1. WHO IS THE CONTROLLER OF YOUR DATA?
The details of the controller and the Privacy Officer are shown below:
FUNDACIÓN MARÍA JOSÉ JOVE (“Foundation”)
Calle Galileo Galilei 6, Polígono de la Grela Bens, CP 15008 A Coruña
TIN [Spanish CIF]
Number 2003/3 of the Registro Único de Fundaciones de Interés Gallego
If you wish to contact the Privacy Officer, please send an e-mail to [email protected]
2. TYPE OF DATA COLLECTED BY THE FOUNDATION AND PURPOSES OF THE PROCESSING OF YOUR DATA
2.1 All the personal data provided through the Website will be included on the “Website Users” database under the control of the Foundation which are registered with the Processing Register.
2.2 Personal data is any information that allows to identify individuals. This can include information such as name, postal address, e-mail address or telephone numbers. We only collect the personal information willingly provided by the User through our Website.
2.3 In particular, the Foundation collects personal data of the User directly provided in his/her communications with the Foundation for the purposes of (i) process your request and/or your reservations, (ii) making or resolving any contact, incident or claim, (iii) selection of candidates, (iv) submitting queries about Foundation, its services and/or products and/or (v) providing Users with information about the activities that the Foundation carries out, its services and/or products, if Users expressly accept it.
2.5 The Foundation may enrich the Users’ personal data with non-identifying information gathered either from the User or the Website, as described above. In the event personal data are combined with non-personal information, combined information will be processed as personal data for the time it remains combined.
2.6 Any personal data processed by the Foundation may be used for the following purposes:
- Managing the appropriate operation of the Website and providing Users with the necessary tools to enjoy it.
- Analysing, improving and optimising the use of the Website.
- Providing Users with information about the activities that the Foundation carries out, its services and/or products, if Users expressly accept it.
- Resolving claims, incidents or queries through the channels provided to such end: contact form.
- Recruiting candidates.
- Sending Christmas or birthday congratulations messages.
2.7 Should the Foundation plan to subsequently process your personal data for any purpose other than those herein provided, you will be informed beforehand, including all the relevant information and the estimated consequences of such processing.
2.8 Bear in mind that you can object at any time to the processing of your data, by sending an e-mail to [email protected] with a copy of your DNI (proof of identity) attached, stating “ERASURE OF DATA” as subject line of such email, or giving written notice to the following postal address: Rúa de Laxe 122-124, Zapateira, CP 15174 Culleredo, A Coruña (Spain).
2.9 Foundation will store your personal data and may process them pursuant to the purposes set out above, provided that the data subject does not request the erasure of his data. In the event of deregistration, the Foundation shall store the remaining data blocked, in accordance with the security measures provided by statute, for the limitation period of any legal action or administrative proceedings which may be brought vis-à-vis Foundation.
3. LEGA BASIS FOR PROCESSING OF YOUR DATA
3.1 The legal basis to process personal data is our legitimate interest in allowing the browse the Website functionality.
3.2 When Users expressly agree to such processing upon completing the relevant forms providing their contact information with regard to potential queries or incidents.
4. WHO WE WILL SHARE YOUR DATA WITH
4.1 Data will be shared in accordance with the provisions of the applicable data protection regulations, and in particular, of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, (General Data Protection Regulation).
4.2 Data cannot be transferred to third parties. Foundation may only disclose any personal information of Users to public administrations where this is a statutory requirement under applicable laws.
5. USERS’ RIGHTS WITH REGARD TO THE DATA PROVIDED TO US
5.1 You may exercise at any time your right of access, to rectification, to erasure and/or to object, pursuant to the terms provided in applicable regulations. This means that Users can ask us about their personal data we hold, or to update them, or just that we delete all or some of their personal data from our files and databases.
5.2 Should any User object to the processing of his data, Foundation will cease processing them, except for legitimate grounds provided in applicable regulations or upon filing or defending potential claims.
5.3 In addition, Users may exercise the following rights vis-à-vis Foundation:
- The right to be forgotten. Users can request the erasure of their data where they are not accurate, are excessive or out-of-date.
- The right to data portability. Users can request a copy of all their data stored by Foundation, to migrate them to another platform of their choice.
- The right to restriction of processing. Users can (i) contest the accuracy of the personal data for a period enabling the controller to verify the accuracy thereof; or (ii) allege that the processing is unlawful and the User objects to the erasure of the personal data and requests the restriction of their use instead; in such case, Foundation shall only store personal data to lodge or defend complaints.
5.4 Should Users exercise any of the rights set out above, data will be blocked while Foundation verifies such exercise and certain circumstances of such rights. Foundation shall not be entitled to cancel or process such data in such period.
To exercise any of the above described rights, Users shall contact Foundation by sending an e-mail to [email protected], or giving written notice to the following postal address: Rúa de Laxe 122-124, Zapateira, CP 15174 Culleredo, A Coruña (Spain), stating “EXERCISE OF RIGHTS” as subject line of such email and stating in the request the specific right they wish to exercise, attaching a copy of their DNI or any other proof of identity, as well as the minimum contents provided in applicable regulations. If such request does not meet the requirements stated, the Foundation may request that it be remedied. No compensation will be asked with regard to the exercise of such rights. Likewise, Users are informed that they have the right to lodge a complaint with the Spanish supervisory authority [Agencia Española de Protección de Datos] or any other relevant supervisory authority in the event of an inappropriate processing of their personal data.
6. ADDITIONAL INFORMATION
6.1 Quality of data
Users represent and warrant to Foundation and to third parties, that they have provided information of quality, i.e., that the data and the information provided are real, accurate, up-to-date and that they are their property, not the property of third parties. By submitting your personal data to Foundation, as well as to any third-party, you represent and warrant to Foundation and to third parties that your data are true and meet the principle of quality.
Provision of false or out-of-date data is forbidden. Users shall always identify themselves with their real name and accurate data. Foundation reserves the right to verify such information at any time, requesting that Users provide an official proof of identity.
Please report immediately to Foundation any changes to your personal data to ensure that the information is always kept in the files updated and correct.
6.2 Third-party links
6.3 Security measures implemented by Foundation to ensure the integrity of your data
The Foundation strives to ensure the security and confidentiality of your data and personal information. We have taken a large number of security measures and technical precautions to prevent the loss, misuse or access to your data without your authorisation.
However, Users shall also control their personal information. For such reason, we kindly recommend and ask you to be careful with the information and contents that you share and with whom you share it. Foundation will not control the contents and information that you decide to share with other Users. We do not accept any responsibility or liability for the consequences of your actions.
Foundation undertakes to take immediate and responsible action should the security of your data be compromised, and to duly apprise you of such fact should this be relevant.
In the event of any breach of the security of your data, Foundation undertakes to report it with the Agencia Española de Protección de Datos within 72 hours. Likewise, should this breach seriously infringe on the Users’ rights or freedom, Foundation would apprise them of such infringement stating the measures it has taken to minimize risks and any potential loss.
6.4 International data transfers
Foundation might make a single international data transfer to the company Google, Inc. in order to use Google e-mail service. This is a lawful and safe data transfer as Google, Inc. warrants a level of data protection equivalent to that of the European Union.