Privacy Policy

I. PRIVACY POLICY AND DATA PROTECTION

In compliance with current legislation, the European Institute of Movement Science (hereinafter, the “Website”) undertakes to adopt the necessary technical and organizational measures, according to the appropriate level of security, to safeguard the risk inherent in the personal data collected.

Laws incorporated into this Privacy Policy

This Privacy Policy is adapted to current Spanish and European regulations on the protection of personal data on the Internet. In particular, it complies with the following regulations:

Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

Spanish Organic Law 3/2018 of December 5 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD-GDD).

Royal Decree 1720/2007 of December 21, approving the Regulations for the implementation of Organic Law 15/1999 of December 13 on the Protection of Personal Data (RDLOPD).

Law 34/2002 of July 11 on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the Data Controller

The Data Controller responsible for the personal data collected on the Website is European Institute of Movement Science (hereinafter, “Data Controller”).

Address: Calle Azagador 88, 28232, Madrid

Phone: +34 633 788 048

Email: [email protected]

Registration of Personal Data

In compliance with GDPR and LOPD-GDD, we inform you that the personal data collected through the Website’s forms will be incorporated into our files and processed in order to facilitate, expedite, and fulfill the commitments established between the European Institute of Movement Science and the User, or to maintain the relationship established through forms completed by the User, or to respond to a request or inquiry.

Unless exempt under Article 30.5 GDPR, a record of processing activities is maintained, specifying, according to their purpose, the processing activities carried out and other circumstances established by GDPR.

Principles governing the processing of personal data

The processing of personal data shall be subject to the following principles, as provided in Article 5 of GDPR and Articles 4 and subsequent provisions of Spanish Organic Law 3/2018:

Lawfulness, fairness, and transparency: User consent will always be required following transparent information about the purposes of data collection.

Purpose limitation: Personal data will be collected for specific, explicit, and legitimate purposes.

Data minimization: Only the personal data strictly necessary for the stated purposes will be collected.

Accuracy: Personal data must be accurate and kept up to date.

Storage limitation: Personal data will only be retained as long as necessary for the purposes of processing.

Integrity and confidentiality: Data will be processed securely to ensure confidentiality.

Accountability: The Data Controller will be responsible for ensuring compliance with the above principles.

Categories of personal data

The only categories of data processed are identifying data. No special categories of personal data, within the meaning of Article 9 of GDPR, are processed.

Legal basis for processing

The legal basis for processing personal data is consent. The European Institute of Movement Science undertakes to obtain the explicit and verifiable consent of the User for the processing of personal data for one or more specific purposes.

The User has the right to withdraw consent at any time, as easily as it was granted. Withdrawal of consent shall not affect the lawful use of the Website.

Purposes of processing

Personal data are collected and managed by the Website in order to facilitate, expedite, and fulfill commitments established between the Website and the User, or to maintain the relationship established in forms completed by the User, or to respond to requests or inquiries.

Additionally, data may be used for commercial purposes, customization, operational and statistical purposes, and activities related to the corporate purpose of the European Institute of Movement Science, including extraction, data storage, and marketing studies to tailor content to the User and improve quality, functionality, and browsing experience.

At the time personal data is obtained, the User will be informed of the specific purposes of processing.

Data retention period

Personal data will only be retained for the minimum time necessary for the purposes of processing, or until the User requests their erasure. The User will be informed of the retention period at the time of data collection, or of the criteria used to determine this period.

Recipients of personal data

Personal data will not be shared with third parties, unless otherwise stated at the time of collection.

Data of minors

In accordance with Articles 8 GDPR and 7 of Organic Law 3/2018, only individuals over 14 years of age may lawfully consent to the processing of personal data by the European Institute of Movement Science. For minors under 14, parental or guardian consent is required.

Data security and confidentiality

The Website uses SSL (Secure Socket Layer) encryption to ensure secure transmission of data. The Data Controller undertakes to adopt technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized access, or disclosure.

However, due to the nature of the Internet, the Website cannot guarantee absolute invulnerability. In the event of a security breach that may pose a high risk to the rights and freedoms of individuals, the User will be notified without undue delay in accordance with GDPR.

Personal data will be treated as confidential, and all staff or associates with access to the data are bound by legal or contractual confidentiality obligations.

User rights

In accordance with GDPR and Spanish Organic Law 3/2018, Users may exercise the following rights with respect to their personal data:

Right of access

Right to rectification

Right to erasure (“right to be forgotten”)

Right to restriction of processing

Right to data portability

Right to object

Right not to be subject to automated decision-making, including profiling

To exercise these rights, Users may send a written request with the reference “GDPR-www.evamartz.com” to:

Address: Calle Azagador 88, 28232, Madrid

Email: [email protected]

Requests must include identification details (name, surname, ID copy), the specific request, address for notifications, date, and signature.

Links to third-party websites

The Website may include hyperlinks to third-party websites not operated by the European Institute of Movement Science. Each third party is responsible for its own privacy policies and data practices.

Complaints to supervisory authorities

If the User believes that their data protection rights have been infringed, they may file a complaint with the relevant Data Protection Authority. In Spain, this is the Spanish Data Protection Agency (AEPD): https://www.aepd.es.

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

The User must read and accept this Privacy Policy before providing personal data. By using the Website, the User agrees to the terms of this Policy.

The European Institute of Movement Science reserves the right to update or modify this Privacy Policy at any time, either due to legal changes, case law, or guidance from the Spanish Data Protection Agency. Changes will not be explicitly notified to the User, who is advised to consult this page periodically.

This Privacy Policy was last updated to comply with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights.