This policy explains how Fundació Balear d’Innovació i Tecnologia (Fundació BIT) processes personal data across all its portals, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on data protection and digital rights (LOPDGDD). We apply privacy by design and by default: we only collect the data we need and protect it with appropriate security measures.
1. Data controller
- Owner
- Fundació Balear d’Innovació i Tecnologia (Fundació BIT)
- Tax ID (NIF)
- G57775884
- Address
- Carrer Laura Bassi, 1, Centre Empresarial Son Espanyol (ParcBIT), 07121 Palma (Illes Balears)
- Phone
- 971 176 060
2. What data we process and why
- Contact, suggestion and complaint forms: to handle and answer your request.
- Event registrations and room bookings: to manage the registration or booking, send confirmations and reminders, and control capacity and access.
- Applications to programmes and facilities (Emprenbit, ParcBIT, CentreBIT): to assess and follow up the application and, where appropriate, formalise the relationship.
- Private area: to manage your account, sign-in (including two-step verification), company profiles and the requests you make.
- Newsletters: to send you information about our activities if you asked for it. You can unsubscribe at any time from the link in every mailing.
- Virtual assistant: to answer your questions. Please do not enter personal data that is not needed.
- Security and statistics: technical and security logs and aggregated usage statistics, always with pseudonymised IP addresses.
3. Legal basis
We process data with your consent (article 6.1.a GDPR), to perform a contract or take pre-contractual steps at your request (6.1.b), to comply with legal obligations (6.1.c), in the exercise of the foundation’s public-interest tasks (6.1.e) and, for the security of our systems, on the basis of legitimate interest (6.1.f). You can withdraw your consent at any time without affecting the lawfulness of prior processing.
4. Retention
We keep data for as long as needed for the purpose for which it was collected and then for the periods required by law (for example, regarding grants, public procurement, transparency and archives). Security and activity logs and consent records are kept for the periods configured in the portal and are then deleted automatically.
5. Recipients and transfers
We do not disclose data to third parties, except where required by law or necessary to provide the service you requested. Our providers act as data processors (hosting in the European Economic Area, e-mail delivery, newsletters) under contracts that guarantee confidentiality and security. Artificial intelligence features work with anonymised data; if a provider may involve international transfers, they take place with the appropriate safeguards of chapter V GDPR (adequacy decisions or standard contractual clauses).
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and not to be subject to automated individual decisions, by contacting the controller through the channels in section 1 or the data protection officer. If you have a private area account, you can also download your data or request its erasure from your profile. If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Security
We apply technical and organisational measures appropriate to the risk: encrypted connections (HTTPS), encryption of sensitive data, two-step verification for staff with back-office access, role-based access control, activity logs, backups and regular updates.
8. Cookies
Information about cookies is available in the Cookie policy.
9. Changes
We may update this policy to reflect legal or service changes. The version in force is always the one published on this page.