Privacy Policy – VOLUNTREK

Who is responsible for processing your data?

FUNDACIÓN ASPAYM CASTILLA Y LEON
Address: Calle Severo Ochoa, 33 47130 Simancas (Valladolid)
Tax ID (CIF): G47537402
Telephone: +34 91 232 91 29
Email: fundacionrgpd@aspaymcyl.org

You may contact us by any means.

We reserve the right to modify or adapt this Privacy Policy at any time. We recommend reviewing it periodically, and if you have registered and access your account or profile, you will be informed of any modifications.

Data Subjects

If you belong to any of the following groups, please consult the corresponding information:

Guests

For what purposes will we process your personal data?

We inform you that your data will be processed for the purpose of managing your reservation, your stay at the hotel, and ensuring payment of the expenses arising from such stay.

Your data will be communicated to the Security Forces and Bodies in compliance with current legislation, as well as to the travel agencies or tour operators involved.

The data will be retained for a minimum period of six (6) years in compliance with tax, commercial, consumer protection and traveller registration record regulations.

What is the legal basis for processing your data?

The legal basis is your consent and compliance with the legal obligations established by Royal Decree 393/1974 of 18 August and Order INT/1922/2003 of 3 July.

How long will we retain your personal data?

Until the withdrawal of the consent granted.

Website or Email Contacts

What data do we collect through the Website?

We may process your IP address, the operating system or browser you use, and even the duration of your visit, anonymously.

If you provide data through the contact form, you will identify yourself so that we may contact you if necessary.

For what purposes will we process your personal data?

To respond to your enquiries, requests or applications.
To manage the requested service, respond to your request or process your application.
To provide information by electronic means relating to your request.
To provide commercial information or information about events by electronic means, provided express authorisation has been granted.
To carry out analysis and improvements to the Website and to our products and services.
To improve our commercial strategy

What is the legal basis for processing your data?

The acceptance and consent of the data subject, granted through a voluntary action. In cases where completing a form and clicking the submit button is necessary to make a request, such action shall necessarily imply that you have been informed and have expressly consented to the content of the clause attached to the form or to the acceptance of this Privacy Policy.

All our forms include the symbol (*) for mandatory fields. If you do not complete those fields or do not tick the checkbox accepting the Privacy Policy, the information cannot be submitted.

How long will we retain your personal data?

Until the withdrawal of the consent granted.

Newsletter Subscribers

What data do we collect through the newsletter?

The Website allows subscription to the Newsletter if you provide an email address to which it will be sent.
We will store only your email address in our database and will send you periodic emails until you request to unsubscribe or until we cease sending such communications.

You will always have the option to unsubscribe in any communication received.

For what purposes will we process your personal data?

To manage the requested service.
To provide information by electronic means relating to your request.
To provide commercial information or information about events by electronic means, provided express authorisation has been granted.
To carry out analysis and improvements in email marketing campaigns in order to improve our commercial strategy.

What is the legal basis for processing your data?

The acceptance and consent of the data subject. Where you subscribe, you will be required to tick a checkbox and click the submit button. This will necessarily imply that you have been informed and have expressly consented to receiving the newsletter.

How long will we retain your personal data?

Until the withdrawal of the consent granted.

Clients

For what purposes will we process your personal data?

Preparation of quotations and monitoring thereof through communications between the parties.
Information by electronic means relating to your request.
Commercial information or information about events by electronic means, provided express authorisation has been granted.
Management of administrative, communication and logistics services carried out by the Data Controller.
Invoicing and declaration of the corresponding taxes.
Execution of the corresponding transactions.
Monitoring and debt recovery activities.

What is the legal basis for processing your data?

The existence of a contractual relationship between the parties. Processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract.

What is the legal basis for processing your data?

How long will we retain your personal data?

For the duration of the relationship between the parties and for the applicable statutory limitation periods arising therefrom.

Quality Surveys

For what purposes will we process your personal data?

To assess the level of quality of the service provided.
To improve the services offered in compliance with ISO standards.

What is the legal basis for processing your data?

The legal basis is the express consent of the survey participant.

How long will we retain your personal data?

Until the withdrawal of the consent granted.

Suppliers

For what purposes will we process your personal data?

Information by electronic means related to your request.
Commercial information or event information by electronic means, provided that express authorisation exists.
Management of the administrative, communication and logistics services carried out by the Controller.
Invoicing.
Carrying out the corresponding transactions.
Invoicing and filing of applicable taxes.
Monitoring and debt collection activities.

What is the legal basis for processing your data?

The legal basis is the acceptance of a contractual relationship or, failing that, your consent when contacting us or offering us your products through any channel.

How long will we retain your personal data?

For the duration of the relationship between the parties and for the applicable statutory limitation periods arising therefrom.

Shareholders

For what purposes will we process your personal data?

Organisation of the activities necessary to achieve the objectives of the company.
Internal management and legal compliance.
Calling shareholders’ meetings.
Carrying out the corresponding transactions.
Filing applicable taxes.

What is the legal basis for processing your data?

The legal basis is contractual, namely the acceptance of a share purchase agreement or similar arrangement, or participation in the incorporation of the company.

How long will we retain your personal data?

For the duration of the relationship between the parties and for the applicable statutory limitation periods arising therefrom.

Association Members

For what purposes will we process your personal data?

Organisation of the activities necessary to achieve the objectives of the association.
Internal management and legal compliance.
Calling meetings.
Carrying out transactions or collecting membership fees as applicable.
Filing applicable taxes.

What is the legal basis for processing your data?

The legal basis is contractual, namely acceptance of the provisions set out in the founding act and the Association’s bylaws.

How long will we retain your personal data?

For the duration of the relationship between the parties and for the applicable statutory limitation periods arising therefrom.

Social Media Contacts

For what purposes will we process your personal data?

To respond to your enquiries, requests or petitions.
To manage the requested service, respond to your request, or process your petition.
To interact with you and create a community of followers.

What is the legal basis for processing your data?

The legal bases are the voluntary consent of the data subject to make contact and, where applicable, the acceptance of a contractual relationship within the relevant social media environment. Data processing within the Social Network will be carried out in accordance with its Privacy Policies.

How long will we retain your personal data?

We can only access or remove your data in a limited manner due to the existence of a specific profile. We will process your data for as long as you allow us to do so by following us, being our friend, or clicking “like”, “follow” or similar buttons.

Any correction of your data or restriction of information or publications must be made through the settings of your profile or user account on the social network itself.

Job Applicants

For what purposes will we process your personal data?

Organisation of recruitment and employee selection processes.
Inviting you to job interviews and evaluating your application.
If you have given your consent, we may share your data with collaborating or affiliated companies solely to help you find employment.
If you tick the privacy policy acceptance checkbox, you consent to us sharing your job application with the entities that make up the group of companies for inclusion in their recruitment processes.

We also inform you that one year after receipt of your curriculum vitae, it will be securely destroyed.

What is the legal basis for processing your data?

The legal basis is your unequivocal consent when sending us your CV.

How long will we retain your personal data?

For a minimum period of 1 year or until the consent granted is withdrawn.

Do we include personal data of third parties?

No. As a general rule, we only process data provided by the data subjects themselves. If you provide us with third-party data, you must first inform and obtain the consent of those individuals; otherwise, you release us from any liability arising from failure to comply with this requirement.

Do we include data relating to minors?

We do not process data relating to children under 14 years of age. Therefore, please refrain from providing such data if you are under that age, or from providing data relating to third parties who are under that age. FUNDACIÓN ASPAYM CASTILLA Y LEON accepts no liability for failure to comply with this provision.

Will we communicate with you electronically?

Such communications will only be made in order to manage your request if this is one of the contact methods you have provided to us.
If we send commercial communications, these will have been previously and expressly authorised by you.

What security measures do we apply?

You can rest assured that we have adopted an optimal level of protection for the Personal Data we process and have implemented all technical means and measures available to us, in accordance with the state of the art, to prevent loss, misuse, alteration, unauthorised access and theft of Personal Data.

To whom will your data be disclosed?

Your data will not be disclosed to third parties except where legally required. Specifically, it will be communicated to the Spanish Tax Agency (Agencia Estatal de la Administración Tributaria), banks and financial institutions for the collection of payments relating to services provided or products purchased, as well as to data processors necessary for the execution of the agreement.

In the event of a purchase or payment, if you choose an application, website, platform, bank card or any other online service, your data will be transferred to that platform or processed within its environment, always with the highest level of security.

When instructed by us, our website development and maintenance company and our web hosting provider may access our website. They will have signed a service provision agreement requiring them to maintain the same level of privacy protection as we do.

What rights do you have?

To know whether we are processing your data.
To access your personal data.
To request the rectification of your data if it is inaccurate.
To request the erasure of your data if it is no longer necessary for the purposes for which it was collected or if you withdraw your consent.
To request the restriction of processing in certain circumstances, in which case we will only retain the data in accordance with applicable regulations.
To data portability, meaning your data will be provided in a structured, commonly used and machine-readable format. If you prefer, we may send it to the new controller you designate. This right only applies in certain circumstances.
To lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) or the competent supervisory authority if you believe that we have not handled your request properly.
To withdraw your consent for any processing based on consent at any time.

If any of your data changes, we would appreciate it if you would inform us so that we can keep it up to date.

Do you want a form to exercise your rights?

We have forms available for exercising your rights; request them by email or, if you prefer, you may use those prepared by the Spanish Data Protection Agency or by third parties.
These forms must be electronically signed or accompanied by a photocopy of your ID document.
If someone is acting on your behalf, you must provide us with a copy of their ID document or have them sign using their electronic signature.
Forms may be submitted in person, by post or by email to the Controller at the address provided at the beginning of this document.

How long will it take us to respond to your request?

It depends on the right being exercised, but no later than one month from your request, and up to two months if the matter is particularly complex and we notify you that we need additional time.

Do we use cookies?

If we use any cookies other than those that are strictly necessary, you may consult the Cookie Policy via the corresponding link available on our website.

How long will we retain your personal data?

Personal data will be retained for as long as you maintain a relationship with us.
Once that relationship ends, the personal data processed for each purpose will be retained for the legally established periods, including the period during which a court or tribunal may require them in accordance with the applicable statute of limitations.
Processed data will be retained until the aforementioned legal periods expire where there is a legal obligation to retain them, or, where no such legal period exists, until the data subject requests their deletion or withdraws the consent granted.
We will retain all information and communications relating to your purchase or to the provision of our services for the duration of the warranties applicable to the products or services, in order to address any potential claims.