Privacy notice

  1. Introduction

This Notice ("Privacy Notice" or "Notice") contains information on the processing of personal data by ProFuturo Foundation of the Users of its Digital Educational Platform. This Privacy Notice is addressed to Users of the online version of the platform. If you are a User of the offline version, you have the information on the processing of your data in section 7 of this Notice.

 

  1. Who is the Data Controller of your data?
  • The Data Controller is ProFuturo Foundation, with Tax Identification Number G-87620134, and registered in the Registro de Fundaciones de Competencia Estatal [State Foundations Register] under number 1,856 (hereinafter "ProFuturo").
  • Postal address: Calle Ronda de la Comunicación s/n, Edificio Norte 3 Planta Baja, 28050 Madrid (Spain).

Contact Privacy Team protecciondedatos@fundacionprofuturo.org

 

  1. Purpose of the processing

Your data will be processed by ProFuturo for:

  • Management of the contact form on the ProFuturo websites. When the User chooses to use and enter their data in the "contact form" on our web pages, ProFuturo may process this data in order to manage the reported incidents, as well as to respond to the requests sent.
  • Control and management of training courses. When User attends and participates in the training courses, ProFuturo may process their data in order to carry out the necessary procedures for the training courses, as well as to keep track of attendance.
  • Use of images. Provided that the User has given their consent, ProFuturo may process their personal data, in particular their image, in order to use it and publish it in books, magazines, newsletters, web pages, etc. In relation to the photograph that the User may include in their profile on the platform, ProFuturo will process their image in order to ensure their correct identification as a User of the platform.
  • Participation in the forum. If you participate in the forums provided by ProFuturo, you acknowledge and agree that other users of the platform may have access to your identification data.
  • Sending communications concerning ProFuturo's projects and activities. Provided that you have given your consent, ProFuturo will send you communications concerning projects or activities in line with your interests by any telematic means.
  • Anonymisation of data for statistical and behavioural modelling purposes. ProFuturo may carry out anonymisation procedures, after which it will no longer be able to identify you. The purpose of such procedures is none other than to use the anonymised information for statistical and behavioural modelling purposes on the basis of their legitimate interest.
  • Sending out satisfaction surveys. ProFuturo, based on a legitimate interest of the organisation, may send you satisfaction surveys, in order to find out about the experience received as a participant of the training courses or user of our services, and to be able to incorporate the corresponding improvements to our services and operations based on the analysis of the same. In any case, in order to not endanger your data protection rights, you may object to such processing through the channels provided for this purpose.
  • Regulatory compliance. To comply with applicable law, custom and practice, to provide information to appropriate agencies for the purposes of fraud prevention, credit risk reduction, to cooperate with law enforcement and other governmental authorities, or to protect the rights, property or safety of visitors of the Web or the general public.

 

  1. What is the legal basis for the processing of your personal data?

The legal basis on which we are entitled to process your personal data is as follows:

(I) the consent given by acceptance of the relevant forms, for one or more specific purposes,

(II) for the fulfilment of our commitments with the entities with which we enter into agreements for the development of the ProFuturo Programme, which may provide us with your personal data so that ProFuturo can register you and/or enrol you in the courses selected for training calls on the Platform.

(III) in order to comply with a legal obligation applicable to the data controller; and

(IV) where necessary, for the satisfaction of legitimate interests pursued by the data controller or by a third party, provided that such interests are not overridden by the interests or by the fundamental rights and freedoms of the data subject requiring the protection of personal data, in particular where the data subject is a child.

 

  1. How long will we keep your data?

ProFuturo will comply with the provisions of current legislation regarding the duty to delete personal information that is no longer necessary for the purpose or purposes for which it was collected, blocking it, in order to deal with possible liabilities arising from the processing of the data, and only during the periods of limitation of such liabilities. Once these deadlines have expired, the information will be permanently deleted by secure means.

On the other hand, we will try to keep the data in our files up to date so that they always correspond to reality. For this purpose, the User must make the changes directly, when so enabled, or by notifying ProFuturo by a reliable means.

 

  1. Who will your data be shared with?

ProFuturo will communicate your data for processing, in the context of the purposes explained above, to the following recipients:

  • Public administration bodies, when it is legally obliged to provide them.
  • Collaborating entities that have been informed. These entities may be located outside the European Economic Area ("EEA") and international transfers of data may occur. These transfers would be made on the basis of the signature with these entities of standard data protection clauses adopted by the European Commission for international transfers.

Likewise, the collaborating Entities may have access to your data in order to monitor your activity on the Platform. These entities may appoint their own or external staff to tutor the progress of the courses in which you are enrolled, in order to certify the completion of the corresponding course.

On the other hand, in order to carry out all the purposes described above, ProFuturo can count on the collaboration of third-party service providers who may have access to personal data as a consequence of the execution of the contracted services. In any case, ProFuturo follows strict criteria for the selection of these third parties in order to comply with its data protection obligations and signs with them the corresponding data protection agreement, where these third parties are obliged to comply with their data protection obligations, and specifically, to comply with the legal, technical and organisational measures for the processing of personal data for the agreed purposes, and the prohibition of processing such personal data for other purposes or its transfer to third parties.

 

  1. Processing of data of Users of the offline version of the Platform

ProFuturo Foundation is not responsible for the User's Personal Data in the offline version of the Platform. ProFuturo Foundation will not have access to or make any use of this data, stored on devices outside the Foundation.

Notwithstanding the foregoing, collaborating entities may provide such data to ProFuturo Foundation solely for the following purposes:

  • For auditing purposes, to check that the number of users of the Platform corresponds to unique and truthful Users.
  • To resolve technical incidents regarding the offline operation of the Platform, for which ProFuturo Foundation may only access and view the Personal Data that you have provided when registering to the Platform.

Only in these cases, ProFuturo Foundation will make use of your Personal Data, whose responsibility falls to the collaborating entity to which you belong and/or with which you collaborate. ProFuturo Foundation only processes this data on behalf of this entity and assumes no responsibility for them, in the sense given by the GDPR.

 

  1. What are your rights when you provide us with your data?

We inform you that you may exercise the following rights:

  • the right of access to your personal data to know which personal data is being processed and the processing operations carried out on it;
  • the right to rectify any inaccurate personal data;
  • the right to erasure of your personal data, where possible;
  • the right to request the restriction of the processing of your personal data where the accuracy, lawfulness or necessity of the processing is in doubt, in which case we may retain the data for the purpose of pursuing or defending claims;
  • the right to the portability of your personal data, so that they are sent directly to the entity designated by you in a structured, commonly used and machine-readable format.
  • the right to object to the processing of your personal data, where the legal basis is legitimate interest. For these purposes, we will stop processing your data unless we have a compelling legitimate interest or for the formulation, exercise or defence of claims.
  • the right to withdraw your consent at any time.

You may exercise all of the above rights against ProFuturo by sending an e-mail to the following address protecciondedatos@fundacionprofuturo.org

Likewise, if you consider it necessary, you may lodge a complaint with the Spanish Data Protection Agency, at Calle Jorge Juan 6, 28001 Madrid, or at the following web site www.aepd.es.

 

  1. Personal Data security

ProFuturo will adopt appropriate technical and organisational measures in its information system, in compliance with the principle of proactive responsibility, in order to guarantee the security and confidentiality of the data stored, thus avoiding its alteration, loss, unauthorised processing or access; taking into account the state of the art, the costs of implementation, and the nature, scope, context and purposes of the processing, as well as risks of varying probability and severity associated with each of the processing operations.