Version 2.0 of September 29, 2022

1. Introduction
2. Glossary
3. What Personal Data do we collect, how we use it and on what basis
4. Data Collection and Transfer Technologies
5. Who are the recipients of your Personal Data
6. Safety
7. What are Your rights
8. How long do we store your Personal Data
9. Warranties

1. Introduction
   1. Education and Training Platform for Laboratory Animal Sciences (hereinafter referred to as “ETPLAS”) strongly believes in protecting the confidentiality and security of the Personal Data of the people with whom it relates in the exercise of its activity. ETPLAS expresses its firm commitment to comply with current legislation in the processing of Personal Data in accordance with this Privacy Policy.
   2. ETPLAS is the entity responsible for processing your Personal Data.

      You can contact us via the following means:

      Address: Royal Society of Biology, Charles Darwin House, 12, Roger Street, London, WC1N2JU

      Email: secretary@etplas.eu

   3. The Personal Data that will be processed and the way in which it will be processed depends to a large extent on the services requested by you and agreed with you. This Privacy Policy applies to the processing of Personal Data of our Customers and Users of our website https://etplas.eu/ (hereinafter referred to as “Website”).
   4. ETPLAS respects the privacy of the individuals with whom it interacts in the exercise of its activity and protects their Personal Data. Most of the Website can be browsed without your need to share any information. This document informs you of the use that ETPLAS makes of your Personal Data whenever necessary to provide its services. Concerning our use of cookies, please read our Cookie Policy.
   5. The Website may occasionally contain links, banners or other hypertext links to websites and services of other companies, which have their own privacy policies, and/or services provided by third parties installed on your device that may allow access to information contained therein. We encourage Users of our website to carefully read the privacy policies of such third parties before submitting any Personal Data to those websites. ETPLAS has no control over the content of these websites and is therefore not responsible for the content of the privacy policies of these third parties or for the handling of your Personal Data by them.
   6. ETPLAS reserves the right to modify the Privacy Policy considering new legal and/or regulatory requirements, for security reasons or for the purpose of adapting this Privacy Policy to the instructions of administrative or judicial authorities.
   7. This Privacy Policy applies to any processing of Personal Data carry out by ETPLAS related to the provision of its services and to the use of the Website. When using the Website, You must additionally consult its Terms and Conditions.
   8. Whenever any change is made to this Privacy Policy, You will be informed of the changes through the Website or, if justified, through a communication, and will be asked to renew your consent to the updated Privacy Policy.
2. Glossary
   1. Whenever beginning with a capital letter, the following terms will have the following definition:
      • Clients: means data subjects who are customers to whom ETPLAS provides services during its activity. Also, Customers shall be considered an User during their interaction with the Website and shall be considered a Newsletters’ Subscriber when he/she subscribes an ETPLAS’ newsletters.
      • ETPLAS: means the entity responsible for processing your Personal Data. It shall be also referred to as “We”.
      • Newsletter’s Subscribers: means data subjects who subscribe ETPLAS’ newsletters by express consent. Also, Newsletter’s Subscriber shall be considered an User during their interaction with the Website.
      • Personal Data: means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
      • Users: means anyone who accesses and interacts with the Website.
      • Website: means the website https://etplas.eu/.
      • “You”: means the User or the Customer.
3. What data do we collect, how we use it and on what basis
   1. ETPLAS collects different types of Personal Data for different purposes, as explained below. In any case, we emphasize that we do not intentionally collect Personal Data from persons under 18 years of age. In case we detect that we involuntarily collected personal information from anyone under the age of 18, we will take the necessary steps to delete the information as quickly as possible, unless we are required by applicable law to retain it.
   2. ETPLAS collects personal data according to:
      • CLIENTS: We only collect Personal Data necessary for the preparation, fulfilment and execution of any agreement entered into between the Client and ETPLAS, as well as to respond to any subsequent complaints regarding the same, namely: – Identifying data: such as name, date of birth, photography, and contact details (phone and email); – Academic/Professional data: information related to your education and Curriculum Vitae; – Authentication data: such as Your User ID and password for You to log-in the Website; – Payment’s information: information related to your bank and credit card. If, for any reason, we need any additional Personal Data, You will be informed.
      • USERS: We only collect the Personal Data necessary to ensure a good experience using the Website and to allow You to enjoy all the potential and faculties provided by it. This includes information such as how You use our website, the services You view, which websites or search terms brought You to our Website, how often You access it, your browser type, your IP address, the location from which You browse our website, the language You choose to view it and the times when our Website is most popular. This information is collected through different technologies, better described in section 4. of this Privacy Policy.
      • Location data: IP address
      • Cookies: functionality cookies; performance cookies; proof of cookie acceptance.
      • Newsletters’ Subscribers: All services that include automated emails (newsletters) are only activated after your prior express consent. If You agree on receiving our newsletters, You will need to give us your email. You shall always have an option to unsubscribe the newsletters. – Identifying data: email; proof of newsletters acceptance.
4. Data Collection and Transfer Technologies
   1. Cookies: The Website uses cookies. Cookies are data files that are placed on your device. The information they collect is used to verify the usefulness and ease of use of our website and to verify that you have permission to access certain services. You can find out more about what cookies are at www.allaboutcookies.com. If You prefer not to receive cookies when visiting the Website, You can configure your browser to warn before registering a cookie on your hard drive, and refuse it when its presence is detected. You may use the Cookie Bot. You can also refuse all cookies if You configure your browser. Please note that you may need to enable some cookies that are necessary. Please see our Cookies Policy here.
   2. “Log Files”: record the actions that take place on the Site and collect data such as IP address, browser type, internet provider, reference or exit pages and information and date/time stamp.
   3. Google Analytics: is a software that compiles data from Users of the Website. Google Analytics compiles data such as, for example, which website the You came from, how long You stayed on the Website, what type of computer and browser You are using. The tracking information collected by Google Analytics allows us to better understand the type of Users who visit the Website and what content they are reading. This allows us to make better decisions about the design and content of our Website. We will occasionally compile aggregated statistics about the number of visitors the Website receives, and the browsers being used. No personally identifiable data is included in this type of report. All of our activity falls within the limits of the Google Analytics Terms of Service. You can also choose to deactivate Google Analytics here.
5. Who are the recipients of your Personal Data
   1. Personal Data is not shared with third parties without your prior and express permission, unless we are obliged to do so by applicable law.
   2. However, prior express permission may be requested from the User to authorize ETPLAS to give the User’s personal information to third parties, only and when necessary to provide the service requested, and the User is guaranteed that only the minimum information necessary to satisfy the request is shared, restricted only to the data necessary for the execution of the contracted tasks.
   3. ETPLAS also guarantees that these third parties are committed, under current legislation, not to reveal, in any way, Personal Data, nor to use them for purposes other than the provision of contracted tasks.
   4. Likewise, ETPLAS may communicate your Personal Data, when so determined by law, in the context of legal proceedings or in the context of investigations of suspicious activities.
   5. ETPLAS will in no case carry out international transfers of your data to a third country or international organization located outside the European Union.
6. Data Security

   Data security is guaranteed through appropriate technical and organizational measures.

   1. Without prejudice to these guarantees, You should always take all precautions to protect your Personal Data while You are using the internet, including frequently changing passwords and ensuring the use of a browser that allows the use of SSL communication.
   2. The Website is protected by a secure hypertext transfer protocol (HTTPS) which is currently the most secure version of the data transfer protocol between computer networks on the internet, as it encrypts data provided, and guarantees the security of the data sent and received by the User.
   3. If You registered on ETPLAS’s Website, your data will be registered on ETPLAS’ servers, which are always protected by a login and password. Although ETPLAS makes every effort, it cannot guarantee the security of the information that is transmitted, namely by intrusion by third parties (hackers). In order to better guarantee your security, we advise You to regularly change your password to access the Website.
   4. Personal Data will not be sold or rented.
   5. However, any breach of Personal Data that may result in a risk to your rights and freedoms will be notified to the competent supervisory authority, after ETPLAS becomes aware of it.
7. What are Your rights
   1. In accordance with applicable law, ETPLAS undertakes to respect the confidentiality of your personal information and ensures that You may exercise your rights, namely:
      • Right to be informed: You have the right to obtain clear, transparent and understandable information about how ETPLAS uses your Personal Data. This is why we provide You with this Privacy Policy.
      • Right to access and data portability: in addition to the right to information, You will be able to access your Personal Data that we process. In these cases, ETPLAS will provide You with a copy of the Personal Data that is being processed. Furthermore, when you request it through electronic means, the information will be provided in a commonly used electronic format.
      • Right to rectification: You have the right to rectify your Personal Data if it is incorrect, out of date or if you wish to complete it. To do so, You can contact us to: secretary@etplas.eu.
      • Right to delete and right to be forgotten: You can ask us to delete your data, however, please note that this is not an absolute right as we may have legal grounds or other legitimate interests for retaining your Personal Data.
      • Right to object, including direct marketing: You can choose to be removed from our direct marketing communications at any time. The easiest way to do this is by clicking “unsubscribe” in any email or direct marketing communication or You can also contact us for this.
      • Right to withdraw your consent at any time: You can withdraw your consent to data processing when such processing is based on your consent. Withdrawal of consent does not affect the legality of processing based on your consent prior to withdrawal.
      • Right to file a complaint with the national competent authority: if You believe that the processing of your Personal Data carried out by ETPLAS violates applicable data protection legislation, You may file a complaint with the Agencia Española de Protección de Datos: – Website: https://www.aepd.es – Address: Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001, Madrid – Contact: 0034.901.100.099 | 0034.912.663.517 Don’t hesitate to contact us before submitting any complaint to the AEPD.
      • Right to restrict the processing of your data: You have the right to request restriction of the processing of your data in the following situations: if You dispute the accuracy of the data, if the processing is unlawful and you do not want to erase your data, but only limit its use, if the data is no longer necessary to ETPLAS or if You have exercised the above-mentioned right of objection, during the period of time in which ETPLAS analyses whether or not your legitimate interests in the processing prevail over that right.
   2. To request the exercise of any of the rights listed above, in addition to the forms specifically referred to in the respective paragraphs, You may send a letter to the address identified above or send an email to the email address also mentioned above. You can also use the email address above if You want to ask us any questions regarding this Privacy Policy.
8. How long do we store your data
   1. ETPLAS only keeps Personal Data for the time necessary to achieve the purpose for which it was collected, to respond to your needs or to comply with our legal obligations.
   2. To determine how long we keep your data, we use the criteria set out below. If several criteria are applied simultaneously, we will keep your Personal Data in accordance with the criteria that imply the retention of your Personal Data for the longest period:
      • When purchasing services, we will retain your Personal Data for the duration of our contractual relationship, including any claims that may arise, as well as for a period of two years after its termination, without prejudice to the fulfilment of legal obligations of the responsible for the processing;
      • When You contact us with questions, we will retain your Personal Data for as long as necessary to resolve your question;
      • When You register on the Website, we will keep your data until You ask us to delete it oy You remove your account;
      • Once you have consented by sending your disclosure, we will retain your Personal Data until you unsubscribe or ask us to delete it; or
      • Until the specific purpose applicable to certain data ceases to exist.
   3. In any of these situations, if there is a pending judicial or administrative proceeding, the data will still be kept for the duration of the process and up to six months after the final decision is rendered.
   4. We may also retain some of your Personal Data to the extent necessary to comply with our legal obligations, as well as to manage or enforce our rights, namely through legal recourse.
   5. After the above-mentioned conservation periods, the Personal Data will be erased and/or erased in a secure way.
9. Warranties
   1. You warrant that the Personal Data that you communicate to ETPLAS is correct and accurate, and furthermore undertakes to notify any changes or modifications to this data and assumes exclusive responsibility for damages caused by erroneous, inaccurate or incomplete data communication.
   2. You are expressly warned that when disclosing Personal Data via ETPLAS’s social media platforms, such as Facebook and Instagram, this information may be seen and used by third parties. ETPLAS does not read any personal communication published on its visitors’ own websites.