1. Data Controller

In accordance with Regulation (EU) 2016/679, General Data Protection Regulation (GDPR), and Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), users are hereby informed that the controller of the personal data collected through this website is:

Owner: ASSOCIACIÓ ARAPDIS
Tax ID (CIF): G-58883588
Registered office: C/ Sardenya, 537-539, 08024 Barcelona
Telephone: +34 93 415 46 17
Email: associacio@arapdis.org

The Associació ARAPDIS (Association for the rehabilitation and adaptation of persons with reduced capacity for socio-occupational integration) is a non-profit organisation, established in 1989, registered under No. 11,358 in the Register of Associations of the Government of Catalonia and declared an organisation of public interest.

2. Information and consent

By accepting this Privacy Policy and/or voluntarily submitting personal data through the website www.arapdis.org, the user is informed and gives their free, informed, specific and unambiguous consent for their personal data to be processed by ASSOCIACIÓ ARAPDIS in accordance with the purposes described in this policy.

3. Personal data collected

The personal data that may be collected through the website are strictly necessary for the proper functioning of its services and may include, among others:

  • Identification and contact details (first name, surname, email address, telephone number).
  • Data provided through contact forms.
  • Data required for the management of online donations.
  • Tax data, where necessary for the issuance of donation receipts.

Data are collected only when the user provides them voluntarily.

4. Purposes of processing

The personal data provided will be processed for the following purposes:

  • To respond to and manage enquiries, requests or communications made by the user.
  • To properly manage donations made through the website.
  • To issue tax receipts related to donations made.
  • To comply with applicable legal, tax and administrative obligations.
  • To ensure the proper functioning of the website.

5. Legal basis for processing

The legal basis for the processing of personal data is:

  • User consent, granted when providing data through forms or when making a donation.
  • Compliance with legal obligations applicable to the entity.
  • The proper performance of the actions requested by the user.

6. Data retention

Personal data will be retained for the period necessary to fulfil the purpose for which they were collected and, where applicable, for the legally required periods.
Once these purposes have been fulfilled, the data will be blocked or deleted in accordance with current regulations.

7. Data recipients and disclosures

Personal data will not be disclosed to third parties, except where legally required or when necessary for the proper provision of services, such as:

  • Financial institutions or payment gateways for the management of donations.
  • Service providers acting as data processors, with whom the corresponding agreements have been entered into in accordance with the GDPR.

Under no circumstances will data be sold or transferred for commercial purposes.

8. Security measures

ASSOCIACIÓ ARAPDIS has adopted the technical and organisational measures necessary to ensure the security and confidentiality of personal data, preventing loss, alteration, unauthorised processing or access, taking into account the state of the art, the nature of the data and the associated risks.

9. Users’ rights

The user has the right to:

  • Access their personal data.
  • Request the rectification of inaccurate data.
  • Request the erasure of their data when it is no longer necessary.
  • Object to the processing of their data.
  • Request the restriction of processing.
  • Request data portability.

To exercise these rights, the user may send a request, together with a copy of an identification document, to the following email address: info@arapdis.org.

The user also has the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if they consider that the processing of their personal data does not comply with applicable regulations.

10. Amendments to the Privacy Policy

This Privacy Policy may be amended to adapt to legislative or case-law changes.
Any amendments will be published on the website and will take effect from the date of publication.