FUNDACIÓN VÍA DEL ARTE FOUNDATION hereinafter SAGRADO CORAZÓN DE JESUS BOADILLA, as data controller, guarantees an adequate and consistent level of protection of privacy and confidentiality of natural persons in all matters relating to their personal data, subject to processing by the various services of the Entity, in accordance with the General Data Protection Regulation (EU) (RGPD 2016/679) and the Organic Law 3/2018 on Data Protection and guarantee of digital rights (LOPDGDDD).
SAGRADO CORAZÓN DE JESUS BOADILLA only treats personal data with full responsibility and loyalty, and in accordance with the legal bases that allow the lawfulness of the treatment, according to the RGPD and the LOPDGDD.
Both SAGRADO CORAZÓN DE JESUS BOADILLA and those involved in any phase of the processing, are subject to the strictest professional secrecy, with a special commitment to adopt the levels of protection and the necessary measures, both technical and organizational, to ensure the security of personal data and avoid its alteration, misuse, loss, theft, treatment or unauthorized access.
In order to comply with the RGPD and the LOPDGDD, SAGRADO CORAZÓN DE JESUS BOADILLA has a Register of Processing Activities and has adapted the appropriate security measures appropriate to the risks evaluated and objectively identified for the rights and freedoms of affected persons, which could result in the processing carried out by the Entity.
SAGRADO CORAZÓN DE JESUS BOADILLA applies the principle of transparency in the processing of personal data, providing the interested parties with concise, easily accessible, complete and easy to understand information and, at the same time, facilitating the exercise of rights through forms.
In the course of data processing, we inform you that the data may be communicated to other Public Administrations in order to comply with legal obligations.
SAGRADO CORAZÓN DE JESUS BOADILLA guarantees that both the files and programs, as well as the equipment and premises involved in the process of processing the registered data comply with the integrity and security requirements established in the regulations in force at all times.
The communication of personal data to SAGRADO CORAZÓN DE JESUS BOADILLA through the portal www.coracondejesusboadilla.org always takes place within a secure environment, thus guaranteeing the encryption of the information provided and the integrity of the data transmitted.
1. Data controller.
Identity: SACRED HEART OF JESUS BOADILLA
VAT NUMBER: G06949739
Mailing address: C/ DOÑA BERENGUELA, 7. LOCAL, - 28011 MADRID
E-mail: admin@sagradocoracondejesusboadilla.org
2. Applicable legislation.
The privacy of all information, both that provided by the user through the different forms for requesting personal data, as well as that accessible through the SAGRADO CORAZÓN DE JESUS BOADILLA website, is regulated by Regulation (EU) 2016/679 of the Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and the free movement of such data and the Organic Law 3/2018 on Data Protection and guarantee of digital rights (LOPDGDDD). More information at:
Spanish Data Protection Agency
3. Legal basis for processing.
The legal basis of the data processing will depend on the intended purpose, in accordance with the RGPD 2016/679 and the LOPDGDD 3/2018, and may be the express and unequivocal consent given by the data subject for the execution of the service or in compliance with a legal obligation. The legal bases that legitimize the processing of the personal data of the persons concerned, based on the powers and functions of the Entity, in general are as follows:
General Data Protection Regulation 2016/679.
Article 6.1.a. The data subject consents to the processing of his or her personal data for one or more specific purposes.
Article 6.1.b. The processing is necessary for the performance of a contract to which the data subject is a party.
Article 6.1.c. The processing is necessary for compliance with a legal obligation applicable to the controller.
Article 6.1.d. The processing is necessary to protect vital interests of the data subject or another natural person.
Article 6.1.e. The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Labor obligations:
Royal Legislative Decree 2/2015, of October 23, 2015, approving the revised text of the Workers' Statute Law.
Law 10/2010, of April 28, 2010, on the Prevention of Money Laundering and Financing of Terrorism.
Social networks:
SAGRADO CORAZÓN DE JESUS BOADILLA maintains profiles on various social networks. In addition, the Services may incorporate social networking features, for example, messaging services. In your use of or interaction with those features we may collect information about your user on that social network. If you use social networks, the social network operators determine the nature, scope and purposes of data processing on these social networks. These social networks have their own privacy policies, through which they will explain to you how they use and share your personal information. We recommend that you carefully review the privacy policies before using these social networks to be sure that you are happy with the way in which your personal information is collected and shared.
Profiling:
The entity does not carry out profiling processes or make automated decisions based on the personal data provided by users, in accordance with the provisions of Regulation (EU) 2016/679 (RGPD) and Organic Law 3/2018 (LOPDGDD). In the event that automated segmentation or profiling mechanisms are implemented in the future, data subjects will be informed in advance in a clear manner, specifying the logic used, the importance and the expected consequences of such processing.
4. Purpose of data processing.
SAGRADO CORAZÓN DE JESUS BOADILLA will use the data for the purposes of attention, management, control and resolution of queries and requests for procedures or services provided by SAGRADO CORAZÓN DE JESUS BOADILLA. The data processed will be kept until the request has been processed and resolution of the query raised and, in any case, during the periods of conservation and prescription provided by law.
ENTITIES AND CONTACTS: The purpose of this treatment consists of the use and control of the contact data of persons, entities and companies related to SAGRADO CORAZÓN DE JESUS BOADILLA.
TRAINING: The purpose of this treatment is the management and control of the participants of the courses organized by the Entity, either internal staff or people belonging to other entities or professionals.
PERSONNEL: Personal file. Time control. Pension plans. Social action. Occupational risk prevention. Issuance of the payroll of the personnel of the Entity, as well as of all the products derived from the same. Economic management of the social action and obtaining statistical or monographic studies for the economic management of the personnel.
CURRICULUMS: Selection of personnel and provision of jobs in the entity, as well as in those belonging to the labor exchange.
ACCOUNTING: Processing of expenditure and income records of the budget of SAGRADO CORAZÓN DE JESUS BOADILLA and its economic, financial and banking activity.
WEB USERS: Management of users of the website of the entity, including the registration and maintenance of user accounts, processing of registrations and purchases of training, administrative, accounting and tax management of associated payments (bank card or account number), answering queries, as well as sending communications related to the contracted service.
IMAGES AND VIDEOS: Treatment of photographs and videos taken by the Entity in all public events that may be held and the publication on the website, dissemination in social networks and the like.
SUPPLIERS: Supplier management, invoicing and accounting, as well as other administrative tasks necessary for the established contractual relationship.
VOLUNTEERS: Personal file. Schedule control. Training. Social action. Prevention of occupational hazards. Obligations arising from the recruitment of volunteers.
NEWSLETTER AND DIGITAL AND/OR POSTAL COMMUNICATIONS: Sending of digital communications about news, activities, events, etc. related to SAGRADO CORAZÓN DE JESUS BOADILLA. At any time you can unsubscribe from the Newsletter at no cost through the instructions provided in each communication.
PROJECTS: Management of projects presented by the foundation.
MEMBERS: Management of the foundation's members.
5. Origin of personal data.
The personal data processed by SAGRADO CORAZÓN DE JESUS BOADILLA are in compliance with a legal obligation and come directly from the persons concerned, their legal representatives or other public administrations in accordance with legal provisions.
6. Conservation period:
- Labor data: 4 years according to labor regulations.
-Accounting and tax documentation: 6 years (Code of Commerce).
- Donations: 10 years in application of Law 10/2010 on Prevention of Money Laundering.
- Images and communications: until consent is revoked or deletion is requested, unless there is a legal obligation to preserve them.
In general, they will be kept for no longer than necessary to maintain the purpose of the processing or as long as there are legal prescriptions that dictate their custody and when it is no longer necessary for that purpose, they will be deleted with appropriate security measures to ensure the anonymization of the data or the total destruction of the data.
7. Data recipients.
Personal data collected as a result of the service provided by SAGRADO CORAZÓN DE JESUS BOADILLA, will not be provided to third parties outside this Entity, except when necessary for the provision of the requested service, in accordance with the informative clause of each procedure and request or express consent (if applicable), to other public administrations competent in the matter, when appropriate or when required by the competent public authorities, in accordance with the legal and regulatory provisions applicable at all times.
8. Categories of data subject to processing.
SAGRADO CORAZÓN DE JESUS BOADILLA may process the following categories of data depending on the relationship that links it with the owner of the data:
- Identification data: name, surname, ID card number.
- Contact information: postal address, e-mail address, telephone number.
- Personal characteristics data: date of birth, sex, nationality, etc.
- Economic, financial or insurance data: bank details, credit card details, etc.
9. Rights and obligations of affected persons.
The holders of the data processed by SAGRADO CORAZÓN DE JESUS BOADILLA have recognized, at all times, the right to exercise the right of access to their data, rectification of erroneous or inaccurate data, deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected, and data portability.
In certain circumstances, the interested parties may request the limitation of the processing of their data, in which case they will only be kept for the exercise or defense of claims.
Also for reasons related to their particular situation, interested parties may object to the processing of their data. SAGRADO CORAZÓN DE JESUS BOADILLA will stop processing the data, except for legitimate reasons or for the exercise or defense of possible claims.
The user may at any time exercise the rights of access, rectification, opposition, limitation of processing, data portability and deletion by written request to C/ DOÑA BERENGUELA, 7. LOCAL, - 28011 MADRID, or by email to admin@sagradocoracondejesusboadilla.org.
Likewise, if you are not satisfied with the response to the exercise of your rights, and in any case, whenever you consider it appropriate, you may file a complaint with the Spanish Data Protection Agency.
10. Processors outside the EU.
No international data transfers are currently foreseen. Should it be necessary to use the services of providers located outside the European Economic Area, it will be ensured that they offer an adequate level of protection or that the guarantees provided for in Articles 44 et seq. of the GDPR (standard contractual clauses, adequacy decisions of the European Commission, etc.) are applied.
11. Confidentiality and destruction of documents.
Professional secrecy. SAGRADO CORAZÓN DE JESUS BOADILLA and the collaborators who work with us and who had any kind of intervention in the services provided to the owner of the data, are committed to not disclose or make use of the information to which they have had access because of their relationship with the entity. The information provided will, in any case, be considered confidential, and may not be used for purposes other than those related to the services requested to SAGRADO CORAZÓN DE JESUS BOADILLA.
SAGRADO CORAZÓN DE JESUS BOADILLA undertakes not to disclose or reveal information about users.
Destruction of documents. In order to preserve and guarantee confidentiality, SAGRADO CORAZÓN DE JESUS BOADILLA undertakes to destroy all confidential information to which it has had access due to the provision of services when they are no longer necessary for the purpose for which they were collected, unless there is a legal obligation to preserve them. If the holder wishes to keep the original or a copy of such information, you must print or save it by their own means or go to the headquarters of SAGRADO CORAZÓN DE JESUS BOADILLA to collect it before its destruction.
Document written and prepared by PROTECTION REPORT SOLUTIONS S.L., which reserves the right to take legal action against anyone who copies and illegitimately uses the content.