Privacy Policy

Who is responsible for the processing of personal data?

Owner of this website: House of Tibet Foundation
Home: C/ Rosselló, 181, CP 08036 Barcelona
NIF: G62736731
Foundation number: 1652 – Registry of Entities of the Generalitat de Catalunya
Email: info@casadeltibetbcn.org

House of Tibet Foundation, as responsible for the Website, in accordance with the provisions of the Regulation (UE) 2016/679 of 27 April 2016 (GDPR), Organic Law 3/2018 of 5 December (LOPDGDD) and other current legal regulations regarding the protection of personal data, and by law 34/2002, of 11 July, of Information Society Services and Electronic Commerce (LSSICE), informs you that the necessary security measures have been implemented, technical and organizational, to ensure and protect confidentiality, integrity and availability of the data entered.

How have we obtained your data?

1. You have provided them to us: through the registration forms on this website.
2. When you provide us with personal data, guarantees that you are authorized to provide this information and that it is true, truthful, accurate and up to date, which is not confidential, that does not violate any contractual restrictions or third party rights and undertakes not to impersonate other users.

Web forms in which we collect personal data:

1. 1. Web sponsorship form: name, e-mail, telephone.
   2. Form to request information: name, e-mail, telephone.
   3. Newsletter Subscription: e-mail, name.
2. We have obtained them automatically: if the data has been provided to us through this website or any of its subdomains and/or, microsites, we collect information, For example, when you access the page, when you fill out any form with personal data, when you upload information or content (For example, on our blog), or when you contact us directly by email.

When you visit our website, data is sent from your browser to our server., to optimize our services and improve your user experience, For example, when you access the page or when you log in through third-party services such as social networks. This data may be collected and stored automatically by us or by third parties on our behalf.. This data may include:

• • the user's IP address
  • the date and time of the visit
  • the URL of the site the user came from
  • the pages visited on our website
  • Information about the browser used (browser type and version, operating system, etc.).

We may process and record such uses, sessions and related information, either independently or with the help of third-party services, including through the use of cookies and other tracking technologies such as flash cookies and web analytics.

Our website has connectors to social networks, when you choose to interact with us through a social network, We cannot be held responsible for the privacy settings chosen by the user., The social network may report your IP address or which page you are visiting on our website and may set a cookie to allow them to function correctly.. Your name will appear in the likes you give or in the comments you make on our page on a social network.. If you do not want your personal data associated with those likes or comments to appear, configure your privacy to avoid it., pseudonymizing your data, for example by giving yourself a “nickname” or alias that does not reveal your first and last name.

If you log in to one of these social networks during your visit to our website, the social network may add that information to your profile and that information will be transferred to the social network. If you do not want this data transfer to take place, log out of your social network session before entering our websites or mobile applications, since it is not in our power to influence this collection and transfer of data through social connectors.

Yes as a user, through our official page on a social network, decide to publish and/or share texts, Photos, videos and other types of information and/or content, you will be solely responsible for ensuring that said content complies with the corresponding legal regulations..

In any case, we can delete both from this website and from our pages on social networks, any content published when we detect that you have violated current legislation, and the terms indicated in this privacy policy and in the general conditions included in our Legal Notice.

Social Networks are not hosted directly on our services. Your interactions with them are governed by their policies and not ours.. Read the privacy policies of these social networks for detailed information on the collection and transfer of personal data., your rights and about your privacy settings.

To check that the forms on this website are used by people, and not by automated means, we use technology “reCAPTCHA” from Google. When using, Information relating to the hardware and software of the device used by the user is collected and sent to Google for analysis., according to the

 

How old do I have to be to use this website??

To make sponsorships, the user must be of legal age according to Spanish legislation. (18 years).

Whoever provides the data through the forms on this website and accepts its treatment declares to be over 14 years, It is prohibited for a minor 14 years enter your personal data in the web forms to use our services. If at any time, We detected that a minor of 14 years has provided personal data, We will proceed to cancel these.

What you should know before sharing third-party data?

Regarding other people's data, You must respect your privacy, taking special care when publishing your personal data.. We remind you that, as user, only facilitate and consent to the processing of your personal data, but not from third parties, If you provide us with third-party data, you are transferring personal data., It is your responsibility to have the prior and express consent of these third parties to use them and provide them to us., You are responsible for informing them of the inclusion of their data in our treatments..

Publication of third party data without their consent may infringe, in addition to data protection regulations, the right to honor, to privacy or one's own image, rights whose protection is governed by the provisions of the Organic Law 1/1982, of 5 of May, civil protection of the right to honor, to personal and family intimacy and one's own image.

What purposes do we give to the personal data we collect??

We can process the data for different purposes, For example:

1. Respond to your queries, questions or requests made through the identified service or communication channels and contact you to resolve them.
2. Manage sponsorships and the different social initiatives of which Fundació Casa del Tibet is a part.
3. Obtain information about your tastes and preferences from your purchase history.
4. In relation to the information automatically collected by the website, based on your navigation as a user, we create anonymous and aggregated information about your behavior, segmentation effects and anonymous profiling. This interaction helps us: improve website performance, promote a more personalized experience, measure and monitor website efficiency, manage the website, so that it is guaranteed that it becomes increasingly more secure and transparent.
5. Carry out opinion and/or satisfaction surveys and send you, through electronic communications, information about our activities, products and/or services (including advertising and/or commercial communications for the purposes of art.. 21 LSSICE 34/2002). If we already have a previous contractual relationship, We will send these communications based on our legitimate interest. (Art. 6 ap. 1 letter f GDPR). In the case of not having a prior contractual relationship, We will only send you those types of communications, if you have signed up for our newsletter (Art. 6 ap. 1 letter of GDPR). The electronic communications we send to you will include, in the communication itself, the option to stop receiving them.
6. Hold giveaways, contests and promotions.
7. We can take photographs and/or videos in the activities, or events that we organize and/or promote, to inform about them, document them, and be part of the photographic/videographic memory.

How long will we keep your personal data?

We will keep your personal data as long as you do not ask us to delete it.. Even requested the same, we will be able to maintain them for the necessary time and limiting their treatment (blocking them), solely to comply with the legal/contractual obligations to which we are subject and/or during the legal periods provided for the prescription of any responsibilities on our part and/or the exercise or defense of claims arising from the relationship maintained..

What grounds of legitimacy do we use to process your data??

The causes of legitimation are those that allow and enable us to process your personal data legally.. There are different causes of legitimacy or legal bases that allow us to process your data in a lawful and legal manner.:

1. It may be the legal relationship existing between the parties, in the event that you participate in our sponsorships and other social initiatives.
2. It can be too, your consent if you have made a request to us through our website, or if you have attended any of our events. This consent is given to us unequivocally when you provide us with your data online or offline., considering said contribution a clear affirmative act that manifests said consent. The provision of the requested data is mandatory as it is essential to respond to your request.; if you don't provide them, we will not be able to carry it out. You may withdraw this consent at any time by sending us an e-mail in this regard. Such withdrawal means that we will not be able to provide you with the requested services or respond to your queries or requests..
3. As established in the Considering 47 del RGPD (General European Regulation on the Protection of Personal Data 2016/ 679 of 27-4-2016), also constitutes a legal basis for processing your data our legitimate interest to:

Inform you about our activities and social initiatives (including through electronic communications) or those third parties with which we have signed a collaboration agreement. If we already have a member of our community, We will send these communications based on our legitimate interest.. In the opposite case, We will only send you those types of communications, if you give us your consent by checking the option that is expressly included for this purpose in the corresponding forms. In any case, The electronic communications we send to you will include, in the communication itself, the option to stop receiving them in the future.

In any case, We consider the indicated processing of your data to be proportionate and to have a minimal impact on your privacy., but they will always prevail, about our legitimate interests, your interests, rights or freedoms, hence, If you do not want us to process your data for these purposes, please send us an e-mail in this regard to: info@casadeltibetbcn.org and we will do so, being able to keep them blocked for the formulation, exercise or defense of claims. The withdrawal of your consent to process your data for these purposes does not condition the processing of your data for the rest of the purposes described in the privacy policy..

To whom can we communicate the personal data you provide us??

Your personal data will not be transferred to third parties, except that:

1. We have your express authorization.
2. Third parties are suppliers that provide us with products and services. (treatment managers) and communication is a requirement to comply with our obligations and services.
3. A Law or regulation with the rank of Law requires us to communicate data to public entities and organizations.
4. The communication was strictly necessary to ensure compliance with our terms of use., rights or ownership.

Do we carry out international transfers of your personal data?

An international data transfer occurs when personal data is processed by a controller or processor in the European Economic Area (countries of the European Union, Iceland, Liechtenstein and Norway) are sent to a third country or international organization, outside that territory.

We will ensure that personal data is always processed and located in the European Economic Area. (EEE). Nevertheless, in certain circumstances, we will be able to make international data transfers, For example, in case it is necessary for the conclusion or execution of a contract, in the interest of the interested client/user, for example when using service providers located outside the European Union, who may have access to personal data, for the provision of services (for merely illustrative and non-limiting purposes: accommodation, housing, XaaS, remote backups, IT support or maintenance services, email managers, sending emails and email marketing, file transfer, etc.) or for the execution of pre-contractual measures adopted at the request of the interested party.

These entities may be different and vary over time but, we will try to choose entities, Goods belonging to countries that have a level of protection equivalent to the European one in terms of data protection, or that they have the appropriate guarantees to reach that level, or they will be made on the basis of one of the exceptions provided for this purpose in the RGPD..

What Rights can you exercise??

They are known as ARCO-POL Rights., You can exercise them by sending an e-mail to: info@casadeltibetbcn.org .

Can, when they proceed, exercise your access rights, rectification, suppression, of limitation and opposition to its treatment, as well as not to be subject to decisions based solely on the automated processing of your data., at the postal or email address indicated at the beginning of this privacy policy; attaching a copy of your ID or passport or other valid document that identifies you. In case of modification of your data you must notify it at the same address, This company declines all responsibility if it does not do so.

Right of access: You can ask us what personal data we are processing and even request a copy of this..

Right to rectification: You can ask us to rectify inaccurate personal data or to complete incomplete ones., including by means of an additional declaration.

Right to erasure (right to be forgotten): You can ask us to delete your personal data when: are not necessary for the purposes for which they were collected, withdraw your consent, there has been illicit processing thereof or due to compliance with a legal obligation.

Right to limitation of treatment: You can ask us to limit the processing of your data, in which case we will only keep them for the exercise or defense of claims.

Right to object: You can oppose the processing of your data if said processing is based on the legitimate interest of the person responsible for the file or is for advertising purposes..

Right to portability: You can receive your personal data, in a structured format, commonly used and machine readable, to transmit them to another controller as long as the processing is carried out by automated means and when the processing is based on consent or a contract.

Once we receive any of the above requests, we will respond within the legally established deadlines.. You can complain to the Spanish Data Protection Agency. If you want more information about the rights that you can exercise and to request model forms for exercising rights, you can visit the website of the Spanish Data Protection Agency, www.aepd.es

What categories of data do we process??

The GDPR mainly establishes two categories of personal data, those known as identifying data and those known as special categories: ethnic or racial origin, political opinions, religious or philosophical convictions, union membership, genetic or health data, biometric data (when they allow a person to be uniquely identified), data relating to life or sexual orientations.

The categories of data we process are identifying data (name and surname, email, telephone, address), we do not process data considered as special categories of data (genetic, biometric, etc.).