Privacy Policy
Privacy and commitments
In compliance with the duty to provide information set out in Article 10 of Law 34/2002 of 11 July, on Information Society Services and Electronic Commerce, the following commitments, details, rights, and obligations are set out below.
Data controller
- Entity that owns this website: Associació l'Aixeta de promoció cultural
- Address: Carrer de Joan Tibau, 44, 1st floor, 3rd door, 43540 - La Ràpita (Tarragona)
- Tax ID (CIF): G67322925
- Registration number in the Register of Associations of the Government of Catalonia: 64934
- Registration date in the Register of Associations of the Government of Catalonia: 30/1/2019
- Email: [email protected]
Purpose
The Controller makes this document available to users in order to comply with the provisions of current data protection regulations, within the framework established by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, the “GDPR”), and national legislation, the Organic Law on Data Protection and Guarantee of Digital Rights (hereinafter, the “LOPDGDD”), as well as to inform all website users of the conditions of use of the site.
Any person who accesses this website assumes the role of user and undertakes to observe and strictly comply with the provisions set out herein, as well as any other applicable legal provisions.
The Controller reserves the right to modify any type of information published on the website, without any obligation to give prior notice to users or to inform them of such modifications, it being understood that publication on the Controller’s website is sufficient.
Liability
The Controller disclaims any liability arising from information published on its website that has been manipulated or introduced by a third party unrelated to it.
IP addresses
The website servers automatically detect the IP address and the domain name used by the user.
An IP address is a number automatically assigned to a computer when it connects to the Internet. All this information is recorded in a duly registered server activity log, which allows subsequent processing of the data for the sole purpose of obtaining statistical measurements to determine the number of page impressions, the number of visits made to the web servers, the order of visits, the access point, etc.
Links policy
This website may redirect to content on third party websites. Since the Controller cannot always control the content introduced by third parties on their websites, it assumes no liability whatsoever with respect to such content. In any case, the Controller states that it will immediately remove any content that may contravene national or international law, morality, or public order, and will immediately remove the redirection to the relevant website, informing the competent authorities of the content in question.
The Controller is not responsible for information and content stored, by way of example but not limitation, in forums, chat rooms, blog generators, comments, social networks, or any other means that allow third parties to publish content independently on the Controller’s website. Nevertheless, and in compliance with Articles 11 and 16 of the LSSICE, the Controller makes itself available to all users, authorities, and security forces, actively collaborating in the removal or, where appropriate, blocking of any content that may affect or contravene national or international law, third party rights, or morality and public order. If the user considers that there is any content on the website that may be susceptible to this classification, they are requested to notify the website administrator immediately.
This website has been reviewed and tested to ensure it functions correctly. In principle, correct operation can be guaranteed 365 days a year, 24 hours a day. However, the Controller does not rule out the possibility of certain programming errors or the occurrence of force majeure, natural disasters, strikes, or similar circumstances that make access to the website impossible.
Data protection
The Controller complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), and national legislation, the Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD).
Likewise, the Controller informs that, in order to comply with Law 34/2002 of 11 July, on Information Society Services and Electronic Commerce, it will request your consent to process your data for commercial purposes at each time.
Intellectual and industrial property
The website, including, by way of example but not limitation, its programming, editing, compilation, and other elements necessary for its operation, designs, logos, text and/or graphics, is the property of the Controller or, where applicable, it holds an express licence or authorisation from the authors.
All website content is duly protected by intellectual and industrial property regulations.
Regardless of the purpose for which it is intended, total or partial reproduction, use, exploitation, distribution, and commercialisation require, in all cases, prior written authorisation from the Controller. Any use not previously authorised by the Controller will be considered a serious breach of the author’s intellectual or industrial property rights.
Designs, logos, text and/or graphics belonging to third parties that may appear on the website belong to their respective owners, who are themselves responsible for any possible dispute that may arise in relation to them. In any case, the Controller has the express prior authorisation of such owners.
The Controller expressly authorises third parties to redirect directly to specific content on the website and, in any case, to redirect to the main page of the Controller’s website.
The Controller acknowledges the corresponding intellectual and industrial property rights in favour of their respective owners. Mention or appearance of such property on the website does not imply that the Controller has any rights or responsibility over it, nor that it endorses, sponsors, or recommends it.
For all images where design software allows, the corresponding references to authorship and the relevant licence have been included.
To make any observations regarding possible infringements of intellectual or industrial property rights, as well as regarding any of the website content, you may do so in writing or to the address indicated in the header.
SSL protocol
The Controller has contracted an SSL (Secure Sockets Layer) certificate for its website. An SSL certificate makes it possible to protect all personal and confidential information that may be handled on a website, regardless of the information transmitted, for example, from any of the website contact forms to the server, or the data entered for newsletter subscriptions or access to protected areas, etc.
The website address will appear in green, enabling the “https” protocol, which allows secure connections from a web server to the user’s browser.
Privacy policy
Associació l'Aixeta de promoció cultural informs website users about its policy regarding the processing and protection of personal data that may be collected through browsing its website.
Associació l'Aixeta de promoció cultural informs website users about its policy regarding the processing and protection of the personal data of users and customers.
It guarantees at all times full and complete compliance with the obligations established by data protection regulations and information society services regulations: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), Organic Law 3/2018 of 5 December on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD), and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSICE).
Associació l'Aixeta de promoció cultural will only be responsible for data collected in the registration form on the website www.aixeta.cat. If the Creator were to request data from the Patron, the Creator will be responsible for such data.
Purpose of data processing
The data provided by the User is used for various purposes, listed below:
Purpose of processing: legal basis for processing
- Manage queries submitted through web forms: Legitimate interest of the entity to respond to information requests through the website. Express consent given at the time of data collection through web forms.
- Sending newsletters, commercial communications and promotions: Express consent given at the time of data collection through web forms.
- Create and manage registration as a Creator and/or Patron: Express consent given at the time of data collection through web forms.
- Connect Creators with Patrons: Express consent given at the time of data collection through web forms.
- For the development, performance and execution of the sales contract or services contracted through our website: Express consent given at the time of data collection through web forms.
- Carry out accounting management: Performance of a contract.
- Comply with current tax obligations: Compliance with legal obligations applicable to us.
- Manage incidents and website maintenance: Legitimate interest of the entity.
Data retention period
Purpose of processing: retention period
- Manage queries submitted through web forms: We will process your data for as long as necessary to respond to your request or query.
- Sending newsletters, commercial communications and promotions: We will process your data until you unsubscribe.
- Create and manage registration as a Creator and/or Patron: We will process your data for as long as you maintain your status as a registered user (that is, until you decide to unsubscribe).
- Connect Creators with Patrons: We will process your data for as long as you maintain your status as a registered user (that is, until you decide to unsubscribe).
- For the development, performance and execution of the sales contract or services contracted through our website: We will process your data for the time necessary to manage the purchase of the products or services you have acquired, including possible returns, complaints, or claims associated with the purchase of the specific product or service.
- Carry out accounting management: We will process your data for the time necessary to comply with the applicable statutory limitation periods.
- Comply with current tax obligations: We will process your data for the time necessary to comply with the applicable statutory limitation periods.
- Manage incidents and website maintenance: We will process your data for the time necessary to comply with the applicable statutory limitation periods.
Destinatari de les dadesData recipients
To fulfil the purposes indicated in this Privacy Policy, we need to grant access to your personal data to third parties that support us in providing the services we offer you (Data Processors).
Processors who process data for the performance of a contract or provision of a service to the Controller will do so following the Controller’s instructions at all times and ensuring the same levels of security.
To connect Creators with Patrons, it is necessary that, at the moment a patron subscribes to or gives a “like” to a Creator, the Creator has access to the Patron’s data (first name, last name, and email address).
User rights
- Request access to your personal data that is being processed and receive this information in writing via the requested means.
- Request rectification of inaccurate personal data or, where appropriate, request erasure when, among other reasons, the data is no longer necessary for the purpose for which it was collected.
- Request restriction of the processing of your data.
- Object to the processing of your personal data where applicable, in which case your data will no longer be processed except for legitimate reasons.
- Right to data portability. The data subject has the right to receive personal data where it has been provided in a structured, commonly used and machine readable format, and to transmit it to another controller, provided the following requirements are met: 1) The processing is based on consent or a contract; 2) The processing is carried out by automated means.
- Right to withdraw consent.
- Right to lodge a complaint with the Spanish Data Protection Agency.
The User may exercise the above rights by contacting the Controller at the postal or email address, proving their identity with a scanned copy of their ID card or equivalent document, and specifying the right they wish to exercise.
Source of the data
Personal data must be provided by the data subject on an entirely voluntary basis. The absence of certain data or failure to answer questions that may be asked during registration processes or via electronic forms may result in the impossibility of accessing certain services for which it is essential to have such personal data. In this case, the Data Controller must inform the user of the mandatory or necessary nature of providing personal data for the operation of the service.
The Controller ensures the confidentiality of your personal data and guarantees its security, adopting the necessary measures to prevent alteration, loss, processing, or unauthorised access.
Information provided by the data subject
Minors under 18 may not provide their personal data without the prior consent of their parent(s) and/or legal guardians.
By entering their data in contact forms or download forms, the data subject expressly, freely, and unequivocally accepts that their data is necessary for the Controller to handle their request; providing data in the remaining fields is voluntary.
The data subject guarantees that the personal data provided to the provider is truthful and is responsible for communicating any changes thereto.
All data requested through the website is necessary to provide an optimal service to the data subject. If all data is not provided, it is not guaranteed that the information and services provided by the Controller will fully meet their needs.
Security measures
In accordance with current personal data protection regulations, the Controller complies with all provisions of the GDPR and LOPDGDD for the processing of personal data under its responsibility, and expressly with the principles described in Article 5 of the GDPR and Article 4 of the LOPDGDD, whereby data is processed lawfully, fairly, and transparently in relation to the data subject, and is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.
The Controller guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the data subject’s rights and freedoms, and has provided them with adequate information so that they may exercise them.
Security breaches
The Controller will inform, within 72 hours of detection, all individuals whose data may have been affected, as well as the authorities, of any security breach affecting the database used by this website or any of our third party services.
Applicable law and jurisdiction
For the resolution of all disputes or issues related to this website or the activities carried out on it, Spanish law shall apply, to which the parties expressly submit, and the Courts and Tribunals of Barcelona shall have jurisdiction to resolve any conflicts arising from or related to its use.