Keeping the previous in mind, we inform you of the following
IDENTITY OF THE RESPONSIBLE:
OWNER: Socio-Cultural Association Imshaya Project.
ADDRESS: Urbanización Princesa Iballa, bloque 15, 1ºC, 38320 La laguna, Tenerife.
EMAIL ADDRESS: firstname.lastname@example.org
PERSONAL DATA PROCESSING PRINCIPLES
The principles that regulate the processing of your personal data are covered in the articles 5 and ss of the GRPD and article 4 and ss of the OLPDPDRG:
Principle of legality, loyalty and transparency: These principles are intended for the transferor of personal data to have proof and knowledge of the use that the assignee will make of said data, for which the consent of the holder of the personal data is required for each of the intended processing purposes.
Principle of minimization of personal data. The rationale for this principle is that only data that is essential for the purpose of the intended treatment may be collected.
Principle of storage of personal data. The purpose of this principle is to limit the retention periods of personal data. Before which, the person in charge of the treatment must indicate the maximum storage term.
Principle of integrity and confidentiality. These principles are intended to guarantee the security of the processing of your personal data, whereby, the data controller must adopt all the corresponding security measures to avoid possible future damages to the owner of the transferred data.
Consent of the minor. In the event that you are a minor, we can only process your data if you are over 14 years old. Otherwise we will need the consent of your parent or guardian to process your personal data.
WAYS OF OBTAINING YOUR PERSONAL DATA
Before explaining what is the purpose of the processing of personal data, we must indicate that it is not necessary to provide any personal data to navigate our website, unless you want to contact us, if so, you should know the following:
In the first place, if what you want is to buy our products or subscribe to our services, as well as to make donations, the obtaining of your personal data must be collected by legal imperative, as you can read in the section of “LEGAL BASE”.
Keeping in mind the above said, if you want to hire a product or service from our website, such as our books, courses and workshops or you intend to make a donation to our association, you should know that the personal data that you will have to provide us are: your name, surname, ID , physical address, email, telephone number and you can even collect your IP or your checking account.
Therefore, if you want to hire our services and products or if you want to contact us for any other question, you must fill in the form fields that will contain your contact and identification data so that we can get in contact with you. Therefore, the data that would be collected would be the following:
B) If what you want is to contact us to subscribe to the workshops we carry out, the services we promote and sell, as well as information about our events, you must send: name and surname, email address and telephone number. On the other hand, you must keep in mind that, in case of buying our products and services, for billing purposes you will have to transfer your National Identity Document or Passport. Also, keep in mind that, if you make transfers to our checking account through the payment platform, elements such as your checking account will appear on the receipt.
C) In the event that you wish to make a donation to our non-profit association, the data we will obtain will be the same as in the previous paragraph (name and surname, email address and telephone number and ID). You can see more about what we do on our website so that you know what your donation will go to.
D) Likewise, we can also obtain identification data automatically through our cookies policy that we recommend that you read at this address https://www.proyectoimshaya.com/politicas-de-cookies/
On the other hand, we will not use your personal data for automated decision making. However, in the event that we need such treatment, before initiating it we would proceed to notify you so that you can consent to the treatment or oppose it.
Having said the above, you should keep in mind that the purpose of the processing is as follows:
A) Offer products, services, promotions and workshops: The purpose is to send you information about our products, services, promotions and workshops so that you can keep up to date with everything we offer you.
B) Inform you of our activities related to public communications, videos, interviews and publications so that you can have all this information at your disposal as soon as it is published. Our purpose is to encourage participation in the association and the dissemination of our content so that it reaches all possible people.
In accordance with current regulations, you can consent to the collection of your data for all these operations, in addition to the mandatory processing set out in the previous section, whose legal basis you will find in the following sections.
As for the consent you will issue for the purposes described, we must indicate you can revoke it at any time. You only have to contact us through the email address Info@proyectoimshaya.es, indicating that you request to withdraw your consent on the personal data transferred.
On the other hand, we guarantee that your personal data will not be transferred to third countries.
Finally, you agree that the data you have provided us are correct, complete, accurate and current, in addition to the duty to keep them updated. Therefore, you are solely responsible for the veracity of the same and you can exercise your right of rectification if your personal data is incomplete or inaccurate, all exempting this association from any responsibility.
LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA.
In general, the legal basis for the processing of your personal data is based on your own consent to be treated in accordance with article 6 of the OLPDPDRG.
However, in the event that you acquire goods or services offered by us or if you are going to make a donation, we not only rely on Article 6 of the OLPDPDRG, but also on the obligation to bill the businessmen and professionals that are included in Article 29.2.e) of Law 58/2003, December 17, General Tax (BOE of 18.12.2003), in Article 164, section One, number 3 of Law 37/1992, December 28, of Value Added Tax (BOE of 29.12.1992) and, in article 2.1 of the Regulation regulating the billing obligations approved by the first article of Royal Decree 1619/2012, of November 30 (BOE of 01.12 .2012). Likewise, in application of article 39 of Law 10/2010 on the Prevention of Money Laundering, which requires the identification of the person making the donations. All these regulations require the seller to identify the buyer of the services or goods offered.
RECIPIENTS OF PERSONAL DATA.
Regarding the recipients of personal data, we indicate the following:
In the event that you wish to contact us to make any type of comment, complaint, claim or suggestion, only we will be the recipients of your personal data.
In the event that you have purchased products and services or want to make a donation, your personal data, apart from the fact that we will be the recipients of said data, these will be sent to our accounting and financial advisor in order to do the corresponding accounting. Therefore, the use of personal data will serve to prove the contractual relationship. However, our accounting and financial advisor will only use your data for the performance of such work and not for other purposes. On these aspects, you can read more in the “LEGAL BASIS” section.
Also, the recipient of your personal data will be Mailer lite (mailerlite.com) that will only store your name and email. The identifying data of the entity are: UAB “MailerLite”, J. Basanavičiaus 15, LT-03108 Vilnius, Lithuania
Since the website is hosted on Sered.net, this entity will also be the recipient of your personal data. Its data are: Sered.net, C / Rua do Progreso 177, 1º, A rua de Valdeorras, Ourense, Galicia, with FIC B32496242
The data of our accounting and financial advisor are: Ms. Yara Cabrera Santana, with professional domicile in the C / Volcán Nevado del Ruiz, nº 29, 38018 of Santa Cruz.
PERSONAL DATA STORAGE TERM.
The storage term of personal data will be up to the prescription of contractual obligations in the event that you acquire any service or product of the association or in the event that you make a donation.
On the other hand, if all you want is to make a claim, comment or suggestion, your personal data will be kept until you exercise your right of deletion.
SECURITY OF PROCESSING.
As responsible for the processing of personal data, we guarantee that we have adopted the technical and organizational measures to ensure the treatment of your personal data to prevent its loss, misuse, improper access, disclosure, alteration or destruction thereof.
Likewise, we indicate that this website is hosted on Sered.net, C / Rua do Progreso 177, 1º, A rua de Valdeorras, Ourense, Galicia, with FIC B32496242. It can be contacted through the Sered.net page. Therefore, the protection of your personal data is guaranteed.
When browsing our website you can collect non-identifying data, which may include, the IP address, geolocation, a record of how services and sites are used, browsing habits and other data that cannot be used to identify you.
The website uses the following third-party analysis services:
The Owner uses the information obtained to obtain statistical data, analyze trends, administer the site, study navigation patterns and to gather demographic information.
ADVERTISEMENT ON OUR WEBSITE:
Some companies may use our website to advertise their promotions and products. If you enter any of these websites, we warn you that these companies could collect your personal data and they have their own privacy policies; Why we recommend that you visit these websites first and read these policies. On the other hand, it is vitally important that you keep in mind that these companies can collect your personal data through tracking technologies that are subject to their own privacy regulations.
RIGHTS OF THE PERSONAL DATA HOLDER AND EXERCISE OF THE SAME:
Your rights are regulated in articles 15 to 22 of the GDPR and 12 to 18 of the OLPDPDRG. Next, we explain what they are and how you can exercise them:
Right of access: The right of access allows every person to obtain information about the processing of their personal data: such as the recipients of their personal data, the purpose of the processing, existence of automated decisions, if data transfers are made to third countries and categories of data processed.
Also, in the event that we access your request, we will give you access to a copy of what you request and we will send it to you through the email you indicate or by collecting the documents in person at our headquarters.
Right of rectification: It is the right that the interested party has to request the rectification of their personal data because they are erroneous or inaccurate.
Right of deletion: The right of deletion allows you to request the deletion of your personal data that is subject to processing.
Right of opposition: The purpose of this right is to oppose the processing of personal data when the purpose of the same is for a legitimate interest or a public interest or when direct marketing or profiling is used.
Right to limit the processing: This right is based on the limitation of the processing of personal data. You can exercise to request the suspension of the processing of your personal data or request the conservation of them.
Portability right: As the SADP indicates, this right is exercisable when the processing is carried out by automated means, you receive your personal data in a structured format, common use, mechanical and interoperable reading, and you can transmit them to another person responsible for the treatment , provided that the treatment is legitimized based on consent or in the framework of the execution of a contract.
However, it is irrelevant when the treatment is necessary for the fulfillment of a mission of public interest or in the exercise of public powers conferred on the person responsible.
Right not to be subject to automated individual decisions: The purpose of this right is to prevent you from being subject to a decision based on your personal data, especially in the field of profiling that may have legal effects on you.
For the exercise of these rights, you will have to contact us through our email address email@example.com and indicate the right you are exercising, the personal data you want to access, rectify, oppose, delete, limit and carry. Ordinarily, within a month from when the request arrives we will give you an answer and, extraordinarily, in the case of having a large number of requests, we can take up to one more month.
In the event that our answer is no, you can go to the Spanish Agency for Data Protection to file a claim.
We attach the SADP link for more information about your rights: