Privacy Policy

1. Data Controller Details

Legal Name: Associació La Salle Tarragona, hereinafter «the Association». Registered Address: La Salle Tarragona — Avinguda dels Països Catalans, s/n, 43007 Tarragona, Spain. Tax ID (NIF): G43013358. Email: info@lasalletgn.cat. Website: basiliscdetarragona.cat.

Our Privacy Policy has been designed in accordance with EU General Data Protection Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, and Organic Law 3/2018 of 5 December on Personal Data Protection and Digital Rights Guarantee. By providing us with your data, you declare that you have read and understand this Privacy Policy, giving your unambiguous and express consent to the processing of your personal data in accordance with the purposes and terms expressed herein.

The Association does not have a Data Protection Officer due to the nature and size of our operation, and is not legally obliged to have one. However, any queries or requests related to data protection may be directed to info@lasalletgn.cat.

2. Purpose of Personal Data Processing

The processing we carry out of your personal data responds to the following purposes: membership management (registering new members, managing current member accounts, maintaining an updated register of members, and facilitating the internal administration of the association); communication with members regarding events, activities, meetings and relevant news; sending newsletters and informational bulletins; responding to enquiries and suggestions; compliance with legal, accounting and fiscal obligations; improvement of services and activities; and organising and managing events, workshops and courses.

We will retain your personal data from when you give us your consent until you revoke it or request limitation of processing. In these cases, we will keep your data in a blocked state for the legally required periods.

3. Legal Basis and Data Collected

The legal basis for processing your data is the express consent granted through a positive and affirmative act (completing the relevant form and ticking the acceptance checkbox for this policy) at the time you provide us with your personal data.

By completing forms, ticking the «I accept the Privacy Policy» checkbox and clicking to submit the data, or by sending emails to the association, the User declares having read and expressly accepted this privacy policy, and grants their unambiguous and express consent to the processing of their personal data in accordance with the stated purposes.

The categories of data we may process include: identification data (name, surname, identity document, postal address, email address and telephone number), financial data (related to membership fees), communications data (records of emails and messages sent or received from members) and participation data (information about participation in events and activities organised by the association).

4. Security Measures

As part of our commitment to ensuring the security and confidentiality of your personal data, we inform you that the necessary technical and organisational measures have been adopted to guarantee the security of personal data and prevent its alteration, loss, processing or unauthorised access, taking into account the state of technology, the nature of the stored data and the risks to which it is exposed, pursuant to Art. 32 of the GDPR EU 679/2016.

5. Data Sharing

No data transfers to third parties are envisaged, except those authorised by tax, commercial and telecommunications legislation, cases where a judicial authority requires it, and data processors that provide us with services.

For certain forms, the association may use Google Forms, a service by Google Ireland Limited. Data you provide through these forms is processed for the purpose of managing the received requests. The legal basis for this processing is your consent. Google acts as a data processor and adheres to the EU-US Data Privacy Framework.

6. User Rights

Any interested party has the right to obtain confirmation as to whether or not we are processing personal data concerning them. Interested parties have the right to access their personal data, request the rectification of inaccurate data, or request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, interested parties may request the restriction of processing of their data or object to processing. In accordance with current legislation you have the following rights: right of access, rectification, deletion, restriction of processing, objection, data portability and withdrawal of consent. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos).

To exercise your rights, please contact the association at info@lasalletgn.cat, enclosing a copy of a document that allows us to identify you.

7. Consent to Electronic Communications

In accordance with Law 34/2002 of 11 July on Information Society Services and Electronic Commerce, by completing the data collection form and ticking the relevant acceptance box, you are granting express consent to send you information about the association to your email address or other electronic means.