PRIVACY POLICY
At FUNDACION MIRADAS, we are committed to protecting and respecting your privacy, and to this end we have implemented the security measures set out in both Spanish and international (including European) legislation. Below, we explain how and why we collect your data. The information you provide us with is confidential and will only be disclosed in the cases set out below, when requested by a public or judicial authority, or where necessary in any other legally permitted circumstances.
- Who is responsible for processing your data?
- For what purposes do we process the information?
- Where does the information come from and what information do we process?
- What are your rights in relation to the information we process?
- Data disclosures or transfers – Commercial communications
- How long will we retain the information?
- What is the legal basis for processing the information?
- Where do we store your data and who has access to the information?
- Who is responsible for processing your data?
In compliance with Article 10 of Law 34/2002 of 11 July on Information Society Services and Electronic Commerce, and all provisions of Regulation (EU) 2016/679 and Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights, you are hereby informed:
- Company Name: FUNDACION MIRADAS
- Tax Identification Number (CIF): G09543968
- Postal address: C/ LAS REBOLLEDAS S/N, 09001 BURGOS
- Telephone: 947 07 20 19.
- Email: fmiradas@fundacionmiradas.org
You may contact our Data Protection Officer, to whom you may address any queries regarding how we process your information, by sending an email to fmiradas@fundacionmiradas.org
The policy set out on this page applies to user data collected by FUNDACION MIRADAS through:
- non-digital means, such as paper-based registrations for all types of events, competitions and similar activities;
- digital channels, such as online forms, emails, SMS messages, WhatsApp messages, websites, landing pages, social media accounts where FUNDACION MIRADAS is present, or the display of advertisements (hereinafter, digital channels).
For the purposes of this privacy policy, users are, in general, individuals who:
- Provide us with information by completing any of the forms available on FUNDACION MIRADAS, when requesting a service, when purchasing a service we offer, or when participating in any of the promotions we run or activities we promote.
- Or who use the aforementioned digital media without having registered via the established forms.
- For what purposes do we process the information?
At FUNDACION MIRADAS, we process your personal data for the following purposes:
Browsing the website and using our digital media
We process the information to enable and facilitate your access to and navigation of our digital media, as well as to provide you with the services we offer through them.
Managing the services you request
In these cases, we process the information you provide, for example, to manage your participation in an event organised by FUNDACION MIRADAS, to resolve any queries or complaints you raise regarding the services we provide through the channels available to you, etc.
Improving the services we offer and security
We also use the information to maintain, improve and ensure the effectiveness of our services and digital platforms, which enables us to develop new features, protect the security of your data and our digital platforms, and detect and prevent fraud in transactions.
To comply with legal obligations and other requirements
Finally, it is also necessary for FUNDACION MIRADAS to process your data to comply with our established legal obligations, for example, under tax regulations, data protection regulations or regulations governing information society services, as well as to respond to requests made to us by public authorities.
- Where does the information come from and what information do we process?
The information we process comes from:
Data you have provided directly to us
In these cases, you have provided the information directly to us via the forms available on our digital platforms or in paper format, such as your first name, surname, email address, postal address, telephone number or credit card details.
- What are your rights regarding the information we process?
In general
You have the following rights regarding your data:
- The right to know whether we are processing your personal data, to access it, and to request information about how and why we process it and, where applicable, to request a copy.
- The right to rectify and amend the data where it is incorrect or inaccurate, and to request its erasure when it is no longer necessary for the purposes for which we collected it.
- For reasons relating to your particular situation, you have the right to object to our processing of your data and, where applicable, to withdraw the consent you have given us for this purpose.
- In certain circumstances, you have the right to request that we restrict the processing of your data, in which case we will only retain it for the purpose of exercising and defending claims, for the purposes for which you have given your consent, or to comply with legal obligations.
- Right to data portability.
- Right to lodge a complaint with the Spanish Data Protection Agency, as detailed on its website.
The exercise and scope of your rights are governed by the applicable regulations. You may exercise your rights by contacting our Data Protection Officer via email at fmiradas@fundacionmiradas.org or by post at the address C/ LAS REBOLLEDAS S/N, 09001 BURGOS.
Regarding social media data
If you wish to control the information we automatically obtain from social media, you can do so via the settings in your profile on each of the social media platforms where you have an account. To do this, you must log in to the social media platform and manage, via your user profile, the information you allow the platform to make public and who you grant access to it.
- Data disclosure or transfer
Data collected on the website www.bbmiradas.fundacionmiradas.org or via other means will only be disclosed to other companies for the purpose of establishing, maintaining and managing the legal relationship entered into, or where there is legal authorisation to do so. Your consent to the processing or transfer of your data in the manner set out in this paragraph is always revocable, without retroactive effect. Apart from the cases provided for in the previous paragraph, FUNDACION MIRADAS will not disclose your personal data to any other third party, except where your prior consent is obtained in the manner required by law.
Commercial communications
Where you have given your consent to receive commercial communications, FUNDACION MIRADAS may send you commercial or advertising information by any means, including electronic means (email, SMS, etc.), whether of a general nature or tailored to your personal characteristics, regarding our products and services, including participation in prize draws, events and satisfaction surveys. In any case, you may object to the sending of commercial communications at any time by sending a message to the postal or email addresses provided in the previous section or by using the specific methods indicated in the commercial communications sent to you.
- How long will we retain the information?
We will retain the information for as long as necessary to process your request or to provide the service you have requested, and for the purposes for which it was collected, provided you do not withdraw your consent or request its deletion.
However, when you request the deletion of your data through the established channels, it will be duly blocked and not used by us, for as long as it may be necessary for the exercise or defence of claims or where its processing may give rise to any form of legal or contractual liability for which its retrieval is necessary. Once this period has elapsed, your data will be permanently deleted.
Depending on the service contracted by the customer, this is how long we will store your data:
- 4 years: Law on Offences and Penalties in the Social Order (obligations regarding registration, enrolment, deregistration, contributions, payment of wages, etc.); Articles 66 et seq. of the General Tax Law (accounting records, etc.).
- 5 years: Art. 1964 Civil Code (personal actions without a specific limitation period).
- 6 years: Art. 30 Commercial Code (accounting records, invoices, etc.).
- What is the legal basis for processing the information?
At FUNDACION MIRADAS, we process information in accordance with the following legal grounds:
- To provide you with the services you request, to properly manage the requests you make via our website, email or social media accounts where we are present, and to contact you for these purposes.
- To comply with various legal obligations relating, amongst other things, to regulations on: value added tax, as determined by Law 37/1992 on Value Added Tax.
- Information society services, in accordance with Law 34/2002 on Information Society Services and Electronic Commerce.
- Data protection, in accordance with General Data Protection Regulation 2016/679 and Organic Law 3/2018 on Data Protection and the Guarantee of Digital Rights.
- Due to the existence of a legitimate interest on the part of FUNDACION MIRADAS.
- With your consent, for the sending of advertising via post, email, instant messaging apps and SMS regarding the products and services of FUNDACION MIRADAS.
- Where do we store your data and who has access to the information?
We protect the information we collect by implementing the technical and administrative security measures set out in the relevant legislation, following a risk assessment, so that the information is protected against unauthorised access, loss, disclosure or use.
Your personal information can only be accessed by our employees, who are aware of the purposes for which it may be used and its limitations; the competent public and judicial authorities when they request it and where required by applicable regulations; and other service providers to deliver the services you have requested from us.
Each of these companies undertakes to use your data solely and exclusively for these purposes and not for any other; consequently, once the provision of the service has been completed, they are obliged to delete the information they have obtained or to keep it duly blocked and protected so that it cannot be used, whilst it may be necessary for the fulfilment of a legal obligation or for the exercise or defence of contractual claims that must be addressed.
In cases where these companies are based in a country that does not offer a level of data protection similar to ours, we ensure that they comply with the necessary security measures equivalent to our own, as established in the applicable legal regulations. This is the case for companies based in the US, which are governed by the Privacy Shield (an agreement between Europe and the US).
Updated 27/09/2021
Document drafted and prepared by PROTECTION REPORT S.L., which reserves the right to take appropriate legal action against anyone who copies and uses the content unlawfully.