PRIVACY POLICY
1. Who is the controller of your personal data?
| Responsible | SPANISH CONFEDERATION OF FAMILIES OF DEAF PEOPLE |
| VAT number | G28738185 |
| Registered Office address | C/ PANTOJA, 5 – LOCAL, CP 28002, MADRID, Spain |
| [email protected] | |
| Phone | 915765149 |
| Controller of personal data | [email protected] |
2. What is the purpose of processing your personal data?
Depending on the category of data subject concerned, the SPANISH CONFEDERATION OF FAMILIES OF DEAF PEOPLE processes the information you provide for the following purposes:
| Data subjects | Purposes of processing |
| Prospective members | 1. To manage the potential commercial and/or professional relationship with prospective members. 2. To provide the information requested and/or respond to enquiries. 3. To send information about our services and/or projects that may be of interest to you. |
| Members | 1. To manage registration as new members, as well as accounting, tax and administrative matters. 2. To send information about our services and/or projects that may be of interest to you. 3. To comply with the obligations imposed by legislation on the prevention of money laundering and terrorist financing. |
| Suppliers | To manage the commercial and/or professional relationship. |
| Candidates | To manage the recruitment and selection process. |
| Website Users | To analyse your browsing data. |
| Contact | To handle requests, enquiries, complaints and suggestions submitted through the contact forms provided, including those relating to the whistleblowing channel. |
| Donors | 1. To process and complete the donation made. 2. To provide the information requested and/or respond to enquiries. 3. To comply with the obligations imposed by legislation on the prevention of money laundering and terrorist financing. |
3. What is the legal basis for processing your personal data?
The legal basis for processing your personal data may vary depending on the category of data subject concerned and may be as follows:
| Data subjects | Legal basis (Article 6 of the RGPD) |
| Prospect members | Article 6(1)(b) RGPD: taking steps at the request of the data subject prior to entering into a contract (e.g. quotations, engagement letters, service proposals, etc.). |
| Article 6(1)(f) RGPD: legitimate interests (e.g. providing the information requested and responding to enquiries). | |
| Article 6(1)(a) RGPD: the data subject’s consent (e.g. sending offers relating to our services and/or products). | |
| Members | Article 9(2)(a) RGPD: the data subject has given consent to the processing of their personal data for one or more specific purposes article 6(1)(b) RGPD: the processing is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the data subject’s request prior to entering into a contract. |
| Suppliers | Article 6(1)(b) RGPD: performance of a contract to which the data subject is a party. |
| Candidates | Article 6(1)(a) RGPD: the data subject’s consent. |
| Website Users | Article 6(1)(a) RGPD: the data subject’s consent. |
4. How long will we retain your personal data?
Your personal data will be retained for no longer than is necessary to duly provide the services offered, to discharge any liabilities or obligations that may arise in connection with the provision of such services, and to comply with any applicable legal or regulatory requirements.
5. To whom will your personal data be disclosed?
For the proper provision of the services, the SPANISH CONFEDERATION OF FAMILIES OF DEAF PEOPLE may disclose your personal data to third parties with whom it has entered into a data processing agreement, as well as to third parties providing legal services or other services necessary for the performance of audits.
We further inform you that, pursuant to applicable legislation or the contractual relationship maintained by the SPANISH CONFEDERATION OF FAMILIES OF DEAF PEOPLE, certain personal data may be disclosed to:
– Banks and financial institutions, for the collection of payment for contracted services and/or purchased products.
– Public authorities and administrative bodies with jurisdiction over the sectors in which the SPANISH CONFEDERATION OF FAMILIES OF DEAF PEOPLE operates, where disclosure is required under applicable legislation.
6. What are your rights when you provide us with your personal data?
Data subjects have the following data protection rights:
- The right to request access to their personal data;
- The right to request the rectification or erasure of their personal data;
- The right to object to the processing of their personal data;
- The right to request the restriction of the processing of their personal data;
- The right to data portability.
Data subjects may exercise their data protection rights by submitting a written request to the SPANISH CONFEDERATION OF FAMILIES OF DEAF PEOPLE’s registered office or by sending an email to the designated address, [email protected]. In either case, a copy of their National Identity Card (DNI) or other equivalent identification document must be provided.
Templates, forms and further information regarding data protection rights are available on the website of the Spanish data protection supervisory authority, the Spanish Data Protection Agency (Agencia Española de Protección de Datos, hereinafter, the AEPD): www.aepd.es.
Data subjects whose personal data have been obtained may exercise their data protection rights by submitting a written request to the SPANISH CONFEDERATION OF FAMILIES OF DEAF PEOPLE’s registered office in / PANTOJA, 5 – LOCAL, CP 28002, MADRID or by sending an email to the designated address: [email protected].
7. Can I withdraw my consent?
You have the right to withdraw your consent at any time in respect of any specific purpose for which it was previously given. Such withdrawal shall not affect the lawfulness of any processing carried out on the basis of your consent prior to its withdrawal.
8. Where can I lodge a complaint if I consider that my personal data are not being processed correctly?
If a data subject considers that their personal data are not being processed correctly by the SPANISH CONFEDERATION OF FAMILIES OF DEAF PEOPLE, or that a request to exercise their data protection rights has not been dealt with satisfactorily, they may lodge a complaint with the competent data protection supervisory authority. In Spain, the competent authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD). Further information is available on the AEPD’s website: www.aepd.es.
9. Security and updating of your personal data.
In order to safeguard the security of your personal data, we inform you that the SPANISH CONFEDERATION OF FAMILIES OF DEAF PEOPLE has implemented all necessary technical and organisational measures to ensure the security of the personal data provided, with the aim of preventing their alteration, loss and/or unauthorised processing or access, in accordance with applicable legislation, although absolute security cannot be guaranteed.
It is important that, in order for us to keep your personal data up to date, you inform us promptly of any changes to such data.
10. Confidentiality.
The SPANISH CONFEDERATION OF FAMILIES OF DEAF PEOPLE hereby informs you that your personal data will be processed with the utmost care and confidentiality by all personnel involved in any stage of the processing. We will not disclose or communicate your personal data to any third party, except where legally permitted or required, or where you have expressly authorised us to do so.