Asociación Consorcio Red Alastria, domiciled at C/ Alberto Aguilera, 23 (Universidad Pontificia de Comillas-ICADE), 28015-Madrid, registered in Section One of the National Register of Associations under number 616096, and telephone +34 683 49 37 48 ("Alastria" or the "Association") is responsible for the processing of personal data processed in respect of users (the "Users") who visit the ISBE website (the "Website" or the "Website") for the purposes described below. This is without prejudice to other processing that may be carried out, as detailed in this Privacy Policy. In the latter, you are informed about how the Association will use your personal data and about your rights under the General Data Protection Regulation ("GDPR").

If you have any questions regarding the processing of your personal data, please contact Alastria at the following address hello@redisbe.com.

Description of the information contained in the privacy policy

In this privacy policy you will find a table identifying, for each of the different data processing operations carried out by the Association, the following information:

• The purposes of the processing of your personal data, i.e. the reasons why the Association processes your personal data.
• The legal bases that allow the processing of your personal data by the Association for each of the purposes indicated.
• The possible transfer of your data to third parties, as well as the reason and legitimate basis for such transfer. In addition, the Association's data processors, i.e. service providers who need access to your personal data for the performance of their functions, may have access to your personal data. The service providers who access your personal data are generally in the information systems and technology sector.

We hereby inform you that you can request further information about the recipients of your data by sending an email to the address hello@redisbe.com, indicating the specific processing operation about whose recipients you would like information.

• The existence of potential international transfers of data outside the European Economic Area.

We inform you that you may request more detailed information regarding the international transfers that we carry out with your data, if applicable, and regarding the guarantees implemented for this purpose, by sending an email to the address hello@redisbe.com indicating the specific processing about whose recipients you would like information.

• The retention period for the data we process. We also inform you that your data will remain blocked for the purpose of legal, administrative or fiscal claims, for the periods of time that are applicable by virtue of the applicable legislation.

Personal data ("Data") is any information about an identified or identifiable natural person ("Data Subject"). The Data that Alastria processes comes from the information that you, as a User, provide when you fill in the forms that you will find on the Website or the registration forms for events, when you browse the Website, when you register as a partner of the ISBE project, through the Website and/or when you send us your queries or requests for information.

In each form, Alastria indicates with an asterisk the contact details it needs to be able to answer your query or request. Fields that are not marked as mandatory with an asterisk are completely optional. Only the Data necessary for each purpose is collected. Please note that if you do not provide the required information, Alastria may not be able to deal with your query or request or to manage the processing.

Please note that, as a User, it is your responsibility to provide truthful data and to keep this updated, so Alastria reserves the right to exclude from the services and/or cancel them for Users who provide false or incorrect data or without the proper authorization of the Interested Party, without prejudice to Alastria's right to exercise the corresponding legal actions.

Alastria will process your data for the following purposes:

A. Contact

If you contact Alastria through the channels provided for this purpose, by email or any other means made available to you, Alastria will process the contact data and details you provide in order to adequately deal with your queries or requests. It may also process your data to send you communications that may be of interest to you, if you have consented to this. The legal basis for this processing is consent

B. Website navigation

Through the use of cookies and other technologies, Alastria can measure and analyse browsing traffic, usability and your experience as a User on the Website statistically. The installation and use of cookies depends on your settings in both the cookie banner and your browser. The legal basis for this processing is consent.

C. Registration as a potential ISBE user

In the event that you register as a potential user of the ISBE network, through any channel made available to you (online, in person or by telephone), Alastria will use the contact, economic and/or financial data and, optionally, the personal characteristics data, to process the registration and manage the membership, which includes, among others, the possibility of contacting you through different means, manage the membership payments and comply with the legal obligations that apply to us or to you in this regard and offer you registrations, offers and additional information. legal basis: contractual performance.

D. Events

If you would like to take part in any event organised by Alastria for the promotion of the ISBE project or by third party partners of Alastria, you should do so through the online form available for this purpose. We will use your contact, economic and/or financial data and, optionally, your personaldata, in order to properly deal with your request and manage your registration and participation in such events, including the possibility of contacting you through different means and compliance with the legal obligations that apply to Alastria in this regard and the possibility of offering you registrations, offers, surveys and additional information. legal basis: consent and contractual performance.

E. Image capture at the event

The Association may capture the image, subject to the consent of the person concerned, during participation in the Event, as well as use it and, where appropriate, distribute it for internal and external communication, promotion and/or publicity purposes. The legal basis for this processing is consent.

F. Compliance with legal obligations

If necessary, Alastria may process your data in order to comply with the legal obligations that may be applicable. The legal basis for this processing is the fulfilment of a legal obligation.

G. Sending communications

If you have consented to this, the Association may use your data to send you communications about, for example, initiatives, events and activities that may be of interest to you.

Alastria may carry out the processing for the purposes described above on the basis of the following grounds of legitimacy:

• The legal basis for the processing of your data for registration to the Event and the sending of communications is the consent you have given through registration on the corresponding form, and compliance with legal obligations.
• The legal basis for the processing of your data in relation to the capture and use of your image is the consent you have given by registering for the Event.
• The legal basis for the processing of your data for contacting Alastria or sending commercial communications is the consent you have given by registering in the corresponding forms. In some cases, the processing of your Data when you contact Alastria may be covered by the execution of pre-contractual measures if these are necessary to deal with the query.
• The legal basis for the processing of your Data in relation to browsing the Website is the consent you give when you accept the installation of cookies, which you can revoke or configure at any time through the configuration panel. You can find more information about the use of cookies in the Cookie Policy.

Remember that you can revoke your consent at any time. You may also opt out of receiving further marketing communications in the manner indicated in the footer of each communication.

Your data will be kept for the period of time necessary for the purpose for which it was collected, and in particular:

A. In relation to the sending of communications, the Data will be processed until you revoke your consent, object to the processing and/or request the erasure of your Data, up to a maximum of two years.

B. In relation to the data you provide to Alastria to make enquiries or contact you, it will process the Data for as long as it is necessary to answer your enquiry or request, as well as, where appropriate, for the time necessary to deal with possible claims or enquiries on your part.

C. In relation to browsing data obtained through non-technical cookies, this will be processed for the time necessary for the purposes indicated, and in any case until you revoke your consent or, at the most, for a period of two (2) years from their collection.

D. In connection with the subscription to the Event your Data will be retained for a maximum of 1 month after the end of the Event.

E. In relation to images collected during the Event, they will be retained until you request their deletion. Please note that those already published and/or incorporated in promotional materials at the time of application may not be removed with retroactive effect.

F. In relation to the subscription to the ISBE newsletter, your Data will be retained until you revoke your consent.

"We inform you that you may exercise the following rights:

1. the right of access to your personal data in order to know which personal data is being processed and the processing operations carried out with this;
2. the right to rectify any inaccurate personal data;
3. the right to the deletion of your personal data, where this is possible and does not affect the proper conduct of the relationship with the Association;
4. the right to request the restriction of the processing of your personal data where the accuracy, lawfulness or necessity of the data processing is in doubt, and in all other cases provided for in the GDPR;
5. the right to object to the processing of your Personal Data, when the legal basis that enables us to process your Personal Data, as indicated in the table above, is based on a legitimate interest. The Association will stop processing your Data unless it has a compelling legitimate interest to do so or it is necessary for the defence of claims;
6. the right to withdraw your consent at any time; and
7. the right to the portability of your Data, when the legal basis that enables us to process your Data from those indicated in the table above is the existence of a contractual relationship or your consent.

To exercise these rights you must send a written request to hello@redisbe.com. The request must be duly signed by you, include your full name and address and indicate the rights you wish to exercise.

You will also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos | AEPD) if you consider that a breach of data protection legislation has been committed in relation to the processing of your personal data.

Your data may be communicated to service providers that help Alastria to carry out its activity, e.g. IT tools, technical support services, payment providers, marketing tools, etc. Alastria may also transfer the Data to companies in its group for internal management purposes, e.g. commercial purposes.

Some of the above-mentioned suppliers may have processing and/or support centres located outside the European Economic Area (EEA). Alastria guarantees that, when your Data leaves the EEA, the same level of protection will be maintained based on compliance with the provisions of the European Data Protection Regulation. In this regard, international transfers of Data will be carried out:

(i) To countries with an adequate level of protection as declared by the European Commission

(ii) On the basis of the provision of appropriate safeguards (standard contractual clauses or binding corporate rules), or

(iii) By virtue of authorisation by the competent supervisory authority or in other cases provided for in the regulations.

To receive more information about international transfers of Data or to obtain confirmation or a copy of the safeguards used, please contact Alastria at hello@redisbe.com.

In cases where it is necessary to comply with Alastria's legal obligations, the Data may be communicated to the Public Administration and the State Security Forces and Corps.

In the case of the profiles that Alastria maintains in the different social media networks linked from this Website, for example, through plugins or third party applications, your Data may be treated under other privacy policies of the owners of such social media networks.

The use of such connectors is voluntary. If you choose to use them, you will be authorising the communication of your personal data (IP address, browsing data) to the aforementioned social media networks and Alastria will not be responsible for the further processing that they may carry out using your data.

Alastria recommends you to view the terms and conditions of use of these platforms before interacting on social media with Alastria's profiles in these social media networks.

The social media profiles linked from this website have been created to make you more aware of ISBE's activities and to offer different communication channels for people interested in the project.

Alastria takes special care to ensure the security of your personal data. Your Data is stored in Alastria's information systems, where Alastria has adopted and implemented technical and organisational security measures to prevent any loss or unauthorised use by third parties, e.g. Alastria's web portals and the ISBE project www.redisbe.com use Https data encryption protocols.