Privacy Policy

Through this website, efuolc.org, we collect the personal data necessary for the management and maintenance of certain services we provide.

EFUOLC, as the data controller, informs you that it complies with Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), and all other applicable data protection legislation in force. EFUOLC is committed to ensuring the lawful, fair, and transparent processing of users’ personal data.

In accordance with Article 13 of the General Data Protection Regulation (GDPR) and Article 11 of Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), this Privacy Policy applies to the processing of personal data carried out by EFUOLC, acting as the data controller. It covers the personal data provided by users and/or customers (natural persons) when requesting information about, or accessing, the services and/or products offered through this website, as well as any personal data collected through any section of the website.

IDENTITY OF THE DATA CONTROLLER

Data Controller: EFUOLC
Mail: info@efuolc.org

PURPOSES OF THE PROCESSING OF YOUR PERSONAL DATA

Your personal data will be processed for the general purpose of managing and administering the relationship established with you and, more specifically, for the following purposes:

To manage users’ access to and proper use of the services and/or resources provided through the website.
To communicate with users in response to enquiries, requests, comments, questions, or incidents submitted through our services, the contact forms available on our website, or by email and/or telephone.
To provide, maintain, update, and protect the services, resources, and activities offered through the website.
To inform you about new resources, activities, services, or updates related to the project.
Where applicable, to manage recruitment and selection processes for employees and collaborators.
Communications: We may send you emails and other communications regarding the website, the project, its activities, available resources, technical matters, or changes to our services. These communications are considered necessary for the provision of our services and, where applicable, cannot be opted out of.
Where applicable, project communications: With your explicit consent, we may use your personal data to contact you by electronic or non-electronic means in order to conduct surveys, request your feedback on our activities, and occasionally inform you about important developments relating to the project, including new resources, publications, events, or other relevant updates. You will receive these communications only if you have given your explicit consent, which you may withdraw at any time by using the unsubscribe mechanism included in our communications or by contacting us directly.

We will not process your personal data for any purpose other than those described above, unless required to do so by law or in response to a judicial or other legally binding request.

DATA RETENTION PERIOD

Your personal data will be retained and processed for as long as necessary to fulfil the purposes for which they were collected and to maintain your relationship with EFUOLC, without prejudice to your right to exercise your data protection rights (including the rights of access, rectification, erasure, objection, restriction of processing, data portability, and the right not to be subject to automated individual decision-making).
Thereafter, your personal data will be retained only for the period required by applicable legal obligations or limitation periods and will be processed solely for the purpose of demonstrating compliance with the legal or contractual obligations of the Data Controller.

Once the applicable statutory limitation periods have expired, your personal data will be securely deleted or, where appropriate, irreversibly anonymised.

LAWFUL BASIS FOR PROCESSING

EFUOLC processes your personal data on the basis of one or more of the following lawful grounds under the General Data Protection Regulation (GDPR): the data subject’s consent (1), the Data Controller’s legitimate interests (2), the performance of a contract (3), and compliance with a legal obligation to which the Data Controller is subject (4).

The data subject’s consent for the purposes described above, which will be requested:

When submitting an enquiry through the website or by contacting us via the email address provided on the website, for the purpose of responding appropriately to users’ enquiries and requests.
When sending communications from EFUOLC.

When you submit an enquiry, you voluntarily provide the personal data necessary for us to respond to your request. You are free to choose not to provide this information or to withdraw your previously given consent at any time. However, if you do so, we may be unable to process or respond to your enquiry.

The Data Controller may send communications about EFUOLC to users who have subscribed through the website and have given their explicit consent to receive such communications.

EFUOLC‘s legitimate interests in maintaining communication with users, responding to their enquiries and requests, improving the website and its resources, evaluating and enhancing its activities, and providing information about project-related news, publications, events, and other relevant developments, without prejudice to compliance with the applicable legal requirements governing electronic communications.
Performance of a contractual or other agreed relationship between EFUOLC and the user, where applicable. In such cases, EFUOLC will process the personal data voluntarily provided by the user through the website for the purpose of managing participation in project activities or delivering the requested services or resources.
Compliance with the legal obligations to which the Data Controller is subject.

By providing personal data, you confirm that the information supplied is true, accurate, and up to date, and you accept responsibility for its accuracy. You also expressly acknowledge and consent to the processing of your personal data for the purposes described above.

RECIPIENTS OF PERSONAL DATA

As a general rule, EFUOLC will not disclose your personal data to third parties unless required to do so by law or where such disclosure is necessary to fulfil the purposes for which your personal data are processed.

EFUOLC does not transfer the personal data collected through this website to countries outside the European Economic Area (EEA) or to international organisations, except in the following circumstances:

Where the international transfer of personal data is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract.
Where the international transfer of personal data is required by applicable law.
Where the international transfer of personal data is based on the data subject’s explicit consent.
Where the international transfer of personal data results from the hosting of this website on servers located outside the European Economic Area (EEA).

In all cases where international transfers of personal data take place, EFUOLC will ensure that the recipient country provides an adequate level of data protection in accordance with applicable data protection legislation.

RIGHTS OF DATA SUBJECTS

Data protection legislation gives you the right to exercise the following rights in relation to your personal data by contacting the Data Controller: the right of access, rectification, objection, erasure (“right to be forgotten”), restriction of processing, data portability, and the right not to be subject to automated individual decision-making.

Right of access: Enables you to obtain confirmation as to whether your personal data are being processed and, where that is the case, to access those data and receive information about how they are being processed.
Right to rectification: Enables you to have inaccurate personal data corrected and incomplete personal data completed, ensuring that your personal data are accurate and up to date.
Right to erasure (“right to be forgotten”): Enables you to request the deletion of your personal data when they are no longer necessary for the purposes for which they were collected or otherwise processed.
Right to object: Enables you to object to the processing of your personal data. Unless there are compelling legitimate grounds for the processing or it is necessary for the establishment, exercise, or defence of legal claims, we will cease processing your personal data and, where required by law, retain them in a restricted form for the applicable statutory period.
Right to object to project communications: If you have previously consented to receive communications from EFUOLC, you may withdraw your consent at any time and opt out of receiving future communications.
Right to restriction of processing: In certain circumstances, you may request that the processing of your personal data be restricted. In such cases, we will process the data only where necessary for the establishment, exercise, or defence of legal claims, or as otherwise permitted by applicable data protection legislation.
Right to data portability: You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. Where technically feasible, you may also request that those data be transmitted directly to another data controller of your choice.
Right not to be subject to automated individual decision-making (including profiling): You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Right to withdraw consent: You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of any processing carried out on the basis of your consent before its withdrawal.

If you wish to exercise any of the rights described above, please contact us using the contact details provided in the section “Identity of the Data Controller”. Your request should include your full name, national identity document (or equivalent identification) number, postal address, email address, the right you wish to exercise, and any relevant details of your request.

Right to lodge a complaint with a supervisory authority: EFUOLC also informs you that you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD) if you consider that the processing of your personal data does not comply with the applicable data protection legislation. For further information, please visit the AEPD website at www.aepd.es

ADDITIONAL INFORMATION

Retention of Certain Personal Data

EFUOLC informs you that, in accordance with the provisions of Spanish Law 25/2007 of 18 October on the retention of data relating to electronic communications and public communications networks, it may be required to retain certain traffic data generated in the course of electronic communications. Such data will be retained solely for the purpose of making them available to the competent authorities where required under the circumstances provided for by applicable law.

Data Collected

Our servers automatically collect certain information when you use this website. This log data may include your IP address, device identifiers, the operating system of the device used to access the website, and device configuration information.

Security Measures

EFUOLC, as the Data Controller, has implemented the technical and organisational measures required to ensure the security of your personal data and to protect them against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access, taking into account the state of the art, the nature of the personal data processed, and the risks to which they are exposed.
EFUOLC has also implemented additional measures to strengthen the confidentiality and integrity of the information it processes and continuously monitors, reviews, and evaluates its procedures to ensure the ongoing protection of personal data and compliance with applicable data protection legislation.

Changes to this Privacy Policy

This Privacy Policy may be updated or amended at any time to reflect changes in applicable legislation or regulatory requirements. Where any such changes materially affect the processing or protection of your personal data, the Data Controller will inform you accordingly.

You may contact the Data Controller at any time using the postal or email address provided in this Privacy Policy.

PRIVACY POLICY FOR SOCIAL MEDIA

This Social Media Privacy Policy explains how EFUOLC, as the Data Controller, processes the personal data of users who interact with its official social media profiles or access them using their social media accounts. By interacting with EFUOLC through a social media platform, you expressly consent to the processing of your personal data in accordance with this Social Media Privacy Policy, where such processing is based on your consent.

Users who make their personal data available through their social media account or profile are informed that the social media platform itself acts as the data controller for the processing of those personal data, unless otherwise expressly stated in relation to a specific processing activity.

In accordance with the applicable data protection legislation, EFUOLC respects users’ privacy and is committed to protecting the confidentiality and security of their personal data. To this end, EFUOLC has implemented the legal, technical, and organisational measures necessary to prevent the accidental or unlawful loss, misuse, alteration, unauthorised access, disclosure, or theft of personal data, taking into account the state of the art, the nature of the personal data processed, and the risks to which they are exposed.

Personal data will be collected and processed only where they are adequate, relevant, and limited to what is necessary in relation to the purposes for which they are collected. Accordingly, the processing of personal data will be limited to the specific purposes communicated to users in each case.

Whenever personal data are collected, users will be provided, in a clear and transparent manner, with all the information required under the applicable data protection legislation regarding the processing of their personal data.
Personal data will be retained for as long as necessary for the purposes for which they were collected or until the data subject requests their erasure or rectification, objects to the processing where applicable, or, where processing is based on consent, withdraws that consent.

MINORS

Access to and registration on this website or through EFUOLC’s social media profiles is prohibited for children under the age of 14. Where a minor under the age of 14 or a person lacking legal capacity wishes to register, the prior consent and involvement of the holder of parental responsibility or legal guardianship, or of the individual’s legal representative, will be required. Such representation must be evidenced by a valid document confirming the representative’s legal authority.

EFUOLC shall not be held liable for any use of its social media profiles by minors or persons lacking legal capacity in breach of this Privacy Policy or the applicable legal requirements.