Privacy Policy
Please read the Privacy Policy on our Website carefully.
This will provide you with all the legal information you need and help you better understand why and how we process your personal data, the legal basis that allows us to do so in each case, and the rights available to you, among other matters.
First, it is important to clarify that when we refer to “personal data”, we mean any information relating to you, such as your name and surname, home address, email address, telephone number, whether you are of legal age, or whether you have a particular interest in any of our activities. Of course, we will process all the data you provide in full compliance with all applicable legal requirements. We say this because at Fundación Bancaria Ibercaja we attach great importance to your privacy and personal data, and we make every effort to protect them.
With this clarification in mind, this Data Protection Policy contains general legal information about how we will use your personal data, whether anyone else will have access to it, whether we will retain it or use it for other purposes, and the various rights granted to you by law to protect your privacy. You should also be aware that, in each specific case, we will provide you with detailed information about the privacy conditions applicable to the different events, activities or services in which you may be interested.
In relation to the above, we should also clarify that all information regarding the use of cookies and the data collected through your browsing of our website (what information we collect, how we use it and what you can do about it) is available in detail in our “Cookie Policy”.
Who is responsible for processing your data?
The entity responsible for processing your personal data is «Fundación Bancaria Ibercaja» (hereinafter, the «la Fundación»), with registered address at Joaquín Costa 13, 50001 Zaragoza, Spain.
Telephone:+34 976 97 19 01
Email address: privacidadgdpr@fundacionibercaja.es
For what purposes, and on what legal basis, do we use your data?
The Foundation processes your personal data in order to respond to and deal with any requests you may submit. We may process your data to manage and respond to your enquiries, facilitate your registration for any of our activities or courses, and provide you with any information you may need about our services and about services offered by third-party companies that are managed through the Foundation.
We will also process your personal data in order to register you as a user when you request this, either through our website or through any of our initiatives and digital services.
In short, the Foundation processes your data in order to provide you with a more personalized service.
Having said this, below we explain the legal basis that allows us to process your personal data depending on the purpose for which it is used.
-
Legitimate Interest
On the one hand, we will process your personal data to assist you whenever you request our help, whether through the contact form on our website or through any of our contact telephone numbers or email addresses. This includes, for example, requests for information about our courses or activities.
We will also process your personal data to facilitate your participation in any of our Volunteer Programs when you request us to do so.
Likewise, if you have previously participated in or contracted any course, activity or event organized by the Foundation, we may process your data in order to provide you with information about similar activities that we organize or sponsor.
In these cases, we consider that the Foundation has a legitimate interest in using the information you provide in order to respond to your requests, and that such use does not adversely affect your privacy or your reasonable expectations regarding the protection of your personal data.
-
Performance of a Contract
We may also process your personal data when requested by you, in order to facilitate your registration for any of our activities or courses, as well as to manage those in which you are already enrolled. This refers to the data that, in each case, are identified as “mandatory”.
In any event, and as mentioned above, when you register for any of our activities, we will provide you with the specific privacy conditions applicable to that activity.
We consider that, in these cases, processing your personal data is necessary because it is essential to register you, allow you to participate in the relevant activity, or provide the services that you have requested.
-
Compliance with a Legal Obligation
There may also be situations in which we must use your personal data in order to comply with applicable legal obligations. In such cases, and whenever possible, we will inform you of this and of the legal provision requiring such processing.
This is particularly relevant due to our status as a Foundation, which is subject to specific controls and supervisory procedures carried out by various authorities and public bodies.
For example, if you participate as a volunteer in certain Foundation activities, we may be required to request specific information and documentation from you.
-
Consent
Where it is necessary to process your personal data for purposes that are not required to fulfil a contract with you, are not legally mandatory, or are not covered by our legitimate interests, we will require your prior consent.
For example, we will require your consent if you request registration on our website or on any of the websites belonging to our various initiatives. This is necessary to identify you as a registered user, facilitate the management of your activity registrations, and provide you with the information you specifically request.
We will also require your consent in order to send you information, by any means, about activities or services organized or sponsored by the Foundation. Likewise, we will require your consent to send you information about products or services offered by other entities of the Ibercaja Group that we believe may be of interest to you, or to share your personal data with those entities.
In any case, whenever this occurs, we will provide you with detailed information regarding how and why we wish to use your personal data. We will, of course, request your consent, which you may freely refuse or, if granted, withdraw at any time.
Will We Share Your Personal Data with Anyone?
Fundación Bancaria Ibercaja is the entity legally responsible for the collection, use, retention and, where applicable, deletion of your data. Therefore, as a general rule, your personal data will only be used within the Foundation and will not be disclosed to any third party, except where such disclosure is legally required (for example, to law enforcement authorities, courts and tribunals, or any public authority that lawfully requests it), where you have expressly authorized us to do so, or where it is justified by a legitimate interest of both yourself and the Foundation.
Outside of these circumstances, we will not disclose the information you provide to any third party.
However, we would like you to be aware that the Foundation works with third-party service providers who may occasionally have access to your personal data. These include, for example, technology and IT service providers, security companies and call center service providers.
In this regard, we would like to clarify that we enter into the appropriate agreements with these providers, requiring them, among other obligations, to implement appropriate technical and organizational measures, process the data only in accordance with our instructions and for the purposes of providing their services, and delete or return the data once those services have been completed.
How Long Will We Retain Your Data?
The Foundation will retain the information you provide only for as long as it is strictly necessary to manage and respond to your request. Once we have responded, we will retain your data solely for the purpose of making it available to courts, tribunals or any competent authority in the event of a claim or legal action. Such data will be retained in a duly blocked form and only for that purpose and for the legally established limitation periods.
In some cases, we may be under a legal obligation (for example, obligations relating to the prevention of money laundering) to retain your data for a longer period if you have contracted any of our services. Where applicable, we will inform you of the period for which we are required to retain and use your personal data.
What Are Your Rights When You Provide Us with Your Data?
The law grants you a number of rights that you should be aware of and may exercise in order to protect your privacy. In particular, you have the right to:
- Confirm whether the Foundation is processing your personal data and, where this is the case, (a) access such data, (b) request that inaccurate data be corrected, or (c) request that your data be erased when, among other reasons, you consider that it is no longer necessary for the purpose for which it was collected.
- In certain circumstances, request a restriction on the processing of your data, or object to our continued use of it. In such cases, we will cease processing your data except where there are compelling legitimate grounds or where processing is required for the establishment, exercise or defense of legal claims.
- If we process your personal information to create behavioral profiles (for example, to better understand your interests and needs based on your browsing activity on our Website), and such profiling is carried out entirely by automated means, you have the right to be informed, to request human intervention by one of our representatives, to challenge any decision based on such profiling, or simply to express your point of view.
- Request the portability of the data you have provided to us, so that, if you wish, we can send it directly either to you or to a third party designated by you, in a commonly used and machine-readable format.
- Withdraw at any time any consent you may have given us for the processing of your personal data.
- Lodge a complaint with the Foundation and/or with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), acting as the competent supervisory authority in data protection matters, particularly if you have exercised any of your rights and have not received a response within the legally established time limits.
You may exercise these rights by sending an email to : privacidadgdpr@fundacionibercaja.es, by post to Fundación Bancaria Ibercaja (C/Joaquín Costa 13, 50001 Zaragoza), or by telephone on +34 976 97 19 01.
Who Is the Foundation’s Data Protection Officer?
The Foundation has appointed a Data Protection Officer (DPO) to safeguard your privacy and personal data, as well as to ensure compliance with all applicable Spanish and European data protection regulations.
The Data Protection Officer is responsible for providing you with any information you may require regarding your personal data. If you wish to contact the Data Protection Officer, you may do so by email at: privacidadgdpr@fundacionibercaja.es