top of page

Privacy Policy

Last updated: 11 October 2026

1. Data controller

2. Data we process and purpose

The Association may process personal data provided through this website for the following purposes:

  • To respond to enquiries and to people who contact the Association.

  • To manage proposals for collaboration, contributions of time or ideas, and participation in activities.

  • To manage donations, send confirmations and fulfil the corresponding administrative, accounting and tax obligations.

  • To manage regular contributions and, when this service is enabled, SEPA direct debit mandates.

  • To ensure the proper functioning and security of the website, in accordance with the Cookie Policy.

The data requested may include first name and surname, email address, telephone number, message, donation details and, where necessary, bank details. Stripe and PayPal manage payment data; the Association does not receive full card details or PayPal login credentials. If you create an account, registration data will be processed to provide access and allow you to manage your orders and subscriptions. Member profiles are configured as private. Registering does not subscribe you to advertising communications.

3. Legal basis

The processing of data submitted through contact or collaboration forms is based on the consent of the person concerned.

The management of donations and regular contributions is based on the relationship established with the donor and on compliance with the applicable legal, accounting and tax obligations.

Account management is based on providing the service you request when registering. No advertising or regular informational communications will be sent without specific consent.

4. Data retention

Contact details will be kept for as long as necessary to respond to an enquiry or manage the requested collaboration, and for any additional period required to address possible legal responsibilities.

Data relating to donors and regular contributors will be kept for the periods required by the applicable accounting, tax and other legislation. Account data will be retained while the account is active and, after closure, for the periods necessary to meet legal obligations and address possible liabilities.

5. Recipients and service providers

The Association does not sell or transfer personal data for commercial purposes.

Data may be processed by providers necessary for the operation of the website, the management of forms and payment services, such as Wix, banking institutions and the payment providers used.

There may also be disclosures to public authorities where a legal obligation exists.

Some technology providers may process data outside the European Economic Area. In such cases, the appropriate safeguards required by data protection law will apply.

6. Rights of data subjects

You may request access to, rectification or erasure of your data, as well as restriction of or objection to its processing, data portability and, where applicable, withdrawal of your consent.

To exercise these rights, please write to inesdepablollorens@gmail.com.

Please state in the subject line “Data protection” and specify the right you wish to exercise. If necessary, the Association may request additional information to verify your identity.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

7. Security

The Association takes reasonable measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

8. Changes

This policy may be updated when the website services or the applicable legislation change. The current version will always be available on this page.

bottom of page