1. INTRODUCTION
Welcome to CONFICERT. Your privacy is of utmost importance to us. This Privacy Policy governs the manner in which CONFICERT collects, uses, maintains, and discloses information collected from users (each, a “User”) of the [website name] website (“Site”). This policy applies to the Site and all products and services offered by CONFICERT. If you have any questions or concerns about this privacy notice or our practices regarding your personal information, please contact us at info@conficert.org.
2. IDENTITY OF THE PERSONAL DATA CONTROLLER
• Data Controller: ASOCIACIÓN CONFICERT
• Trade Name: CONFICERT
• Tax Identification Number (NIF): G44675510
• Address: AV. DE LA OSA MAYOR, 29 – 28023 MADRID (Spain)
• Email: info@conficert.org
3. PERSONAL IDENTIFICATION INFORMATION
We may collect personal identification information from Users in various ways, including, but not limited to, when Users visit our site, register, subscribe to a newsletter, fill out a form, and in connection with other activities, services, features, or resources we make available on our Site. Users may be asked for, as appropriate, name, email address, mailing address, phone number. Users can, however, visit our Site anonymously.
4. NON-PERSONAL IDENTIFICATION INFORMATION
We may collect non-personal identification information about Users whenever they interact with our Site. This information may include the browser name, the type of computer, technical information about User’s means of connection to our Site, such as the operating system, and the Internet service providers utilized.
5. WEB BROWSER COOKIES
Our Site may use “cookies” to enhance User experience. Users’ web browsers place cookies on their hard drive for record-keeping purposes and sometimes to track information about them. Users can choose to set their web browser to refuse cookies or to alert when cookies are being sent.
6. HOW WE USE COLLECTED INFORMATION
CONFICERT may collect and use Users’ personal information for the following purposes:
- To improve our Site
- To send periodic emails
- To process payments
- To manage User accounts
7. LEGAL BASIS FOR DATA PROCESSING
CONFICERT processes your personal data on the basis of the following legal grounds: the data subject’s consent (1), the performance of a contract or pre–contractual measures (2), and legitimate interest (3).
1.The data subject’s consent given for the purposes described above, which will be requested:
- Before processing your data.
- During the registration/purchase process as a client, or
- At the time of sending CONFICERT’s commercial communications.
Any information requests you submit require you to voluntarily provide the necessary data in order for us to respond appropriately. However, you are free to refuse to provide such data or, subsequently, to withdraw the consent previously granted for the processing of your data. In such cases, refusal to provide the requested personal data will make it impossible to respond to user requests, and the withdrawal of consent will not affect data processing already carried out based on the data subject’s prior consent.
2.The processing of data by CONFICERT is necessary for the performance of acontract to which the data subject is party or for the implementation of pre–contractual measures at the data subject’s request. This legal basis applies when the user purchases products or contracts services through our website.
CONFICERT understands that, by providing their personal data, the data subject guarantees and is responsible for the truthfulness, accuracy, and currency of such data, and expressly accepts and consents to their processing for the purposes described above. If the user provides data of third parties, they affirm that they have obtained consent and agree to share the contents of this Privacy Policy with them, releasing CONFICERT from any liability in this regard. This may be verified by taking the necessary actions and precautions as required by current legislation.
8. HOW WE PROTECT YOUR INFORMATION
We adopt appropriate data collection, storage, and processing practices and security measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal information, transaction information, and data stored on our Site.
9. SHARING YOUR PERSONAL INFORMATION
We do not sell, trade, or rent Users’ personal identification information to others. We may share generic aggregated demographic information not linked to any personal identification information with our business partners and trusted affiliates for the purposes outlined above.
10. YOUR PRIVACY RIGHTS
Data protection regulations allow you to exercise your rights of access, rectification, opposition, erasure (“right to be forgotten”), limitation of processing, portability and not to be subject to individualized decisions before the data controller. Below, we explain what these rights consist of:
- Right of access: Allows the data subject to know and obtain information about their personal data subject to processing.
- Right of rectification: Allows you to correct errors, modify data that proves to be inaccurate or incomplete and ensure the accuracy of your personal data.
- Right of deletion: Allows you to request the deletion of your personal data when they are no longer necessary for the execution or provision of the service.
- Right of opposition: Allows the interested party not to carry out the processing of their personal data or its cessation, except for legitimate reasons or for the exercise or defense of possible claims, in which case we will keep them blocked for the corresponding period.
- Right to oppose the sending of advertising: Interested parties may oppose the sending of commercial communications. In that case you may revoke your consent to receive these notifications at any time.
- Limitation of processing: In certain circumstances, interested parties may request the limitation of the processing of their data, in which case they will only be kept for the exercise or defense of claims.
- Data portability: Data subjects may request to receive the data concerning them that they have provided to us or – where technically feasible – to have it sent to another data controller of their choice, in a structured, commonly used and machine-readable format.
- Right not to be subject to automated individual decisions (including profiling): Data subjects have the right not to be subject to a decision based on automated processing that produces legal effects or significantly affects the data subject.
- Possibility of withdrawing consent: The data subject has the right to withdraw at any time the consent given when it consists of the legal basis for the processing of personal data, without affecting the lawfulness of the processing based on the consent given at the time of providing us with his or her data.
If you wish to exercise any of the rights set out above, please contact us using the contact details provided in the section “12. CONTACT” below, including the following information: Name and surname, ID card number, postal and/or e-mail contact address, indicating the type of right and specifying the conditions of the same. We may ask you for additional information in order to verify your identity.
11. UPDATES TO THIS POLICY
We may update this privacy notice from time to time. The updated version will be indicated by an updated “Revised” date and the updated version will be effective as soon as it is accessible.
12. CONTACT
If you have questions or comments about this policy, email us at info@conficert.org or contact us by post at:
CONFICERT
Av de la Osa Mayor, Nº 29
CP 28023
Madrid, Spain