The processing of personal data carried out by I + D will be governed by the following guidelines:
- Purpose: This policy applies to all processing of personal data carried out by I + D.
- Identification of processes: I + D collects personal data in its possession through forms.
- Purpose and quality: The data will be collected for the exercise of the functions of I + D within the scope of its competence, ensuring permanent quality.
- Expiry: Data will be destroyed or archived when they have ceased to be strictly necessary or relevant to the purposes of I + D’s competence, in accordance with the specific regulations of this Organization.
- Confidentiality: I + D requires the signing of confidentiality agreements by staff, third parties providing services, and other officials who access the content of databases.
- Security: I + D adopts the necessary measures to guarantee the security and confidentiality of personal data, preventing their alteration, loss, consultation, or unauthorized processing, and detecting intentional or unintentional deviations of information, whether the risks come from human action or the technical means used. In the event of a security incident that involves a significant risk to the data subject, it will be promptly communicated to the NATIONAL DIRECTORATE OF PERSONAL DATA PROTECTION OF THE AGENCY OF ACCESS TO PUBLIC INFORMATION, along with the corrective and palliative measures implemented and/or to be implemented.
Rights of data subjects, and procedures to respond to their exercise: The data subject may exercise their rights of access, rectification, deletion, and confidentiality regarding their personal data. - Internet sites: I + D-owned sites may contain links to third-party sites, whose privacy policies are unrelated to I + D. The collection of personal data from users or visitors to I + D’s Internet sites will only be done if strictly necessary, and this circumstance will be made known to them. The eventual identification will not aim at evaluating their behavior or tracking their navigation but rather the purpose of providing adequate service and site security. However, the collected data may be used for statistical studies or behavior evaluation to the extent that they do not allow the identification of the data subject.