Manage, process, send and follow up on complaints or claims submitted
Contact the user when necessary
To analyze the use of the Website and to check the preferences and behaviors of users.

4. Data provided for sending the Newsletter:

Manage newsletter subscription and/or unsubscription.
The offering of products and services.
To analyze the use of the Website and to check the preferences and behaviors of users.

3. HOW LONG WILL WE KEEP YOUR DATA?

The personal data provided will be kept until its deletion is requested by the interested party, or whoever legally acts as their legal representative and this proceeds, and as long as they are necessary – including the need to keep them during the applicable limitation periods – or relevant for the purpose for which they were collected or recorded.

Data retention will be subject to the legal obligation of the Basque Center for Macromolecular Design and Engineering Polymat Foundation to retain it. Once these periods have expired, the data will be destroyed or erased, with the deletion, removal, or destruction being carried out in such a way that the information contained on the storage media is unrecoverable.

4.- WHAT ARE THE LEGITIMIZING GROUNDS FOR PROCESSING YOUR PERSONAL DATA?

The legal basis for processing your data is the consent you have given. This consent is obtained expressly and unequivocally by completing and, where applicable, submitting the paper or electronic documents and forms used to collect your data. All documents issued by the organization to collect data for various purposes include information clauses in accordance with data protection regulations, and consent is expressly given by the data subject through their signature or by submitting the forms available on the website.

Processing is also a cause of legitimation when it is necessary for the performance of a contract, or the provision of a service to the interested parties, in which they are a party, or for the application at their request of pre-contractual measures (art. 6.1.ayb GDPR).

It is also a cause of legitimacy to comply with the legal obligations to which he/she is bound as the responsible party and for the satisfaction of legitimate interests, provided that the interests or fundamental rights of the interested parties do not prevail over these.

5.- TO WHOM WILL YOUR PERSONAL DATA BE TRANSFERRED?

Your data will not be transferred to any entity without your consent except for legally required transfers; in this regard, your express consent will be requested for the transfer of your data to any other entity.

As a result of processing your data for the authorized purposes, your data may be shared with entities or individuals directly related to the BASQUE CENTER FOR MACROMOLECULAR DESIGN AND ENGINEERING POLYMAT FUNDAZIOA and the services it provides. Furthermore, your personal information will be made available to public authorities, judges, and courts to address any potential liabilities arising from the processing, provided that such disclosures are permitted by law.

Your data may also be shared with companies that provide us with services such as consulting, IT maintenance, marketing, training, or auditing. These entities only have access to the personal information necessary to perform these services, and are required by a “data processing agreement” to maintain confidentiality, not use the information for other purposes, and take measures to guarantee its integrity and availability.

International data transfers outside the European Union area or to entities that do not comply with the data protection standards established by EU regulation 679/2016 are not planned.

The personal data processed by BASQUE CENTER FOR MACROMOLECULAR DESIGN AND ENGINEERING POLYMAT FUNDAZIOA are provided by the interested party, or obtained from publicly accessible sources.

6. WHAT CATEGORIES OF DATA DO WE PROCESS?

The data processed is that which is necessary for the fulfillment of the purposes authorized by the user.

1. Data provided through contact forms:

Identifying information: name and surname.
Contact information: email address.
Navigation data.

2. Data provided for participation in personnel selection processes or spontaneous applications:

Identifying information: name and surname.
Contact information: email address.
Navigation data.
Any others included in the curriculum.

3. Data provided in communications to the ethics channel, if provided by the reporting person:

Identifying information: name and surname
Contact information: email address.
Navigation data.
Any other information provided by the complainant

4. Data provided for sending the Newsletter:

Identifying information: name and surname.
Contact information: email address.
Navigation data.

If the user provides data of other people, they declare that they have the consent of those people and undertake to provide them with the information contained in the Privacy Policy.

7. WHAT ARE YOUR RIGHTS?

Anyone has the right to obtain confirmation as to whether or not BASQUE CENTER FOR MACROMOLECULAR DESIGN AND ENGINEERING POLYMAT FUNDAZIOA processes personal data concerning him or her.

Interested parties have the right to access their personal data and obtain a copy of the personal data being processed, to update it, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. The Basque Center for Macromolecular Design and Engineering Polymat Foundation will cease processing the data, except for compelling legitimate grounds, or for the establishment, exercise, or defense of legal claims.

Also in certain circumstances, provided for in Article 18 GDPR, interested parties may request the restriction of the processing of their data, in which case BASQUE CENTER FOR MACROMOLECULAR DESIGN AND ENGINEERING POLYMAT FUNDAZIOA will process them, with the exception of their storage, with the consent of the interested party or for the establishment, exercise or defense of claims, or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a particular Member State.

Where applicable, as a consequence of the application of the right to erasure or objection to the processing of personal data in the online environment, interested parties have the right to be forgotten according to the jurisprudence of the Court of Justice of the EU.

Under the right to data portability, data subjects have the right to obtain the personal data concerning them in a structured, commonly used and machine-readable format and transmit it to another controller.

Every interested person has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, except for the exceptions provided for in Article 22.1 GDPR.

The data subject has the right to erasure of their data, either because the purpose for which it was collected or processed no longer exists, because consent has been withdrawn when consent is the basis for processing, or for any of the other reasons set out in Article 17 of the GDPR. Erasure will be carried out by performing a high-level deletion of the data stored on automated media and by physically destroying the data stored on non-automated media.

8.- HOW CAN RIGHTS BE EXERCISED?

Send a written request to the addresses indicated in the heading, specifying the right being requested. Occasionally, and in order to verify the applicant’s identity, you may be asked to present your national identity document or other equivalent identification.

9.- WHAT COMPLAINT CHANNELS EXIST?

If you believe that your rights have not been properly addressed, you have the right to file a complaint with the Spanish Data Protection Agency, whose contact details are: Telephone: 901 100 099 91.266.35.17 Postal Address: C/ Jorge Juan, 6 Madrid.

LAST UPDATE: 30/04/2026