Privacy Policy

PRIVACY POLICY

This Privacy Policy describes the processing of your personal data carried out by LAUNCH IN BARCELONA S.L. (hereinafter, “the Data Controller”) in its capacity as the Data Controller of the data you provide through the form included in the following link: www.globalstemwomen.org

In this regard, LAUNCH IN BARCELONA S.L. is established as the Data Controller, with the following main responsibilities:

WHO IS RESPONSIBLE FOR DATA PROCESSING?

Entity: LAUNCH IN BARCELONA S.L. (hereinafter, “LAUNCH IN BARCELONA”)
CIF (Tax ID): B66961400
Address: Avinguda de les Bases de Manresa, 138, 08242, Manresa
Phone: +34 93 115 90 50
Email: info@globalstemwomen.org

WHAT PERSONAL DATA DO WE PROCESS?

Personal data you provide us:

Specifically, the Controller will process the information provided through the form, which includes your full name, email address, and telephone number.

Personal data we collect:

The Website uses cookies (and/or similar technologies). Depending on your cookie settings, the Controller may collect and process personal data.

In general, we collect, and store limited personal information and aggregate anonymous statistics from all users who visit our websites, whether you actively provide this information to us or are simply browsing. The data we collect may include the Internet Protocol (IP) address of your device, your browser type, operating system, date and time of access, the Internet address of the website from which you accessed our site, and information about how you interact with our website.

For more information on the use and configuration of cookies (and/or similar technologies), please refer to our Cookie Policy.

FOR WHAT PURPOSES?

The Controller will process your personal data for the following purposes:

On behalf of LAUNCH IN BARCELONA, its responsibilities shall include responding to user requests, inquiries, and petitions; sending commercial communications about activities and services related to Global STEM Women; as well as conducting statistical analysis and creating profiles based on your browsing habits. In accordance with the above, the purposes for which your data will be processed are as follows:

To respond to your requests, inquiries, and petitions that may arise from your involvement in the implementation of the Collaboration.
If you subscribe and do not withdraw your consent, to send you commercial communications related to the activities, products, services, and promotions of LAUNCH IN BARCELONA, through any means, including electronic means, without this implying the communication of your data to third parties.
If you give your consent, to communicate your data to LAUNCH IN BARCELONA for the purpose of sending commercial communications related to the activities, products, services, and promotions of Global STEM Women and LAUNCH IN BARCELONA, through any means, including electronic means, without this implying the communication of your data to third parties.
Where applicable, and depending on your cookie settings on the Website, to carry out statistical analysis and create profiles based on your browsing habits.

LEGAL BASIS

The legal bases for the processing of your personal data, according to the purposes described above, are as follows:

On behalf of LAUNCH IN BARCELONA:

The performance of a contract or the adoption of pre-contractual measures to respond to inquiries and requests that may arise from the implementation of the Collaboration.
Your explicit consent, for sending you commercial communications related to the activities, products, services, and promotions of LAUNCH IN BARCELONA.
Your explicit consent, for the communication of your data to LAUNCH IN BARCELONA for the purpose of sending you commercial communications related to the activities, products, services, and promotions of Global STEM Women and Launch in Barcelona, S.L.
Where applicable, your consent to carry out statistical analyses and to create profiles based on your browsing habits.

WHO DO WE SHARE YOUR PERSONAL DATA WITH?

As a rule, the Controller will not disclose your personal data to third parties, except in the following cases:

To competent authorities and bodies, courts, tribunals, or any other third parties legally authorized under applicable regulations.
To the company LAUNCH IN BARCELONA S.L., for the purpose of sending commercial communications related to Global STEM Women and Launch in Barcelona S.L.

Therefore, depending on the user’s location, data transfers to other countries may occur. In such cases, your personal data may be transferred internationally to third parties located outside the European Economic Area (EEA), provided that the Controller has the authority to do so and subject to the appropriate safeguards set forth in Articles 44 to 50 of the GDPR.

Such third parties will only have access to the data to carry out their services on behalf of the Controller, under a duty of confidentiality, always following the Controller’s instructions, and shall not use the data for their own purposes or for unauthorized ends.

In any case, the appropriate safeguards may include, among others:

Adequacy Decision: A declaration by the European Commission that a non-EU country offers a level of data protection that is adequate and equivalent to that provided under European data protection legislation, thereby allowing for the international transfer of personal data to a third party established in such a country outside the EU;
Binding Corporate Rules (BCRs): Applicable to corporate groups or groups of undertakings engaged in a joint economic activity, allowing the flow of personal data based on self-regulation that is accepted and adopted by each of the signatory entities;
Standard Contractual Clauses (SCCs): A mechanism signed between the exporter of personal data from any EEA country and a third country. This contractual agreement follows a model approved and published by the European Commission and is aligned with the provisions of the GDPR;
Code of conduct or a certification mechanism, together with binding and enforceable commitments undertaken by the recipient regarding the implementation of appropriate safeguards for the protection of the transferred data;
In the absence of the above, your personal data may be exceptionally transferred to a third country or international organization based on any of the mechanisms recognized by applicable data protection legislation.

The Controller, in order of preference, will carry out international data transfers under the following safeguards:

Safeguard	Criterion Used by the Controller
Adequacy Decision issued by the European Commission	This is the Controller’s preferred safeguard. You can find the list of countries subject to an adequacy decision here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en
Binding Corporate Rules (BCRs)	In the absence of an Adequacy Decision, this is the Controller’s preferred safeguard to request from the importer of the personal data. The list of entities with approved BCRs is available here: https://edpb.europa.eu/our-work-tools/accountability-tools/bcr_en?page=1
Standard Contractual Clauses (SCCs)	As a secondary safeguard, in the absence of the above, we will enter into and/or request a signed version of the SCCs from the importer of personal data, in alignment with the models provided by the European Commission, available here: https://eur-lex.europa.eu/legal-content/ES/ALL/?uri=CELEX%3A32021D0914

HOW LONG DO WE RETAIN YOUR DATA?

The Controller will retain your personal data for as long as necessary to fulfill the purposes described above (unless you request their erasure or object to their processing using the means indicated in the “YOUR RIGHTS” section). Once the data is no longer needed for the purposes for which it was collected, it will be duly blocked for the duration of the legal limitation periods, according to the applicable laws, to address potential future liabilities.

Once these limitation periods have expired, your personal data will be permanently deleted.

YOUR RIGHTS

The Controller guarantees that you may exercise the following rights at any time with respect to the processing of your personal data. These rights are inherent to each data subject and are therefore inalienable:

Right of access: The right to access the personal data being processed by the Controller, in accordance with Article 15 of the GDPR.
Right to rectification: The right to request that the Controller rectify specific personal data, as established in Article 16 of the GDPR.
Right to object: The right to object to processing activities based on consent or legitimate interest (including, but not limited to, receiving commercial communications), in accordance with Article 21.2 of the GDPR. If processing is based on legitimate interest, the data subject may request a balancing test report conducted by the Controller. In cases where processing is for the purpose of sending commercial information (either from the Controller or third parties), the data subject may voluntarily and free of charge opt out using advertising exclusion mechanisms (more information at https://www.listarobinson.es/).
Right to erasure: The right to request that the Controller erase all or part of your personal data, in accordance with Article 17 of the GDPR. Please note that while a commercial and/or contractual relationship remains in force, certain personal data must be processed to fulfil the contract, and therefore we may not be able to delete, block, or cancel such data, as doing so would prevent us from fulfilling our obligations under the agreement.

Right to restriction of processing: The right to obtain from the Controller the restriction of the processing of your personal data, provided that one of the conditions outlined in Article 18 of the GDPR is met.
Right to data portability: The right to receive the personal data you have provided to the Controller in a structured, commonly used, and machine-readable format, and to transmit it to another controller (or to have it directly transmitted to the new controller, where technically feasible), in accordance with Article 20 of the GDPR.
Right to withdraw consent: The right to withdraw the consent you have given for processing activities based on your consent, as described in the section on “processing based on the data subject’s consent,” without retroactive effect, in accordance with Article 7.3 of the GDPR.
Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or significantly affects you. The Controller informs the data subject that although some decisions may be based on automated systems, these decisions either: (i) do not produce legal or similarly significant effects, or (ii) are not made solely through automated means.

We will respond to your request as soon as possible and, in any case, within the legally established timeframe. You may also withdraw your consent at any time by sending a written communication to the Controller at the following email address:

LAUNCH IN BARCELONA, S.L.: To manage data subject requests related to the processing of data for the management and development of the Collaboration, and to handle the withdrawal of consent for receiving commercial communications from LAUNCH IN BARCELONA S.L., the following email address is available: info@globalstemwomen.org

In the event that we fail to comply with our data protection obligations, you have the right to file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) at www.aepd.es.

Lastly, if you provide data belonging to third parties, you declare that you have obtained their consent and commit to informing them of the content of this Privacy Policy before sharing their personal data, thereby exempting the Controller from any liability. In any case, the Controller may carry out periodic verifications to confirm this and will adopt the appropriate due diligence measures in accordance with applicable regulations.

UPDATES
This Policy may be updated periodically to reflect changes in our processing of personal data. We will post a prominent notice on the Site to inform you of any significant changes to our Policy and will indicate at the bottom of the Policy the date it was last updated.