Privacy Policy 

WE RECOMMEND THAT YOU READ AND UNDERSTAND OUR PRIVACY POLICY BEFORE PROVIDING YOUR PERSONAL DATA AND GIVING YOUR CONSENT TO ITS PROCESSING.

This Privacy Policy shall apply to the processing carried out by FUNDACIÓN ECOALF of personal data collected by the following means:

• the website www.fundacionecoalf.org 
• events organized by FUNDACION ECOALF 

‍

1. Who is responsible for the processing of your data?

Identity: ECOALF FOUNDATION

CIF: G-87285011
Phone: +34 674 22 50 50
E-mail: dpo@fundacionecoalf.com 

‍

2.- What data do we process?

1. When you register on the website https://www.fundacionecoalf.org/ for the "Clean Rivers, Save Oceans" project: e-mail, name and surname, ID number, telephone number, date of birth, municipality of residence.
2. When you browse the website: Technical information, necessary for the functionality of the website and to detect if the user has logged in at some other time. You can get more information about the use of these devices in our Cookies Policy [link].
3. When you contact us through the form "Join" or through the e-mail address info@fundacionecoalf.org: e-mail; name and surname and the data you leave us in your query. 

Please note that if you choose not to provide this information, you may not be able to register correctly or we may not be able to contact you to answer your questions. 

Users guarantee the truthfulness and authenticity of the information and data they communicate by virtue of the use of this website. Any false or inaccurate statement that may occur as a result of the information and data provided, as well as any prejudice that such information may cause, shall be the sole responsibility of the users.

‍

3. For what purpose do we process your personal data, what is the legal basis and for how long do we keep it?

We hold your data for the following purposes, legal basis and retention periods as described below

1. Registration in the "Clean Rivers, Save Oceans" Project.
   Purpose: The main purpose is to manage your registration in the project as a volunteer.
   Legal basis: Existence of a contract.
   Retention periods: The personal data you provide will be retained for as long as you are registered on the platform as a volunteer. We will delete your data after 1 year of inactivity on your part.
   For more information, please visit the Project's Privacy Policy. 

2. Navigation data
   Purpose: To allow navigation through the website, platform or application and the use of the different options or services that exist in it, including those that we use to enable the operational management of the website and enable its functions and services.
   Legal basis: legitimate interest.
   Retention periods: those established in the Cookies Policy. [link] 

3. Customer Service
   Purpose: The purpose is to manage or resolve your request or request.
   Legal basis: consent.
   Conservation periods: We will treat your data for as long as necessary to meet your request or request, keeping them blocked until the prescription of possible liability actions.

‍

4. Who is the recipient of your data?

1. Co-responsible for the processing.
   
   In the case of the LIMPIA RÍOS, SALVA OCÉANOS Project, the data will be communicated to LÓREAL ESPAÑA, S.A. and to the SOCIEDAD ESPAÑOLA DE ORNITOLOGÍA who will process them as co-responsible for the same.
   The co-responsibility of the treatment indicates that all the co-responsibles have regulated, treat and protect, jointly, the personal data. For more information, please access the Project's Privacy Policy.
   
2. Communication of data.
   
   Personal data processed are only communicated to third parties, in compliance with legal obligations.
   
3. Data Processors.
   
   FUNDACION ECOALF will count on the collaboration of third party service providers who may have access to your personal data and who will process the referred data in the name and on behalf of the Company, as a consequence of their provision of services. FUNDACIÓN ECOALF follows strict criteria for the selection of service providers in order to comply with its data protection obligations, and undertakes to sign the corresponding data processing contract with them.
   
   Specifically, FUNDACIÓN ECOALF will contract the provision of services by third-party providers that carry out their activity, by way of example and not limitation, in the following sectors: logistics services, legal advice, supplier approval, multidisciplinary professional services companies, maintenance-related companies, technology service provider companies, IT service provider companies, physical security companies, instant messaging service providers, infrastructure management and maintenance companies, and call center service companies.
   
4. Security Measures.
   
   FUNDACIÓN ECOALF uses information security techniques such as firewalls and access control procedures, all with the aim of preventing unauthorized access to data and ensure the confidentiality of the same. To achieve these purposes, the user accepts that FUNDACIÓN ECOALF obtains data for the purposes of the corresponding authentication of access controls.
   
   FUNDACIÓN ECOALF declares that it has adopted all the necessary technical and organizational measures to guarantee the security and integrity of the personal data it processes, as well as to avoid its loss, alteration and/or access by unauthorized third parties.

‍

5. What are your rights when you provide us with your data?

The rights you have to control the processing of personal data carried out by FUNDACIÓN ECOALF are:

• Right to request access to your personal data
• Right to request rectification or deletion
• Right to request the limitation of your treatment
• Right to data portability
• Right to object to processing
• Right not to be subject to automated decisions, including profiling

5.1.- What is the right of access?

You will have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and to the following information: the purposes of the processing; the categories of data being processed; the recipients or categories of recipients to whom or which the data have been or will be disclosed; if possible, the expected time period for storing the personal data or, if this is not possible, the criteria used to determine this period.

In these cases, we will provide you with a copy of the personal data being processed. In addition, when you request it by electronic means, the information will be provided in a commonly used electronic format.

You may exercise this right every six months, unless there is legitimate cause to request it, more than once in that six-month period and we will inform you of the actions resulting from your request within one month.

To exercise your right of access, please send an email to: dpo@fundacionecoalf.org or send a letter to the Data Protection Department, located at Calle Gran Vía 1, 2º Izq, 28013 Madrid.

5.2.- What is the right of rectification?

You will have the right to obtain the rectification of inaccurate personal data concerning you, for which you will have to provide, when necessary, the documentation justifying the inaccuracy or incompleteness of the data being processed.

To exercise your right of rectification, please send an email to: dpo@fundacionecoalf.org or send a letter to the Data Protection Department, located at Calle Gran Vía 1, 2º Izq, 28013 Madrid.

5.3.- What does the right of suppression consist of?

You have the right to obtain the erasure of personal data concerning you when one of the following circumstances applies: they are not necessary for the purposes for which they were collected or processed; you withdraw your consent and the processing is not based on any other legal ground; you object to the processing and no other legitimate grounds for the processing prevail; they have been processed unlawfully.

To exercise your right of deletion, please send an email to: dpo@fundacionecoalf.org or send a letter to the Data Protection Department, located at Calle Gran Vía 1, 2º Izq, 28013 Madrid.

5.4.- What does the right to limitation of processing consist of?

You will have the right to obtain the limitation of data processing when any of the following conditions are met:

a) when you have contested the accuracy of your personal data, during the period that allows the data controller to verify the accuracy of the data;

b) in the event that you consider that the processing is unlawful and the data controller has opposed the deletion of the personal data and you request instead the limitation of its use;

c) the data controller no longer needs the personal data for the purposes of the processing, but you need them for the formulation, exercise or defense of claims;

d) in the event that you have objected to the processing, while it is being verified whether the legitimate reasons of the data controller prevail over yours.

When you have obtained the limitation of processing in accordance with this paragraph, you will be informed by the data controller.

To exercise your right to limit the processing, please send an email to: dpo@fundacionecoalf.org or send a letter to the Data Protection Department, located at Calle Gran Vía 1, 2º Izq, 28013 Madrid.

5.5.- What is the right to data portability?

You have the right to receive personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format, and to transmit it to another controller when: the processing is based on consent, and is carried out by automated means.

When exercising your right to data portability, you will have the right to have personal data transmitted directly from data controller to data controller where technically feasible.

The right to portability shall not extend to data that the data controller has inferred from data deriving directly from the use by the data controller of the services provided.

To exercise your right of portability, please send an email to dpo@fundacionecoalf.org or send a letter to the Data Protection Department, located at Calle Gran Vía 1, 2º Izq, 28013 Madrid.

5.6.- What does the right of opposition consist of?

You have the right to object to the processing of data concerning you at any time. In case you exercise this right, the data controller will stop processing your personal data, unless we can demonstrate compelling legitimate grounds for the processing to override your interests, rights and freedoms, or for the formulation, exercise or defense of claims.

To exercise your right of objection, please send an email to: dpo@fundacionecoalf.org or send a letter to the Data Protection Department, located at Calle Gran Vía 1, 2º Izq, 28013 Madrid.

5.7.- What is the right not to be subject to automated decisions, including profiling?

You shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces - such decisions - legal effects or similarly affects you; unless:

-such decision is necessary for the conclusion or performance of a contract,

- is authorized by law or

- is based on consent.

To exercise your right not to be subject to automated decisions, please send an email to: dpo@fundacionecoalf.org or send a letter to the Data Protection Department, located at Calle Gran Vía 1, 2º Izq, 28013 Madrid.

Additionally, we inform you that you can contact the Spanish Data Protection Agency to obtain additional information about your rights.

We also inform you, in the event that consent has been given for a specific purpose, that you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

We also inform you that you can file a complaint with the competent Data Protection Control Authority, the Spanish Data Protection Agency (https://www.aepd.es), especially when you have not obtained satisfaction in the exercise of your rights.

‍

6. Links to other websites

Our website may contain links to other Internet sites not operated by us. If you click on a third party link you will be redirected to that third party's site. We have no control over, and assume no responsibility for, the privacy policies or practices of any third party sites or services.

We recommend that you review the Privacy Policy of every site you visit.

‍

7. Privacy of the minor

FUNDACIÓN ECOALF does not direct its service to anyone under 18 years of age.

However, if you are a parent or guardian and you accept that your child participates as a volunteer in any of the projects carried out by FUNDACION ECOALF, the latter will be responsible for authorizing and communicating the personal data of the children or guardianship. If you are a parent or guardian and you are aware that your child or ward has provided us with personal data without your consent, please contact us.

If we become aware that we have collected personal data from children under the age of 18 without verification that consent was given or authorized by the holder of parental or guardianship over the child, we will take steps to delete that information from our servers.

‍

8. Changes to this Privacy Policy

FUNDACIÓN ECOALF may update this Privacy Policy at any time. The privacy policy that is published at the particular time will apply, so we ask you to review it from time to time. We will inform you in the event that substantial changes are introduced so that you can be aware of such changes and exercise, where appropriate, your rights if you do not agree. 

‍

‍

Last version November 2022