The Center - Polymat

1.- WHO IS THE DATA CONTROLLER?

Entity Name: BASQUE CENTER FOR MACROMOLECULAR DESIGN AND ENGINEERING POLYMAT FUNDAZIOA
Tax ID (C.I.F./N.I.F.): G75067454
Registered Office: Avda. Tolosa 72, 20018 San Sebastián (Gipuzkoa)
Registry: Registered in the Registry of Foundations of the Department of Justice of the Basque Government under number F 336
Telephone: 948506061
Email: info@polymat.eu

2.- FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?

In accordance with the provisions of EU Regulation 679/2016 (GDPR) and Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights, we inform you that the personal data you provide us, as well as the data generated during the course of our relationship with you, are processed for the following purposes:

2.1. Data provided through contact forms:

To manage, process, and respond to your requests, applications, incidents, or queries.
To offer products and services.
To conduct analyses regarding the use of the Website and to determine user preferences and behaviors.

2.2. Data provided to participate in personnel selection processes or spontaneous applications:

To evaluate your candidacy in personnel selection processes.

2.3. Data provided for the ethics channel:

To manage, process, submit, and follow up on the reports or complaints filed.
To contact the user when necessary.
To conduct analyses regarding the use of the Website and to determine user preferences and behaviors.

2.4. Data provided for Newsletter subscriptions:

To manage the subscription and/or unsubscription to the Newsletter.
To offer products and services.
To conduct analyses regarding the use of the Website and to determine user preferences and behaviors.

3.- HOW LONG WILL WE KEEP YOUR DATA?

The personal data provided will be retained as long as its deletion is not requested by the data subject, or by their legal representative where applicable, and as long as it remains necessary—including the need to retain it during applicable statutory limitation periods—or relevant for the purpose for which it was collected or recorded.

Data retention will be subject to any legal obligations requiring the BASQUE CENTER FOR MACROMOLECULAR DESIGN AND ENGINEERING POLYMAT FUNDAZIOA to retain it. Once these periods expire, the data will be destroyed or deleted, ensuring the suppression, elimination, or destruction is carried out in such a way that the information on the media cannot be recovered.

4.- WHAT IS THE LAWFUL BASIS FOR PROCESSING YOUR PERSONAL DATA?

The legal basis for the processing of your data is the consent provided by the data subject. This is obtained expressly and unequivocally by completing and, where appropriate, submitting the paper or electronic documents and forms through which your data is collected. All entity documents used to collect data for various purposes include informational clauses in accordance with data protection regulations. Consent is expressly given via the data subject's signature or the submission of forms on the website.

Processing is also legitimized when it is necessary for the performance of a contract or the provision of a service to the data subjects to which they are a party, or in order to take steps at their request prior to entering into a contract (Art. 6.1.a and b GDPR).

Another lawful basis is compliance with legal obligations to which the data controller is subject, as well as the satisfaction of legitimate interests, provided these are not overridden by the interests or fundamental rights of the data subjects.

5.- TO WHICH RECIPIENTS WILL YOUR PERSONAL DATA BE DISCLOSED?

Your data will not be transferred to any entity without your consent, except for legally mandated disclosures. In all other cases, your express consent will be requested before transferring your data to any other entity.

As a result of managing the authorized purposes, your data may be communicated to entities or persons directly related to the BASQUE CENTER FOR MACROMOLECULAR DESIGN AND ENGINEERING POLYMAT FUNDAZIOA and the services it provides. Likewise, your personal information will be made available to Public Administrations, Judges, and Courts to address potential liabilities arising from the processing, provided these disclosures are supported by law.

Your data may also be disclosed to companies that provide us with consulting, IT maintenance, marketing, training, or auditing services. These entities only have access to the personal information necessary to perform these services. They are bound by a "data processing agreement" requiring them to maintain confidentiality, prohibiting them from using the information for other purposes, and obligating them to adopt measures that guarantee data integrity and availability.

There are no planned international data transfers outside the European Union or to entities that do not comply with the data protection standards established by EU Regulation 679/2016.

The personal data processed by the BASQUE CENTER FOR MACROMOLECULAR DESIGN AND ENGINEERING POLYMAT FUNDAZIOA is provided directly by the data subject or obtained from publicly accessible sources.

6.- WHAT CATEGORIES OF DATA DO WE PROCESS?

The data processed are strictly those necessary to fulfill the purposes authorized by the user.

6.1. Data provided through contact forms:

Identification data: name and surname.
Contact data: email address.
Browsing data.

6.2. Data provided to participate in personnel selection processes or spontaneous applications:

Identification data: name and surname.
Contact data: email address.
Browsing data.
Any other data provided in the curriculum vitae (CV).

6.3. Data provided in communications to the ethics channel, if provided by the reporting party:

Identification data: name and surname.
Contact data: email address.
Browsing data.
Any other data provided by the reporting party.

6.4. Data provided for Newsletter subscriptions:

Identification data: name and surname.
Contact data: email address.
Browsing data.

If the user provides data belonging to third parties, they declare that they have obtained their consent and undertake to convey the information contained in this Privacy Policy to them.

7.- WHAT ARE YOUR RIGHTS?

Anyone has the right to obtain confirmation as to whether or not the BASQUE CENTER FOR MACROMOLECULAR DESIGN AND ENGINEERING POLYMAT FUNDAZIOA processes personal data concerning them.

Data subjects have the right to access their personal data and obtain a copy of the data undergoing processing, to update it, and to request the rectification of inaccurate data or, where appropriate, request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. The BASQUE CENTER FOR MACROMOLECULAR DESIGN AND ENGINEERING POLYMAT FUNDAZIOA will cease to process the data, except for compelling legitimate grounds, or the exercise or defense of potential legal claims.

Also, in certain circumstances defined in Article 18 of the GDPR, data subjects may request the restriction of the processing of their data. In this case, the BASQUE CENTER FOR MACROMOLECULAR DESIGN AND ENGINEERING POLYMAT FUNDAZIOA will only process the data, except for storage, with the data subject's consent, or for the formulation, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of significant public interest to the Union or a Member State.

If applicable, as a consequence of applying the right to erasure or objection to personal data processing in the online environment, data subjects have the right to be forgotten in accordance with the jurisprudence of the Court of Justice of the EU.

Under the right to data portability, data subjects have the right to receive the personal data concerning them in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, except for the exceptions provided in Art. 22.1 GDPR.

The data subject has the right to the erasure of their data due to the disappearance of the purpose that justified its processing or collection, the revocation of consent when this is the lawful basis for processing, or any other reasons outlined in Article 17 of the GDPR. Erasure will be carried out via a high-level wipe of the data on automated media and the physical destruction of non-automated media.

8.- HOW CAN RIGHTS BE EXERCISED?

By sending a written request to the addresses indicated in the heading (Section 1), specifying the right you wish to exercise. In some cases, to verify the identity of the applicant, we may request the presentation of an ID card (DNI) or another equivalent identifying document.

9.- WHAT ARE THE CHANNELS FOR COMPLAINTS?

If you believe your rights have not been adequately addressed, you have the right to file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos). Their contact details are:

Telephones: 901 100 099 / 91 266 35 17
Postal Address: C/ Jorge Juan, 6. 28001 - Madrid.

LAST UPDATED: 31/01/2026