Privacy Policy
Your personal data will be processed confidentially and solely for the purposes to which you have consented, as explained below in this Privacy Policy and in each of the Privacy Policies of the different forms.
Commitment to Privacy
Fundación Humanitas Internacional is fully committed to compliance with regulations and the General Data Protection Regulation of the European Union ((EU) 2016/679, ‘GDPR’) and Organic Law 3/2018, of December 5 (LOPDGDD), as well as the personal data protection regulations in force at any given time.
Identification of the Data Controller
The controller of your personal data is Fundación Humanitas Internacional, a private non-profit foundation, with NIF G19739440, registered office at Calle Marina 148, entresuelo 3ª, 08013 Barcelona, and registered in the Register of Foundations of the Generalitat de Catalunya under number 3407. You may contact the Foundation regarding any issue related to the processing of your personal data at info@fundaciohumanitas.org.
The Foundation has decided to implement the following principles, with privacy being the foundation upon which all processing is structured:
Transparency in data processing: whenever we collect personal data about you, we will properly inform you of the purposes of such processing in the corresponding privacy policy.
We will always process data that is strictly necessary to carry out the reported processing.
We will never compel you to provide personal data, unless it is truly necessary to provide the service you may request from us.
We will not share data with any third party, except with those suppliers who provide us with a service, or with those about whom you have been previously informed and have given us your consent. These providers are identified in the ‘Recipients and Data Processors’ section of this Policy.
Fundación Humanitas Internacional obtains your personal data to manage your requests and offer you the services and products in which you may be interested. Specifically, we process your personal data for the following purposes (together with the legal basis that legitimizes each processing, in accordance with Article 6 GDPR):
Attending to your inquiries, questions, or requests made through the customer service, communication, or press channels identified on each website, and contacting you to resolve them. Legal basis: performance of pre-contractual measures at the request of the data subject or legitimate interest in attending to the request (Art. 6.1.b) and f) GDPR).
Improving our websites, services, and products to offer better service and content. Legal basis: legitimate interest of the Foundation (Art. 6.1.f) GDPR).
Offering you access to restricted areas of our website (registration may require acceptance of a specific privacy policy). Legal basis: performance of the contractual relationship or user consent, as applicable (Art. 6.1.a) and b) GDPR).
Managing donations and contributions received, issuing tax exemption certificates pursuant to Law 49/2002 on the tax regime of non-profit entities, and fulfilling accounting, tax, and accountability obligations before the Protectorate of Foundations of the Generalitat de Catalunya. Legal basis: compliance with legal obligations and task carried out in the public interest by the Foundation (Art. 6.1.c) and e) GDPR).
Managing the participation of volunteers in the Foundation’s Volunteer Program and in the projects and events in which they collaborate (including, where applicable, emergency contact details). Legal basis: consent of the volunteer and, where applicable, compliance with applicable volunteering and risk prevention regulations (Art. 6.1.a) and c) GDPR).
Organizing, managing, and promoting the Foundation’s events, including capturing the image and voice of attendees, speakers, and volunteers through photography, video, and recording, for informative, educational, and promotional purposes regarding foundational activities. Legal basis: legitimate interest of the Foundation in promoting its activities of general interest (Art. 6.1.f) GDPR), without prejudice to the data subject’s right to object and the obligation to obtain specific consent when the image constitutes the primary element of featured promotional content, in accordance with Organic Law 1/1982.
Providing social consultancy services to companies and entities. When, within the framework of these services, the Foundation accesses data of the client entity’s employees, it will act as a data processor on behalf of that entity, under the terms of the data processing agreement signed in accordance with Article 28 GDPR, and not as a data controller.
Sending Commercial Communications
Fundación Humanitas Internacional may provide you with registration or subscription tools for news or general or commercial information about the entity. These tools will always be subject to your consent for dispatch.
If you have authorized us, Fundación Humanitas Internacional will send you personalized information about its products, activities, and services tailored to your tastes and preferences. The management of the newsletter and commercial communications is carried out with the assistance of the provider Brevo (Sendinblue SAS), acting as a data processor in accordance with Article 28 GDPR.
You may revoke your consent to receive commercial communications at any time via the link or button provided for this purpose in each communication.
Duration of Processing and Retention Period
The Foundation retains personal data for the time necessary to fulfill the purpose for which it was collected and, subsequently, during the statutory limitation periods for any legal liability that may arise. As a guideline: (a) inquiry and contact form data: until the request is resolved and for a maximum of one (1) additional year; (b) donor data and documentation relating to tax certificates: during the relationship and, additionally, the applicable tax and accounting limitation period (generally four years under the General Tax Law, without prejudice to the six years under Article 30 of the Commercial Code); (c) volunteer data: during the term of their collaboration and the limitation period for associated legal obligations; (d) images and recordings of events for promotional/educational purposes: for as long as they remain useful, with the possibility of requesting removal in accordance with the ‘Exercise of Rights’ section; (e) newsletter data: until revocation of consent.
In any case, even if you ask us to delete your data, we may retain it, under proper blocking, for the period necessary to comply with our legal obligations.
Recipients and Data Processors
To provide its services, the Foundation uses the following suppliers, who act as data processors under the corresponding processing agreement (Art. 28 GDPR) and not as independent controllers: Brevo (Sendinblue SAS), for managing the newsletter and commercial communications; Wistia Inc., for hosting and playing audiovisual content; the website hosting and development provider WordPress; and, where applicable, the platform used to manage registrations and ticket sales for Foundation events. The Foundation may also disclose data to competent Public Administrations (including the Tax Agency and the Protectorate of Foundations) when required by a legal obligation.
International Data Transfers
Certain data processors, in particular Wistia Inc., are headquartered in the United States, which may involve an international transfer of personal data outside the European Economic Area. This transfer is covered, as applicable, by the provider’s certification under the EU-U.S. Data Privacy Framework or by signing Standard Contractual Clauses approved by the European Commission, which the Foundation will verify and, where appropriate, document.
Exercise of Rights and Complaints before the AEPD
As a result of the processing of your personal data by Fundación Humanitas Internacional, current legislation grants you a series of rights:
Right of access: You have the right to know the personal data we process about you and the purposes for which we process it.
Right to rectification: You may request that we rectify your data at any time if what is in our records is inaccurate.
Right to erasure: You may request, at any time, that your personal data be erased from our files.
Right to object: You may object to the processing of your data in relation to any of the purposes for which we process it.
Right to restriction of processing: You may request restriction of processing in the cases provided for in Article 18 GDPR.
Right to data portability: You may request that we provide you, or directly transmit to another controller, the personal data you have provided to us and that we process automatically based on your consent or the execution of a contract, in a structured, commonly used, and machine-readable format.
To exercise these rights, you may write to the Foundation at info@fundaciohumanitas.org, indicating the right you wish to exercise and attaching a copy of an identification document. Furthermore, if you consider that the processing of your personal data does not comply with current regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or, where applicable, with the competent supervisory authority.
Minors
The services and forms on the website are directed at individuals over 14 years of age. The Foundation does not knowingly collect personal data from minors under this age without the consent of their legal representatives. At events open to the general public (such as the Festival of Consciousness) attended by accompanied minors, captured images are processed according to the promotional purpose described in this Policy, and the legal representatives of the minor may exercise the rights recognized in the previous section.
Confidentiality
We are committed to processing your data with the utmost confidentiality and discretion, as well as implementing all security measures we deem appropriate and reasonable.
Policy Updates
This Privacy Policy may be modified to adapt to legislative developments or changes in data processing activities. The date of the last update will be indicated at the bottom of this page.