PRIVACY POLICY

INTRODUCTION

 

Your privacy is important to us, so in this document we explain what information we collect from users, how we use it, and for what purposes, among other details. Individuals over the age of 14 may register as users without the prior consent of their parents, guardians, or legal representatives. In the case of individuals under the age of 14 or those identified as “legally incapacitated,” we will always require parental consent, or that of a guardian or legal representative.

For your information, we will never request more information than we actually need for the requested services; we will never share it with third parties, except when required by law or with your prior consent; and we will never use your data for any purpose not previously specified.

As a user, you should read this Privacy Policy carefully on a regular basis, and whenever you enter your personal data, as this document is subject to change. The provider may modify any information appearing on the website to comply with regulations or update the policy, without any obligation to provide prior notice or inform users of such changes; publication on the provider’s website is sufficient.

 

DATA CONTROLLER:

 

  • Identity:BIODIVERSITY FOUNDATION (also the service provider)
  • Tax ID:G82207671 
  • Mailing address: 10 Peñuelas Street, 28005, Madrid
  • Contact the DPO: dpo@fundacion-biodiversidad.es

 

FUNDACIÓN BIODIVERSIDAD, as the controller of this website, in accordance with the provisions of Regulation (EU) 2016/679 of April 27, 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and other applicable regulations regarding the protection of personal data, and pursuant to Law 34/2002 of July 11 on Information Society Services and Electronic Commerce (LSSICE), hereby informs you that it has implemented the necessary technical and organizational security measures to ensure and protect the confidentiality, integrity, and availability of the data entered.

Please be advised that at theBIODIVERSITY FOUNDATION, we process personal data in the following ways, which are detailed in our Record of Processing Activities, which you can access by clickinghere.

 

METHOD OF DATA COLLECTION, WHAT DATA WE COLLECT, AND ITS PURPOSE:

 

The data we collect, how we obtain it, and the purpose of processing it are as follows:

    1. Contact form:
      • Required information: first and last name, ID number, email address, phone number.
      • Purpose: to respond to inquiries and/or provide information requested by the User.
      • Legal basis: user consent.
    2. Newsletter subscription forms:
      • Required information: first and last name, email address.
      • Purpose: To send you marketing information of interest regarding our products and/or services via email, SMS, social media, or any other electronic or physical means, provided that the User has given their express consent;
      • Legal basis: User consent.
    3. To carry out the contractual relationship and the related administrative, tax, and accounting procedures required under current law
      • Required information: first and last name, phone number, address, ID number, email address, signature.
      • Purpose: To handle internal commercial, tax, and administrative management.
      • Legal Basis: Consent of the data subject and contractual relationship.
    4. The photographs posted on the website are the property of the BIODIVERSITY FOUNDATION.
    5. You may withdraw your consent at any time by sending an email with the subject line “Unsubscribe” to the address provided.

In accordance with the LSSICE,FUNDACIÓN BIODIVERSIDADdoes not engage in spamming practices; therefore, it does not send unsolicited commercial emails that have not been previously requested or authorized by the user. Consequently, in all communications you receive from the provider, you have the option to withdraw your express consent to receive our communications.

We will not process your personal data for any purpose other than those described, except where required by law or court order.

You will not be subject to decisions based on automated processing that affect your data.

 

DATA RETENTION PERIOD:

 

Your data will be retained for the duration of your business relationship with us or until you exercise your right to object to or restrict the processing of your data. However, we will retain your data for the periods specified by law in the applicable regulations.

 

RECIPIENTS OF ASSIGNMENTS OR TRANSFERS:

 

FUNDACIÓN BIODIVERSIDADwill only disclose information to law enforcement agencies pursuant to a court order or as required by law, without prejudice to its right to block or terminate your account if there are indications that you have committed a crime. The information disclosed will be limited to what the provider has on hand at that time.

The information you provide through this website will be hosted on the servers ofFUNDACIÓN BIODIVERSIDAD, which are contracted from the company that provides the web hosting service. The processing of the organization’s data is governed by a data processing agreement between the provider and this company.

In addition, the provider uses certain tools to provide services necessary for the conduct of its business, which may involve the storage of your data. These tools are as follows:

Google Analytics: to analyze and track how users interact with the website using cookies. The information generated and collected by these cookies regarding usage (including the IP address) will be transmitted directly to and stored by Google Inc., located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”), on its servers in the United States.

 

RIGHTS OF DATA SUBJECTS:

 

As a data subject, you may request to exercise the following rights bycontacting FUNDACIÓN BIODIVERSIDAD in writingat the mailing address listed above or by sending an email to dpo@fundacion-biodiversidad.es, with the subject line: “DATA PROTECTION: RIGHTS OF DATA SUBJECTS.”

Rights:

  • Right of access:allows the data subject to access and obtain information about their personal data that is being processed.
  • Right to rectification: allows you to correct errors and modify data that is inaccurate or incomplete
  • Right to erasure: allows for the erasure of data that is inaccurate or excessive
  • Right to object: the data subject’s right to prevent the processing of their personal data or to have such processing ceased.
  • Restriction of processing: This involves marking the retained personal data in order to restrict its future processing for the purpose of asserting or defending legal claims.
  • Data portability: providing the data subject with the data being processed so that they can transfer it to another controller without hindrance.
  • Right not to be subject to automated individual decision-making (including profiling): the right not to be subject to a decision based on automated processing that produces legal effects or significantly affects you.

As a user, you have the right to withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing carried out prior to the withdrawal.

You also have the right to file a complaint with the supervisory authority if you believe your data protection rights may have been violated (www.aepd.es).

 

ADDITIONAL INFORMATION

 

SAFETY PRECAUTIONS:

 

The data you provide will be treated confidentially. The service provider has implemented all necessary technical and organizational measures and security levels to ensure the security of data processing and to prevent its alteration, loss, theft, unauthorized processing, or unauthorized access, in accordance with the state of the art and the nature of the stored data. Likewise, it is also guaranteed that the processing and recording in files, programs, systems, or equipment, as well as in premises and facilities, comply with the requirements and conditions of integrity and security established in current regulations.

 

LANGUAGE

 

The language of this privacy policy is Spanish. Therefore, in the event of any discrepancy between the Spanish version and any versions provided in other languages, the Spanish version shall prevail.

 

SOCIAL MEDIA

 

Please be advised thatFUNDACIÓN BIODIVERSIDADmay maintain a presence on social media. The processing of data pertaining to individuals who followFUNDACIÓN BIODIVERSIDAD’sofficial pages on social media (and/or engage in any linking or connection activity via social media)shall begoverned by this section, as well as by the terms of use, privacy policies, and access regulations of the applicable social media platform in each case, which have been previously accepted by the user.

FUNDACIÓN BIODIVERSIDADwill process your data for the purposes of properly managing your presence on the social network, informing you about the provider’s activities, products, or services, as well as for any other purpose permitted by social media regulations.

The publication of the following content is prohibited:

– That are allegedly unlawful under national, EU, or international law, or that engage in allegedly unlawful activities or violate the principles of good faith.

– That violate people’s fundamental rights, fail to observe online etiquette, cause annoyance, or may generate negative opinions among our users or third parties; and, in general, any content that FUNDACIÓN BIODIVERSIDAD deems inappropriate.

– And, in general, those that violate the principles of legality, integrity, responsibility, protection of human dignity, protection of minors, protection of public order, protection of privacy, consumer protection, and intellectual and industrial property rights.

Furthermore,FUNDACIÓN BIODIVERSIDADreserves the right to remove, without prior notice, any content deemed inappropriate from its website or corporate social media accounts.

In any case, if you submit personal information through the social media platform, FUNDACIÓN BIODIVERSIDAD shall not be held liable for the security measures applicable to this platform; if you wish to learn more about them, you should consult the specific terms and conditions of the platform in question.

 

CHANGES TO THIS PRIVACY POLICY

 

FUNDACIÓN BIODIVERSIDADreserves the right to modify this policy to bring it into line with changes in legislation or case law.

 

REVOCABILITY

 

Consent given for both the processing and the transfer of data subjects’ personal data may be withdrawn at any time by notifyingFUNDACIÓN BIODIVERSIDADin accordance with the terms set forth in this Policy regarding the exercise of rights. Under no circumstances will such withdrawal be retroactive.

 

LEGISLATION

 

In general, the relationship betweenFUNDACIÓN BIODIVERSIDADand the users of its online services, as provided on this website, is governed by Spanish law and subject to the jurisdiction of Spanish courts, to which the parties expressly submit. The courts and tribunals of Madrid shall have jurisdiction to resolve any disputes arising from or related to the use of these services.