PRIVACY POLICY

In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), we hereby inform you about the processing of the personal data you provide through this website.

Who is responsible for processing your personal data?

Owner: FUNDACIÓN JUAN CIUDAD
Address: Avda. Concha Espina nº 32, 28016 MADRID
CIF/NIF: G78519303
DPO contact email: fjc.lopd@sjd.es
Contact phone number: 91 387 4482

In collaboration with:
Centro San Juan de Dios de Ciempozuelos, Bonifratersk Fundacja Dobrczynna, Instituto S. João de Deus, Fatebenefratelli, Centro Hospitalario Benito Menni, Konventhospital Barmherzige Brüder Linz, and Hospitality Europe

For what purposes will we process your personal data?

• As a user of the website (contact form / emails sent to the addresses shown on the website): Your data will be used to respond to your information requests, comments, or suggestions via the contact section or email addresses published on our site, and to maintain communication with you.

• As a newsletter subscriber: We will use your email address to send you information about the program and its development.
  If you have subscribed, please note that we monitor our campaigns and mailings by analyzing the activity of recipients (e.g., email openings, link clicks).

• As a social media follower: The data you have provided to the social network will be used to maintain mutual follow-up of our accounts and to communicate with you exclusively through the chosen platform. We will manage communications in accordance with the terms and conditions of each social network. You will only receive information via the respective social platform and only as long as you remain a follower. Each social network has its own terms and conditions and is independent from us.

What is the legal basis for processing your personal data?

• As a website user: The legal basis is either the request for pre-contractual measures at your request or your consent, under Articles 6.1.a) and 6.1.b) of the GDPR.

• As a newsletter subscriber: Your consent, pursuant to Article 6.1.a) of the GDPR.

• As a social media follower: Your consent, pursuant to Article 6.1.a) of the GDPR.

How long will we keep your personal data?

• As a website user: Until the purpose is fulfilled or you revoke your consent.

• As a newsletter subscriber: Until you revoke your consent.

• As a social media follower: Until you revoke your consent, stop following us, or remove your “like”.

Will we share your personal data?

• As a website user: Your personal data will not be shared except where required by law.

• As a newsletter subscriber: Your personal data will not be shared unless legally required. However, please note that we use MailChimp (The Rocket Science Group LLC), a U.S.-based company, to send the newsletter. MailChimp is registered under the EU-U.S. Data Privacy Framework Program, which guarantees a level of protection equivalent to the European one, and has also adopted standard contractual clauses in accordance with European Commission Implementing Decision 2021/914 between data controller and processor.

• As a social media follower: Your data will not be shared except where legally required.

What rights do you have when you provide us with your data?

As a data subject, you have the following rights. Please note that in the case of social networks, we only access the data shown on your profile as a result of our mutual following (on platforms such as Facebook, Pinterest, or Instagram). Therefore, we understand that you must exercise your data protection rights directly with the respective social network. However, we inform you of your rights:

• Right of Access: You have the right to know whether your data is being processed and to receive this information in writing through the requested medium.

• Right of Rectification: You have the right to request correction of inaccurate or incomplete data.

• Right of Erasure (Right to be Forgotten): You may request deletion of your data, although this may be limited when there is a legal obligation to retain or block the data.

• Right to Restrict Processing: In certain circumstances, you may request that we restrict the processing of your data, in which case we will only keep them to exercise or defend legal claims, protect third parties, or for reasons of important public interest.

• Right to Object: In certain situations, and for reasons related to your specific case, you may object to the processing of your data. The controller will stop processing your data unless there are compelling legitimate grounds or for the establishment, exercise or defense of legal claims.

• Right to Data Portability: When data processing is based on consent or is necessary for the performance of a contract or pre-contract, and is carried out by automated means, you have the right to receive your data in a structured, commonly used, and machine-readable format, and to transmit them to another controller.

• Right to Lodge a Complaint: You may file a complaint with the competent Data Protection Authority, especially if you are not satisfied with the exercise of your rights. The relevant authority is the Agencia Española de Protección de Datos, which can be contacted at C/ Jorge Juan No. 6, 28001 Madrid or via its electronic office at www.aepd.es.

We provide access to various forms and instructions developed by the Agencia Española de Protección de Datos to help you exercise your rights:

• Exercise of the right of access

• Exercise of the right of rectification

• Exercise of the right to object

• Exercise of the right to restrict processing

• Exercise of the right of erasure

• Exercise of the right not to be subject to automated individual decision-making

• Exercise of the right to data portability

Last updated: 24/07/2023