Privacy Policy

Below is the privacy policy (hereinafter, “web privacy policy” or “policy”) that governs this Web Platform (hereinafter, “the Platform”), under the ownership of ONCE FOUNDATION FOR SOCIAL COOPERATION AND INCLUSION OF PERSONS WITH DISABILITIES (hereinafter, “ONCE FOUNDATION” or “we”).

PLEASE, SPEND A FEW MINUTES TO READ OUR PRIVACY POLICY; IT WILL NOT TAKE YOU A LONG TIME. WITH IT WE WANT TO EXPLAIN YOU IN A SIMPLY, CLEAR AND TRANSPARENT WAY HOW WE TREAT AND PROTECT YOUR PERSONAL INFORMATION AND YOUR RIGHTS. YOUR SAFETY AND YOUR PERSONAL DATA IS FUNDAMENTAL FOR FOUNDATION ELEVEN, AND WE TAKE VERY SERIOUSLY YOUR PROPER PROTECTION.

WE ALSO RECOMMEND YOU READ CAREFULLY OUR COOKIE POLICY AND OUR LEGAL NOTICE.

1. TO WHOM IS THIS POLICY DIRECTED AND APPLIED?

This policy applies to all users (hereinafter, interchangeably, "the user" or "the users") of the platform, whether or not they have a legal relationship with ONCE Foundation that are considered as natural persons. In addition, because of personal data, we mean all information about an identified or identifiable natural person.

If you are already a user, beneficiary, collaborator, worker or have any other legal relationship with ONCE Foundation, you should also refer to the information contained in this policy on the specific terms of privacy.

The user acknowledges in a responsible manner that he has sufficient legal capacity to establish legal relations with ONCE Foundation.

2. IF YOU BROWSE OR USE OUR WEB PLATFORM, WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?

We are responsible for the processing of your personal data:

ONCE Foundation for the Cooperation and Social Inclusion of Persons with Disabilities (ONCE Foundation)
Registered office: Sebastian Herrera Street, nº 15, Zip Code 28012, Madrid, Spain.
Contact E-mail address: dpd@fundaciononce.es

4. WHAT KIND OF DATA DO WE TREAT?

The processing of your data is necessary to give you access to the contents and/or functionalities of the platform or, in case you require it, to be able to send you the information or provide you with the services provided through it. In this regard, we maintain a firm commitment to treat your personal data in a legitimate and consistent manner in accordance with the legal principles and obligations set forth by the current personal data protection regulations.

When you browse through our platform and, in particular, when you interact or register with us, you provide us with data directly, for example, when you fill in any form or request arranged online according to the treatment purposes indicated in each case (for example, the contact form).

The data you provide us is related to such forms or requests made through the platform and, in addition, may vary depending on the type of form or request in question. Notwithstanding the foregoing, through the platform, and its different forms/requests, different categories of personal data may be collected, although we will always ask you for adequate, relevant and limited data as necessary regarding the aforementioned purposes of processing (principle of minimization of personal data):

Personal identification data (for example, your first and last name).
Personal contact information (for example, email address).

In the same way, when you browse our platform you must be aware of the cookies that are installed on your terminal or device since this implies the treatment of your personal data according to the type of cookies informed and their specific purposes (see cookies policy)

5. FOR WHAT PURPOSE DO WE USE YOUR DATA?

The personal data you provide us will be treated with the purpose stipulated in particular in this privacy policy and, where appropriate, in the different data forms provided in it. In this regard, data collection serves the following processing purposes:

Enable you to browse our platform, thereby allowing you access to the information and content provided therein.
Respond to your requests or requests according to the contact forms you send us, and especially, those that serve for the preparation or constitution of a legal relationship between the parties (e.g., work contract, service provision contract, etc.).
Allow the uses associated with the cookies of the Platform as described in our cookies policy.
If you have accepted the cookies policy, for the development of the purposes associated with the different types of cookies informed through it, in particular, those of analytical type (navigation profile/user), perform such analysis and statistics associated with web browsing in order to improve our services and the quality of their provision. At any time, if you wish, you can configure the use of analytical cookies, holding a right to revoke your consent regarding the purposes associated with these cookies. We inform you that the revocation of your consent to the processing of your data regarding certain types of cookies such as session or techniques may prevent you from browsing our platform (see cookies policy).
Adopt as many protection measures as may be applicable in accordance with current regulations, including the possible anonymization of your personal data by applying the appropriate techniques available for this purpose. Therefore, in this area, anonymization and pseudonymisation treatments may also be carried out for the best protection of your personal data.
Apply the relevant security, technical and / or organizational measures on your personal data with a focus on the risk existing at any time, including pseudonymisation or encryption of personal data through our platform.

6. WHAT IS THE BASE TO TREAT YOUR DATA LEGITIMATELY?

Goal of the treatment	Legitimate basis of treatment
Enable you to browse our platform, thereby allowing you access to the information and content provided therein.	Your consent and, depending on the case, satisfaction of the legitimate interest, own or of third parties, associated with the appropriate management, maintenance, development and evolution of the associated platform, tools, network and information systems, allowing its correct functioning, functionalities, access to content and services, as well as the general security of all the above.
Address your requests or requests according to the forms or requests you send us.	Your consent
In case you have accepted the cookies policy provided for this purpose, allow the development of the processing purposes associated with them and, in particular, perform the relevant analysis derived from your web browsing for analytical and / or statistical purposes.	Your consent
Adopt as many protection measures as may be applicable in accordance with current regulations, including the possible pseudonymization and anonymization of your personal data, applying, for this, the appropriate techniques available for this purpose.	Compliance with a legal obligation (REGULATION (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, concerning the protection of natural persons with regard to the processing of personal data and the free movement of these data and repealing Directive 95/46 / EC (hereinafter, the “General Data Protection Regulation” or the “GDPR”) https://www.boe.es/doue/2016/119/L00001-00088.pdf. In the case of treatments designed to guarantee the security of the platform, the network and the associated information system may be used, where appropriate, to satisfy the legitimate interest of FUNDACION ONCE or, where appropriate, a third party (49, GDPR).
Apply the relevant security, technical and / or organizational measures on your personal data with a focus on the risk existing at all times.	Compliance with a legal obligation (REGULATION (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, concerning the protection of natural persons with regard to the processing of personal data and the free movement of these data and repealing Directive 95/46 / EC ("General data protection regulation" or "GDPR") https://www.boe.es/doue/2016/119/L00001-00088.pdf. In the case of treatments designed to guarantee the security of the platform, the network and the associated information system may be used, where appropriate, to satisfy the legitimate interest of FUNDACION ONCE or, where appropriate, a third party (49, GDPR).

7. HOW LONG DO WE KEEP YOUR DATA?

Personal data associated with the purposes of the treatment reported	Terms or criteria for the conservation of your personal data
Data associated with user navigation through our platform.	- Generally, your data will be kept for these purposes for the essential and necessary time to enable you to correctly navigate and use our platform and the contents arranged through it to which you access. - With regard to the data associated with your browsing profile, in relation to the analytical type cookies that you have accepted as indicated in the ONCE Foundation cookies policy, you must pay attention to the section related to their temporality (see policy of cookies).
Address your requests or requests according to the forms or requests you send us.	-For the essential time to correctly attend your requests and/or specific requests according to each case. -If they are, they consist of the execution at your request of pre-contractual measures or the signing of a contract with ONCE Foundation, your data will be kept for all the time necessary to give due satisfaction to such pre-contractual measures or execution of the contract between the parties, as well as being able to subsequently report to the public authorities of the legal responsibilities arising from said legal relationship.
Adopt how many protection measures are applicable in accordance with current regulations.	While the user's personal data is processed, including the preservation of such data during the legal deadlines provided, and regardless of the legitimate basis of treatment that ONCE Foundation uses.
Apply the relevant security, technical and / or organizational measures on your personal data with a focus on the risk existing at all times.	While the user's personal data is processed, including the preservation of such data during the legal deadlines provided, and regardless of the legitimate basis of treatment that ONCE Foundation uses.

In any case, and notwithstanding the foregoing, the user is also informed of the following:

In accordance with current regulations for the protection of personal data, in everything that concerns the correct processing of personal information by ONCE Foundation, this entity may also keep the information for four years safely from its collection (deadlines for prescribing violations in this area).
Regarding the storage time of cookies, the user is recommended to consult our cookies policy (temporary section).
In general, when personal data is no longer necessary for the purposes of processing for which they were collected, they will be blocked, being available only to the competent authorities for the possible clearance of legal responsibilities during the processing of the same, always in accordance with the applicable regulations, and cannot be used for purposes other than these. Once the corresponding legal deadlines have elapsed in the event of a blockage, such personal data will be deleted according to the applicable regulations, and may also, if applicable, be anonymized securely by ONCE Foundation (anonymized/non-personal data).

8. WHAT ARE THE CONSEQUENCES OF NOT HAVING FACILITATED YOUR DATA?

We try to request or apply the minimum and essential data to carry out the processing of personal data that we carry out in full development of our object and social purposes. All this, in line with the principles contained in the applicable regulations.

However, the lack of contribution of your personal data could lead to the impossibility that: 1) you can navigate correctly through our website (no acceptance of technical or session cookies); 2) process your specific request, and therefore an impossibility to constitute a legal relationship requested or in preparation (for example, due to the lack or insufficient completion of the corresponding form or request).

In any case, the information and personal data you provide to us, according to each case, must be in any case:

• Sufficient, although adjusted, limited and proportionate to the legitimate purposes of treatment reported in each case, with maximum respect for the principles of limitation of the purpose and minimization of personal data.

• Exact, up-to-date and truthful, in order to be able to adequately verify the identity, capacity and, where appropriate, representation, as well as to be able to adjust, in each case, the data treatments that are carried out to your specific needs and your situation real. All this in accordance with the principle of accuracy of personal data.

Users will be fully responsible for the data and personal information they provide to ONCE Foundation within the framework of the platform and, where appropriate, for the services they require or hire us.

9. DO WE SHARE YOUR PERSONAL DATA WITH THIRD PARTIES?

In general, we do not share your data with third parties, nor do we sell or offer data to them. However, as a user of the services or benefits offered by ONCE Foundation, your personal data may be shared with other companies of the Social Group to which ONCE Foundation belongs for purely internal and administrative purposes in line with the provisions of Article 48 of the General data protection regulation.

In the same way, if you had previously accepted the communication of your personal data to other entities of the ONCE SOCIAL GROUP (integrated by the entities that you can consult at www.ilunion.com), to receive information about the activities, events, advantages, promotions or any other information that may be of your interest, including advertising or promotional, associated with the activities carried out by such entities, said communications of your personal data will be made to them. You may revoke your consent to that end at any time, although this will not affect the legitimacy of the treatments prior to such revocation in accordance with the GDPR.

In this sense, it is possible that certain third parties may access your personal information in development of the services they can provide to ONCE Foundation. For example, in the case of third party cookies that are applied on the platform (see cookies policy).

ONCE Foundation has several persons in charge of processing personal data under its control, allowing access to them, as trusted providers, and to the extent that it is strictly necessary for the provision of the services contracted with them. Such treatment managers operate under a service contract in the terms, with the conditions and guarantees contained in article 28 of the GDPR, ONCE Foundation carrying out the corresponding controls, inspections and audits in this area to verify that such treatment managers comply in a manner strict with the contracts signed for this purpose and the applicable regulations.

10. ARE ANY INTERNATIONAL TRANSFER MADE ON YOUR PERSONAL DATA?

We inform you that, in general, international transfers of your personal data are not foreseen, adopting the necessary measures and guarantees by FUNDACION ONCE in this area in accordance with current personal data protection regulations.

Notwithstanding the foregoing, our cookies policy informs of the existence of possible international transfers of personal data, in relation to the services provided by certain companies (third-party cookies). All these international transfers are fully guaranteed according to the applicable regulations, in the case of entities included in the list of entities certified under the Privacy Shield (see cookies policy).

11. WHAT RIGHTS DO YOU HAVE AND HOW CAN YOU EXERCISE THEM?

Your rights	¿What does it mean?	¿How to exercise it?
Right to information Articles 12 to 14 of the GDPR.	Right to be provided by ONCE Foundation with appropriate information, both at the time your personal data has been collected (already obtained from you or from a third party), and at any later time regarding the treatment of your personal information.	ONCE Foundation seeks to provide you with all the necessary information regarding the processing of your personal data in application of articles 12 to 14 of the GDPR. However, if you have any questions or concerns about our privacy and cookie policies, please do not hesitate to write to us an email to: protecciondatos@fundaciononce.es and we will answer your any additional query and request for information.
Right to access Article 15 GDPR.	Right to obtain confirmation from ONCE Foundation if your personal data is being processed or not, and to basic information related to such treatments, as well as to obtain a copy of the personal data being processed.	Directing a written communication through email: protecciondatos@fundaciononce.es with the subject “Exercise Rights” accompanying, if necessary to prove your identification, a copy of your passport, NIE, DNI).
Right of rectification Article 16 and 19 GDPR.	Right to obtain rectification of your personal data without undue delay by ONCE Foundation.	Directing a written communication through the email protecciondatos@fundaciononce.es with the subject “Exercise Rights” accompanying, if necessary to prove your identification, a copy of your passport, NIE, DNI).
Right of suppression (“the right to be forgotten”) Article 17 and 19 GDPR.	Right to obtain, without undue delay by FUNDACION ONCE, the deletion of your personal data.	Directing a written communication through the email protecciondatos@fundaciononce.es with the subject “Exercise Rights” accompanying, if necessary to prove your identification, a copy of your passport, NIE, DNI).
Right to limitation of treatment Article 18 and 19 GDPR.	Right to obtain from ONCE Foundation the limitation of the processing of your data when: -You dispute the accuracy of your personal data, during a period that allows ONCE Foundation to verify its accuracy. -The treatment is illegal and you oppose its suppression (and instead, request the limitation of them). - ONCE Foundation no longer needs personal data, but you need it for the formulation, exercise or defence of claims. -You have opposed the treatment under article 21.1 GDPR, while verifying whether the legitimate grounds of ONCE Foundation prevail	Directing a written communication through the email protecciondatos@fundaciononce.es with the subject “Exercise Rights” accompanying, if necessary to prove your identification, a copy of your passport, NIE, DNI).
Right to data portability Article 20 GDPR.	Right to receive the personal data that concerns you and that you have provided us in a structured format, for common use and mechanical reading, or to transmit them to another person in charge of the processing when technically possible.	Directing a written communication through the email protecciondatos@fundaciononce.es with the subject “Exercise Rights” accompanying, if necessary to prove your identification, a copy of your passport, NIE, DNI).
Right of opposition Article 21 GDPR.	Right to object at any time to the processing of your personal data, including the elaboration of profiles, when it is based on the satisfaction of the legitimate interest of ONCE Foundation or a third party.	Directing a written communication through the email protecciondatos@fundaciononce.es with the subject “Exercise Rights” accompanying, if necessary to prove your identification, a copy of your passport, NIE, DNI).
Right not to be the subject of a decision based solely on automated processing (including profiling) Article 22 GDPR.	Right not to be the subject of a decision based solely on automated processing, including profiling, that produces legal effects or significantly affects you in a similar way.	Directing a written communication through the email protecciondatos@fundaciononce.es with the subject “Exercise Rights” accompanying, if necessary to prove your identification, a copy of your passport, NIE, DNI).
Right to revoke the consent granted	You will have the right to withdraw your consent at any time. Withdrawal of consent will not affect the legality of the treatment carried out by ONCE Foundation based on your consent prior to its withdrawal.	Through the forms, contents and privacy configuration spaces provided by ONCE Foundation, according to each case, such revocation may be articulated (for example, request the withdrawal of the requested newsletter service through the link provided at the end). However, you can also always send a communication to that effect by email: protecciondatos@fundaciononce.es so your right can be duly addressed as described in the applicable regulations.
Right to file a claim with the competent control authority (AEPD) Articles 13 and 14 of the GDPR	It implies the possibility of going before the control authority in case you understand that your right to the protection of personal data has been violated.	We recommend you that before submitting any complaint or claim to the Spanish Agency for Data Protection (AEPD), contact us in order to analyse the specific situation and try, where appropriate, to seek an effective and friendly solution. You can also find information on how to submit a claim on the AEPD website www.aepd.es

12. ARE SECURITY MEASURES AND PROTECTION APPLIED TO YOUR PERSONAL DATA?

Taking into account the nature, scope, context and the indicated purposes of the treatment, as well as the risks of varying probability and severity for your rights and freedoms, ONCE Foundation applies (and will apply) appropriate technical and organizational measures in order to guarantee the due security and protection of your personal data according to privacy criteria from the design and by default, as well as applying a concurrent risk approach system that will be reviewed and updated by ONCE Foundation when necessary.

13. VALIDITY AND MODIFICATION OF THE PRIVACY POLICY

This policy is effective as of 6, January of 2018.

ONCE Foundation reserves the right to modify this policy, to adapt it to future legislative, doctrinal or jurisprudential developments that result from application, or for technical, operational, commercial, corporate and business reasons, informing you previously and reasonably of the changes that occur when possible. In any case, it is recommended that, every time you access this platform, read this policy in detail, since any modification will be published through it.

Likewise, ONCE Foundation may inform you personally and prior to the changes projected in this policy, before its entry into force, if this will be technically and reasonably possible, in particular, when you are considered a registered user or have a legal relationship with ONCE FOUNDATION.