FUNDACIÓN SALUD Y COMUNIDAD hereby informs users of the website of its policy on the processing and protection of the personal data of users and clients.
It also guarantees at all times full and complete compliance with the obligations laid down in the legislation on data protection and information society services: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD) and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSIce).
DATA CONTROLLER
FUNDACIÓN SALUD Y COMUNIDAD
Tax ID (C.I.F.): G61878831
Registered address: C/en/ ALI BEY, 25 3º – 08010 – BARCELONA
Registered with the State Protectorate of Foundations (Alto Protectorado de Fundaciones del Estado) under no. 08/325
Telephone: 932440570
Email: fsyc@fsyc.org
DATA PROTECTION OFFICER
In accordance with Article 37(1)(a) of the General Data Protection Regulation (EU) 2016/679, the organisation has appointed a Data Protection Officer (DPO). The contact email address is: dpd@fsyc.org.
PURPOSES OF DATA PROCESSING
The data provided by the User are used for the various purposes listed below:
| Purpose of processing | Legal basis for processing |
| Managing enquiries or any other type of request made through the contact methods made available on the website. | Legitimate interest of the Company in responding to requests for information made through the website.
Consent expressly given at the time the data are collected through the website forms. |
| Sending newsletters, commercial communications and promotions. | Consent expressly given at the time the data are collected through the website forms. |
| Managing the whistleblowing channel. | Legitimate interest of the Company in responding to reports and requests made through the whistleblowing channel.
Consent expressly given at the time the data are collected through the website forms. |
| Managing incidents and website maintenance. | Legitimate interest of the Company. |
DATA RETENTION PERIOD
| Purpose of processing | Retention period |
| Managing enquiries or any other type of request made through the contact methods made available on the website. | We will process your data for as long as necessary to deal with your enquiry or request. |
| Sending newsletters, commercial communications and promotions. | We will process your data until you unsubscribe. |
| Managing the whistleblowing channel. | We will process your data for as long as necessary to deal with your enquiry or request.
We will process your data for as long as necessary to comply with the applicable statutory limitation periods. |
| Managing incidents and website maintenance. | We will process your data for as long as necessary to comply with the applicable statutory limitation periods. |
RECIPIENTS OF THE DATA
In order to fulfil the purposes set out in this Privacy Policy, we need to give third parties that support us in the services we offer you access to your personal data (Data Processors).
Data processors act for the performance of a contract or the provision of a service to the Controller, and accordingly follow its instructions at all times and ensure the same levels of security.
USERS’ RIGHTS
The user has the right to:
- Request access to the personal data concerning them that are being processed and receive that information in writing by the means requested.
- Request the rectification of inaccurate personal data or, where appropriate, request their erasure where, among other reasons, the data are no longer necessary for the purposes for which they were collected.
- Request the restriction of the processing of their data.
- Object to the processing of their personal data where applicable, in which case their data will no longer be processed except on legitimate grounds.
- Data portability, where the processing is based on consent and carried out by automated means. The data will be provided in a structured, commonly used and machine-readable format.
- Withdraw the consent given.
- Lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos).
The User may exercise the rights set out above by writing to dpd@fsyc.org, providing proof of identity by means of a scanned copy of their national identity document (DNI) or equivalent document, and specifying the right they wish to exercise.
SOURCE OF THE DATA
Personal data will be provided by the data subject on an entirely voluntary basis. Failure to provide certain data, or to answer questions that may be asked during registration processes or in the various electronic forms presented to the User, may make it impossible to access certain services for which personal data are essential; in such cases, the Controller will state that the provision of the personal data is mandatory and/or necessary for the service to operate.
The Controller assures you of the confidentiality of your personal data and guarantees their security, taking the necessary measures to prevent their alteration, loss, or unauthorised processing or access.
INFORMATION PROVIDED BY THE USER
Minors under the age of 18 may not provide their personal data without the prior consent of their parent and/or legal guardians.
By entering their data in the contact forms or in download forms, Users expressly, freely and unequivocally accept that their data are necessary for the Controller to deal with their request, the inclusion of data in the remaining fields being voluntary.
The User guarantees that the personal data provided are accurate and is responsible for notifying any changes to them.
All data requested through the website are necessary to provide an optimal service to the User. If not all the data are provided, there is no guarantee that the information and services provided by the Controller will be fully suited to the User’s needs.
SECURITY MEASURES
In accordance with the personal data protection legislation in force, the Controller complies with all the provisions of the GDPR and the LOPDGDD in processing the personal data for which it is responsible, which are processed lawfully, fairly and in a transparent manner in relation to the data subject, and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
The Controller guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect Users’ rights and freedoms, and has provided them with appropriate information so that they can exercise them.
SECURITY BREACHES
The Controller will report any security breach affecting the database used by this website, or affecting any of our third-party services, to each and every person whose data may have been affected, and to the authorities, within 72 hours of the breach being detected.
APPLICABLE LAW AND JURISDICTION
The Controller reserves the right to bring any civil or criminal proceedings it deems necessary in the event of improper use of the Website and its Content.
The relationship between the User and the Controller shall be governed by the legislation in force and applicable in Spain. Should any dispute arise in connection with its interpretation and/or application, the parties shall submit their disputes to the ordinary courts, submitting to the judges and courts having jurisdiction in accordance with the law.