Privacy Policy
GOODLOVE FOUNDATION informs users of the website about its policy regarding the processing and protection of personal data of users and collaborators.
GOODLOVE FOUNDATION also guarantees full and ongoing compliance with the obligations set out in applicable data protection and information society services regulations: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), Spanish Organic Law 3/2018 of 5 December (LOPDGDD) and Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).
Data Controller
- Controller: GoodLove Foundation
- Registered address: Ronda San Cristóbal, 129 – 31180 Zizur Mayor, Navarra, Spain
- Email address: [email protected]
Purposes of Data Processing
The personal data provided by the User will be processed for the following purposes:
| Processing purpose | Legal basis |
|---|---|
| Managing enquiries, requests for information or contact made through the website. | Legitimate interest of the Foundation and user consent. |
| Sending informational communications, newsletters and activities related to the Foundation’s purposes. | Explicit user consent. |
| Technical management, security and maintenance of the website. | Legitimate interest of the Foundation. |
Data Retention Period
| Processing purpose | Retention period |
|---|---|
| Management of enquiries and requests. | For the time necessary to respond to the request. |
| Sending informational communications. | Until the user requests to unsubscribe or withdraws consent. |
| Technical management and website maintenance. | For the period necessary to comply with applicable legal obligations. |
Data Recipients
In order to fulfil the purposes set out in this Privacy Policy, it may be necessary to grant access to personal data to third parties who provide services to GoodLove Foundation (data processors).
Such processors will process the data at all times in accordance with the instructions of the Data Controller and will ensure the same levels of security and confidentiality required under applicable legislation.
User Rights
The User has the right to:
- Request access to their personal data.
- Request rectification of inaccurate data or erasure when the data are no longer necessary.
- Request restriction of the processing of their data.
- Object to the processing of their personal data, where applicable.
- Request data portability where the processing is based on consent and carried out by automated means.
- Withdraw consent at any time.
- Lodge a complaint with the Spanish Data Protection Authority (www.aepd.es).
The User may exercise these rights by submitting a written request to the Data Controller, by email or post, providing proof of identity (copy of national ID or equivalent document) and indicating the right they wish to exercise.
Source of the Data
Personal data will be provided voluntarily by the data subject. Failure to provide certain data may prevent the proper provision of services or the handling of requests.
The Data Controller guarantees the confidentiality of personal data and the adoption of the necessary measures to prevent alteration, loss, unauthorised processing or access.
Information Provided by the User
Minors under 18 years of age may not provide personal data without the prior consent of their parents or legal guardians.
Users declare that the personal data provided are accurate and undertake to notify any changes thereto.
All data requested through the website are necessary for the proper management of the Foundation’s activities. If not all required data are provided, it cannot be guaranteed that the services or responses offered will fully meet the User’s needs.
Security Measures
In accordance with applicable personal data protection regulations, GoodLove Foundation complies with all provisions of the GDPR and the LOPDGDD, ensuring that personal data are processed lawfully, fairly and transparently, and are adequate, relevant and limited to what is necessary for the purposes for which they are processed.
Appropriate technical and organisational measures have also been implemented to protect the rights and freedoms of Users.
Personal Data Breaches
The Data Controller shall notify any personal data breach affecting the processed data to the affected users and, where applicable, to the competent supervisory authority, within a maximum period of 72 hours from becoming aware of the breach.
Applicable Law and Jurisdiction
The Data Controller reserves the right to take any legal action deemed appropriate in the event of improper use of the website.
The relationship between the User and GoodLove Foundation shall be governed by current Spanish legislation. Any disputes shall be submitted to the competent courts and tribunals in accordance with the law.
