In accordance with the Personal Data Protection Regulations and the Law on Information Society Services and Electronic Commerce, we inform you that any personal data provided through the website www.innovationhub.es will be handled confidentially and processed by the data controller, IOT DIGITAL INNOVATION HUB OF CASTILLA Y LEÓN.
Data Controller:
Collaborating Entities:
- FUNDACIÓN INSTITUTO INTERNACIONAL DE INVESTIGACIÓN EN INTELIGENCIA ARTIFICIAL Y CIENCIAS DE LA COMPUTACIÓN (hereinafter, AIR INSTITUTE)
- INSTITUTO PARA LA COMPETITIVIDAD EMPRESARIAL DE CASTILLA Y LEÓN (hereinafter, ICE)
- FEDERACIÓN DE ASOCIACIONES DE EMPRESAS DE TECNOLOGÍAS DE LA INFORMACIÓN, COMUNICACIONES Y ELECTRÓNICA DE CASTILLA Y LEÓN (hereinafter, AETICAL)
- FEDERACIÓN EMPRESARIAL SEGOVIANA (hereinafter, FES)
Postal address: Av. Santiago Madrigal 39, 37003, Salamanca, Spain
Contact Telephone: +34 983 642 099
Email: info@air-institute.com
Personal Data Collection
IOT DIGITAL INNOVATION HUB may collect various types of personal data necessary for its operations, including:
- Contact details, such as names, email addresses, and telephone numbers.
- Identification details, such as tax identification numbers.
- Professional details, including job titles and institutional affiliations.
- Other relevant data required for the provision of requested services, collected through specific forms.
All data collection is carried out in compliance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality, as well as proactive responsibility, in accordance with the GDPR and LOPDGDD.
Purpose of data processing:
The personal data provided will be processed by IOT DIGITAL INNOVATION HUB for the following purposes:
-
Service Requests and Contact
Managing requests for information, technical advice, and mentoring in the fields of digitalisation and IoT, facilitating contact with the Hub’s experts.
Legal basis: Consent of the data subject (Article 6.1.a GDPR). Failure to provide data will prevent the proper handling of the request. -
Access to Funding and Opportunities
Assisting businesses in identifying and accessing public and private funding resources for digital innovation projects.
Legal basis: Performance of a pre-contractual or contractual relationship (Article 6.1.b GDPR) when assistance involves formal collaboration; in other cases, the consent of the data subject (Article 6.1.a GDPR). -
Promotion of IoT Technologies
Organising and publicising events, forums, and training activities on digitalisation and IoT, as well as sharing technological updates.
Legal basis: Legitimate interest in promoting digitalisation and innovation (Article 6.1.f GDPR). In the case of sending commercial communications to individuals, consent of the data subject will be required (Article 6.1.a GDPR). -
Participation in the Tech-Entrepreneurial Ecosystem
Facilitating interactions between startups, investors, and key stakeholders in the technology sector to foster synergies and business opportunities.
Legal basis: Consent of the data subject (Article 6.1.a GDPR). -
Access to Laboratories and Equipment
Managing access to IoT laboratories and technological equipment for experimentation and validation of digital solutions.
Legal basis: Performance of a contractual or pre-contractual relationship (Article 6.1.b GDPR). -
Development of Innovation Projects
Facilitating collaboration between businesses and organisations on R&D projects focused on digitalisation and IoT integration.
Legal basis: Performance of a contractual or pre-contractual relationship (Article 6.1.b GDPR). In some cases, legitimate interest in promoting innovation (Article 6.1.f GDPR). -
IoT Technology Assessments
Conducting audits and technological assessments to evaluate companies' digital maturity and recommend digitalisation strategies.
Legal basis: Legitimate interest in fostering digital transformation in the business sector (Article 6.1.f GDPR). If the assessment is conducted as part of a contract, the legal basis will be contract performance (Article 6.1.b GDPR). -
Training and Skills Development
Managing registration and participation in digitalisation and IoT training programmes, including specialised courses and master’s programmes.
Legal basis: Performance of a training contract (Article 6.1.b GDPR) or the consent of the data subject (Article 6.1.a GDPR) for free activities. -
Events, Networking, and Participant Follow-Up
Organising events to identify individuals interested in IoT and following up with attendees of webinars and networking sessions to inform them about new opportunities and activities.
Legal basis: Consent of the data subject (Article 6.1.a GDPR). -
Visibility and Communication
Sharing information about IOT DIGITAL INNOVATION HUB and its activities through newsletters, social media, press, and other channels.
Legal basis: Consent of the data subject (Article 6.1.a GDPR) for inclusion in mailing lists. For publicly funded initiatives, public interest in their promotion (Article 6.1.e GDPR). -
Networking and Identifying Future Interested Parties
Facilitating connections for future networking events, collaborative activities, and business opportunities related to the innovation and digitalisation ecosystem. Additionally, identifying and contacting potential future participants in IOT DIGITAL INNOVATION HUB projects to encourage participation in activities, events, and initiatives.
Legal basis: Legitimate interest (Article 6.1.f GDPR) in reaching out to companies, professionals, and other technology sector stakeholders to foster collaboration and networking in innovation and digitalisation. When contacting individuals for networking or promotional purposes, explicit consent (Article 6.1.a GDPR) will be required, which can be withdrawn at any time.
Data subjects have the right to object to the processing of their data based on legitimate interest, in accordance with Article 21 of the GDPR. -
Research and Knowledge Generation
Conducting studies and reports on digitalisation and the impact of IoT technologies, using anonymised data whenever possible.
Legal basis: Task carried out in the public interest in the field of scientific research (Article 89 GDPR).
Recipients
IOT DIGITAL INNOVATION HUB does not sell, transfer, or rent customer or user information or personal data to third parties, except in the following cases:
- Data Processors: Information may be shared with entities acting as data processors, who are clearly identified on our website and are committed to complying with applicable data protection regulations.
- Collaborating Entities: Personal data may be accessible to the following collaborating entities of IOT DIGITAL INNOVATION HUB:
- FUNDACIÓN INSTITUTO INTERNACIONAL DE INVESTIGACIÓN EN INTELIGENCIA ARTIFICIAL Y CIENCIAS DE LA COMPUTACIÓN (AIR INSTITUTE)
- INSTITUTO PARA LA COMPETITIVIDAD EMPRESARIAL DE CASTILLA Y LEÓN (ICE)
- FEDERACIÓN DE ASOCIACIONES DE EMPRESAS DE TECNOLOGÍAS DE LA INFORMACIÓN, COMUNICACIONES Y ELECTRÓNICA DE CASTILLA Y LEÓN (AETICAL)
- FEDERACIÓN EMPRESARIAL SEGOVIANA (FES)
This collaboration aims to facilitate the coordination and execution of the Hub’s activities. All collaborating entities are committed to processing information in compliance with data protection regulations and using it solely for the purposes outlined in this document.
- Legal Obligations: IOT DIGITAL INNOVATION HUB may disclose personal data if legally required by competent authorities, ensuring that such disclosure is carried out in accordance with applicable regulations.
- International Transfers: If personal data needs to be transferred to countries outside the European Economic Area (EEA), IOT DIGITAL INNOVATION HUB will ensure that such transfers are conducted with appropriate safeguards, such as the adoption of Standard Contractual Clauses approved by the European Commission.
Legal Basis
The processing of your data is based on the following legal grounds:
- Legitimate Interest: Your participation in IOT DIGITAL INNOVATION HUB activities creates a legitimate interest in supporting digital transformation, driving technological innovation, and promoting the adoption of IoT solutions within organisations. This interest justifies the need to process your contact details and other relevant information to coordinate and deliver the Hub’s activities, as well as to identify opportunities for collaboration and networking. Additionally, legitimate interest applies to organising events, promoting IoT technologies, and sharing training and innovation initiatives, provided that the rights and freedoms of data subjects are respected.
- Contractual Relationship: When engaging with collaborators, suppliers, companies, and entities that request services from IOT DIGITAL INNOVATION HUB, processing personal data is necessary to fulfil contractual obligations or take pre-contractual steps at the data subject’s request. This includes, but is not limited to, managing access to laboratories, executing innovation projects, and providing technical advisory services.
- Explicit Consent: Your explicit consent is required for receiving information about upcoming events and projects. When submitting your contact details via specific forms, you must actively confirm your acceptance, such as by ticking a box. You can withdraw your consent at any time without affecting the lawfulness of processing carried out before its withdrawal.
- Compliance with Legal Obligations: Data processing is necessary to meet legal and regulatory requirements related to cybersecurity and data protection applicable to the project.
- Public Interest: Some data processing activities are carried out in the public interest, particularly those aimed at enhancing cybersecurity and protecting critical infrastructures. This applies when processing personal data contributes to public safety, strengthens cybersecurity efforts, or supports improvements in digital public policy.
- Scientific Research: For research, development, and analytical purposes related to cybersecurity, personal data may be processed under the legal basis of scientific research (Article 89 GDPR). This is done to generate insights that improve cybersecurity solutions. Wherever possible, data will be anonymised and secured with enhanced protection measures to safeguard participant privacy.
Retention Period
The personal data provided will be retained for as long as necessary to fulfil the objectives of the IOT DIGITAL INNOVATION HUB project or until you request its deletion or object to its processing. Data will also be kept for the period required to address any potential legal liabilities arising from the services provided.
Data will be stored while there is a mutual interest in maintaining the purpose of processing. Once it is no longer necessary for that purpose, it will be deleted using appropriate security measures to ensure either the pseudonymisation or complete destruction of the data.
Exercise of Rights
You may exercise your rights by sending an email to info@air-institute.com, including a copy of your identity document, your full name, a contact address for notifications, and the specific right you wish to exercise.
- Any individual has the right to obtain confirmation of whether we are processing personal data concerning them.
- Data subjects have the right to access their personal data, request the correction of inaccurate data, or request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
- Data subjects may request the restriction of processing while the accuracy of the data is being verified, if the processing is lawful but they oppose deletion, if the controller no longer needs the data but the user requires it for legal claims, or if they have objected to processing based on legitimate interest while verifying whether the controller’s reasons override theirs. In such cases, the data will only be retained for legal claims or defence purposes.
- In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. We will cease processing unless there are compelling legitimate grounds or for the establishment, exercise, or defence of legal claims.
- You also have the right to data portability, where legally applicable.
- You may withdraw your consent for one or all purposes at any time without affecting the lawfulness of processing carried out before its withdrawal.
- You have the right to lodge a complaint with the relevant Data Protection Authority, such as the Spanish Data Protection Agency (AGPD).
You can exercise these rights by contacting us at the address provided above.
Use of Cookies:
IOT DIGITAL INNOVATION HUB informs users that its website uses cookies. Cookies are small text files stored by your browser on your computer’s hard drive. When you visit our website, our server may recognise these cookies and retrieve information about your previous visit.
Most browsers automatically accept cookies, but you can configure your browser to notify you when a cookie is received and choose to block its installation on your device. Under no circumstances can cookies access information stored on your hard drive or files created by other websites. To read our full Cookie Policy, please click on the following link: COOKIE POLICY.
Accuracy and Updating of Data
Users must ensure that the personal data provided to IOT DIGITAL INNOVATION HUB is accurate and up to date, and they are responsible for informing us of any changes. The user will be solely liable for any direct or indirect damage caused to IOT DIGITAL INNOVATION HUB or third parties due to the submission of false, inaccurate, incomplete, or outdated information.
Users must not include personal data of third parties without their prior informed consent, in accordance with this data protection policy. If they do so, they will bear full responsibility.
All required fields on the website’s forms must be completed, as the data is necessary to provide an optimal service. Failure to provide all requested information may result in services that do not fully meet your needs. To submit personal data, you must be at least 14 years old.
Social Media
IOT DIGITAL INNOVATION HUB uses social media as a communication and promotional tool for its services. Under no circumstances will personal data be used for unauthorised purposes.
We are not responsible for content, comments, opinions, or information—whether from us or third parties—that users post on our official accounts on platforms such as Facebook, Twitter, LinkedIn, and YouTube. Users may share our content for lawful purposes, provided they credit the original source or author.
The data collected will be used to manage a database of users and contacts associated with the company’s social media accounts. Please note that the use of social media is subject to each platform’s privacy policies.
Confidentiality and Security of Your Data:
IOT DIGITAL INNOVATION HUB has implemented the necessary measures to prevent the alteration, loss, unauthorised processing, or access to personal data, taking into account the current state of technology. However, users should be aware that no security measures on the internet are entirely invulnerable.
The data collected through the website and/or other means will be processed by the data controller in strict confidentiality, and they are committed to maintaining the confidentiality of such information.
In compliance with the applicable data protection regulations, the data controller ensures full adherence to the provisions of the GDPR and LOPDGDD regarding the processing of personal data, in line with the principles outlined in Article 5 of the GDPR and Title II of the LOPDGDD. These principles guarantee that personal data is processed lawfully, fairly, and transparently in relation to the data subject, and is adequate, relevant, and limited to what is necessary for the intended purposes.
The data controller guarantees that appropriate technical and organisational policies are in place to ensure the security measures required by the GDPR and LOPDGDD are applied, thereby safeguarding the rights and freedoms of users. Users are also provided with the necessary information to exercise their rights.
As data protection laws may evolve, we strongly encourage users to review our Data Protection Policy regularly.
Please note that the IOT DIGITAL INNOVATION HUB website does not support encryption, and information transmitted over the internet without encryption may be visible to third parties. By submitting forms on our website, you consent to sending unencrypted information.
Changes to the Data Protection Policy
IOT DIGITAL INNOVATION HUB reserves the right to update or modify its data protection policy at any time, either at its discretion or due to changes in legislation, case law, or business practices. Should any changes be made, the revised policy will be published on this website, where users can review the current data protection policy. In any case, the relationship with users will be governed by the terms in effect at the time of accessing the website.
Other Information
For any further clarification or questions, please contact us at info@air-institute.com via email at the address provided above.
