Legal notice and privacy policy

The Agency for Business Competitiveness (hereinafter "ACCIÓ"), domiciled at Passeig de Gràcia, 129, Postcode 08008, Barcelona (Spain), is the data controller of your personal data.

You may contact our data protection officer using through the above postal address or by email at dades.accio@gencat.cat.

If you have provided us with your data for the purposes of the relations between ACCIÓ and the organisation for which you work or collaborate with...

The personal data subject to treatment are identification details (name, last name, and, if applicable, Spanish ID/Tax ID No.) and corporate contact details (e-mail/postal address and telephone number) that you have provided ACCIÓ in order to uphold the relations between ACCIÓ and the company or organisation for which you work or with which you collaborate.

If you or the organisation that you represent are beneficiaries of ACCIÓ grants and/or subsidies...

Your personal data subject to treatment are as follows:

• Identification details (name, last name, and, if applicable, Spanish ID/Tax ID No.) and contact details (e-mail/postal address and telephone number): those data that you have provided us through the administrative application for subsidy by means of which you or the organisation that you represent have access to the grants and the subsidies offered by ACCIÓ and those associated with their execution. Your contact details may likewise be used to send you information and satisfaction surveys, by electronic means, about the activities and the services that ACCIÓ performs to encourage business competitiveness, to boost internationalisation and innovation and to attract productive business investment in all its aspects.
• Bank details: the bank details that you have provided us to implement the obligations arising from the legal relations between you or the organisation that you represent and for which you or the organisation that you represent are receiving or have applied to receive the grants and subsidies provided by ACCIÓ.
• Social security affiliation details and tax information: data regarding your affiliation to the social security system if you are a physical person or are opting to become a beneficiary of the subsidies or grants provided by ACCIÓ, and the data necessary for compliance with social security and tax legislation.
• Additional details: data that you have provided so that you may be evaluated as a beneficiary of the grants and of the subsidies provided by ACCIÓ, such as your CV and your professional and skills profile, if you are a physical person or are opting to become a beneficiary of the aforementioned subsidies or grants. In this event, data associated with you or that are produced by ACCIÓ while the legal relation is valid may likewise also be included, with strict compliance by the organisation of the ends of processing that are detailed in this document.

If you are requesting to receive information on our activities and on our services or have applied to register with or participate in our activities and services...

If you are requesting to receive information on our activities and on our services or have applied to register with or participate in them, your personal data for identification (name, last name, and, if applicable, Spanish ID/Tax ID No.) and corporate/professional contact (e-mail/postal address and telephone number) will be processed in order to manage or to process your request. ACCIÓ will process all those data that you have provided us in completing the form to obtain data.

ACCIÓ will also process your corporate/professional contact information to send you surveys about the company, institution or organization for which you work or with which you collaborate. These surveys are voluntary and are intended for conducting studies that allow us to find out the common needs of Catalan enterprise in order to adopt the appropriate measures for improving policies to promote entrepreneurship, innovation and business internationalization in Catalonia. The information obtained through these surveys is treated in aggregated form and is subject to protection and confidentiality.

If you have taken part in our activities and services, we shall likewise process your corporate contact details in order to send you surveys that will offer you option of rating your degree of satisfaction with your participation at them. The data from the satisfaction surveys that you complete will be processed by ACCIÓ with the sole purpose of improving its activities and services with a view to fulfilling the public interest mission entrusted to it by law.

ACCIÓ may likewise record images and/or voices while its activities and services are being held. These images and/or voices are recorded in order to publish graphic information in the media and on social networks with a view to publicising the activities and services that ACCIÓ performs to fulfil the public mission entrusted to it by law. Under no circumstances will your image and/or voice be recorded and broadcast without you previously having given your explicit consent to this end.

Lastly, ACCIÓ informs you that applicable legislation authorises our institution to send, by electronic means, information and commercial notifications about the activities and services similar to the activities and services you have participated in and which are associated with encouraging business competitiveness, internationalisation and innovation and to attract productive business investment in all its aspects.

Under no circumstances will ACCIÓ use your data for promotional activities that favour third parties or institutions and will send you exclusively promotional information related or of a similar nature to the activities, promotions and grants in which you have shown an interest, participated in or contracted with our institution. You may nevertheless oppose receipt of the abovementioned commercial notifications by electronic means in accordance with the provisions detailed in the section of this policy entitled "What my rights are".

If you have applied for certification with ACCIÓ...

Your personal data subject to processing are as follows:

• Identification details (name, last name, and, if applicable, Spanish ID/Tax ID No.) and contact details (e-mail/postal address and telephone number): those data that you have provided us through the administrative application for certification by means of which you or the organisation that you represent can access the certifications offered by ACCIÓ. Your details may also be used to send you information, by electronic means, about the activities and services similar to the activities and services you have participated in and which are associated with encouraging business competitiveness, internationalisation and innovation and to attract productive business investment in all its aspects. Finally, your details will also be processed by sending satisfaction surveys so that ACCIÓ may know how to improve its activities and services.
• Additional details: data that you have provided us so that you may be evaluated for certification by ACCIÓ, such as your CV and your academic, professional and skills profile. In this event, data associated with you or that are produced by ACCIÓ while the legal relation is valid may likewise also be included, with strict compliance by the organisation of the ends of processing that are detailed in this document.

If you have provided us with your details for the purpose of relations that have been established between ACCIÓ and the institution for which you work or collaborate with...

The processing of your personal data is legitimised for the following reasons:

• In compliance with the ends of business promotion, encouragement and development that ACCIÓ performs as a mission of public interest.
• The processing of your data to send you promotional information, by electronic means, about activities and services similar to the activities and services you have participated in and which are associated with the encouragement for and promotion of entrepreneurship and business internationalisation is expressly authorised by law, since it allows us to carry out these promotional communication actions by electronic means, without the need for your prior consent, provided that it is to promote activities or services that are of interest to you and similar to those that are the subject of the direct relationship with you, based on your acceptance of our privacy policies. You may nevertheless oppose, now or at any time, receipt of the abovementioned commercial notifications by electronic means in accordance with the provisions detailed in the section of this policy entitled "What my rights are".

If you or the organisation that you represent are beneficiaries of ACCIÓ grants and/or subsidies...

The processing of your personal data is legitimised for the following reasons:

• The processing of your personal data is necessary for compliance with the obligations resulting from the legal relation arising from the administrative application for subsidy between you or the organisation that you represent and ACCIÓ in accordance with receipt of the grants and subsidies provided to you by ACCIÓ.
• In compliance with the ends of business promotion and development through the performance of the actions and of the support services necessary to encourage the competitiveness of the business sector and its presence and interrelation on international markets that ACCIÓ performs as a mission of public interest.
• The processing of your corporate personal data for the purpose of sending you surveys about the company, institution or organization for which you work or with which you collaborate is legitimated by the fulfilment of the purposes of promotion, stimulation and development of the company to which you belong and is carried out by ACCIÓ as a mission of public interest.
• ACCIÓ processes your personal data in order to send you information, by electronic means, about the activities and services similar to the activities and services you have participated in and which are associated with encouraging business competitiveness, internationalisation and innovation and to attract productive business investment in all its aspects, as it is legally authorised, given that it allows us to carry out these promotional communication actions by electronic means, without the need for your prior consent, provided that it is to promote activities or services that are of interest to you and similar to those that are the subject of the direct relationship with you, based on your acceptance of our privacy policies.. You may nevertheless oppose, now or at any time, receipt of the abovementioned commercial notifications by electronic means in accordance with the provisions detailed in the section of this policy entitled "What my rights are".

If you have requested information on our activities and our services or have applied to register with or participate in our activities and services...

The processing of your personal data is legitimised for the following reasons:

• The need to deal with your request for registration or participation for which ACCIÓ must process your data.
• The need to take pre-contractual measures or to execute the contract to which you or the organisation that you represent is a party.
• Compliance with the ends of business promotion, encouragement and development that ACCIÓ performs as a mission of public interest.
• The processing of your corporate personal data for the purpose of sending you surveys about the company, institution or organization for which you work or with which you collaborate is legitimated by the fulfilment of the purposes of promotion, stimulation and development of the company to which you belong and is carried out by ACCIÓ as a mission of public interest.
• ACCIÓ will treat your image/voice for the purposes set out above, should you decide to give your consent. You may revoke your consent at any time by contacting our Data Protection Officer via their e-mail address dades.accio@gencat.cat.
• The processing of your personal data to send you information, by electronic means, about activities and services similar to the activities and services you have participated in and which are associated with encouraging business competitiveness, internationalisation, innovation and attracting productive business investment in all its aspects is expressly authorised by law, given that it allows us to carry out these promotional communication actions by electronic means, without the need for your prior consent, provided that it is to promote activities or services that are of interest to you and similar to those that are the subject of the direct relationship with you, based on your acceptance of our privacy policies. You may nevertheless oppose, now or at any time, receipt of the abovementioned commercial notifications by electronic means in accordance with the provisions detailed in the section of this policy entitled "What my rights are".

If you have applied for certification with ACCIÓ...

The processing of your personal data is legitimised for the following reasons:

• The processing of your personal data is necessary for compliance with the obligations resulting from the legal relation arising from the administrative application for certification between you or the organisation that you represent and ACCIÓ in accordance with the certification provided to you by ACCIÓ.
• Compliance with the ends of business promotion and development through the performance of the actions and implementation of the support services necessary to encourage the competitiveness of the business sector and its presence and interrelation on international markets that ACCIÓ performs as a mission of public interest.
• The sending of satisfaction surveys so that ACCIÓ may know how to improve its activities and services is legitimized by the fulfillment of a public interest mission.
• ACCIÓ processes your data in order to send you information, by electronic means, about the activities and the services similar to the activities and services you have participated in and which are associated with encouraging business competitiveness, internationalisation and innovation and to attract productive business investment in all its aspects, as it is legally authorised, given that it allows us to carry out these promotional communication actions by electronic means, without the need for your prior consent, provided that it is to promote activities or services that are of interest to you and similar to those that are the subject of the direct relationship with you, based on your acceptance of our privacy policies. You may nevertheless oppose, now or at any time, receipt of the abovementioned commercial notifications by electronic means in accordance with the provisions detailed in the section of this policy entitled "What my rights are".

ACCIÓ may provide your personal data to public administrations (such as the Tax Office, Social Security, employment authority) to ensure strict compliance with the legal obligations to which ACCIÓ is subject on account of its activity.

ACCIÓ informs you that your personal data may be transferred to suppliers of services that ACCIÓ has contracted with a view to performing its mission of encouraging the competitiveness of the business sector and its presence and interrelation on international markets.

ACCIÓ expressly informs you that they may communicate your identification details (name and last name) and corporate/professional contact details (e-mail/postal address and telephone number) to the Business and Knowledge Departments, the Directorate General of Industry and the Department of the Presidency of the Government of Catalonia (institutions to which the details are addressed), provided that the purpose of their processing has been duly justified by the institution to which the details are addressed and that this new purpose is compatible with the purpose for which the details were originally collected. If these requirements are met, ACCIÓ will be complying with current legislation on personal data protection.

In the event that you register for, participate in or are a speaker at any of the activities or services organised by our entity, ACCIÓ informs you that it may communicate your identification details (name and last name) and corporate/professional contact details (e-mail/postal address and telephone number) to the other registrants, participants or speakers of the activity or service, provided that you have expressly authorised this prior to the communication of the said details. You may revoke your consent any time by contacting our Data Protection Officer via their e-mail address dades.accio@gencat.cat.

In some activities and/or services organized by ACCIÓ (such as the Supplier Search Service, Brokerage Events, among others), there is a data transfer that is an indispensable part of these activities and/or services, which is based on the contractual relationship between you and ACCIÓ. This data transfer consists of contacting clients, suppliers, and potential clients who participate in the aforementioned activities and services, as it is a necessary transfer to meet our obligation to provide the same or to ensure your participation, in accordance with your request.

ACCIÓ transfers your data internationally to countries without European-equivalent legislation ("Third Countries") in which the institution has established offices. Your contact details are transferred solely with the purpose of providing access to them to the ACCIÓ personnel who are stationed at the overseas offices and who are subject to the policies of ACCIÓ regarding confidentiality and data protection. In undertaking these international transfers, ACCIÓ applies the guarantees established in applicable legislation and performs them solely in order to comply with its mission of public interest. You are also informed that ACCIÓ has contracted the services of technology providers located in third countries. These providers have been contracted by ACCIÓ in order to obtain the services necessary for the performance of its activities and they have entered into the confidentiality and data processing contracts with ACCIÓ that are required by law, and apply the guarantees and safeguards necessary to preserve your privacy.

Under no circumstances will ACCIÓ assign or transfer your personal data to companies or institutions other than those indicated in this section on "Assignments and International Transfers" without your prior consent.

ACCIÓ does not make any decisions which may affect you in any significant way based only on automated processing of your data. All the decision-making processes of our organisation connected with your application will be made with human involvement.

For further information regarding the guarantees for your privacy, you may contact the Data Protection Officer at the postal and email addresses indicated.

Your personal data are kept while your relation with ACCIÓ lasts and, after termination of this relation for any cause, for the applicable legally prescribed periods and/or the terms necessary to guarantee compliance with our institution’s mission of public interest.

Upon termination of your relation with ACCIÓ, your data will be processed for the sole purposes of proving compliance with the legal or contractual obligations of ACCIÓ.

Once these prescribed periods have ended, your data will be deleted or, alternatively, anonymized. If you would like to know more about the deadline for processing your data, you can send a request to dades.accio@gencat.cat.

You may revoke your consent and/or exercise your rights of access, rectification, erasure and portability, limitation and/or opposition to processing by contacting the Data Protection Officer at the postal and email addresses indicated.

If you consider that the processing of your personal data breaches legislation or your rights, you may register an objection with our Data Protection Officer, or with the Catalan Data Protection Authority by writing to the following postal address: C/ Rosselló, 214, Postcode 08008, Barcelona (Spain) or to its email address dades.accio@gencat.cat.

Data controller and data protection officer

The co-organizing institutions set out in the form that you have completed are the data controllers of your personal data.

You may contact the respective data protection officers using the postal and email addresses set out in the form you have completed.

If you are requesting to receive information on our activities and on our services or have applied to register for or participate in our activities and services...

If you are requesting to receive information on our activities or services or have applied to register for or participate in them, your personal identification details (name and last name, and, if applicable, Spanish ID/Tax ID No.) and corporate/professional contact details (e-mail/postal address and telephone number) will be processed in order to manage and process your request. The data controller bodies will process all data you have provided by completing the form for obtaining data.

The data controllers will also process your corporate contact information to send you surveys about the company, institution or organization for which you work or with which you collaborate. These surveys are voluntary and are intended for conducting studies that allow us to determine the common needs of Catalan enterprise in order to adopt the appropriate measures for improving policies to promote entrepreneurship, innovation and business internationalization in Catalonia. The information obtained through these surveys is processed in aggregate form and is subject to protection and confidentiality.

If you have taken part in our activities or services, we shall likewise process your corporate contact details in order to send you surveys that will offer you the chance to rate your degree of satisfaction with your participation in them. The data from the satisfaction surveys that you complete will be processed by the data controllers with the sole purpose of improving the activities with a view to fulfilling the public mission entrusted by law.

The data controllers may likewise record images and/or voices while the activities or services are being held. These images and/or voices are recorded in order to publish graphic information in the media and on social networks with a view to publicizing the activities and services that the data controllers perform. Under no circumstances will your image and/or voice be recorded and broadcast without your prior explicit consent to such.

Lastly, ACCIÓ and the other co-organising entities inform you that applicable regulations authorise them to send, by electronic means, information and commercial communications similar to the activities and services you have participated in and which are associated with encouraging business competitiveness, internationalisation, innovation and attracting productive business investment in all its aspects.

Under no circumstances will the data controllers use your data for promotional activities on behalf of third parties or institutions and they will only send you promotional information related to or of a similar nature to the activities, promotions and grants in which you have shown an interest, participated in or contracted with them. You may nevertheless decline to receive the abovementioned commercial notifications by electronic means in accordance with the provisions set out in the section of this policy entitled "My rights".

If you are requesting to receive information on our activities or services of the data controllers or have applied to register for or participate in their activities and services...

The lawful bases for the processing of your personal data are as follow:

• The need to attend to your request for registration or participation for which the data controllers must process your data.
• The need to take pre-contractual measures or to enter into the contract to which you or the organization you represent is a party.
• Compliance with the purposes of business promotion, stimulation and development that the data controllers perform as a mission of public interest.
• The legal bases for the processing of your corporate contact details for the purpose of sending you surveys about the company, institution or organization for which you work or with which you collaborate are to comply with the purposes of promotion, stimulation and development of the company to which you belong and is carried out by the data controllers as a mission of public interest.
• The data controllers will process your image and/or voice for the purposes set out above, should you decide to give your consent. You may revoke your consent any time by contacting our Data Protection Officer via their e-mail address dades.accio@gencat.cat.
• The processing of your personal data to send you information, by electronic means, about the activities and services similar to the activities and services of the data controllers you have participated in is expressly authorized by law, given that it allows us to carry out these promotional communication actions by electronic means, without the need for your prior consent, provided that it is to promote activities or services that are of interest to you and similar to those that are the subject of the direct relationship with you, based on your acceptance of our privacy policies. You may nevertheless decline, now or at any time, to receive the abovementioned commercial notifications by electronic means in accordance with the provisions set out in the section of this policy entitled "My rights".

The data controllers may submit your personal data to public authorities (such as the tax office, social security office, employment authority) to ensure strict compliance with the legal obligations to which the data controllers are subject on account of their activity.

The data controllers inform you that your personal data may likewise be transferred to suppliers of services contracted by the data controllers with a view to performing their mission of encouraging the competitiveness of the business sector and its presence and interrelation in international markets.

ACCIÓ expressly informs you that they may communicate your identification details (name and last name) and corporate/professional contact details (e-mail/postal address and telephone number) to the Business and Knowledge Departments, the Directorate General of Industry and the Department of the Presidency of the Government of Catalonia (institutions to which the details are addressed), provided that the purpose of their processing has been duly justified by the institution to which the details are addressed and that this new purpose is compatible with the purpose for which the details were originally collected. If these requirements are met, ACCIÓ will be complying with current legislation on personal data protection.

In the event that you register for, participate in or are a speaker at any of the activities or services organised by our entity, ACCIÓ informs you that it may communicate your identification details (name and last name) and corporate/professional contact details (e-mail/postal address and telephone number) to the other registrants, participants or speakers of the activity or service, provided that you have expressly authorised this prior to the communication of the said details. You may revoke your consent any time by contacting our Data Protection Officer via their e-mail address dades.accio@gencat.cat.

In some co-organized activities and/or services (such as the Supplier Search Service, Brokerage Events, among others), there is a data transfer that is an indispensable part of these activities and/or services, which is based on the contractual relationship between you and the institutions responsible for processing. This data transfer consists of contacting clients, suppliers, and potential clients who participate in the aforementioned activities and services, as it is a necessary transfer to meet our obligation to provide the same or to ensure your participation, in accordance with your request.

The data controllers transfer your data internationally to countries without European-equivalent legislation ("Third Countries") in which the institution has offices. Your contact details are transferred solely for the purpose of providing access to the personnel of the data controller stationed at the overseas offices and who are subject to the policies of the data controllers regarding confidentiality and data protection. In undertaking these international transfers, the data controllers apply the guarantees established in the applicable legislation and only perform them in order to comply with their mission of public interest. You are also informed that the data controllers have contracted the services of technology providers located in third countries. These providers have been contracted by the data controllers in order to obtain the services necessary for the performance of their activities and they have entered into such confidentiality and data processing contracts with the data controllers as are required by law, and apply the guarantees and safeguards necessary to preserve your privacy.

Under no circumstances will the data controllers assign or transfer your personal data to companies or institutions other than those set out in this section entitled “Assignments and International Transfers” without your prior consent.

The data controllers will not take any decisions that may affect you based solely on the automated processing of your data. All the decision-making processes associated with the abovementioned processing purposes will be made with human involvement.

For further information regarding the guarantees of your privacy, you may contact the Data Protection Officer at the postal and email addresses provided.

Your personal data are kept for the duration of your relationship with the data controllers and, after termination of this relationship for any cause, for the legally prescribed periods applicable and/or the periods necessary to guarantee compliance with the data controllers’ mission of public interest.

Upon termination of your relationship with the data controllers, your data will be processed for the sole purposes of accrediting compliance with the legal or contractual obligations of the data controllers.

Once these prescribed periods have ended, your data will be deleted or, alternatively, anonymized. If you would like to know more about the deadline for processing your data, you can send a request to dades.accio@gencat.cat.

You may exercise your rights of access to, rectification, erasure and portability of, restriction of and/or objection to processing by contacting the Data Protection Officer at the postal and email addresses provided.

If you consider that the processing of your personal data breaches the legislation or your rights, you may file an objection with the data protection officers of the data controllers at the above addresses or with the Catalan Data Protection Authority by writing to its postal address at C/ Rosselló, 214, Postcode 08008, Barcelona (Spain).