Privacy Policy
FUNDACIÓN SALUD Y COMUNIDAD informs users of its website about its policy on the processing and protection of the personal data of users and clients.
It guarantees at all times full compliance with the obligations laid down in the regulations on data protection and information society services: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSICE).
Data controller
FUNDACIÓN SALUD Y COMUNIDAD
Tax ID (CIF): G61878831
Address: C/ ALI BEY, 25 3º – 08010 – BARCELONA
Registered with the State Protectorate of Foundations under no. 08/325
Telephone: 932440570
Email: fsyc@fsyc.org
Data protection officer
In accordance with Article 37.1.a of the General Data Protection Regulation (EU) 2016/679, the organisation has appointed a Data Protection Officer (DPO). The contact email address is: dpd@fsyc.org.
Purposes of data processing
The data provided by the User are used for the following purposes:
| Purpose of processing | Legal basis for processing |
| Handling enquiries or any type of request made through the contact channels available on the website. | Legitimate interest of the organisation in responding to requests for information made through the website. Consent expressly given when the data are collected through the website forms. |
| Sending newsletters, commercial communications and promotions. | Consent expressly given when the data are collected through the website forms. |
| Managing the whistleblowing channel. | Legitimate interest of the organisation in responding to requests made through the whistleblowing channel. Consent expressly given when the data are collected through the website forms. |
| Managing incidents and website maintenance. | Legitimate interest of the organisation. |
Data retention period
| Purpose of processing | Retention period |
| Handling enquiries or any type of request made through the contact channels available on the website. | We will process your data for as long as necessary to deal with your enquiry or request. |
| Sending newsletters, commercial communications and promotions. | We will process your data until you unsubscribe. |
| Managing the whistleblowing channel. | We will process your data for as long as necessary to deal with your enquiry or request. We will process your data for as long as necessary to comply with the applicable legal limitation periods. |
| Managing incidents and website maintenance. | We will process your data for as long as necessary to comply with the applicable legal limitation periods. |
Recipients of the data
To fulfil the purposes set out in this Privacy Policy, we need to give access to your personal data to third parties that support us in the services we offer you (data processors).
Data processors act to perform a contract or provide a service to the Data Controller, following its instructions at all times and ensuring the same levels of security.
Users' rights
Users have the right to:
- Request access to the personal data being processed and receive this information in writing by the means requested.
- Request the rectification of inaccurate personal data or, where appropriate, request its erasure when, among other reasons, the data are no longer necessary for the purpose for which they were collected.
- Request the restriction of the processing of their data.
- Object to the processing of their personal data where applicable, in which case the data will no longer be processed except for legitimate reasons.
- The right to the portability of their personal data when the processing is based on consent and carried out by automated means. The data will be provided in a structured, commonly used and machine-readable format.
- The right to withdraw the consent given.
- The right to lodge a complaint with the Spanish Data Protection Agency.
Users may exercise the above rights by writing to dpd@fsyc.org, proving their identity with a scanned copy of their national ID card or equivalent document and stating the right they wish to exercise.
Origin of the data
Personal data are provided by the data subjects themselves on an entirely voluntary basis. Failure to provide certain data or answer certain questions in the registration processes or in the various electronic forms presented to the User may make it impossible to access certain services that require personal data; in such cases the Data Controller will indicate that providing the personal data is mandatory and/or necessary for the service to work.
The Data Controller ensures the confidentiality of your personal data and guarantees their security, adopting the necessary measures to prevent their alteration, loss, processing or unauthorised access.
Information provided by the user
Minors under 18 may not provide their personal data without the prior consent of their parents and/or legal guardians.
By entering their data in the contact forms or download forms, Users expressly, freely and unequivocally accept that their data are necessary for the Data Controller to deal with their request; completing the remaining fields is voluntary.
Users guarantee that the personal data provided are true and are responsible for reporting any changes to them.
All the data requested through the website are necessary to provide the User with an optimal service. If not all the data are provided, there is no guarantee that the information and services provided by the Data Controller will fully meet their needs.
Security measures
In accordance with the personal data protection regulations in force, the Data Controller complies with all the provisions of the GDPR and the LOPDGDD for the processing of the personal data for which it is responsible, which are processed lawfully, fairly and transparently in relation to the data subject, and are adequate, relevant and limited to what is necessary for the purposes for which they are processed.
The Data Controller guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect Users’ rights and freedoms, and has provided them with the information they need to exercise them.
Security breaches
The Data Controller will report any security breach affecting the database used by this website, or affecting any of our third-party services, to each and every person whose data may have been affected, and to the authorities, within 72 hours of detecting the breach.
Applicable law and jurisdiction
The Data Controller reserves the right to take any civil or criminal action it deems necessary for the improper use of the Website and its Contents.
The relationship between the User and the Data Controller shall be governed by the regulations in force and applicable in Spain. Should any dispute arise regarding interpretation and/or application, the parties shall submit their disputes to the ordinary courts and tribunals with jurisdiction under the law.