This privacy policy applies to data processing carried out by the Iberostar Foundation. This policy is published in fundacioniberostar.org.

Please read it carefully, in it you will find important information about the processing of your personal data and your rights under current legislation on the subject.  

We reserve the right to update our privacy policy at any time due to business decisions, as well as to comply with possible legislative or jurisprudential changes. If you have any questions or need any clarification regarding our Privacy Policy or your rights, you can contact us through the channels indicated below.

You represent that the information you provide us, now or in the future, is correct and truthful and you agree to inform us of any changes to them. In the event of providing personal data of third parties, you undertake to obtain the prior consent of those concerned and to inform them of the contents of this policy.

In general, the fields on our forms that are marked as mandatory must be completed in order to process your requests.

 

1. Who is responsible for the processing of your data?

Unless specifically indicated otherwise, the data controller is the Iberostar Foundation with registered office at C/General Riera, 154 - 07010 Palma de Mallorca, Balearic Islands, Spain (hereinafter, the Foundation).

•  e-mail: info@fundacioniberostar.org

You can contact the Data Protection Delegate of the Iberostar group at privacy.dpd@grupoiberostar.com

 

2. What personal information do we collect?

The data that we treat are the ones obtained:

• From the forms you fill out and the requests you make, for example, your registrations for our events or activities;
• Where appropriate, from the information generated by your participation in such activities or events and from the videos and/or photographic reports made during them.

All these data are provided either directly by you, or by third parties who process requests on your behalf or by private entities in the social field with which we collaborate or public administrations and institutions with powers in the field.

 

3. What will we process your data for and on what legal basis?    

a. Management of the relationship with users: We treat the data that our users provide in their queries to meet their requests.  These treatments are necessary for the execution of the legal relationship with users of the web or for the implementation of pre-contractual measures to their own request.  

b. Management of activities and social projects: The data of persons participating in social projects, activities or events carried out by or in collaboration with the Iberostar FOUNDATION will be processed to manage the registration of participants and manage the activities and social projects to which they are enrolled. These treatments are necessary for the execution of the legal relationship with the interested parties or for the implementation of pre-contractual measures at their own request.

c. Management of the distribution list and sending of informative and commercial communications: If you so consent, the identification and contact data provided in the contact form will be processed to process your registration in our distribution list for sending informative communications about news, news and activities of the Iberostar FOUNDATION, and about its social, cultural and educational works. 

These treatments are based on the consent requested. Not giving your consent or withdrawing it does not condition the orders placed. 

You may at any time request to unsubscribe from the processing for commercial purposes by activating the link provided for this purpose in our communications or by sending an email to: info@fundacioniberostar.org.

d. Management of donations: The data of persons who make a donation to the Foundation or receive free funds or resources from the Foundation will be processed for accounting and tax management of such donations and to comply with due diligence measures required by current regulations on prevention and money laundering. The legal basis for these treatments is compliance with legal obligations in accounting and tax matters.

e. Capture and use of images: The Iberostar FOUNDATION plans to make videos and/or photographic reports during some of its activities or events for subsequent public dissemination. To this end and if authorized, the Iberostar FOUNDATION will treat your image/voice captured on the occasion of these videos and/or photographic reports, as well as your name and surname for public dissemination through the media, publication on websites, blogs, newsletters or social networks, in a non-limiting manner. Providing, not providing or revoking consent for this treatment shall not affect in any way the relationship with the Iberostar FOUNDATION.

f. Statistical and quality management purposes: In order to evaluate and manage the quality of our services we perform statistics based on web browsing data, e.g. IP address, weblogs, pages visited or actions performed on the Web. More info in our cookie policy, available on our website.  

These treatments are based on our legitimate interest to evaluate and manage the quality of our services. In weighing this interest against your rights and freedoms, it has been determined that the processing had a limited impact on the privacy of data subjects, corresponded to reasonable expectations of data subjects and did not pose significant threats.   

g. Administration and management of web security: We process browsing data (IP addresses or logs) to administer and manage the security of the website. This processing is based on our legitimate interest in ensuring the security of the website. This interest is expressly recognized by Recital 49 of the GDPR. In weighing this interest against your rights and freedoms, it has been taken into account that this processing corresponds to generalized security practices and does not pose significant threats to data subjects.

 

4. To whom may we disclose your data?

Your data will only be communicated to third parties by legal obligation, with your consent or when it is necessary for the correct execution of the projects, activities or campaigns in which you participate, for example, to obtain or control grants, subsidies, scholarships or access to social services in general. The recipients of the information may be, among others, co-organizing entities, collaborating private entities acting in the social field or public administrations and institutions with competences in the field.

The videos and photos taken during events or activities of the Foundation material may be disseminated to the public through the media, publication on websites, blogs, newsletters or social networks, without limitation.

 

5. How long will we keep your data? 

We will keep your data for the duration of the relationship with the Foundation and, in any case, for the periods provided for in the applicable legal provisions and for the time necessary to meet possible liabilities arising from the processing. Your data will be deleted when they are no longer necessary or relevant for the purposes for which they were collected.

Without prejudice to data whose conservation is justified by a historical interest, data relating to attendance at a specific event will be deleted once the event has taken place and its file has been closed. Photos or videos of activities or events in which you are identified will be kept as long as you do not request their deletion, and will be deleted when the information is obsolete or when it is no longer relevant or of public interest.

Data included in files or projects that present a historical interest will be kept indefinitely, provided that the interest or fundamental rights and freedoms of those affected do not prevail. In any case, the conservation criteria provided by the regulations applicable to the Spanish historical heritage and the documentary heritage of the Balearic Islands will be taken into account.


6. What are your rights?

You have the right to obtain confirmation as to whether or not we are processing your personal data and, if so, to access it.  You may also request that your data be corrected if they are inaccurate or to have incomplete data completed, as well as to request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, you may request that we restrict the processing of your data. In such a case, we will only process the data concerned for the formulation, exercise or defense of claims or for the protection of the rights of other persons.

Under certain conditions and for reasons relating to your particular situation, you may also object to the processing of your data. In this case, we will stop processing the data, except for compelling legitimate reasons that override your interests, rights and freedoms, or for the formulation, exercise or defense of claims.

However, you may at any time revoke your consent that you have given for certain purposes and object to the processing of your data for the sending of our communications. In this case, we will no longer process your personal information for these purposes. The withdrawal of your consent will not affect the lawfulness of the processing based on the consent prior to it.

You may also, under certain conditions, request the portability of your data to be transferred to another data controller.

You also have the right to file a complaint with the Spanish Data Protection Agency or any other competent supervisory authority.

To exercise your rights you must send us a request accompanied by a copy of your national identity card or other valid document that identifies you by mail or email to our Data Protection Officer at C/ General Riera 154, 07010 Palma de Mallorca, Illes Baleares, Spain or at the email address indicated in the section Who is responsible for the processing of your data?

To revoke your consent to receive our communications, simply send an email to: info@fundacioniberostar.org

You can obtain more information about your rights and how to exercise them on the website of the Spanish Data Protection Agency at http://www.agpd.es.