Introduction
GenHERate IQ is an educational initiative of Carlos Simon Foundation for Research in Women’s Health, focused on advanced education in reproductive medicine and women’s health.
We are committed to protecting the privacy and personal data of users who visit our website, create an account, purchase educational programmes, subscribe to our communications, download educational materials or otherwise interact with GenHERate IQ.
This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, the parties with whom it may be shared and the rights available to you under applicable data protection law, including Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and applicable Spanish data protection legislation.
This Privacy Policy applies to genherateiq.com and to forms, communications and services that expressly refer to this policy. Specific services, including the GenHERate IQ learning environment, may provide additional privacy information where necessary.
Data Controller
The data controller responsible for the processing of your personal data is:
Carlos Simon Foundation for Research in Women’s Health
Tax ID: G98890437
Ronda Narcís Monturiol Estarriol, 11 C
46980 Paterna, Valencia
Spain
Privacy enquiries and requests concerning personal data may be sent to:
GenHERate IQ is an educational initiative of Carlos Simon Foundation for Research in Women’s Health and is not a separate legal entity.
Personal Data We Collect
Depending on how you interact with GenHERate IQ, we may collect the following categories of personal data.
Identification and contact information
This may include:
- First name and last name.
- Email address.
- Postal or billing address.
- Telephone number, where required.
- Country or location.
Professional and educational information
Where relevant to a form, programme or educational service, we may collect information such as:
- Professional profile.
- Professional speciality or area of work.
- Academic or research profile.
- Organisation or institution.
- Educational interests.
Account information
If you create an account, we may process:
- Account identifiers.
- Username or email associated with the account.
- Authentication information.
- Account preferences.
- Order and purchase history.
Passwords are stored using the security mechanisms provided by our website and account management systems and are not accessible to GenHERate IQ in plain text.
Purchase and billing information
When you purchase a course or other service, we may process:
- Name and billing details.
- Order information.
- Products or courses purchased.
- Transaction amount.
- Payment status.
- Invoice information.
- Tax-related information where applicable.
- Information necessary to manage refunds, cancellations or payment enquiries.
Payment card information is processed through specialised payment providers. GenHERate IQ does not normally receive or store your complete card number or card security code.
Marketing and communication information
We may process:
- Newsletter subscription status.
- Marketing preferences.
- Records of consent.
- Educational topics or programmes in which you have expressed an interest.
- Interactions with emails, where permitted by applicable law and your settings.
Form and enquiry information
When you contact us, request information, download a course brochure, apply to join our faculty or submit another form, we process the information you provide in that form and any subsequent communications related to your request.
Technical and usage information
Subject to your cookie preferences and applicable law, we may collect information relating to your use of the website, including:
- IP address.
- Browser and device information.
- Approximate geographical location.
- Pages visited.
- Referring page or source.
- Interactions with website elements.
- Session and navigation information.
- Course or content interests.
- Website performance and diagnostic information.
Further information about cookies and similar technologies is available in our Cookie Policy.
Special Categories of Personal Data
GenHERate IQ is an educational platform in the field of reproductive medicine and women’s health. However, our public website is not intended to collect personal health information, patient records, genetic data or other special categories of personal data through general contact, subscription or brochure download forms.
Please do not submit identifiable patient information, medical histories, diagnostic information, genetic information or other sensitive personal data through these forms.
If special category data are exceptionally required for a specific service or activity, appropriate information and a valid legal basis will be provided separately before such data are collected.
How and Why We Use Personal Data
We process personal data for the following purposes.
To provide our website and services
We may use your information to:
- Create and manage user accounts.
- Provide access to purchased products and educational services.
- Manage registrations.
- Process orders.
- Provide customer support.
- Respond to enquiries.
- Manage course-related communications.
The legal basis is generally the performance of a contract or taking steps at your request before entering into a contract.
To process course purchases and payments
We process personal data to administer purchases, issue invoices, verify payment status, manage refunds and comply with accounting and tax obligations.
The legal bases are the performance of a contract and compliance with applicable legal obligations.
To provide requested brochures and information
When you request a course brochure or other educational resource, we use the information provided to fulfil that request and send the requested material.
This processing is based on your request and, where applicable, on steps taken prior to entering into a potential contractual relationship.
Requesting a brochure does not by itself require you to receive marketing communications. Where we wish to send you future newsletters or promotional communications, we request consent separately.
To send newsletters and educational communications
If you have expressly consented, we may send you information about:
- New courses and educational programmes.
- Reproductive medicine and women’s health education.
- Scientific updates.
- Educational resources.
- Webinars and events.
- Relevant GenHERate IQ initiatives.
The legal basis for these communications is your consent.
You may withdraw your consent and unsubscribe at any time by using the unsubscribe link included in our emails or by contacting us.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
To operate and improve the website
We may process technical and statistical information to:
- Understand how our website is used.
- Identify technical errors.
- Improve website navigation and usability.
- Assess the performance of our content.
- Understand interest in courses and educational topics.
- Improve our digital services.
Where these activities use non-essential cookies, analytics technologies or similar identifiers, they are activated in accordance with your cookie choices and the consent requirements applicable to them.
To maintain security and prevent fraud
We may process technical and transactional information where necessary to:
- Protect user accounts.
- Detect fraudulent or abusive activity.
- Maintain website and payment security.
- Prevent unauthorised access.
- Establish, exercise or defend legal claims.
Where applicable, this processing is based on our legitimate interests in protecting our services, users and organisation, or on compliance with legal obligations.
Legal Bases for Processing
Depending on the processing activity, we rely on one or more of the following legal bases:
| Purpose | Legal basis |
|---|---|
| Account creation and management | Performance of a contract or pre-contractual measures |
| Course purchases and service delivery | Performance of a contract |
| Billing, tax and accounting | Legal obligation |
| Responding to enquiries | Pre-contractual measures and/or legitimate interests |
| Sending a requested brochure | Action taken at your request |
| Newsletter and marketing communications | Consent |
| Non-essential analytics and advertising technologies | Consent |
| Website and account security | Legitimate interests and/or legal obligation |
| Fraud prevention and legal claims | Legitimate interests and/or legal obligation |
Where processing is based on legitimate interests, we assess those interests against the rights and freedoms of the individuals concerned.
Marketing Communications
We only send electronic marketing communications where we have an appropriate legal basis to do so.
Where you subscribe to the GenHERate IQ newsletter or select a marketing consent checkbox, your contact details and relevant preferences may be added to our email marketing platform.
We currently use Brevo to manage subscriptions, mailing lists, automated emails and educational communications.
You may unsubscribe at any time using the link included in each marketing email.
We may retain a minimal record of your opt-out request to ensure that your preference continues to be respected.
Transactional or service-related communications, such as purchase confirmations, access information, requested brochures or essential account communications, are not considered marketing communications and may still be sent where necessary to provide a service you have requested.
Payments
Payments for GenHERate IQ courses and services may be made through the payment methods made available during checkout.
Depending on the method selected, payment information may be processed by Stripe and by payment service providers associated with the selected payment method, which may include:
- Credit or debit card providers.
- Apple Pay.
- Google Pay.
- Link.
- Klarna.
- Amazon Pay.
- Other payment methods made available through our payment infrastructure.
Bank transfer may also be offered as a payment method.
Payment providers may process information independently under their own privacy policies and legal obligations, particularly for fraud prevention, authentication, regulatory compliance and payment processing.
GenHERate IQ generally receives information necessary to confirm and administer the transaction, rather than the complete payment credentials used by the customer.
Cookies, Analytics and Similar Technologies
We use cookies and similar technologies to operate the website and, where you have provided the required consent, to understand its use and improve its performance.
Our website uses CookieYes to manage cookie preferences.
Depending on your choices, services used on the website may include:
- Google Analytics.
- Google Tag Manager.
- Google services associated with WooCommerce.
- Embedded YouTube content.
Google may receive technical information such as IP address, device information, browser information, page URL and interaction information when its services are enabled.
Non-essential analytics or marketing technologies are subject to the consent choices provided through our cookie management system where required by applicable law.
For detailed information about the cookies used, their duration, providers and purposes, please refer to our Cookie Policy.
Embedded Content and YouTube
Some GenHERate IQ pages may include embedded content from third-party services, particularly YouTube.
When you interact with embedded content, the relevant third-party provider may receive technical information concerning your device and interaction with that content and may use cookies or similar technologies in accordance with your consent settings and its own privacy terms.
Where required, non-essential third-party content and associated tracking technologies will be managed through our consent system.
Who We Share Personal Data With
We do not sell personal data.
We may disclose personal data only where necessary to operate GenHERate IQ, provide requested services, comply with legal obligations or protect our legitimate interests.
Recipients may include:
Technology and hosting providers
Providers responsible for website hosting, infrastructure, security, maintenance, content delivery and technical support.
Email and customer communication providers
Brevo and other providers necessary to deliver transactional or marketing communications.
Payment providers
Stripe and other banks, payment networks or payment method providers involved in processing your chosen payment method.
Analytics and technology providers
Google and other providers used for analytics, embedded content or technical functionality, subject to the applicable consent requirements.
Professional advisers
Legal, accounting, audit, insurance or other professional advisers where access to personal data is necessary for the services they provide.
Public authorities
Courts, regulators, tax authorities, law enforcement bodies or other competent public authorities where disclosure is required by law.
Our service providers are required to process personal data in accordance with applicable data protection requirements and the contractual arrangements governing their services.
International Data Transfers
Some of our technology providers operate internationally and may process personal data outside the European Economic Area.
Where a transfer of personal data to a third country takes place, we require an appropriate legal mechanism in accordance with applicable data protection law.
Depending on the provider and destination, these safeguards may include:
- An adequacy decision adopted by the European Commission.
- Standard Contractual Clauses approved by the European Commission.
- The EU-US Data Privacy Framework where applicable.
- Other legally recognised safeguards.
Further information about the safeguards used by a particular provider can be obtained from that provider’s privacy documentation or by contacting us.
How Long We Keep Personal Data
We retain personal data only for as long as necessary for the purpose for which it was collected and to comply with applicable legal requirements.
The applicable retention period varies depending on the type of information and processing activity.
Account and educational service information
Account information is generally retained while the account or relationship with GenHERate IQ remains active and subsequently for the period necessary to address legal responsibilities or claims.
Purchase and billing information
Information relating to transactions, invoices and accounting documentation is retained for the periods required by applicable accounting, tax and commercial legislation.
Newsletter information
Marketing information is retained while you remain subscribed.
If you unsubscribe, we may retain the minimum information necessary to demonstrate and respect your opt-out preference.
Brochure requests and enquiries
Information submitted to request a brochure or make an enquiry is retained for as long as necessary to process and follow up the request and subsequently for any period reasonably necessary to address related responsibilities.
Where you separately consent to marketing communications, your contact information may continue to be processed for that purpose until you withdraw your consent.
Analytics information
Analytics data is retained according to the settings and retention periods applicable to the relevant analytics service and your cookie preferences.
At the end of the applicable retention period, data will be deleted, anonymised or appropriately restricted where legal obligations require continued retention.
Your Data Protection Rights
Under the GDPR and applicable data protection law, you may have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete personal data.
- Request erasure of your personal data where the legal requirements are met.
- Request restriction of processing in certain circumstances.
- Object to processing based on legitimate interests.
- Request data portability where applicable.
- Withdraw consent at any time where processing is based on consent.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) if you believe that your personal data have been processed in breach of applicable data protection law.
To exercise your rights, please contact:
We may request reasonable information necessary to verify your identity before processing a request.
Profiling and Automated Decision-Making
GenHERate IQ may use limited segmentation based on information such as professional profile, course interests or interactions with educational content in order to organise audiences and provide more relevant communications.
We do not currently make decisions based solely on automated processing that produce legal effects or similarly significant effects on users.
If this changes, we will provide the information required by applicable law before such processing takes place.
Data Security
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
These measures include, where appropriate, access controls, secure communication protocols, account security measures, updates, backups and security monitoring.
However, no internet-based service can guarantee absolute security. Users are also responsible for protecting their login credentials and should not disclose their passwords to third parties.
Children’s Privacy
GenHERate IQ is primarily designed for professionals, researchers, clinicians, students and other individuals interested in advanced education in reproductive medicine and women’s health. It is not specifically directed at children.
We do not knowingly seek to collect personal data from children under the age at which they may legally consent to the relevant processing.
Where Spanish law applies, personal data processing based on a child’s own consent is generally permitted from the age of 14. Where the required legal age has not been reached, consent or authorisation from the holder of parental responsibility will be required where applicable.
If we become aware that personal data from a child have been collected without the required legal authorisation, we will take appropriate steps in accordance with applicable law.
Third-Party Websites
Our website may contain links to external websites, scientific resources, partner organisations or third-party platforms.
We are not responsible for the privacy practices of third-party websites that are not controlled by Carlos Simon Foundation for Research in Women’s Health. We recommend reviewing the privacy information provided by those organisations before submitting personal data to them.
Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our services, technologies, legal obligations or data processing activities.
The latest version will always be published on this page together with its most recent update date.
Where a change materially affects the way we process personal data, we will provide additional notice where required by law.
Contact
For questions about this Privacy Policy, the processing of your personal data or the exercise of your data protection rights, please contact:
Carlos Simon Foundation for Research in Women’s Health
GenHERate IQ
Ronda Narcís Monturiol Estarriol, 11 C
46980 Paterna, Valencia
Spain
