Privacy Policy
Last update: October 31st, 2024.
1.- Owner and Data Controller
The owner of this website and data controller for the processing is Fundación Save the Med, (hereinafter, the Service), with registered office at Calle Bonaire, 34 (Can Antic), 07350, Binissalem, Mallorca, Illes Balears, Spain.
NIF: G16592511
Email: info@savethemed.org
The acceptance of the privacy policy of the Service (hereinafter "Privacy Policy"), is a necessary condition for the use of our website, services and social networks.
This Privacy Policy regulates the collection, processing and use of your personal and non-personal information as a user of the Service, as of the effective date that appears in the header.
To process your personal data, the Service complies with current, local and European legislation, as well as its development regulations.
2.- Information collected
The personal and non-personal information collected will change depending on your use of the website and its features.
The personal and non-personal information collected will reach us in three ways: 1) automatically collected and 2) the one you provide to us voluntarily and 3) the one provided by third parties.
2.1.- Data collected automatically
This information will consist of:
-
The one collected through cookies or similar mechanisms stored on your device, always with your consent. Check the Cookie Policy from Save the Med for more information.
-
The IP from which the connection is made, the type of device used and its characteristics, the version of the operating system, the type of browser, the language, the date, the country, the time of the request, the referenced URL or the mobile network used, among others.
-
Site usage data and possible errors detected during use, such as pages not found or erroneous views.
-
Additionally, the Service uses Google Analytics, an analytics service provided by Google, LLC. domiciled in the United States with headquarters at 1600 Amphitheater Parkway, Mountain View, California 94043. To provide these services, they use cookies that collect information, including the user's IP address, which will be transmitted, processed and stored by Google in the terms established on the website www.google.com. Including the possible transmission of said information to third parties for reasons of legal requirement or when said third parties process the information on behalf of Google.
In any case, you can disable Google Analytics cookies from here.
2.2.- Data provided voluntarily
This information will consist of:
-
The information, personal or not, that messages sent through the contact or opinion channels established in the Service may contain, for example, your name, email, telephone number and message.
-
The information, personal or not, required to register as a user on our platform, such as email, name or Facebook username.
-
Personal information or not, required to make a donation through the platform, such as your name, email, address, city, country, zip code, telephone number and card number.
-
The personal information or not, required to purchase a product through our platform and carry out the corresponding billing, such as name, address, ID, address and/or place of delivery of the product.
-
The personal information or not, required to subscribe to the newsletter.
If you make a purchase on behalf of another person through the Service, you warrant that you have legitimately obtained the personal information of those other people before providing us with their information.
-
Technical support: You may provide us with information related to your use of our services, including copies of your messages, and how to contact you so we can provide you with technical support. For example, you can send us an email with information related to the performance of our website or other problems you are having.
-
Demographic Data: We may collect demographic data about users, for example, through surveys.
2.3.- Data provided by third parties
This information will consist of:
-
The one provided by social networks or similar services.
-
We receive feedback from users, such as ratings and comments.
-
The one provided by payment systems or credit card processors, such as the time of purchase or its amount.
3.- Rights
We inform you that filling out the forms is voluntary. However, if you do not fill in the required fields (marked with an asterisk or “Required”), the use of some functions of the site will not be possible or will be limited.
The personal data you provide us will be incorporated and processed in the files owned by the Service, in order to be able to respond to your requests.
You can exercise at any time the rights of access, rectification, erasure, right to restrict processing, opposition and portability of your personal data by email addressed to: info@savethemed.org
Or the postal address Calle Bonaire, 34 (Can Antic), 07350, Binissalem, Mallorca, Illes Balears, Spain.
In both cases you must identify yourself with your first and last name, as well as a copy of your DNI or national ID, if necessary.
Here you can find the different models to exercise such rights.
In the event that you have given consent for a specific purpose, you have the right to withdraw consent at any time, without affecting the legality of the processing based on consent prior to its withdrawal.
Additionally, if you believe there is a problem with the way we are handling your data, you can direct your complaints to the data protection authority that corresponds, being the Spanish Data Protection Agency the one indicated in the case of Spain.
4.- Age
Regarding the use of the online service, you represent that you are of legal age and that you have the necessary legal capacity to be bound by this agreement and use the site in accordance with its terms and conditions, which you fully understand and acknowledge.
You represent that all information you provide to access the Service, before and
during its use, it is true, complete and accurate.
5.- Use of Data
The Service will use the data collected to:
-
Manage and update the Service (the legal basis being our legitimate interest in maintaining and keeping the service up to date and in good condition).
-
Create, process, manage and update user accounts (the legal basis being the contract).
-
Process purchases made through our platform, their billing and shipping of products (the legal basis being the contract)
-
Process the donations you make in favor of the foundation (the legal basis being your consent).
-
Issue the corresponding certificates of donations for tax deductions (the lawful basis being the legal obligation contained in article 24 of Law 49/2002, of December 23, on the tax regime of non-profit entities and incentives taxes to patronage in relation to art. 6 of Royal Decree 1270/2003, of October 10, which approves the Regulation for the application of the tax regime for non-profit entities and tax incentives for patronage).
-
Carry out internal operations necessary to offer our services, such as correcting software errors and operational problems, performing data analysis, tests and studies, or monitoring and analyzing usage and activity trends (the legal basis being our legitimate interest in maintaining and keeping the Service up to date and in good condition)
-
Use device data, location, profile or other sources to prevent, detect and combat fraud and activities that pose a security risk (the legal basis being our legitimate interest in providing a reliable and secure Service)
-
Use user ratings and opinions to encourage and ensure compliance with our terms and conditions and current legislation (the legal basis being our legitimate interest in providing a reliable and secure Service).
-
Refer questions to the appropriate support agent (the legal basis being our legitimate interest in responding to the requests and questions of our users).
-
Investigate and resolve user queries (the legal basis being our legitimate interest in responding to our users' requests and queries).
-
Monitor and improve the processes and responses of our customer support service (the legal basis being our legitimate interest in responding to the requests and questions of our users).
The Service may use the data we collect to market our services to users. This includes:
-
Send communications about services, features, promotions, studies, surveys, news, updates and events of the Service (the legal basis being, depending on the case, the contractual relationship or our legitimate interest based on the previous contractual relationship, in accordance with art. 21.2 LSSICE).
-
Use the data we collect to personalize our marketing communications, including the ads we serve, based on the user's location, use of the foundation's services, preferences, and account settings (the legal basis being, depending on the case, the contractual relationship, your consent or our legitimate interest based on the previous contractual relationship, in accordance with art. 21.2 LSSICE).
-
Send informational communications: The Service may use the data it collects to generate receipts and send them to users, inform them about changes to our conditions, services and policies, or send other types of communications whose purpose is not to promote the services and products of the Service or its partners.
You can unsubscribe from them from the email received or by contacting us at info@savethemed.org However, you will not be able to unsubscribe from certain correspondence from us, such as messages regarding the security of your data or the terms and conditions of the Service.
Comply with legal procedures and requirements: We may use the personal data we collect to investigate or direct complaints or disputes related to the use of the services of Save the Med, as permitted by applicable law or in response to requests from regulators, government entities and agencies. officers.
Likewise, the Service may use user information in the form of aggregated and anonymous data to display it to third parties. You can also share statistics and
demographic information about users and their use of the Service with third parties. But none of this will allow those third parties to identify you personally.
5.1.- In emails and contact forms
The website has TLS encryption that allows the user to securely send their personal data through standard contact forms.
The personal data collected will be subject to automated processing and incorporated into the corresponding record of processing activities and from which Save the Med is the data controller.
In that sense:
-
We will receive your IP, which will be used to check the origin of the message in order to offer you appropriate recommendations (for example, present the information in the correct language) and to detect possible irregularities (for example, possible cyberattack attempts on Save the Med), as well as data relating to your ISP.
-
Likewise, you can provide us with your data by telephone, email and other indicated means of communication.
Regarding the payment methods used:
-
At no time will the Service or its staff have access to banking details (for example, credit card number).
On the other hand, certain services that may be offered through the website (for example, the possibility of participating in a contest or promotional code draw) may contain particular conditions regarding the protection of personal data. It will be necessary to accept them before participating in these services.
5.2.- On social networks
We have profiles on some of the main social networks on the Internet, the Service being responsible for the processing in relation to the data published on them (for example, photos uploaded by the Service in which people's faces appear).
This data will be processed according to the social network corporate profiles. Therefore, when the law does not prohibit it, we can inform our followers by any means that the social network allows about their activities or offers, as well as provide a personalized customer service.
In no case do we extract data from social networks, unless the user's consent to do so is obtained promptly and expressly.
When, due to the very nature of social networks, exercising your rights depends on modifying your profile, we will help and advise you to the best of our ability.
6.- Data storage
The following indicates how long the data processed by the Service is stored:
-
The disaggregated data will be stored without a deletion period.
.
-
User data will be stored for the minimum necessary, and may be kept up to:
– 5 years, according to art. 1964 of the Civil Code (personal actions without special deadline).
– 6 years, according to art. 30 of the Commercial Code (accounting books or invoices, for example).
- 10 years, according to art. 25 of Law 10/2010, of April 28, on the prevention of money laundering and the financing of terrorism. (identification of those who contribute or receive funds or resources from the foundation free of charge).
-
User data uploaded by the Service to pages and profiles on social networks will be stored from the time the user offers their consent until they withdraw it.
-
The data of the subscribers to the newsletter will be kept from the moment the user subscribes until he unsubscribes.
7.- Data shared with third parties
There are third parties that manage part of the Service.
The Service requires them to comply with this Privacy Policy insofar as it is applicable to them and they must also have their own. However, the Service will not be responsible for compliance with said policy.
Under some circumstances, the Service may share, use, preserve or disclose personal information with third parties, on a non-aggregated basis:
-
To provide the Service:
Service providers who perform functions on our behalf, such as web hosting, monitoring statistics or web development. These service providers may collect and have access to information necessary for them to perform their functions, but they are not permitted to share or use the information for any other purpose.
-
To cooperate with the competent authorities:
If we believe that it is reasonably necessary to satisfy any law, legal process or legitimate interest. In any case, we will only provide the strictly required information.
8.- International Data Transfers
For the efficiency of the Service, some of the aforementioned providers are located in territories outside the European Economic Area that do not provide a level of data protection comparable to that of the European Union, such as the United States. In such cases, we inform you that we transfer your data with adequate guarantees and always maintaining the security of your data. Specifically:
-
We use Google Analytics, based in the USA, in order to collect information about the use of our services through its cookies.
9.- Security measures
The Service adopts all the necessary technical and organizational measures to protect the security and integrity of personal and non-personal information collected. Both against unauthorized access and accidental alteration, loss or destruction.
In any case, the Service cannot guarantee the absolute security of the information collected, so you must collaborate and use common sense about the information shared at all times.
You understand and acknowledge that even after deletion, personal and non-personal information may remain visible in cache or if copied or stored by other users.
10.- Changes in the Privacy Policy
We may update this Privacy Policy in the future.
We will inform you of their changes by sending a notice to the email address provided and/or by placing a notice in a prominent place on our website.
11.- Contact
If you have questions about this Privacy Policy, contact us at:
E-mail: info@savethemed.org
Address: Calle Bonaire, 34 (Can Antic), 07350, Binissalem, Mallorca, Illes Balears, Spain.