Personal data protection
Who is responsible for processing the data from the Scientific Output Portal?
Universitat Pompeu Fabra
Pl. de la Mercè, 10-12. 08002 Barcelona. Tel. (+34) 93 542 20 00
You can contact the UPF’s data protection officer through dpd@upf.edu.
For what purpose is personal data from the Scientific Output Portal processed and for how long?
Data is processed for the purpose of disseminating the scientific output of the University’s research staff. Equally, PPC enables UPF researchers to work on and manage their curriculum vitae. All data is stored until the interested party requests it be deleted.
On what grounds is personal data processed?
Personal data from the Scientific Output Portal is processed with the public interest in mind. Organic Law 6/2001, of 21 December, on universities, in its first article, gives universities the function of disseminating, valorising and transferring knowledge in the service of society, and in article 41, the creation of systems that promote research activities and the transfer of their results. Furthermore, Law 1/2003, of 19 February, on Catalan universities recognises as one of the basic goals of universities the creation, transmission and dissemination of culture; and scientific, humanistic, technical and professional knowledge (article 3.1a). In addition, Law 14/2011, of 1 June, on science, technology and innovation encourages public administration to undertake actions of valorisation and transfer of knowledge emerging from research (article 35). Finally, Law 19/2013, of 9 September, on transparency, access to public information and good governance, establishes that public organisms, including universities, “shall publish regular and updated information, knowledge for which is relevant in guaranteeing the transparency of their activity related to the functioning and monitoring of public activity” (article 5.1).
In this context, the Scientific Output Portal constitutes a tool for the dissemination of UPF researchers’ scientific output, as well as a support tool for researchers for managing their curriculum vitae.
The PPC processes researchers’ identification and personal data, workplace data, data on researchers’ publications, research grants, congresses in which they have participated, theses they have supervised, prizes won, etc.
The PPC only includes personal data for those researchers who have requested it and contains the data provided by the researcher, as well as data from the University’s own files.
To whom can personal data be provided?
If a researcher chooses to make their PPC profile public, the basic identification data, publications and other research activities can be freely consulted on the Internet through the platform itself. This information is also accessible through the UPF’s Directory of experts, through the Catalan Research Portal, coordinated by the CSUC on behalf of the participating universities; and can be viewed on other web pages of the University at the request of the interested parties.
In compliance with the regulations on transparency and good governance (Catalan Law 19/2014 and State Law 19/2013), data can also be disseminated online in the event that grants are awarded by the University.
Data can be given to public assessment bodies with the interested party’s prior consent; as well as to public organisms if required for establishing legal relations with the researcher, for example, to process and justify official scholarships and grants or, for administrative procedures, as stipulated in article 28 of Law 39/2015 on common administrative procedure of public administrations.
Data can be transferred for scientific or historical research purposes or for the purpose of statistics, in accordance with article 89 of the General Data Protection Regulation; in other words, provided there are sufficient guarantees of the rights and freedoms of the interested parties and legal grounds as provided for by law.
In addition to these circumstances, data can also be provided whenever there is a legal obligation to do so.
International data transfers can be undertaken to information society service providers of the United States contracted by the University that are part of the Privacy Shield framework or which offer sufficient guarantees, in accordance with article 46 of the General Data Protection Regulation.
What rights do the interested parties have with respect to their personal data?
You can exercise your rights to access, rectify, delete, transfer, limit or oppose data processing by communicating this in writing to the following email : gerencia@upf.edu.
Furthermore, if you believe that your rights have not been fully observed, you have the right to file a complaint to the Catalan Data Protection Authority:
