Privacy Policy
Last update: September 12, 2021
1. User Information
EVANGELICAL CHURCH OF BRETHREN AT CALLE TRAFALGAR, 32 hereinafter DATA CONTROLLER, is the Data Controller of the User's personal data and informs that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of April 27 (GDPR) and Organic Law 3/2018 of December 5 (LOPDGDD), for which the following processing information is provided:
Processing purposes
Activities inherent to the development of the activity carried out by EVANGELICAL CHURCH OF BRETHREN AT CALLE TRAFALGAR, 32. In the event that the Data Controller plans further processing for a different purpose, it will provide the data subject, prior to such further processing, information about that other purpose and any additional information. The data will not be processed in a manner incompatible with such purposes; further processing of personal data for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not be considered incompatible with the initial purposes.
Personal data will not be used for automated processing for profiling purposes nor will it be used to make any decision based solely on automated processing, including profiling.
Retention period
Data will be retained for as long as necessary for the authorized processing purposes.
Legitimation
Interested party consent and processing necessary to carry out the entrusted management. Legal basis for processing: Art. 9.2.a and Art.6.1 a and b GDPR.
Recipients
- Planned data transfers: The data subject's data will only be transferred due to legal obligation or for reasons related to the service offered by EVANGELICAL CHURCH OF BRETHREN AT CALLE TRAFALGAR, 32 through a Service Provision contract with the Data Processor.
- Transfer to third countries: No transfer of personal data to third countries or international organizations is planned. In the event that the Data Controller plans to transmit your personal data to third countries, it must inform the data subject in advance.
Rights
Right to withdraw consent and rights of access, rectification, erasure, limitation, objection and portability of data.
How to exercise your rights
You may exercise the rights of access, rectification, erasure, limitation, objection and portability of data by contacting the data controller at Calle Trafalgar, 32, Madrid, 28010, Madrid.
Right to withdraw consent
The withdrawal of consent shall not affect the lawfulness of processing based on consent prior to its withdrawal.
Right to lodge a complaint with the supervisory authority
Corresponding authority (AEPD).
DPO contact details
AVDA BRASIL 17, 28020 MADRID - dpd@sonorsolucionesnormativas.es .
2. Mandatory or optional nature of information provided by the user
Users, by checking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or presented in download forms, expressly and freely and unequivocally accept that their data is necessary to process their request by the service provider, with the inclusion of data in the remaining fields being voluntary. The User guarantees that the personal data provided to the DATA CONTROLLER is true and is responsible for communicating any modification thereof.
The DATA CONTROLLER expressly informs and guarantees users that their personal data will not be transferred to third parties under any circumstances, and that whenever any type of transfer of personal data is made, express, informed and unequivocal consent will be requested from the Users. All data requested through the website is mandatory, as it is necessary to provide an optimal service to the User. In case all data is not provided, there is no guarantee that the information and services provided will be completely adjusted to your needs.
3. Security measures
That in accordance with the provisions of the current regulations on personal data protection, the DATA CONTROLLER is complying with all the provisions of the GDPR regulations for the processing of personal data under its responsibility, and manifestly with the principles described in article 5 of the GDPR, by which they are processed in a lawful, fair and transparent manner in relation to the data subject and adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
The DATA CONTROLLER guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR in order to protect the rights and freedoms of Users and has communicated the appropriate information so that they can exercise them.
4. Social Media Policy
User information
The DATA CONTROLLER informs the USER that it has created a profile on the Social Networks Facebook, Instagram, Twitter, LinkedIn, Youtube, Vimeo and Google+, that it is the data controller of the user's personal data that is carried out on said social networks and informs that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679, of April 27 (GDPR), and Organic Law 3/2018, of December 5 (LOPDGDD), for which the following processing information is provided:
Why do we process your personal data?
Purpose of processing: to maintain a relationship between the USER and the DATA CONTROLLER that may include the following operations:
- Process requests and queries submitted to the controller.
- Inform about activities and events organized by the controller.
- Inform about products or services offered by the controller.
- Interact through official profiles.
Why can we process your personal data?
Legal basis for processing: article 6.1.a GDPR, the data subject has given their consent to the processing of their personal data for one or more specific purposes. The USER has a profile on the same social network and has decided to join the DATA CONTROLLER's social network, thus showing interest in the information published on it, therefore, when requesting to follow our official profiles, they provide us with their consent to process the personal data published on their profile.
The USER can access the privacy policies of the social network itself at any time, as well as configure their profile to guarantee their privacy.
The DATA CONTROLLER has access to and processes the USER's public information, especially their contact name. This data is only used within the social network itself and will only be incorporated into a DATA CONTROLLER file when necessary to process the USER's request.
How long will we keep your personal data?
Data retention criteria: they will be retained as long as the USER does not revoke the consent given as indicated in this privacy policy.
To whom do we provide your personal data?
Data communication: the information provided by the USER through the DATA CONTROLLER's social networks, including their personal data, may be published, always depending on the services that the USER uses, so it may be made publicly available to other third-party users of social networks. From each social network profile, the USER can configure what information they want to make public in each case, see the permissions that have been granted, delete or deactivate them, like any third-party application that they no longer wish to use.
No communication of personal data to third parties outside the social network is planned unless, if it were essential for the development and execution of the processing purposes, to our service providers related to communications, with which the DATA CONTROLLER has signed the confidentiality and data processor contracts required by current privacy regulations.
What are your rights?
Rights available to the USER: they can only be satisfied in relation to the information that is under the control of the DATA CONTROLLER.
- Right to withdraw consent at any time.
- Right of access, rectification, portability and erasure of your data, and limitation or objection to its processing.
- Right to lodge a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with current regulations.
Contact details to exercise your rights: EVANGELICAL CHURCH OF BRETHREN AT CALLE TRAFALGAR, 32. Calle Trafalgar, 32 - 28010 Madrid (Madrid).
Contact details of the data protection officer: AVDA BRASIL 17, 28020 MADRID - dpd@sonorsolucionesnormativas.es .
Profile usage
The DATA CONTROLLER will carry out the following actions:
- Access to public profile information.
- Publication on the USER's profile of all information already published on the DATA CONTROLLER's social network.
- Send personal and individual messages through the social network channels.
- Page status updates that will be published on the USER's profile.
The USER can always control their connections, delete content that is no longer of interest and restrict who they share their connections with; to do this they must access their privacy settings.
Publications
The USER, once they are a follower or have joined the DATA CONTROLLER's social network, may post comments, links, images, photographs or any other type of multimedia content supported by it. The USER, in all cases, must be the owner of the published content, have copyright and intellectual property rights or have the consent of the affected third parties.
Any publication on the social network is expressly prohibited, whether texts, graphics, photographs, videos, etc. that attack or are likely to attack morality, ethics, good taste or decorum, and/or that infringe, violate or break intellectual or industrial property rights, the right to image or the Law.
In these cases, the DATA CONTROLLER reserves the right to immediately remove the content, without prior notice, and may request the permanent blocking of the USER.
The DATA CONTROLLER will not be responsible for content freely published by a USER.
The USER must bear in mind that their publications will be known to other users, so they themselves are primarily responsible for their privacy.
Images that may be published on the social network will not be stored in any file by the DATA CONTROLLER, but they will remain on the social network.
Data of minors or people with special capacities
Access and registration through the DATA CONTROLLER's social networks is prohibited for minors under 18 years of age. On the other hand, if the USER has special capacities, the intervention of the holder of their parental authority or guardianship, or their legal representative, will be necessary through a valid document that accredits the representation.
The DATA CONTROLLER shall be expressly exempt from any liability that may arise from the use of social networks by minors or people with special capacities. The DATA CONTROLLER's social networks do not knowingly collect any personal information from minors, therefore, if the USER is a minor, they should not register, use the DATA CONTROLLER's social networks, or provide any personal information.