Data protection policy

Introduction

This Data Protection Policy refers specifically to the FUNDACIÓN ESPRIU website (http://www.fundacionespriu.coop/en), as well as to the applications and other services that the holder of personal data may request through the aforementioned website (collectively referred to as “Services”). To this end, and under the conditions set out in the Data Protection Policy, FUNDACIÓ ESPRIU may communicate your personal data to other companies within the Group, should this be necessary for the provision of these Services.

Who is responsible for the treatment of your personal data?

FUNDACIÓN ESPRIU, with address at Av. Josep Tarradellas, 123-127 4º de Barcelona, 08029, is responsible for the treatment of the personal data provided as owner of web page (http://www.fundacionespriu.coop/ es)

For the proper management and processing of your personal data, FUNDACIÓ ESPRIU has designated a Data Protection Delegate to whom you can turn to resolve any questions you may have, and who can be contacted by e-mail at DPO@grupoasisa.com.

For what purpose do we process your data?

FUNDACIÓN ESPRIU may process the personal data collected for the following purposes:

1. Contact: to manage the data of persons who contact FUNDACIÓN ESPRIU through the forms that FUNDACIÓN ESPRIU provides for users. Likewise, your data will be processed in order to manage the queries you send us through the channels provided for this purpose on our website.

2. Subscription to the newsletter and magazine: to manage the subscription to the Foundation's newsletter and magazine. What data do we process and from what sources are they obtained?

The data being processed comes from:

Data provided by users themselves, when completing the forms provided for this purpose and from the relations established with FUNDACIÓN ESPRIU.
Data obtained from marketing studies in which you have agreed to participate and have given your consent for their use.

Depending on the service, the data processed may include the following types of data:

Personal identifying data (e.g. name, surname, identity document number, postal address, e-mail, telephone number).

What is the legal basis for processing your data?

The legal basis for processing your data for sending and subscribing to both the newsletter and the magazine is your consent.

The legal basis for the processing of your data for contacting you is your own consent, given in the relevant forms.

The sending of advertising and marketing of our own products is based on the legitimate interest of FUNDACIÓN ESPRIU. In all other cases, as well as when the advertising is from third parties, the processing will be based on the consent that must necessarily be requested.

Who is your data shared with?

The personal data processed by FUNDACIÓN ESPRIU to achieve the purposes described above may be shared with the following recipients depending on the legitimate basis of the communication.

Therefore, the following data communications aim to guarantee the correct development of the contractual relationship, as well as to comply with legal obligations that may require the aforementioned communications to be made:

How long will we store your data?

Personal data will be stored for the time necessary to provide the service or until the person involved chooses to withdraw their consent. Thereafter, the data will be deleted in accordance with the provisions of the data protection regulations, which implies it being blocked, and only provided at the request of Judges and courts, the Ombudsman, the Public Prosecutor's Office or the competent Public Administrations during a period determined by the statute of limitations that may arise. After this, it will be completely deleted.

What are your rights?

Any interested party has the right to obtain confirmation as to whether FUNDACIÓN ESPRIU is processing personal data concerning them.

Likewise, as provided for in the General Data Protection Regulation, you have the right to exercise the following rights:

Access your data in order to know how your personal data is being processed by FUNDACIÓN ESPRIU.

Request the rectification or deletion of your data if you consider them to be inaccurate, if they are being processed by FUNDACIÓN ESPRIU or even to request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
To request the restriction of the processing of your data in those cases foreseen in current regulations. In these cases, FUNDACIÓN ESPRIU will keep the data object of the restriction in order to exercise or defence against claims as provided for in the General Data Protection Regulation.
To request the portability of their data, in cases in which the interested party requests to receive the personal data concerning them, which they have provided to FUNDACIÓ ESPRIU. This data will be provided to the affected party in a structured, commonly used and machine-readable format.
To oppose the processing of their data in certain circumstances and for reasons related to their particular situation, in which case, FUNDACIÓ ESPRIU will stop processing them except for compelling legitimate reasons or for the exercise or defence against possible claims.

Likewise, the interested party has the right, at any time, to object to the sending of publicity by electronic means sent by FUNDACIÓN ESPRIU, and to withdraw their consent, without this affecting the lawfulness of the processing based on prior consent.

Likewise, the person involved may exercise the rights described above by means of a written request addressed to FUNDACIÓ ESPRIU at the postal address Av. Josep Tarradellas, 123-127 4º, Barcelona, 08029, or by sending an e-mail to the address DPO@grupoasisa.com, indicating in both cases ‘Data Protection Policy’.

Finally, the owner of the data may file a complaint with the Spanish Data Protection Agency, especially when you have not obtained satisfaction in the exercise of your rights.