This privacy policy (the “Privacy Policy”) explains how EF CLIF collects, uses, and shares your personal data when you use this website. If you have any questions about our privacy practices or this Privacy Policy, please contact us using the contact details provided in Section 1 below.

1. Who is the data controller?

The data controller is the European Foundation for the Study of Chronic Liver Failure (“EF CLIF”) with address for contact purposes at:
- c/ Travessera de Gràcia, planta 7ª, 6, 08021 Barcelona (Spain);
- gdpr@efclif.com

1.1. Data Protection Officer (DPO)

EF CLIF has appointed a Data Protection Officer (DPO) who you may contact if you have any questions or concerns about our data protection policies and practices, or to exercise your rights as a data subject under applicable data protection legislation (see section 5). The DPO can be contacted at dpo@efclif.com.

2. What type of data do we collect?

2.1. Contact form or email

We may collect your identifying information (name and surname) and contact details (e-mail / phone number). In addition, we may collect any other information that you provide to us in your request, query, or message.

2.2. Cookies

EF CLIF uses, among others, analytical cookies to collect information about your use of our website and services. The information we collect through analytical cookies may include your IP address, browser type, operating system, device type, and clickstream data (such as the pages you view and the links you click). Please visit our Cookies Policy for more information.

2.3. Social media

EF CLIF has some social media accounts, such as Facebook, Twitter, and LinkedIn. When you interact with EF CLIF on social media, we may collect personal data such as your name, username, and any information you choose to share with us through your social media profile or message.

2.4. Score Calculator

Our score calculator tool does not collect, process, or store any personal data. The tool is designed to provide you with a calculation based on the parameters entered by you. No personal data will be collected or processed in connection with the use of the score calculator. Please note that the results provided by the tool are for informational and guidance purposes only and should not be relied upon without seeking professional advice.

3. For which purposes does EF CLIF process the personal data?

EF CLIF processes the personal data for the following purposes:

3.1. Contact form or email:

The information you share with EF CLIF in your message or query will be processed in order to provide you with the information or assistance that you have requested through our contact form or via e-mail.

3.2. Cookies

We use cookies for various purposes, as explained in our Cookies Policy.

We use technical cookies that allow the user to navigate through the website and use the different options or services that it offers.

We also use analytical cookies, which are a type of cookie that helps us measure how users interact with our website. For this reason, the information collected through our cookies is used to analyze trends, track users' movements around our website to generate statistics of use, and to gather demographic information about our users. All this information will be used to improve the usability of the website. Please visit our Cookies Policy for more information.

3.3. Social media

We use the personal data you decide to share with us on social media to communicate with you, to respond to your messages or comments, to generate reactions and to provide you with information about our activities. We may also use personal data collected through social media to improve our marketing efforts and to better understand our audience. However, please note that when you interact with us on social media, your personal data is accessed by the providers of the social media platforms, thus its processing subject to the privacy policies of the social media platforms themselves. We recommend that you review these policies before interacting with us on social media to understand how your personal data will be processed.

4. Which is the lawful basis to process the personal data?

4.1. Contact form or email:

The legal basis that allows EF CLIF to process the personal data is your consent given by completing and sending the form available on the website or by any other means available on the website.

4.2. Cookies:

The lawful basis for processing personal data through cookies may vary depending on the type of cookie and the specific purposes for which it is processed. In the case of technical cookies, the legal basis for the processing is the legitimate interest of EF CLIF. The use of technical cookies serves essential purposes such as ensuring the proper functioning of the website, enabling basic functionalities and remembering user express choices, such as language selection. These interests are considered reasonable and necessary for the company's operations. If you would like more information about how we’ve balanced our legitimate interests against your rights, please contact us at gdpr@efclif.com.

In the case of analytical cookies, your consent is the lawful basis for processing personal data. For this reason, we will ask for your consent via a cookie banner or pop-up on our website before placing on your device analytical cookies or any other type of cookies for which consent is required.

4.3. Social media

We process personal data through social media on the basis of your consent (when you decide to contact EF CLIF through these channels).

5. How long does EF CLIF retain the personal data?

5.1. Contact form or email:

Upon the request of information and/or suggestion has been answered, EF CLIF will retain your personal data until the end of statutes of limitation of any liabilities that may arise from processing your request or during the term required to comply with any applicable legal obligation.

5.2. Cookies:

Depending on the type of cookie, the length of time that your personal information is stored may vary. We use both session cookies and persistent cookies; session cookies expire when you close your web browser, whereas persistent cookies remain on your device until they expire, or you delete them. Our Cookie Policy specifies the length of time each cookie is stored. Cookies are automatically removed from your device when the storage period expires. You can also manually delete cookies at any time by modifying your browser settings (see our Cookie Policy for more information).

After that, EF CLIF will only use the statistical information gathered from these cookies. This statistical information is anonymized, meaning it does not contain any personally identifiable information.

5.3. Social media:

We will retain your personal data collected through social media for as long as necessary to fulfil the purposes for which it was collected or as required by law, whichever is longer. Please be aware that the length of time personal data is kept after being collected through social media depends also on the policies of the individual social media platforms. We advise you to read these policies to learn how your personal information will be handled and kept while you use the platform.

6. With whom does EF CLIF share the personal data? Does EF CLIF transfer the personal data to third countries outside the EEA (European Economic Area)?

6.1. Recipients of personal data

EF CLIF may share your personal data with service providers to perform their services (data processors), such as hosting or analysing the traffic in our website and providing with technical support. These data processors will only have access to the personal data necessary to perform their designated functions and are required to maintain the confidentiality and security of the personal data. We will ensure that any third-party service providers with whom we share your personal data are reputable and comply with applicable data protection laws.

6.2. Transfers to third countries

EF CLIF may transfer your personal data to data processors which provide hosting services and email marketing software that are located outside the European Economic Area (EEA), such as the United States of America

These countries may not have the same data protection laws as in the European Union. In such cases, we will ensure that appropriate safeguards are in place to protect your personal data, such as entering into standard contractual clauses approved by the European Commission (SSC). You have the right to obtain a copy of any such safeguards by contacting us using the contact information of our DPO (see Section 1.1).

7. Which are your data protection rights?

Below, you’ll find the rights you have as data subject and how you can exercise them:

Right	Content
Access	You may request confirmation as to whether or not your personal data is being processed and, if so, you can obtain access to your personal data included in EF CLIF files.
Rectification	You may request the rectification of your personal data if this is inaccurate.
Objection	You may request that your personal data is not processed in specific circumstances.
Erasure	You may request that your personal data is erased.
Restriction of processing	You may request a restriction on how personal data is processed when: - the accuracy of your personal data is being verified after you have contested its accuracy. - processing of your personal data is unlawful, and you oppose to its erasure. - EF CLIF does no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise, or defence of legal claims. - you have objected to the processing for the performance of a task carried out in the public interest or necessary for the purposes of a legitimate interest, whilst it is being verified whether the legitimate grounds of EF CLIF override yours.
Portability	You may request receiving in electronic file, the personal data you provided EF CLIF, as well as transmit it to other parties.
Withdrawal of consent	You may withdraw your consent without affecting the lawfulness of processing based on consent before its withdrawal.

You may exercise your data protection rights by sending a written communication to our Data Protection Officer dpo@efclif.com stating "Data Protection - Contact" as the subject of the communication. For these purposes, EF CLIF may request, when necessary, any information or documents to prove your identity.

In addition, you may lodge a complaint with the Spanish Data Protection Authority (www.aepd.es) or with any other data protection authority if you believe that the processing of your personal data infringes applicable data protection laws. However, we encourage you to contact us first in the event of any concerns about our processing of your personal data, so that we may work to address these.

8. How does EF CLIF protect your personal data?

EF CLIF takes reasonable and appropriate technical and organisational precautions to prevent unauthorised access, disclosure, alteration or destruction of your personal information. For example, restricting access to your personal information to those with a real business need and using appropriate technical and organisational security measures when transferring data, that may include encryption and/or password protection, regular security audits and that all employees and external service providers are aware of and comply with our data security and privacy rules. However, despite our best efforts, no security system is impenetrable to all threats.

9. Modifications to this Privacy Policy

This Privacy Policy may be modified from time to time to reflect changes in our data processing practices or to comply with legal requirements. Any updates to this Privacy Policy will be posted on this website and, if there are relevant or significant changes, a more prominent notice will be provided to the extent it is feasible (such as an email notification). However, we encourage you to review this Privacy Policy periodically to stay informed about how EF CLIF processes and protects your personal information. In the event of an update, if you continue to use this website, you acknowledge and agree to be bound by the updated terms.

Last updated: 10 May 2023