Article 30 of the GDPR provides that each controller shall keep a record of processing activities (RoPA) carried out under its responsibility.
This register, according to Article 31.2 of the Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights must be made public by electronic means. In order to comply with this mandate, the RoPA of the organizational scope of the INCLIVA Foundation are published below.
The RoPA of treatments related to the projects and research studies carried out within INCLIVA are developed and maintained under the responsibility of each Principal Investigator and his research team, being published in the space related to the corresponding research group or line of research, as well as in the web page of the projects that have such resource. The processing of data for these purposes will observe the provisions of the “Policy of data protection and information security” of INCLIVA.
Treatments that INCLIVA is responsible for:
- Personal Hiring
- HR ─ Personnel Hired
- Management of the Research Activity ─ in-house personnel
- Economic Management ─ third parties and suppliers
- Institutional Information Dissemination ─ mailing
- In─house training activities
- Colaborations ─ Agreements
- Exercise of rights of interested parties
- Video surveillance
- Access control ─ cards
- Conferences and Project workshops.
- Governing Bodies
- Biobank sample management
Treatments that INCLIVA is in charge of:
- Participants Clinical Trials
- Research Personnel Clinical Trials
- Participants and speakers of training events
- Scientific technological platform services
- Monitoring and management of clinical research under contract
Treatments that INCLIVA is co-responsible for:
For matters related to the processing of personal data carried out in INCLIVA, please contact us by email at protecciondatos@incliva.es.
Head of Unit
Extension: 628947