Data protection policy
Privacy and personal data protection is a priority for us. In its role as data controller, the Vall d'Hebron University Hospital Foundation - Research Institute (hereinafter “VHIR”), with tax code G-60.594.009 and registered address at Passeig Vall d’Hebron 119-129, Edifici Mediterrània 2a Planta, 08035, Barcelona, e-mail firstname.lastname@example.org and telephone numbers (+34) 93 489 30 00 - 93 274 60 00, guarantees the protection and confidentiality of personal data provided through the pages of this website and processed in accordance with the terms set out in European General Data Protection Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 (GDPR), implementing the necessary and appropriate security measures for the type of personal data. Only data that is strictly necessary, appropriate and relevant to the purpose for which is it is collected will be requested and this will be processed legally, faithfully and transparently.
Aware of your concerns over how we use your personal data, we recognise the importance of protecting your privacy and allowing you to exercise your rights (access, rectification, portability, erasure, restriction of processing and objection) with regard to your personal data.
In compliance with Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 (GDPR), each of the institutions that make up the Vall d'Hebron Barcelona Hospital Campus has assigned a data protection officer who can be contacted through the following link/address:
In all these institutions, we process personal data for the following reasons:
a) Keeping you up to date with Vall d’Hebron Barcelona Hospital Campus
b) Reporting on sponsorship campaigns
c) Managing your relationship with the four Vall d'Hebron Barcelona Hospital Campus institutions: the Multiple Sclerosis Centre of Catalonia (CEMCAT), Vall d'Hebron University Hospital (HUVH), the Vall d'Hebron Institute of Oncology (VHIO) and the Vall d'Hebron Research Institute (VHIR)
d) Resolving doubts, queries, complaints and claims
The categories of data collected are: name and surname(s); e-mail address; telephone number; postal address; personal ID number; bank details; forms of collaboration; date of birth; tax number/foreign residents' number/passport; occupation; reason for consultation.
The legal basis for processing data is the execution of a contract or, where relevant, the consent provided by the data subject. When the legal basis is the data subject's consent, this may be withdrawn at any time. No automated decision-making will be performed on the personal data processed, including profiling. International data transfer is not anticipated. Personal data will only be processed for the amount of time required, useful and relevant for the purposes indicated in each specific case, applicable in each and every contract or form when the data subject gives their consent. The data will then be erased, except for legitimate interest or in exercising or defending any claims.
To comply with the various legal provisions we have set out different security measures of a technical and organisational nature to guarantee the security of personal data you provide and avoid changes, loss, deletion, unauthorised processing or access, taking into account the state of technology, the costs of application and the nature, supply, context and purposes of processing data stored and the risks of data being exposed, whether through human action or physical or natural means.
The recipient of your data will be the institutions that form the Vall d'Hebron Barcelona Hospital Campus, and it will only be accessible to professionals appointed to these institutions. Under no circumstances will third parties process your data on their behalf without your express prior consent, except for data requested by a Judge, Public Prosecutor or any public body authorised to request it under European General Data Protection Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 (GDPR).
Each page containing forms that collect data of a personal nature will expressly state how the personal data will be processed, the identity and address of the data processor, the purpose of its collection, the legitimate purpose of the processing, the recipients of the information, the origin of the data, any transfer or communication of data, as well as the option to exercise the rights of access, rectification, erasure and objection relating to this data and how to do so.
You may at any time exercise your rights of access and of rectification, your right to restrict processing, to object and, where required, the right of portability or erasure (including images or voice recordings), collected through a form or that may appear on a web page. You must communicate in writing to each of the aforementioned institutions at the addresses above or by post, specifying where the data appears and your contact details. You will have the right to file a claim before the data protection authorities in relation to the processing operations performed by the institutions that make up Vall d'Hebron Barcelona Hospital Campus.
When consent needs to be given, this should be done by a person with full legal capacity, or, if a person does not have legal capacity, by a representative or legal guardian. If you do not authorise us to process your data and this processing is essential to providing the requested services, the institutions of the Vall d'Hebron Barcelona Hospital Campus reserve the right to cancel the service.
The website may contain links to or from other websites. Please note that VHIR and the other institutions that form the Vall d'Hebron Barcelona Hospital Campus are not responsible for practices that other websites follow when it comes to processing personal data. This Data Protection Policy only applies to information collected online. We recommend that you read the data protection policies of other websites accessed to or from our site or that you visit in another way.