PRIVACY POLICY
PERSONAL DATA PROTECTION POLICY OF THE CANDI GRANÉS CAMPASOL PRIVATE FOUNDATION
Scope of the personal data protection policy
This personal data protection policy covers any data processing that may occur in the provision of our Foundation’s services, in browsing or interacting with any of the website pages, or in the social media where we have a presence (Twitter, YouTube, etc.). At the end of this document specific information is provided in relation to use of the social media. It will also apply to any of the company’s internal procedures that require the collection of data, whether in hard-copy format or by any other system. When using these media, it may be that you consult information, complete forms, answer surveys, take part in competitions, make queries, send photographs, make comments, etc. and hence provide us with your personal data. All these processes will be subject to our privacy policy.
Who is the Data Controller of your personal data?
In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and those of Organic Law 3/2019, of 5 December 2019, on the Protection of Personal Data and the guarantee of digital rights, you are hereby informed that the personal data you provide will be processed by the CANDI GRANÉS CAMPASOL PRIVATE FOUNDATION (hereinafter referred to as the GRANÉS FOUNDATION) whose registered address is Avinguda Països Catalans, 116, 17820 Banyoles. Tel: 972 001 001. Email: info@granesfundacio.org
What kind of personal data are collected and what is their purpose?
The different types of data processing are detailed below:
| Processing | Care activities |
| Purpose | Management of the personal data required from the participants in the activities managed directly by the GRANÉS FOUNDATION or other entities aimed at people with special physical or mental needs. |
| Data category | People with special needs. The families involved. |
| Data | Identification data: forename and surname/s, personal ID number, address, telephone number, email address. Sensitive data: health data. |
| Legitimacy | Consent and legitimate interest of the GRANÉS FOUNDATION, as this forms part of its foundational purpose. |
| Recipients | No data are transferred without consent. |
| International data transfers | There are no international data transfers |
| Processing | Grants for young people |
| Purpose | Management of the personal data necessary to process grants for young people to undertake specialist courses, research studies, or other training. |
| Data category | People seeking grants. |
| Data | Identification data: forename and surname/s, personal ID number, address, telephone number, email address. Personal, social, academic, employment and financial details. |
| Legitimacy | Contractual relationship and legitimate interest of the Foundation, as it forms part of its foundational purpose. |
| Recipients | No data are transferred without consent. |
| International data transfers | There are no international data transfers. |
| Processing | Image |
| Purpose | To promote the activities of the GRANÉS FOUNDATION |
| Data category | Employees, users and/or other people involved. |
| Data | Image |
| Legitimacy | Consent |
| Recipients | General public |
| International data transfers | There are no international data transfers |
| Processing | Recording activities |
| Purpose | To record the activities held in the GRANÉS FOUNDATION premises |
| Data category | Workers, users and/or associated individuals |
| Data | Image and voice |
| Legitimacy | Contractual relationship |
| Recipients | Those envisaged in any contractual relationship |
| International data transfers | There are no international data transfers |
| Processing | Information |
| Purpose | To answer requests for information received via the website. |
| Data category | People who contact the GRANÉS FOUNDATION. |
| Data | Identification data: forename, surname/s and email address. |
| Legitimacy | Request for information |
| Recipients | No data are transferred |
| International data transfers | There are no international data transfers |
| Processing | Information on activities |
| Purpose | Sending information on the activities held by the GRANÉS FOUNDATION |
| Data category | People who have undertaken activities at the Foundation or who have given their express consent. |
| Data | Identification data: forename, surname/s and email address |
| Legitimacy | Legitimate interest or express consent. |
| Recipients | No data are transferred |
| International data transfers | There are no international data transfers |
| Processing | Video surveillance |
| Purpose | Video surveillance of access to the GRANÉS FOUNDATION |
| Data category | People who enter the facility |
| Data | Images |
| Legitimacy | Legitimate interest |
| Recipients | Security forces |
| International data transfers | There are no international data transfers |
| Processing | Human Resources |
| Purpose | Data management of the staff who work at the Foundation |
| Data category | Employees of the Foundation |
| Data | Identification data: forename and surname/s, personal ID number, address, telephone number, email address, image. Personal, training, social, employment and financial details. Sensitive data: fingerprint. |
| Legitimacy | Workers’ Statute, Law 31/1995, of 8 November 1995 on the Prevention of Occupational Risks. |
| Recipients | Related people or entities, such as business consultants, financial institutions, etc. in order to undertake the formalities associated with the company’s employment and administrative tasks; mediators, brokers and insurance companies, in order to take out insurance policies to cover the risks involved in the workplace; public administrations, mutual insurance companies or occupational risk prevention companies, to comply with employment, social security and tax regulations and to justify our activities, or any other circumstances, at all times within the framework of current legislation. |
| International data transfers | There are no international data transfers |
| Processing | Job vacancies |
| Purpose | To access job offers that may match users’ profiles and take part in the associated recruitment processes. |
| Data category | People who wish to work for the GRANÉS FOUNDATION. |
| Data | Identification data: forename and surname/s, personal ID number, address, telephone number, email address. Personal, social and employment details. |
| Legitimacy | Legitimate interest and consent |
| Recipients | The data will be passed to interested third parties, provided that the applicant has given their consent |
| International data transfers | There are no international data transfers |
| Processing | Trust |
| Purpose | To manage the personal data of the GRANÉS FOUNDATION Trust. |
| Data category | Personal data of the trust members. |
| Data | Identification data: forename and surname/s, personal ID number, address, telephone number and email address. Economic details. |
| Legitimacy | Law 21/2014, of 29 December 2014, on the protectorate of foundations and the verification of the activities of associations declared of public utility. Law 19/2014, of 29 December 2014, on transparency, access to public information and good governance. |
| Recipients | Those indicated by the Law |
| International data transfers | There are no international data transfers |
This consent may be revoked at any time.
For what purpose do we use your personal data?
The legal basis that allows us to process your personal data is explained below.
- To comply with a contractual relationship.
- When you give us your consent.
- For the legitimate interests of the GRANÉS FOUNDATION in promoting its services and any initiatives that might be of interest to you.
- In compliance with the obligations imposed by law.
Remember that you can revoke your consent at any time by sending an email to the following address: info@granesfundacio.org.
Publication of photos or videos on the website or the social media
In order to post photos or videos of our employees, users or other individuals on the website or social media, as well as to gather data to take part in a competition or collect any other personal data for processing, it is necessary to obtain your express and categorical consent in advance, and to inform the person concerned that, in the case of minors under the age of 14, this consent must be granted by the parents or legal guardians.
The processing of these photos will adhere to the principle of proportionality; in other words, they will be processed strictly for the purpose for which the consent was granted.
Non-relevant data
The GRANÉS FOUNDATION informs users that unless legally-constituted representation is in place, no user can use the identity of another person or communicate their personal data; consequently, users should at all times remember that they can only ever provide the personal data corresponding to themselves and that these must be adequate, relevant, current, accurate and true.
How long is the personal data kept for?
The GRANÉS FOUNDATION keeps your personal data for however long is necessary for the purpose for which they were collected. If the purpose is different from that indicated in this policy, it will be detailed in the relevant document.
In the case of job vacancies, your data will be kept for one year if your profile matches any of our internal vacancies; otherwise, they will only be kept for 15 days.
To whom do we transfer your personal data?
The GRANÉS FOUNDATION will only transfer your personal data for processing where indicated and in the circumstances envisaged by law. No international transfers will be made of your personal data.
In the case of the social media, all the information and content posted by the user will be subject to further communication and shared with the other users that use the social network in question, given the nature of the service.
Security measures
The GRANÉS FOUNDATION guarantees the absolute confidentiality and privacy of the personal data collected, and consequently has adopted the essential security measures to prevent their alteration, loss or unauthorized access and processing, and thus ensure their integrity and security.
Users undertake to make diligent use of this website and not to disclose their username or password to third parties. Users also agree to inform the Foundation in the event of any theft, loss or risk of third-party access to their username or password.
What are your rights when you send us your personal data?
| Right | Content | Customer service contact |
| Access | You can consult the personal data managed by the GRANÉS FOUNDATION. | In person: Avinguda Països Catalans, 116, 17820 Banyoles On line: info@granesfundacio.org
|
| Rectification | You can modify your personal data when these are inaccurate. | |
| Deletion | You can ask for your personal data to be deleted | |
| Opposition | You can ask for your personal data not to be processed. | |
| Limitation of processing | You can ask for the limitation on the processing of personal data in the following cases: – While a challenge to the accuracy of your data is being checked. – When the GRANÉS FOUNDATION no longer needs to process your data but you need them to exercise or defend a claim. | |
| Portability | You can receive in electronic format the data that were sent to us in electronic format. |
If you believe that we have not processed your personal data in accordance with the law, you may lodge a claim with the Spanish Data Protection Agency (www.aepd.es).
To exercise your rights, you should accompany your claim with a copy of your personal identification document (DNI/NIE/passport)
Exercising your rights is free of charge.
Social media
The operation of social networks is beyond the control of the GRANÉS FOUNDATION and hence the information posted there will be shared by all the users who consult them. Likewise, these networks allow interaction with other users, so the criteria that should be taken into account are detailed below.
The purpose of using the social networks is to publicize and disseminate the services provided by the GRANÉS FOUNDATION.
In principle, the same data protection policy specified in this document applies to the collection, processing and transfer of data.
Users undertake the following:
- Not to publish information that does not fulfil the requirements of truthfulness, public interest, and respect for personal dignity. In particular, users should avoid any kind of conduct that may infringe the principles of non-discrimination for reasons of sex, race, religion, ideology or any other personal or social circumstances, and against privacy, honour and self-image, being ultimately responsible for the veracity and legality of the contents they publish.
Users also undertake not to record or publish images, videos or any other type of recording without the consent of the parties involved.
The GRANÉS FOUNDATION does not identify with the opinions expressed by others or with the ideology of the individuals with whom it has established a friendship in any social network
The GRANÉS FOUNDATION reserves the right to remove from its social networks any information posted by others that infringes the law, incites others to infringe the law, or contains messages that are an affront to the dignity of individuals or institutions. It also reserves the right to block and report the authors of any such messages.
Guidelines for users:
- Read and check the general conditions of use and the privacy policy of the social network when you register.
- Learn about the settings and user options offered by the social network.
- Configure the level of privacy of the social network user profile correctly.
- Be careful not to post too much information about your personal or family life.
- Be careful about posting audio-visual and graphic content on your profile, especially if you will be posting images containing other people.
- Never provide the data of third parties without their express prior consent.
