Data protection policy

Initial | Legal

DATA PROTECTION POLICY

This DATA PROTECTION POLICY is an integral part of the Legal Notice and Terms and Conditions of Use of the FUNDACIÓN PRIVADA ERNESTO VENTÓS Website, located at https://fundacionernestoventos.org (hereinafter, the ‘Website’).

In compliance with the provisions of the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, ‘GDPR’) and of Spanish Organic Law 3/2018, of December 5, 2018, on the Protection of Personal Data and guarantee of digital rights (hereinafter, ‘LOPDGDD’), the FUNDACIÓN PRIVADA ERNESTO VENTÓS (hereinafter, the ‘Foundation’) informs you that:

1.- NAME AND CONTACT DATA OF THE WEBSITE CONTROLLER.

  • FUNDACIÓN PRIVADA ERNESTO VENTÓS
  • Tax No.: G-67.492.215
  • Postal address: C/ Gòssol, 14 bajos 08017 Barcelona
  • Telephone: 932 805 467
  • Email address: fev@fundacionernestoventos.org.

2.- PURPOSES AND LEGAL BASIS OF THE DATA TREATMENT.

The Foundation may process your personal data for the following purposes, depending on why you provided them to us:

Purpose of the data treatment

Legal basis of the data treatment

I

To manage registration and the sending of information related to exhibitions, events, workshops, courses and publications (advertising and commercial information) by various means, concerning the Foundation, its activities, services, special offers and promotions, as well as documentation of different kinds.

The express consent of the interested party (art. 6.1.a GDPR).

II

To manage financial transfers to the Foundation and the collection and secure handling of legally required documentation.

The express consent of the interested party (art. 6.1.a GDPR) and for compliance with a legal obligation on the part of the person responsible for handling the data (art. 6.1.c GDPR).

III

To register a new subscriber to the Foundation.

The express consent of the interested party (art. 6.1.a GDPR) and for compliance with a legal obligation applicable to the person responsible for handling the data (art. 6.1.c GDPR).

IV

To enrol for workshops, seminars or other events organized by the Foundation. In some cases, the Foundation may make use of photographs and videos of the aforementioned events, always with the prior consent of the persons that appear in them. In addition, the Foundation may post these images on its website and social network profiles, for commercial purposes and in internal corporate documents.

The express consent of the interested party (art. 6.1.a GDPR).

V

To purchase works of art or other products from the Foundation.

The treatment is necessary for the execution of a contract (art. 6.1.b GDPR), so you are required to provide your personal data. Otherwise, the sale cannot be executed.

VI

To carry out all those actions that may be necessary to manage users’ queries received by way of the Website.

The express consent of the interested party (art. 6.1.a GDPR) and the satisfaction of legitimate interests pursued by the person responsible for handling the data (art. 6.1.f GDPR) in responding to requests for information about the Foundation.

With regard to express consent, it should be noted that the interested party has the right to withdraw consent at any time, without this affecting the lawfulness of the treatment based on the consent prior to its withdrawal.

Under no circumstances will the Foundation process your data in order to generate automated decision making, including profiling.

In accordance with the provisions of Law 34/2002 of July 11, 2002, on services of the information society and electronic commerce, in the event that the User of the Website who is also a ‘subscriber’ to the Foundation should no longer wish to receive commercial communications from the Foundation, this decision can be communicated by sending an email to the email address fev@fundacionernestoventos.org with the subject ‘unsubscribe’.

The User guarantees that the information provided is true, accurate, complete and up-to-date and assumes full responsibility for any damage, direct or indirect, that may result from a breach of this obligation. In the event that the data provided should belong to a third party, the User guarantees that the said third party has been informed of the entire contents of this document and has authorized the provision of their data to the Foundation for the purposes indicated.

Where personal data is collected by means of a form, the User must complete, at least, those fields marked with an asterisk: if this is not done the Foundation will be unable to accept and manage the service request or the query made.

In accordance with the Foundation’s concern to ensure the security and confidentiality of the data it handles, the required levels of personal data protection have been adopted and the technical means at its disposal have been installed to prevent any unauthorized access to or loss, misuse, alteration or theft of personal data supplied by way of this Website.

3.- SHARING OF USER DATA.

Your data will be shared with those departments of the Foundation that require it for the performance with their functions, who will ensure at all times the privacy of these data and undertake to protect them to prevent any unauthorized access, loss, misuse, alteration or theft.

By default, user data will not be shared with third parties unless there is a legal obligation to do so, and there will be no international transfer of data. However, the operations specified below necessarily involve a limited transfer of data to third parties, namely:

In the case of donations, the registration of new subscribers and the purchase of works or other products, bank details will be provided to the banking entities with which the Foundation works.
In addition, in the case of donors, data will also be provided to the relevant authorities to carry out the corresponding fiscal procedures.

In addition, the Website includes links to and functional operations of third parties, such as social networks or online communication systems, and the Foundation is not responsible for the data collected and processed by said third parties, in that by accessing their portals the User will be understood to have accepted the corresponding data protection policies and legal conditions in each case.

4.- CONSERVATION OF DATA.

Your personal data will be stored for a certain period of time, depending on the type of use of this Website you select. Note, in this regard:

Purpose of the treatment

Legal retention period

I

To manage registration and the sending of information related to exhibitions, events, workshops, courses and publications (advertising and commercial information) by various means, concerning the Foundation, its activities, services, special offers and promotions, as well as documentation of different kinds.

These data will be retained indefinitely until, according to the particular circumstances, the subscribed User expresses a wish to delete the stored data.

II

To manage financial transfers to the Foundation and the collection and secure handling of legally required documentation. 

These data will be stored only for the time required by the applicable legislation (on tax, accounting and money laundering).

III

To register a new subscriber to the Foundation.

These data will be kept for as long as the interested party maintains their association with the Foundation. On termination of this relationship data may, according to the particular circumstances, be kept for the time required by the applicable legislation and until any responsibilities or obligations arising from the collaboration have prescribed.

IV

To enrol for workshops, seminars or other events organized by the Foundation. In some cases, the Foundation may make use of the photos and videos that are recorded during the aforementioned events, always with the prior consent of the persons that appear in them. In addition, the Foundation may post these images on its website and social network profiles, for commercial purposes and in internal corporate documents.

These data will be retained indefinitely until, according to the particular circumstances, the subscribed User expresses a wish to delete the stored data, and, where relevant, for the time required by the applicable legislation (tax and accounting).

V

The purchase of works of art or other products from the Foundation.

These data will be kept for the time required by the applicable legislation (tax and accounting) and until any responsibilities or obligations arising from the sale have prescribed.

VI

To carry out all those actions that may be necessary to manage users’ queries received by way of the Website.

These data will be kept for the time required to respond to the users’ queries, up to a maximum of twelve (12) months, unless some other relationship with the Foundation should derive from them.

5.- EXERCISE OF RIGHTS

Users may exercise at any time their rights of access to their personal data, to rectify inaccurate data, to delete data that are no longer necessary and for any of the other purposes provided for by the GDPR, to oppose their treatment for reasons related to their particular circumstances, as well as the limitation and portability in accordance with the conditions detailed in the GDPR and the LOPDGDD, by sending a written communication indicating the reason for the request together with a copy of their ID or passport to the address in section 1) of this Policy.

In the event that the User considers that their request has not been dealt with in a satisfactory manner, they have the right to file a claim with the Spanish Agency for Data Protection (https://www.aepd.es/).

Date of publication of the latest version of the Privacy Policy (v.1. 26 September 2019)