In accordance with current regulations, we inform you that the data provided will be processed by the Cayetano Heart Foundation (hereinafter, ‘the Foundation’):
When users provide personal data through the contact form, their personal data will be processed for the following purposes:
Assess the quality of the service provided, in order to improve the analysis with regard to identifying the needs of stakeholders.
Interested parties category: Those interested in information about the Foundation's services and activities.
Generally speaking, the Foundation will prepare personalised reports on your activity with the Foundation, based on the information you provide directly to the Foundation, with the Foundation's legitimate interest serving as the basis for legitimacy. You may object to this processing at any time.
In the event that these personalised reports are based on information obtained from third parties for the purpose of profiling (such as the reuse of public information, the acquisition of databases, programmatic advertising systems, or in general any incorporation of personal data from external sources), your express prior and separate consent will be requested, which you may withdraw at any time. However, if you object or withdraw your consent, this will not affect the lawfulness of any processing carried out previously.
Likewise, the Foundation may process additional categories of personal data that the data subject may voluntarily provide during the contractual relationship between the data subject and the Foundation.
Your data may be communicated to:
Similarly, suppliers of the Foundation who are necessary for the proper fulfilment of legal obligations and/or the purposes indicated may process your data as data processors, without the Foundation losing its status as data controller in any case.
The Foundation informs users that, in order to process the personal data of minors under the age of 14, the consent of their parents, guardians or those who have parental authority over the minor will be required.
Therefore, when a minor participates in any activity, race, challenge or, in general, any event organised by the Foundation, its collaborators or its partners, as well as to obtain volunteer status, it will be necessary to provide the details identifying the parents, guardians or those who have parental authority for the sole purpose of obtaining the necessary consent. The Foundation reserves the right to request the family register or any other document that determines the filiation, guardianship or, in general, parental authority over the minor.
When users provide personal data of family members, friends, partners, or any other third parties related to the user, they must undertake to inform them of the Foundation's privacy policy and, in general, of the terms set out herein, and obtain the consent of these third parties for the processing of their personal data.
The Foundation does not obtain personal data from users who decide to make a donation, except in the following cases:
We also inform you that your personal data included in the documents or records certifying the application of funds in the different projects will be made available to the Protectorate, the Commission for the Surveillance of Terrorist Financing Activities, the Commission for the Prevention of Money Laundering and Monetary Offences or their support bodies, as well as the administrative or judicial bodies with powers in the field of the prevention or prosecution of money laundering or terrorism.
The Foundation will treat user data at all times in a strictly confidential manner and will maintain the mandatory duty of secrecy regarding such data, in accordance with the provisions of the applicable regulations. The Foundation has implemented the necessary technical and organisational measures to guarantee the security of your personal data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of technology, the nature of the data stored and the risks to which it is exposed.
As the owner of the data, the user may exercise the rights recognised in data protection regulations at any time and free of charge by writing to the address indicated in the header of this Privacy Policy, attaching a photocopy of their identity document or other document that allows the user's identity to be verified.
Access Rights: You have the right to be informed by the Foundation as to whether or not it is processing your personal data and, if so, to access such data and receive information on the purposes for which it is being processed, the categories of data affected by the processing, the recipients to whom your personal data may have been disclosed, and the expected period of data retention, among other information.
Rectification and Suppression Rights: You have the right to request the deletion of personal data provided that the legal requirements are met, and the rectification of inaccurate data concerning you when, among other reasons, it is no longer necessary for the purposes for which it was collected.
Restriction of processing, withdrawal of consent and total or partial objection to processing: In certain circumstances (for example, if the applicant disputes the accuracy of their data, while the accuracy of the data is being verified), they may request that the processing of their personal data be restricted, and the data will only be processed for the exercise or defence of claims.
You also have the right to withdraw your consent and object to the processing at any time, on grounds relating to your particular situation, where the processing is based on our legitimate interest or the legitimate interest of a third party (including processing for direct marketing purposes and the creation of corresponding profiles). In this case, the Foundation will cease processing, unless it can demonstrate legitimate grounds.
Data portability: You have the right to receive the personal data you have provided to the Foundation in a structured, commonly used and machine-readable format, and to transmit it to another data controller without hindrance from the controller to whom you have provided it, in the cases provided for by law for this purpose.
Automated individual decision-making: In addition to the aforementioned rights, in the event that automated decisions are made, including profiling, you shall have the right to obtain human intervention from the Foundation, to express your point of view and to challenge the decision.
Others: Similarly, when personal data is transferred to a third country or to an international organisation, you have the right to be informed about how you can access or obtain a copy of the appropriate safeguards relating to the transfer.
Likewise, you may lodge a complaint regarding the protection of your personal data with the Spanish Data Protection Agency at 6 Jorge Juan St, 28001 - Madrid, Spain, when the interested party considers that the Foundation has violated the rights recognised by the applicable data protection regulations.
Your data will be processed for the time necessary to process your request, or until you notify us of your withdrawal of consent.
After processing, your personal data will remain blocked and only available to the competent authorities until any liabilities arising from the processing have expired. In the case of web forms, the retention period is 5 years. For donations, the retention period will be 10 years, or as stipulated by the LPBC.
First name and surname