1. Data Controller
CELLS (Consortium for the Construction, Equipment and Exploitation of the Synchrotron Light Source) also known as: “ALBA Synchrotron”
Address: Carrer de la Llum, 2, 26, 08290 Cerdanyola del Vallès, Barcelona, Spain
If applicable, you may contact our Data Protection Officer (DPO) at: dpo@cells.es
2. Purpose of Processing
We process personal data to:
- Manage user access to ALBA Synchrotron facilities and scientific beamlines.
- Support proposal evaluation, experiment scheduling, and scientific collaboration.
- Ensure operational security of the infrastructure, including access control and surveillance.
- Comply with legal, administrative, and reporting obligations applicable to public research institutions.
3. Categories of Personal Data
Depending on your interaction with ALBA Synchrotron, we may process:
- Identification data: name, institutional affiliation, ID/passport information (where required).
- Contact information: email, phone number.
- Professional or scientific data: research proposals, collaborators’ affiliation, scientific publications linked to ALBA Synchrotron.
- Technical data: IP address, device information.
- Security data: facility access records, CCTV footage.
4. Legal Basis
Processing is based on:
- Performance of a contract (management of user access and scientific services).
- Compliance with legal obligations applicable to public research infrastructures.
- Legitimate interests, including facility security, project coordination, and scientific integrity.
- Consent, when required for specific activities.
5. Data Recipients
Data may be shared with:
- Partner research institutions and scientific collaborators involved in approved projects.
- Public authorities when legally required.
- Technical service providers offering secure IT, authentication, communication, and operational services.
All third‑party recipients operate under GDPR‑compliant safeguards.
6. International Data Transfers
If any transfer outside the UE occurs, ALBA Synchrotron ensures:
- Adequacy decisions,
- Standard Contractual Clauses (SCCs), or
- Equivalent safeguards ensuring adequate protection.
7. Data Retention
Data is retained only as necessary to fulfil the purposes described or to meet legal obligations, considering:
- Project and experiment lifecycle,
- Institutional reporting requirements,
- Applicable archiving rules for publicly funded research.
8. Your GDPR Rights
You may request:
- Access to your data
- Rectification or erasure
- Restriction of processing
- Objection
- Portability (when applicable)
- Withdrawal of consent
9. Automated Decision‑Making
ALBA Synchrotron does not use your data for automated decision-making or profiling that produces legally significant effects.
10. Contact for Rights Requests
To exercise your rights, please, contact our Data Protection Officer at: dpo@cells.es
