Privacy policy | Fundació Catalunya La Pedrera

DATA CONTROLLER

The company responsible for processing your data according to this Privacy Policy is:

FUNDACIÓ CATALUNYA LA PEDRERA

NIF: G65345472

Address: Pg de Gràcia, 92 - 08008 Barcelona (Barcelona)

E-mail address: lopd@fcatalunyalapedrera.com

Website: www.fundaciocatalunya-lapedrera.com; www.lapedrera.com; www.monnaturadelta.cat; www.monnaturapirineus.com; www.biysc.org; www.hemeroteca.cat; www.monsantbenet.com; www.omsideprat.com; donatius.fundaciocatalunya-lapedrera.com/; bojos-ciencia.fundaciocatalunya-lapedrera.com/; jovesiciencia.fundaciocatalunya-lapedrera.com/; campus-natura.fundaciocatalunya-lapedrera.com/; ciencia-alimentacio.fundaciocatalunya-lapedrera.com/; joves-medicina.fundaciocatalunya-lapedrera.com/; fellows.fundaciocatalunya-lapedrera.com/; ketoalicia.fundaciocatalunya-lapedrera.com/; somnis.fundaciocatalunya-lapedrera.com/; impactesocial.fundaciocatalunya-lapedrera.com/

Registered in the Register of Foundations of the Government of Catalonia on 23 January 2013 with number 2756

At FUNDACIÓ CATALUNYA LA PEDRERA, we recognise the importance of protecting your personal information and we are committed to processing it responsibly and in compliance with the data protection laws.

The purpose of this privacy policy is to regulate all the aspects relating to the processing of data of the different users browsing the website or providing their personal details on the different forms to be found on it.

PERSONAL DATA

Personal Data is the information that identifies you or may identify you. Through the website, in the boxes that are stablished for that purpose, it is collected the personal data that the User provides us: Name, surname, email, telephone number, postal code, city, etc. In addition, it is collected all the personal data that the User voluntarily provides us through any of the social networks, of which the User is registered. In this case, the privacy settings will depend on both the configuration that the User established as well as the terms and conditions of the social network itself.

When a user visits the website, this does not mean that he/she has to provide any information about his/her personal data. However, if such information is provided, the data will be processed lawfully and subject at all times to the principles and rights contained in the GDPR 2016/679 of 27 April 2016 and the LOPDGDD 3/2018 of 5 December.

PURPOSE, DURATION AND LEGITIMATION OF THE PROCESSING

We will process the data provided to us by the user for the following purposes:

-To deal with the user’s application or request made using the contact form on the website. We collect and process the user’s personal data to enable us to process and manage his/her application, query or any request made using said form. We will keep these data for the time necessary to comply with the request and for the time established by law, with a minimum duration of 3 years.

The basis for legitimation of the data processing will be the consent granted by the user when checking the box for acceptance of our privacy policy before sending the request. The user has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.

-To deal with the user’s application or request made using the voluntary form on the website. We collect and process the user’s personal data to enable us to process the enrolment in the volunteer program. We will keep these data for the time necessary to comply with the request and for the time established by law, with a minimum duration of 3 years.

-To manage the competitions and draws organised on the website. We collect and process the user’s personal data to enable us to manage his/her participation in the different draws or competitions organised by the controller and to communicate subsequently with the winners. We will keep these data for as long as the competition or draw is in progress and for subsequent exposure, as determined in the competition rules, and for the time established by law with a minimum duration of 3 years.

The basis for legitimation of the data processing will be the consent granted by the user when completing the participation form on the website and checking the box for acceptance of our privacy policy and for the rules of the competition or draw. The user has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.

-To manage the user’s registration and participation in the blog comments form on the website. These comments will be managed by the WordPress platform. We will keep the data given to us for as long as the user does not request cancellation of his/her subscription to the blog content, for the time established by law, and for a minimum duration of 3 years.

The basis for legitimation of the data processing will be the consent granted by the user when registering through the blog subscription form and checking the box for acceptance of our privacy policy before sending the request. The user has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.

-To send circulars and newsletters about FUNDACIÓ CATALUNYA LA PEDRERA products. When we have the user’s consent, we collect and process his/her personal data to send him/her information about our products and services. We will keep these data for as long as the user does not revoke his/her consent to them being processed, for the time established by law and for a minimum duration of 3 years.

The basis for legitimation of the data processing will be the consent granted by the user when checking the box for acceptance of our privacy policy before subscribing to the newsletter in the form provided for this purpose on the website. The user has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.

According to Article 45 of the GDPR, the personal data will be processed by data processors located in countries that guarantee an adequate level of data protection under an adequacy decision taken by the European Commission, so that there are no risks to the processing.

-To improve the user experience when browsing the website. We will keep these data for as long as the user does not revoke his/her consent to them being processed by deleting the cookies, for the time established by law, and for a minimum duration of 3 years.

The legitimate basis for improving website browsing is the consent given by the user when accepting the cookies. The user has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.

-To manage our social networks and send users information about our activities and products. We will keep these data for as long as the user does not revoke his/her consent to them being processed, for the time established by law and for a minimum duration of 3 years.

The legitimate basis for managing our social networks and sending users our activities and new features is the consent we are given to do so. The user has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.

-To manage the donations made by the user using the donations form on the website. We collect and process the personal data of the user to handle and manage the application through the donations form or the form to be member. We will keep these data for as long as it is necessary to comply with the request and for the time established by law, and for a minimum duration of 3 years.

The legitimate basis of the processing of the data will be the consent given by the user to check the box of acceptance of the Terms and Conditions of the donation, legal notice, and privacy policy. The user has the right to revoke the consent at any time without this affecting to the lawfulness of the processing based on the consent prior to its withdrawal.

-To manage the registration and development of programs and activities of FUNDACIÓ CATALUNYA LA PEDRERA carried out by the user through the registration form located on the website. We collect and process the user's personal data to process and manage their application, made through the registration form for the program. We will keep this data for the time necessary to comply with the user’s request and for the time established by law, and for a minimum duration of 3 years.

The legitimate basis of the processing of the data will be the consent given by the user to check the box of acceptance of our privacy policy and conditions of the program before sending the request. The user has the right to revoke his consent at any time without this affecting the lawfulness of the processing based on the consent prior to its withdrawal.

-Manage the ticket sales to our activities, programs and/or services available in the web. We collect and process the personal data of the user to correctly manage its purchasing, as well as the prior management of any incident related to it. These data will be kept during the time necessary to comply with the user’s request and for the time established by law, and for a minimum duration of 3 years.

The legitimate basis of the processing of the data will be the consent given by the user when fulfilling the purchasing form enabled for this purpose in the web and, by checking the box of acceptance of our privacy policy and the purchasing terms and conditions. The user has the right to revoke his consent at any time without this affecting the lawfulness of the processing based on the consent prior to its withdrawal.

-To attend the query or request made by the user through the WhatsApp contact located on the webpage. If, to process and manage the user’s request, personal data had to be collected and/or processed, these data will be kept during the time necessary to comply with the user’s request and for the time established by law, with a minimum duration of 3 years.

In accordance with the provisions of Article 45 of the GDPR, it is reported that the WhatsApp application belongs to a third party and therefore the relationship with it will be governed by its terms of use and privacy policy.

The legitimate basis of the processing of the data will be the consent given by the user by clicking on the Open WhatsApp box by sending us your query or request with a clear positive action and referral to our privacy policy for reading and knowledge about the processing of the data. The user has the right to revoke his consent at any time without this affecting the lawfulness of the processing based on the consent prior to its withdrawal.

-To Manage the use of the Fellows Platform. We collect and process the personal data of the users to correctly provide this platform services, as well as the prior management of any incident related to it. These data will be kept as long as the user does not request cancellation of his/her account and for the time established by law, and for a minimum duration of 3 years.

The legitimate basis of the processing of the data will be the consent given by the user when the activation of their profile and, by checking the box of acceptance of our privacy policy and the terms and conditions of the Fellows Platform. The user has the right to revoke his consent at any time without this affecting the lawfulness of the processing based on the consent prior to its withdrawal.

When you browse our website you will find a link to the FUNDACIÓ CATALUNYA LA PEDRERA’s Ethical and Whistleblower Channel, once you access it you will have to read the policies you can find on the platform.

ASSIGNMENT OR COMMUNICATION OF PERSONAL DATA AND INTERNATIONAL TRANSFERS

Your data will not be communicated or transferred to third parties unless there is a legal obligation, to those entities of the group for administrative or internal management purpose, or to those service providers associated with the Controller which act as Data Processors. On some occasions it will be necessary to share data with service providers located outside the European Economic Area, with whom standard contractual clauses have been signed to guarantee that the transfer of data is made safely, always complying with the applicable European regulations on the protection of personal data.

FUNDACIO CATALUNYA LA PEDRERA, on some occasions uses the WhatsApp application to carry out certain communications. Nonetheless WhatsApp servers for EU users are located in Ireland, there can be communications with USA serves for technical reasons and that would involve an international transfer of data. Therefore, the Controller previously requests users’ explicit consent to send communications by this means, which can be revoked at any time.

UPDATING OF DATA

For us to keep the personal data up to date, the user must always inform us of any change in said data; if this is not done, we cannot be liable for the veracity of the data. The user guarantees that the personal data provided are true and guarantees that all the information provided corresponds to reality, is up to date and is accurate. He/she is obliged to communicate any modification thereto.

THIRD PARTY DATA

If the user provides third party data for any purpose to FUNDACIÓ CATALUNYA LA PEDRERA, he/she guarantees that he/she has obtained these data lawfully, has informed the affected parties in advance, has obtained his/her consent to communicate them, and that the information provided is accurate and true.

COMPULSORY NATURE OF THE INFORMATION REQUESTED

All our forms have an asterisk (*) to indicate which details are compulsory. If the user does not complete these fields, or does not check the privacy policy box, the information will not be sent.

USE OF PASSWORDS

In order to access the Private Area, the USER must "Login" and include the email address and password generated in the registration form in accordance with the rules of complexity established at any given time on the website. Users are responsible for the proper custody and confidentiality of any of the identifiers and/or passwords they have selected in the registry and undertake not to transfer their use to third parties, nor to allow access to third parties. Likewise, the user will be required to immediately notify the Manager of any fact that allows the improper use of identifiers and/or passwords, such as theft, misappropriation, or unauthorized access to them, with the purpose of conduct upon its immediate cancellation.

RIGHTS OF DATA SUBJECTS

You have the right to access your data and obtain confirmation regarding the processing thereof, as well as a copy of the personal data being processed. You have the right to update them and request that any inaccurate data be corrected, or request removal of the data when they are not necessary for the purposes for which they were collected. You may request a restriction in the processing of your data and object to them being processed by revoking your consent, and also exercise your right to data portability. Similarly, you have the right not to be the subject of decisions based solely on the automated processing of your personal data.

You may exercise your rights by contacting us Pg de Gràcia, 92 - 08008 Barcelona (Barcelona).

Email: lopd@fcatalunyalapedrera.com.

Contact details of the DPO: dpo@fcatalunyalapedrera.com

If you consider that your rights have not been duly respected, you have the right to lodge a complaint with the Spanish Data Protection Agency www.aepd.es

PROCESSING OF THE DATA OF MINORS

Anyone providing data through the forms on this website and accepting the processing of such data states that he/she is at least 14 years old. Access to and use of the website is prohibited for anyone younger than 14. If, at any time, the Data Controller detects that a person younger than 14 years of age has provided personal data, we will cancel said data. In addition, parents or tutors may in any event write to FUNDACIÓ CATALUNYA LA PEDRERA to block any access account created by minors in their charge who have registered by falsifying their identity.

SOCIAL NETWORKS

TThe object of social tools such as Facebook, Twitter, Instagram, etc. or other social networks is to give visibility and dissemination of the activities that take place in our organization. These social tools store personal data in the servers of the corresponding services and are governed by their own privacy policy. It is recommended to review and read the conditions of use and the privacy policy of the social network at the time of registration, taking into account the different configuration´s possibilities regarding the privacy of the user’s profile in the social network. In addition, the Controller reserves the right to erase from its social networks any published information by third-parties that trespasses the legality, encourages to infringe it or contains messages that infringe upon human dignity or institutions. Likewise, the Controller reserves the right to block or report the author´s profile of such content.

COOKIES

A cookie is a small file that is downloaded and stored on the user’s computer when he/she access a website. Cookies allow the website, amongst other things, to store and recover information on the browsing habits of the user or of his/her computer and, depending on the information they contain and the way in which you use your computer, they may be used for user recognition.

The user has the option to prevent the generation of cookies, by selecting the corresponding option in his/her browser program. You can obtain more information by reading our Cookies Policy.