Privacy policy

Last Update: July 1, 2021

1. INTRODUCTION

To be able to provide you with certain services, it is necessary to manage your personal data. To this end, they will be included in the corresponding processing activities of the AVP and will be treated with the specific purpose of each treatment, in accordance, mainly, with the regulation established by Regulation (EU) 2016/679 of the Parliament European and Council, of April 27, 2016, relating to the protection of natural persons with regard to the processing of personal data and the free movement of such data and which repeals Directive 95/46/EC ( General Data Protection Regulation) and Organic Law 3/2018, of December 5, on Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).

1. GENERAL INFORMATION

Next, AVP informs, in a general way, about the safeguarding of privacy and the protection of personal data applied to the processing activities it carries out:

1. Who is responsible for the processing of your personal data?

AVP, has the status of Responsible for the Treatment, with the following informative data:

– Responsible: ASSOCIATION FOR THE PROMOTION AND ENHANCEMENT OF TOURISM OF THE VALLEYS OF PEDRAFORCA – (AVP)
– CIF: G67032763
-Registered in section 1 of the Generalitat de Catalunya Register of Associations, dated September 19, 2017.
– Social address for this purpose Casa Carcau- Camping Mirador al Pedraforca S/N, 08697, Saldes, Barcelona .
– E-mail: coordinacio@vallsdelpedraforca.com

2. Why do we process your personal data?

The purpose of the collection and processing of personal data, depending on the specific case, responds to the administrative management of the Entity itself and its relationship with the associates, to manage and attend to requests for information, doubts, complaints, congratulations or suggestions on publications or any services or activities, acts or events provided, offered, sponsored by AVP. Likewise, and in case of having the corresponding prior consent which can be withdrawn at any time, information and commercial communications can be sent.

3. What is the legal basis that legitimizes the processing of your personal data? In other words, what grounds or enables us to process your personal data?

The legal basis that legitimizes us for the processing of your personal data are the following; (i) the consent granted by you by signing or accepting the relevant forms, for one or more specific purposes; (II) in your case, the execution of a contract to which you are a party, as an associate and/or supplier/collaborator; (III) and the legitimate interest that may derive from the AVP’s own functions. And, in case you explicitly and previously granted it, your consent which you can withdraw at any time, to send you information and commercial communications.

4. How long do we keep your personal data?

We will keep your personal data for the corresponding period in order to maintain a history of attention and manage our services efficiently and the person concerned does not request its deletion. Even if deletion is requested, they will remain blocked for the necessary time, and limiting their treatment, solely for one of these cases: to comply with legal/contractual obligations of any kind to which we are subject and/or during the legal terms provided for the prescription of any responsibilities on our part and/or the exercise or defense of claims derived from the relationship maintained with the owner of the data.

5. Who must keep the data up to date?

On the other hand, with the aim that the data that is processed by the AVP always correspond to reality, it will be tried to keep updated. So, for this purpose, the User will have to make the changes, directly, when so enabled or by communicating, through reliable means and attesting their identity, to the AVP.

6. Who can be assignees or recipients of your personal data?

Personal data will not be transferred or communicated to third parties, except in the cases necessary for the development, execution, control and fulfillment of the purpose(s) expressed, or for the administrative management of the entity, or in the cases provided for by law.

7. Security of personal data

The AVP will adopt the appropriate technical and organizational measures in its information system, complying with the principle of proactive responsibility, in order to guarantee the security and confidentiality of the data stored, thus avoiding its alteration, loss, treatment or unauthorized access; taking into account the state of the art, the costs of application, and the nature, scope, context and purposes of the treatment, as well as risks of variable probability and severity associated with each of the treatments.

8. What are your data protection rights and how can you exercise them?

ostè may exercise the rights of access, rectification, deletion, limitation, portability or, as the case may be, opposition. For this purpose, you must submit a letter to the AVP, at coordinatio@vallsdelpedraforca.com . In writing, you must specify which of these rights you request to be satisfied and, at the time, you must prove your identity, either through a photocopy of your DNI or equivalent identification document, or by signing with a digital certificate the aforementioned email. If you act through a legal or voluntary representative, you must also provide a document certifying the representation and its identification document. Also, if you consider your right to the protection of personal data violated, you can file a claim with the Spanish Data Protection Agency ( www.aepd.es ).

Below is more information on exercising your data protection rights:

8.1. What are my rights?
The data protection regulations allow you to exercise before the controller, AVP, the rights of access, rectification, opposition, portability, deletion (“right to be forgotten”), limitation of the treatment and not to be subject to individual decisions, in accordance with Regulation (EU) 2016/679, of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free movement of this data and which repeals Directive 95/46/CE (General Data Protection Regulation, hereinafter “RGPD”) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD):

Access Rights

You have the right to know:
– Whether or not we are processing personal data that concern you.
-The origin of your data, if you did not provide it to us.
-The purposes of processing your data.
– The categories of data in question.
-The recipients or the categories of recipients to whom the personal data was communicated or will be communicated.
-If possible, the planned retention period for personal data (or, if not possible, the criteria used to determine this period).
-The right to submit a claim to a control authority.
– If we make automated decisions – including profiling – using your personal data.

Right of rectification

You have the right to have your personal data rectified:
– Completing them, if they were incomplete.
-Updating or rectifying them, if for any reason they are no longer consistent with current reality or are inaccurate.
-By exercising the right of rectification, we will ensure that all your personal data is accurate and complete

Right of deletion

You have the right to have your personal data deleted when any of the following conditions apply:
– The data are no longer necessary for the purposes for which they were collected or processed.
– You withdraw the consent on which we base the processing of your data and this cannot be defended on another basis of legitimation.
– You have successfully exercised the right to object to the processing of your data.
-The personal data have been processed unlawfully.

Right to limitation of treatment
You will have the right to obtain the limitation of the processing of your personal data (that is, that we keep it without using it for the intended purposes).

Right of opposition
You will have the right to request that we stop using your personal data, for example, when you believe that the personal data we hold about you may be incorrect or you believe we no longer need to process it.

Right of portability
When the processing of your data is based on consent or is necessary for the execution of a contract or pre-contract and is carried out by automated means, You will have the right to the portability of your data, that is to say the fact that they are delivered to you in a structured, commonly used and machine-readable format, even to forward them to a new person in charge, is why AVP will facilitate the portability of your data to the new person in charge.

8.2. Who can exercise these rights before AVP?
You as interested party or owner of personal data, acting in your own name and right and duly certifying your identity.

Through another person acting, duly accredited and both justifying their identity, as legal representative (Ex. when the holders of parental authority or guardianship act on behalf of a person under 14 years of age or when acting as the legal representative of a person with functional diversity) or volunteer (person that you have freely and voluntarily granted powers of representation for this purpose).

8.3. How and where can I exercise these rights?
– By postal mail
You can submit the letter by sending it to the following postal address: Casa Carcau- Cámping Mirador al Pedraforca S/N, 08697, Saldes, Barcelona .

– By internet
You can submit the letter by sending an email to the following address coordinatio@vallsdelpedraforca.com .

In both cases, you must:
-Provide sufficient data and information to attend to the request. For this purpose, you can use the form models that the AVP makes available to you and that I send to you as soon as possible once you request it.
-Sign the printed form by hand or, if applicable, and if you have a recognized digital certificate, sign it electronically.
-Attach photocopy of DNI, Passport, NIE or other equivalent identification document. If acting on behalf of a third party, a copy of their ID or equivalent identification document must also be included, as well as the document certifying the representation of the interested party. If an email is sent, it will be valid to prove your identity if it is signed using a digital certificate.
-Send the form and documents proving your identity to AVP by any of the previously mentioned means.

8.4. Additional information
AVP will analyze whether or not the request complies with the law. He will communicate to the petitioner the decision taken, proceeding accordingly: if it is an estimate, he will adopt the appropriate measures according to the right exercised; if it is dismissive, it will indicate the legal resources system. In the event that the requests are manifestly unfounded or excessive (e.g., repetitive) AVP may: (i) Charge a fee proportional to the administrative costs incurred (ii) Refuse to act. In any case, reasons for rejection/denial will always be reasoned and justified.

9. Changes to this policy

The Valls del Pedraforca Association (henceforth, AVP) reserves the right to modify this Policy in order to adapt it to new legislation, jurisprudential criteria, industry practices, or the interests of the AVP. Any modification in it will be announced with due advance, so that you have perfect knowledge of its content.

III. ADDITIONAL INFORMATION DATA PROTECTION

1. CANDIDATES
Your data is processed by AVP as data controller.

The purpose of processing your curricular data is to carry out personnel selection processes in our organization.

The legality of the treatment is based on article 6.1.a) of the RGPD: the interested party gave his consent for the treatment of his personal data for one or several specific purposes.

The Curriculum vitae will be kept for a maximum period of one year once the vacancy has been closed and filled, as long as the applicant has not revoked the consent granted.

Your data will not be transferred or communicated to third parties, unless it is necessary for the administrative management of the entity.

2. PARTICIPATION IN TRAINING ACTIVITIES
Your data is processed by AVP as data controller

The purposes of processing your personal data are:
-Manage your registration for the training activity, as well as verify that you meet the requirements to register for such activity according to the established conditions.
-If you expressly authorize it, send you our newsletter regarding training activities or information about new events or training activities.

The retention period of the data will be in accordance with what is required to have the entity’s accounting and tax information and in the face of any possible request from the competent public entity (competent Public Administration, Tax Agency, Courts or Tribunals), and in in relation to sending the newsletter, as long as we have your consent.

The data are treated on the basis of the contractual relationship that binds the parties and/or the legitimate interest and consent in the case of authorizing the receipt of the electronic newsletter.

The data may be transferred or communicated, where appropriate, to banking entities for the realization of collections or payments, at the request of the Tax Agency, Courts or Tribunals, as well as to the competent Public Administration in the event of a request for subsidy justification.

3. SUPPLIERS

The personal data of the signatory of the contract, as well as of the people who participate or are in contact during the provision of the service, will be processed by AVP, as Data Controller.

The legal basis that legitimizes the processing of the data is the contractual relationship, for the formalization and execution thereof.

The purpose of the treatment is to maintain the contractual relationship, in the economic and technical aspects derived, as well as the development and control of the service(s) contracted/if, where appropriate, the transmission of information on incidents related to those.

The data will not be transferred to third parties, unless they are communicated to public or private entities, to which it is necessary or mandatory to transfer them in order to be able to manage the contractual relationship, as well as in the cases foreseen, according to the Law.

The data will be kept for the time necessary to fulfill the purpose for which it was collected and to determine the possible responsibilities that could be derived from this purpose and from the processing of the data and may be required by the public authorities competent (Tax Agency, Courts or Tribunals).

4. SOCIAL NETWORKS

AVP has different profiles on social networks to publicize its activities and interact with users. Users of these social networks who voluntarily decide to follow or be friends with AVP express their consent to the processing of their personal data relating to their profile to interact in the social network. AVP does not collect data from social networks for purposes other than those mentioned. The use of social networks involves an international transfer of data for the provision of the service. This communication is made on the basis of the adoption by the social network of standard contractual clauses, in accordance with Decision 2010/87 of the European Commission. You can unfollow or unfriend AVP at any time.

The user must respect the rights of third parties, especially privacy and data protection rights, as well as intellectual and industrial property regulations, in all the information published on the AVP page. It is forbidden to publish information that in any way attacks morals, public order, fundamental rights, public freedoms, with particular attention to the honor, privacy or image of third parties and, in general, against human rights. The user will be solely responsible for the information they publish.

We recommend reviewing the privacy settings of the social network and attach a link to the different privacy policies:

-Twitter: https://twitter.com/es/privacy
-Facebook: https://es-es.facebook.com/privacy/explanation
-Instagram: https://help.instagram.com/519522125107875

5. ELECTRONIC EMAIL

The personal data that we process as a result of receiving and/or exchanging e-mails, will be processed with the purpose of attending to and responding to your request for information or consultation, in order to maintain commercial or professional contacts and relationships that are produce as a result of this, or for the maintenance in their case of a contractual relationship.

In the case of filling in a form prepared through the tools provided by Google, we inform you that it involves an international transfer of data to Google LLC for the provision of the Service. This communication is made on the basis of the adoption by Google of standard contractual clauses, in accordance with Decision 2010/87 of the European Commission.

6. WHATSAPP OR OTHER INSTANT MESSAGING

The personal data that we process as a result of receiving and/or exchanging messages through the WhatsApp application mainly – although other instant messaging apps, such as Telegram for example – may be used, will be treated with the purpose of attending to and responding to your request for information or consultation, to maintain commercial or professional contacts and relationships that occur as a result of this, or for the maintenance in your case of a contractual relationship. In this sense, the use of WhatsApp or any other instant messaging app involves an international transfer of data. This international transfer is carried out through standard contractual clauses in accordance with Decision 2010/87 of the European Commission, for more information you can consult https://www.whatsapp.com/legal/privacy-policy-eea?eea=1 and https://faq.whatsapp.com/general/about-standard-contractual-clauses ; , or https://telegram.org/faq#p-que-hay-sobre-el-rgpd and https://telegram.org/faq .

7. ELECTRONIC BULLETIN OR NEWSLETTER

In addition, in the event that you expressly authorize it by checking the corresponding box or by means of your express request, we will keep you informed about our activities. For registration to be effective, we require a valid email address.

Consent to the processing of your personal data and its further use for sending newsletters can be revoked at any time. You will find a link to this effect in the footer of each newsletter. You can also unsubscribe at any time or communicate your request to us using the contact options specified at the end of this document. In this regard, note that once you unsubscribe from a mailing list or newsletter, we will only keep your email address for the sole purpose of sending you any mail again, unless you ask us to do so . There is also the possibility that you may still receive some communication once you have exercised your right to cancel and it may be because it was previously configured or sent.

In the case of subscribing to our newsletter, we inform you that we use the Mailchimp application for its management, which involves an international transfer of data to Mailchimp (The Rocket Science Group LLC) for the provision of the service . The use of Mailchimp involves an international transfer of data for the provision of the service. This communication is made on the basis of the adoption by Mailchimp of standard contractual clauses, in accordance with Decision 2010/87 of the European Commission.

Likewise, we inform you that this company uses devices to monitor the activity of the recipients, in order to control the opening of the mails and the pulsation of the links contained in the mails and to collect information such as the IP address, browser, type of email client and similar details, to be able to use the information collected to draw up campaign monitoring reports as well as improve the effectiveness of Mailchimp services. For more information you can consult the Mailchimp Policy: https://mailchimp.com/legal/privacy/ .