At the Banc de Sang i Teixits (Blood and Tissue Bank -BST), we take special care in processing the personal data of donors, professionals and the general public who deal with us.
Personal information belongs exclusively to you. For this reason, we actively ensure that, in their daily work, all the people who work with BST always use your data correctly, responsibly, and appropriately. We treat the data as we treat you: with care, professionalism and respect, to guarantee your privacy at all times.
Below, you can find out in detail how we treat your personal data in accordance with current legislation on personal data protection.
We also explain how you can contact our Data Protection Officer, exercise your data protection rights and answer any questions you may have in this area.
THE PERSON RESPONSIBLE FOR THE PROCESSING OF PERSONAL DATA
The person responsible for processing your personal data is:
PROCESSING OF PERSONAL DATA BY BST WITH REFARDING
DONORS, PATIENTS AND USERS
Purpose
The data will be processed to obtain traceability of the donations, or in order to provide health and/or social care, diagnosis and treatment, as well as to manage the requests made.
The data will be used to provide the necessary information for the correct invoicing of the cost of the services provided by the entity.
The data will be used to provide the necessary information for the sending of postal mails, e-mails, text messages or telephone calls with the sole purpose of informing or summoning for the purposes of third party campaigns.
Legal basis
The data will be processed on the basis of the authorisation provided for in Article 9(2)(h) of Regulation (EU) 2016/679.
Interested parties
This information will be used by the administrative services and services directly linked to the entity's activity, in accordance with their competences and functions.
Likewise, we inform you that the information may be provided to those official public and private bodies that, for legal reasons or for material necessity, need to access the data for the correct provision of the health and/or social care that constitutes the purpose of the processing of these data.
If so, your data will be communicated to the Health Department of the Generalitat of Catalonia within the framework of the Shared Clinical History of Catalonia (HC3), in accordance with legal requirements and following the indications of the Health Department of the Generalitat of Catalonia, which is responsible for this processing. If you wish to receive further information or exercise your rights of access, rectification, opposition, suppression and limitation or portability recognised in the data protection regulations, you may contact our entity's Data Protection Coordinator.
The data may also be transferred to the insurance companies and mutual societies that have to pay for the expenses arising from the assistance. The data may also be provided to third parties responsible for processing who carry out diagnostic tests or other assistance services required.
Rights
You may access your data, request its rectification or deletion, oppose its processing and request its limitation or portability by sending a written request to the Data Protection Coordinator at Edifici Frederic Duran i Jordà, Passeig Taulat, 106-116 08005 Barcelona. Alternatively, by electronic means to the address cpd(ELIMINAR)@bst.cat, attaching a photocopy of your National Identity Document or document accrediting your identity.
Period of conservation
Your data will be kept in accordance with the legislation, whether health or other applicable laws in force at any given time.
Claim
If you believe your rights have been infringed, you may contact the Data Protection Officer at dpd(ELIMINAR)@ticsalutsocial.cat or file a complaint with the Catalan Data Protection Authority (www.apdcat.cat).
ABOUT THE EXERCISE OF RIGHTS BY DATA SUBJECTS
Purpose
To manage the request for the exercise of rights in the field of personal data protection.
Legal basis
Fulfilment of a legal obligation by the controller, e.g. arts 16, 17, 18, 19, 20, and 21 of Regulation (EU) 2016/679.
Stakeholders
The data may be communicated to the Ministry of Health of the Generalitat of Catalonia and to other third parties that may have participated in the processing of the data that is the object of the request.
Under no circumstances will the data be provided to a third country or international organisation.
Rights
You may access your data, request its rectification or deletion, oppose its processing and request its limitation or portability by sending a written request to the Data Protection Coordinator, Edifici Frederic Durand y Jordà, Paseo Taulat, 106-116 08005 Barcelona. Or by electronic means to the address cpd(ELIMINAR)@bst.cat, attaching a photocopy of your ID card or document proving your identity.
Period of conservation
The data will be kept for one year from the end of the management of the right, or the period of prescription of the related actions that may be provided by the regulations.
Claim
If you believe your rights have been infringed, you may contact the Data Protection Officer at dpd(ELIMINAR)@ticsalutsocial.cat, or file a complaint with the Catalan Data Protection Authority (www.apdcat.cat).
ABOUT VIDEO SURVEILLANCE
Purpose
Legal basis
Article 6.1.e) and f) of the Regulation (UE) 2016/679. processing is necessary for the fulfilment of a mission carried out in the public interest or in the exercise of public powers conferred on the data controller. The processing is necessary to satisfy legitimate interests pursued by the data controller or by a third party, provided that the interests or fundamental rights and freedoms of the data subject which require the protection of personal data do not prevail, especially if the data subject is a minor.
Interested parties
This information will be used by the services and departments directly linked to the security of the entity, in accordance with their competences and functions.
Likewise, you are informed that the information may be provided to Law Enforcement, Courts and Tribunals, only in those cases where it is required.
Under no circumstances will the data be provided in a third country or international organisation.
Rights
You may access your data, request its rectification or deletion, oppose its processing and request its limitation or portability by sending a written request to the Data Protection Coordinator, Edifici Frederic Duran i Jordà, Passeig Taulat, 106-116 08005 Barcelona. Alternatively, by electronic means to the address cpd(ELIMINAR)@bst.cat, attaching a document accrediting your identity.
Period of conservation
We will keep the record for one month, except in case of order of Law Enforcement, or/and Courts and Tribunals.
Claim
If you believe your rights have been infringed, you may contact the Data Protection Officer at dpd(ELIMINAR)@ticsalutsocial.cat, or file a complaint with the Catalan Data Protection Authority (www.apdcat.cat).
ABOUT THE IMAGES
Purpose
To take and publish photographs and/or video footage, taken during the donation process at one of their centres on a voluntary basis, in which their image appears clearly identifiable.
The purpose of these images is to be used as iconographic documentation for: information for the audio-visual media, didactic applications, scientific publications, informative brochures, audio-visual media, social networks, etc.
Legal basis
The data will be processed on the basis of the authorisation provided for in Article 6(1)(a) of Regulation (EU) 2016/679.
Interested parties
This information will be used by the services and departments of the BST, in accordance with their competences and functions.
Rights
You may access your data, request its rectification or deletion, oppose its processing and request its limitation or portability by sending a written request to the Data Protection Coordinator, Edifici Frederic Duran i Jordà, Passeig Taulat, 106-116 08005 Barcelona. Alternatively, by electronic means to the address cpd(ELIMINAR)@bst.cat
Period of conservation
The data will be processed for as long as is necessary for the purpose indicated, or until you withdraw your consent to process the data.
Claim
If you believe your rights have been infringed, you may contact the Data Protection Officer at dpd(ELIMINAR)@ticsalutsocial.cat, or file a complaint with the Catalan Data Protection Authority (www.apdcat.cat).
ABOUT THE NEWSLETTER
In the event that you have given us your details to inform you of news and activities at BST, we would like to inform you of the following:
Purpose
The data will be used to send the newsletter and information on events, donation promotions, services and activities of the BST.
Legal basis
Article 6.1. a) Regulation (UE) 2016/679. The consent of the interested party. We will only use the data when you give your consent.
Interested parties
Your data will be communicated to ACRECENTA SOLUTIONS SL, the lender of the mailing service. This entity is domiciled in Barcelona and guarantees that the data will be treated according to the security standards.
Rights
You may access your data, request its rectification or deletion, oppose its processing and request its limitation or portability by sending a written request to the Data Protection Coordinator, Edifici Frederic Duran i Jordà, Passeig Taulat, 106-116 08005 Barcelona. Alternatively, by electronic means to the address cpd(ELIMINAR)@bst.cat
Period of conservation
BST will process the data from the moment it is requested until the end of the purpose for which it was collected or as soon as you revoke your consent.
Claim
If you believe your rights have been infringed, you may contact the Data Protection Officer at dpd(ELIMINAR)@ticsalutsocial.cat, or file a complaint with the Catalan Data Protection Authority (www.apdcat.cat).
ABOUT CURRICULIM VITAE
If you have given us your details to apply for a job at BST, we would like to inform you of the following:
Purpose
The registration of the curriculum in the files as a job applicant. Even so, we ask that, in the event of any changes to your personal details, you inform us so that we can keep them up to date.
Legal basis
Your data will be processed on the basis of your request for pre-contractual measures, which is the basis for processing established in Article 6.1.b of the Regulation (UE) 2016/679
Interested parties
The data will not be communicated to third parties without prior consent, nor will there be any transfer to third countries or international organisations.
Rights
You may access your data, request its rectification or deletion, oppose its processing and request its limitation or portability by sending a written request to the Data Protection Coordinator, Edifici Frederic Duran i Jordà, Passeig Taulat, 106-116 08005 Barcelona. Alternatively, by electronic means to the address cpd@bst.cat
Period of conservation
In this regard, we inform you that we will register you with the date of the shipment and that the validity of the shipment will be six months from the date of registration. Therefore, if you wish to continue to be recorded in our files as a job applicant, you will have to submit a new request and curriculum vitae.
Claim
If you believe your rights have been infringed, you may contact the Data Protection Officer at dpd(ELIMINAR)@ticsalutsocial.cat, or file a complaint with the Catalan Data Protection Authority (www.apdcat.cat).
YOUR RIGHTS AND HOW YOU CAN EXERCISE THEM
You have the right to access, rectify, delete, oppose, transfer and limit the processing of your personal data. When this processing is based on your prior consent, you may revoke the authorization you gave at any time.
You may exercise your rights in relation to the personal data by writing to the Data Protection Coordinator:
To validate your request, it may be necessary to verify your identity. In this case, providing a photocopy (printed or as an attached file) of your ID card, passport, or valid legal document that identifies you may be required.
We will inform you about the actions derived from your request within one month. In the case of particularly complex requests, the deadline can be extended by two more months (therefore, up to a maximum of three months), always informing you of the extension within the first month.
If you consider that we have not provided an adequate response to your request, you may file a complaint with the Data Protection Officer dpd(ELIMINAR)@ticsalutsocial.cat or with the Catalan Data Protection Authority (www.apdcat.cat).
CHANGES IN THE AREA OF DATA PROTECTION
Any change to the Data Protection level will be communicated through this page and will be effective from the moment of its effective publication. The Banco de Sangre y Tejidos (Blood and Tissue Bank -BST) reserves the right to modify, update or adapt this information to any legislative change or interpretation of the competent Data Protection Agencies.