Privacy Policy and Legal Notice

The use of the website by a third party grants them the status of user, and implies the full acceptance of all the terms established in this Privacy Policy by the user.

The user undertakes to:

• Use the website, its content, and services in accordance with the law, this Privacy Policy, good practices, and public order.
• Not use the website or the services provided through it for unlawful purposes or effects, or in ways contrary to the content of this Privacy Policy, that infringe upon the interests or rights of third parties, or that may in any way damage, disable, or deteriorate the website itself or its services, or prevent other users from satisfactorily using the website.
• Not destroy, alter, disable, or otherwise damage the data, programs, electronic documents, or other items found on this website.
• Not hinder other users’ access to the services offered by this website through the massive consumption of the computing resources through which the Ace Foundation provides the service, nor carry out actions that damage, interrupt, or generate errors in the aforementioned systems.
• Not introduce programs, viruses, macros, applets, controls of any kind, or any other logical device or sequence of characters that cause or may cause any type of alteration to the computer systems of the Ace Foundation or third parties, or that may infringe intellectual or industrial property rights.
• Not misuse information, messages, graphics, drawings, sound and/or image files, photographs, recordings, software, and, in general, any type of material accessible through this website or the services it offers.

The Ace Foundation therefore also disclaims any liability arising from any damages or losses that any visitor to the website may suffer to their technological resources (computer or telematic), as a result of any of the circumstances or events mentioned in the previous paragraph. Likewise, the Ace Foundation does not guarantee that the website and the server are free of viruses and shall not be held liable for any damages caused by access to the website or by the inability to access it.

The Ace Foundation is not responsible for the information that may be obtained through links to external systems from this website.

The intellectual and industrial property rights of the website, its source code, databases, and the various elements it contains are owned by the Ace Foundation, which holds the exclusive right to exploit the rights of the website itself and, in particular, the rights of reproduction, distribution, public communication, maintenance, and transformation.

This website and all its content, including texts, documents, photographs, drawings, graphic representations, databases, computer programs, as well as logos, trademarks, trade names, and other distinctive signs, are the property of the Ace Foundation or of third parties who have authorized their use. All rights reserved.

Liability of the Ace Foundation for the Use of the Website

The user is solely responsible for any infringements they may commit and for any damages they may cause or suffer as a result of their use of this website, and the Ace Foundation shall be exempt from any liability that may arise from the user’s actions.

The user shall be solely responsible for any claim or legal action, whether judicial or extrajudicial, initiated by third parties against the Ace Foundation based on the user’s use of the website. Where applicable, the user shall assume all costs and compensation claimed from the Ace Foundation as a result of claims or legal actions attributable to the user.

Liability of the Ace Foundation for the Operation of the Website

The Ace Foundation excludes any liability that may arise from interference, omissions, interruptions, unauthorized intrusions, telecommunications failures, computer viruses, telephone breakdowns, or disconnections in the operational functioning of the electronic system, caused by factors beyond the control of the Ace Foundation.

Liability of the Ace Foundation for Links from the Website

The Ace Foundation disclaims all liability with respect to information (content) or risks (technical, moral, or economic damages) that may exist outside the website and that may be accessed via links from it, as the links provided are solely intended to inform the user of the existence of other sources of information on a specific topic.

Data Controller

The data controller of the data subject’s personal data is the Ace Foundation, Institut Català de Neurociències Aplicades, with Tax ID G-60805215 (“Ace Foundation”). The contact details of the data controller are as follows:

• Postal address: C / Gran Via de Carles III, 85 bis, 2nd Floor – 08028 Barcelona
• Telephone: +34 93 430 47 20
• Email address: ace@fundacioace.org

The data subject is hereby informed that the Ace Foundation has appointed a Data Protection Officer (“DPO”), to whom they may address any matter relating to the processing of their personal data. The data subject may contact the Data Protection Officer using the following contact details:

• Postal address: C / Gran Via de Carles III, 85 bis, 2nd Floor – 08028 Barcelona
• Telephone: +34 93 430 47 20
• Email address: dpd@fundacioace.org

For what purpose do we process your personal data?

The data subject’s personal data are processed for the purposes and on the legal bases detailed below:

Processing based on your consent:

We may process your personal data for the purposes for which the data subject has given their explicit consent (e.g., to manage attendance at events organized by the Ace Foundation; to offer and propose participation in, among others, studies related to neurodegenerative diseases; to carry out clinical, scientific, social and/or genetic studies or biomedical research related to neurodegenerative diseases conducted by the Ace Foundation or by other institutions, entities, and organizations; to send information about the services, activities, and events carried out by the Ace Foundation, etc.).

Processing based on the performance of a contract:

We may process your personal data to manage pre-contractual relationships with the data subject or the entity they represent, and to manage, in general, the performance of a contractual relationship (e.g., contracts with suppliers, service contracts, provision of healthcare services, data and/or sample transfer agreements, clinical trials, etc.).

Processing based on legitimate interest:

We may process your personal data when there is a legitimate interest of the Ace Foundation in accordance with applicable regulations and provided that, following a prior assessment, our interest prevails over the rights and freedoms of the data subject.

Processing based on a legal obligation or public interest:

We may process your personal data when we are required to comply with certain legal obligations (e.g., tax reporting, fraud prevention, etc.) or when it is necessary for reasons of public interest (e.g., in the field of public health), in accordance with applicable law.

How long will we process and retain your data?

The personal data obtained from the data subject will be processed until the data subject withdraws their consent, or until the contractual or care relationship maintained with us has been terminated, or until the data subject objects to the processing. Thereafter, the personal data will be deleted. Notwithstanding the foregoing, the Ace Foundation may retain the personal data in a blocked form until the legally applicable limitation or retention periods have elapsed.

To whom may we disclose your data?

The data subject’s personal data may be disclosed to other medical institutions, both national and international, with which the Ace Foundation collaborates. Likewise, the personal data may be disclosed for research purposes related to neurodegenerative diseases to other institutions, mainly academic, university, and medical institutions, as well as, where applicable, biotechnological organizations, pharmaceutical companies, laboratories, service providers, etc., both nationally and internationally, within and outside the European Union.

In the event that your personal data are disclosed to such third parties, the disclosure will be carried out in a pseudonymized manner, that is, through the assignment of a code, without including information that could directly identify you (thereby removing data such as name and surname, address, and Social Security number). Additionally, when the disclosure involves the international transfer of your personal data to countries or organizations that do not have an adequacy decision adopted by the European Commission, the Ace Foundation will only disclose your personal data when the recipient has provided appropriate safeguards in accordance with applicable legislation and when data subjects have enforceable rights and effective legal remedies in matters of data protection. The data subject may request from the Ace Foundation, by contacting the DPO, confirmation and/or a copy of the safeguards adopted.

What are your rights in relation to the data you provide to us?

• Right of access: data subjects have the right to obtain confirmation as to whether or not we are processing personal data concerning them and, where that is the case, the right to access their personal data and information about their processing.
• Right to rectification and erasure: data subjects have the right to request the rectification of inaccurate data or, where applicable, to request erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
• Right to restriction of processing: in certain circumstances, the data subject shall have the right to request the restriction of the processing of their data, in which case we will only retain the data for the exercise or defense of legal claims.

In any of the above cases, the Ace Foundation will communicate any rectification or erasure of personal data, as well as any restriction of processing carried out, to each of the recipients to whom the personal data have been disclosed, unless this proves impossible or requires a disproportionate effort. If so requested by the data subject, they will be informed of such recipients.

• Right to data portability: The data subject shall have the right to receive the personal data they have provided to the Ace Foundation in a structured, commonly used, and machine-readable format, and to transmit those data to another controller when the processing is based on consent or on a contract and is carried out by automated means.
• Right to object: The data subject shall have the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them that is based on the public interest or the legitimate interest pursued by the Ace Foundation or a third party, including profiling, so that the Ace Foundation ceases processing the personal data, unless it can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.
• Automated individual decision-making: The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, unless such decision is necessary for the conclusion or performance of a contract with the Ace Foundation, is authorized by applicable European or national law, or is based on the data subject’s explicit consent.

The aforementioned rights of access, rectification, erasure, objection, portability, and restriction, as well as the right not to be subject to automated individual decision-making, may be exercised through the DPO (see the DPO’s contact details mentioned above).

Finally, the data subject shall have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es
https://sedeagpd.gob.es/sede-electronica-web/)
or with another competent supervisory authority.

How do we obtain your data?

The personal data processed by the Ace Foundation come from the data subject and/or from public or private healthcare institutions.

The categories of data processed are:

• Identification data.
• Postal or email addresses.
• Health data, especially protected (including data associated with biological samples).
• Protected sociological and demographic data (e.g., age, race).

For any dispute arising from the interpretation or enforcement of this Privacy Policy, Spanish law shall apply. Likewise, the Ace Foundation and the user, expressly waiving any other jurisdiction that may apply to them, submit to the courts and tribunals of the user’s place of residence or, if the user’s residence is outside Spain, to the courts and tribunals of the city of Barcelona.