Privacy policy

Privacy Policy (EU GDPR)

Website owner information

Company name: Fundación Invest for children

CIF nº: G-63.813.604

Business address: Vía Augusta, 200 (Edificio Zurich) 1st Floor – 08021 Barcelona

E-mail: info@investforchildren.org

Telphone nr: 932 405 750

Registered with number 2.112 at Registre de Fundacions de la Generalitat de Catalunya.

Data Protection Officer

The owner is responsible for personal data collected by browsing and use of this website in accordance with requirements established by REGULATION (EU) 2016/679 on data protection of natural persons, as well as in accordance with spanish Ley 34/2002 de 11 de julio de Servicios de la Sociedad de la Información y del Comercio Electrónico (LSSI-CE).

By using this website, we understand that you have read and understood information set out in relation to the processing of your personal data.

Data Protection Policy

Data controller applies the principle of active responsibility in processing of personal data, maintaining a constant updating and promotion of continuous improvement of data protection system in accordance with applicable legal requirements, ensuring in any case:

respect for freedom and fundamental rights of natural persons

data are processed in a lawful, fair and transparent manner

data processed are accurate, adequate, relevant and limited in relation to purposes for which they are collected

purposes for which they are collected are explicit and legitimate and are not processed in a way that is incompatible with those purposes

This document’s purpose is to inform you about what we do with your personal data, how it is collected, what it is used for, your rights, as well as all necessary legal information established by current legislation.

Data collected, purpose and lawfulness

Personal data processed are those provided by you through forms available on this website and are the minimum required to be able to:

send you information about our products / services

answer queries.

process donations and / or orders, as well as to be able to prepare corresponding invoices, report on status of orders, attend to claims and any other management derived from service provision carried out through this website.

These purposes are based on legal principles of data processing collected by current regulations: for execution of a contract or provision of a service, for fulfilment of legal obligations, for legitimate interest and with your consent.

Web Forms

Personal data collected through web contact form is used to answer any you ask through it.

Personal data collected in make your donation / order form is intended to process data necessary for proper management of your donations and/or orders.

Personal data collected in our newsletter form is intended to process data necessary to send you information about our activities, products, services and others.

Data processing is legitimized by contract execution or consent you give us by expressly accepting conditions of treatment informed through this privacy policy.

Data recipients

Personal data obtained through web forms are recorded and stored on electronic media controlled and supervised by data controller.

Your personal data will not be communicated to third parties, with the exception that such data communication is covered by a legal obligation or when, for proper provision of service or contract execution, it is necessary to communicate your data to third parties to make payment (payment gateways) and manage products delivery (carriers), covered such transfer in needs of service. For payment through payment gateways, we recommend you to read privacy policy to understand how it handles personal information.

We use the following gateways to make payments: Redsys Servicios de Procesamiento, S.L. (“Redsys”), address in Madrid, calle Francisco Sancha, number 12, C.I.F. B-85955367, which fully complies with current legislation on protection of personal data and with confidentiality commitments of its activity. Redsys has adopted all necessary technical measures to maintain required level of security. You can see their privacy policy at:

https//:www.redsys.es/legal/20180223_politica_de_privacidad_web_publica_redsys.pdf

For cases in which communication of data to third parties is not covered by legal bases established in previous section, communication of data to other recipients will only be carried out if you have given your express consent.

Strict criteria are maintained for data processors selection and contractual commitment with each one of them to comply and enforce compliance with obligations established in field of data protection.

No international data transfers are made. In the event that, at any time, international data transfers are made, Fundación Invest for children will ensure that your personal data transfer is carried out in accordance with applicable privacy laws and, in particular, that necessary contractual, technical and organisational measures are in place, such as standard contractual clauses approved by the European Commission.

You can obtain more information about processing of personal data of our organization by requesting it at e- mail: info@investforchildren.org.

Technical and organisational data protection measures

Supports have necessary technical and organisational measures to guarantee confidentiality and conservation of personal data obtained through website.

Personal data collected from website are processed using HTML protocol with valid SSL certificate.

Staff involved in data processing operations: access, editing, deletion, etc… are qualified, trained and committed to this data protection policy.

Data Retention

Personal data obtained through contact form will be kept while contractual relationship lasts, as long as you do not exercise your right to suppress, cancel and / or limit your data processing or 12 months after last message sent.

Personal data obtained through make your donation / order form will be kept while contractual relationship lasts, as long as you do not exercise your right to suppress, cancel and / or limit your data processing or 12 months after last message sent.

Personal data obtained through newsletter form will be kept while contractual relationship lasts, as long as you do not exercise your right to suppress, cancel and / or limit your data processing or 12 months after last message sent.

Once contractual relationship has expired, we will keep information properly blocked, without making any use of it, as long as it may be necessary for the exercise or defense of claims or may derive some kind of judicial, legal or contractual liability from its treatment, which must be attended and for which its recovery is necessary.

If you have expressly agreed to receive marketing information from us, we will retain your contact details until you have informed us of your decision to opt out of receiving marketing information from us.

Information on existence of automated decisions (including profiling)

We do not normally make automatic decisions, but, if we do, we will make it clear that such a decision is being made. However, Fundación Invest for Children has several sections dedicated to services personalization in order to display personalized advertising when you enter its website and also to send personalized communications.

Fundación Invest for children recognizes the possibility of profiling in order to improve its product offering, to personalize sending of commercial offers or to give you a more personalized treatment.

Opposition to data being processed for advertising purposes

If you have given your consent for your data to be used for advertising purposes and you no longer wish to receive advertising, you may revoke your consent at any time by sending an e-mail to: info@investforchildren.org.

Privacy Policy Changes

We may change information contained in this Privacy Policy from time to time. If we do, we will notify you in a variety of ways through Platform (for example, through a banner, pop-up or push notification), or we will notify you at your email address when change in question is significant to your privacy so that you can review changes, assess them and, if applicable, object or unsubscribe to any service or functionality. In any event, we encourage you to review this Privacy Policy from time to time for minor changes or interactive enhancements.