PRIVACY POLICY

Subject

The Catalan National Assembly, hereinafter ANC, the Federation of Hiking Entities of Catalonia, hereinafter FEEC, and Gure Esku Dago  undertake to protect your privacy and personal data. In this Privacy Policy, we inform you on how we protect your personal data. We recommend that you read it before accessing the digital content of the website. This privacy policy regulates the website viapirinenca.cat.

The ANC, the FEEC and Gure Esku Dago strongly defend the fundamental rights to privacy and the protection of personal data, as well as compliance with national and European laws relating to privacy.

This privacy statement describes how the ANC, FEEC and Gure Esku Dago treat and protect the personal data of those who use our websites, as well as in the context of our internal activities.

Co-responsibility in the data management process

The ANC, the FEEC and Gure Esku Dago are co-responsible for the processing of personal data provided to us on the website and for any of the subdomains to which you have access through viapirinenca.cat.

The Catalan National Assembly registered office is at Carrer de la Marina, 315, 08025 Barcelona. Contact details are, telephone number 93 347 17 14 and e-mail address datos@assemblea.cat. Contact details of the Data Protection Officer: dpo@assemblea.cat.

The Federation of Hiking Entities of Catalonia, hereinafter FEEC, with registered office at La Rambla, 41 Principal, 08002 Barcelona,  CIF Tax ID G-58134081, registered in the Register of Sports Entities of the Generalitat de Catalunya with number 1425.

The Gure Esku Dago registered office is at Calle Erdiko 23 – 20500. – Arrasate (Gipuzkoa), and has CIF Tax ID G75116491.

Data that we collect

Visiting the website does not imply that the user is providing personal information.

Personal data, which may be provided by users, may be processed by the co-managers, and will be stored and processed at all times within EU territory.

When forms are used to collect this personal data, the data provided by the user shall be understood to be correct, as it is the user who voluntarily enters their data in the forms available on our website and who answers for its veracity.

Purpose, duration, and legitimacy of the treatment

We will process the data provided by the user for the following purposes:

• Replying to the requests or petitions made by the user through the contact form located on the website. We collect and process your personal data in order to process and manage your request,  query or any petition you may make through the form. We store this data for the time necessary to comply with your request and for the time established by law with a minimum duration of 3 years.

The basis for the legitimacy of the processing of data will be the consent given by the user by checking the box indicating acceptance of our privacy policy before sending the request. The user has the right to revoke their consent at any time without affecting the lawfulness of the treatment based on the consent prior to its withdrawal.

• Managing the registration and participation of the user in the comment form of the blog located on the website. These comments will be managed by the WordPress platform. We will store the data provided as long as the user does not unsubscribe from the content of the blog and for the time established by law with a minimum duration of 3 years.

The basis for the legitimacy of the processing of data will be the consent given by the user by registering through the blog subscription form and by selecting the box  accepting our privacy policy before submitting the request. The user has the right to revoke their consent at any time without affecting the lawfulness of the treatment based on their consent prior to its withdrawal.

• Assisting and managing the purchases made by the user through the purchase form located in the web store. We collect and process the personal data of the user in order to process the order and subsequent payment for the products and services offered on the website. We will store this data for the duration of the contractual relationship between the parties and for the time established by law for the fulfillment of tax obligations.

The basis for the legitimacy of the treatment will be the execution of a contract of sale to which the user is party. If the user does not provide their personal data, their purchase will not be processed, and we will not be able to provide the service requested.

• Sending announcements and newsletters about the products of the co-managers. With your consent, we collect and process your personal data in order to send you information about our products and services. We will store this data until you revoke your consent to the treatment of these and for the time established by law with a minimum duration of 3 years.

The basis for the legitimacy of the processing of your data will be the consent given by you by selecting the box  accepting our privacy policy before subscribing to the newsletter in the form provided for this purpose on the web. You have the right to revoke your consent at any time without affecting the lawfulness of the treatment based on the consent prior to its withdrawal.

• Responding to the requests made by the user through the registration form and located on the website. We collect and process the personal data of the user in order to process and manage their adherence to the corresponding manifesto that they make through the form. We store this data for the time necessary to comply with their request and for the time established by law with a minimum duration of 3 years.

The basis for the legitimacy of the processing of data will be the consent given by the user by selecting the acceptance box of our privacy policy and the content of the policy before sending the request. The user has the right to revoke their consent at any time without affecting the lawfulness of the treatment based on the consent prior to its withdrawal.

• Improving the browsing experience. We will store this data until the user revokes their consent to the treatment of these by removing cookies and for the time established by law with a minimum duration of 3 years.

The basis of legitimacy to improve your experience browsing the web is the consent given by the user to accept cookies. The user has the right to revoke their consent at any time without affecting the lawfulness of the treatment based on the consent prior to its withdrawal.

• Managing our social networks and sending you information about our activities and products. We will store this data until the user revokes their consent to the treatment of these and for the time established by law with a minimum duration of 3 years.

The basis of legitimacy to manage our social networks and send you information on our activities and news, is the consent you give us for this purpose. You have the right to revoke your consent at any time without affecting the lawfulness of the treatment based on the consent prior to its withdrawal.

• Managing the sweepstakes and raffles organized on the web. We collect and process the user’s personal data in order to manage their participation in the various draws or contests, as well as the subsequent communication to the winners. We will store this data for as long as the contest or draw takes place and its subsequent exposure determined in the contest rules, as well as for the time established by law with a minimum duration of 3 years.

The basis for the legitimacy of the processing of data will be the consent given by the user through the completion of the participation form enabled for this purpose on the website and by selecting the box  accepting our privacy policy and of the rules of the contest or draw. The user has the right to revoke their consent at any time without affecting the lawfulness of the treatment based on the consent prior to its withdrawal.

• Management and development of user registration for the purpose of attending an event or organized activity, through the data collected in the form enabled for this purpose on the web. We will store this data for the duration of the activity of the event and for the time established by law with a minimum duration of 3 years.

The basis for the legitimacy of the processing of data will be the consent given by the user through the completion of the participation form enabled for this purpose on the web and by selecting the box  accepting our privacy policy. The user has the right to revoke their consent at any time without affecting the lawfulness of the treatment based on the consent prior to his withdrawal.

• Communicating any information regarding the action of the Pyrenean Way, as well as the activities of the co-managers.

The basis for the legitimacy of the processing of data will be the consent given by the user through the means enabled for this purpose on the website and by selecting the box  accepting our privacy policy and the rules . The user has the right to revoke their consent at any time without affecting the lawfulness of the treatment based on the consent prior to his withdrawal.

 

Transfer or communication of personal data and international transfers

Your data will not be conveyed or transferred to third parties unless there is a legal obligation or to those providers associated with the Data Protection Officer?  who act as data controllers.

No international transfers are made, and in the event that they may be made, you will be notified in order to obtain your consent.

 

Data Update

In order for us to keep your personal data up to date, it is important that you informs us whenever there has been any change, otherwise we  cannot be held responsible for its veracity.

The user guarantees that the personal data provided is truthful, that all the information provided corresponds to the true situation, that it is up to date and accurate, and is obliged to convey any changes.

 

Third-party data

If the user provides data from third parties for any purpose, he/she guarantees that he/she has obtained this data lawfully, that he/she has previously informed those affected, obtaining their consent to communicate such data and that the information provided is accurate and truthful.

 

Mandatory nature of the information requested

All our forms have an asterisk (*) in the required data fields. If the user does not fill in these fields, or does not check the privacy policy acceptance box, the information will not be  sent.

 

Use of Passwords

In order to access the Private Area, the user must go through the log in process, and include the e-mail address and password generated in the registration form in accordance with the rules of complexity established at any given time on the web.

Users are responsible for the proper custody and confidentiality of any of the identifiers and / or passwords they have selected in the registry and undertake not to assign their use to third parties, nor to allow their access to third parties.

It will also be the obligation of the user to immediately notify the Manager of any fact that allows the improper use of identifiers and / or passwords, such as theft, misplacement, or unauthorized access to them, with the purpose of conduct upon its immediate cancellation.

 

Rights of the interested parties

Every individual has the right to clear and comprehensible information about whether their personal data is being processed.

Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request the deletion when, among other reasons, the data are no longer necessary for the purpose for which they were initially given, as well as to revoke the consent given. You may object to the processing of your data and may also exercise your right to limit the processing, so that your data will not be deleted but the processing of the data will be subject to limitations.

The exercises of portability and treatment by automated individual decisions do not apply in this case by the type and purposes of treatment of the same.

The exercise of the rights indicated above may be requested by post or e-mail, enclosing a copy of the DNI or passport and stating the right you wish to apply to the ANC to the addresses provided in point 2 of this Policy.

If you consider that your rights have not been duly complied with, you have the right to file a complaint with the supervisory authority at www.aepd.es

Data processing of minors

Anyone who provides data through the forms on this website and accepts its treatment declares they are over 14 years old, and access to and use of the portal by minors is prohibited. If at any time the Manager detects that a child under the age of 14 has provided personal data, we will proceed to cancel it. Likewise, parents or guardians may in any case address the ANC to block  access to the account of minors in their care who have registered by falsifying their identity.

 

Social Networks

The purpose of tools such as Facebook, Twitter, Instagram, etc. or other social networks is to give the activities carried out by our organization visibility and dissemination. These tools store personal data on the servers of their respective services and are governed by their own privacy policies. We recommend you review and read the conditions of use and privacy policy of the social network at the time of registration, taking into account the different possibilities of configuration in relation to the degree of privacy of the user profile in the social network.

The responsible parties also reserve the right to remove from their social networks any information published by third parties that infringes the law, encourages it or contains messages that violate the dignity of individuals or institutions. The parties likewise reserve the right to block or report the author profile of these messages.

 

Cookie processing

A cookie is a small file that is downloaded and stored on the user’s computer when the user accesses a web page. Among other functions, cookies allow the website to store and retrieve information about the browsing habits of the user and their computer and, depending on the information they contain and the way they use their computer, they may be used to recognize the user.

The user has the option to prevent the generation of cookies, by selecting the corresponding option in their browser program. You can obtain more information by reading our Cookies Policy.

Security measures applied to personal data

The co-managers apply the necessary technical and organizational measures taking into account the risks posed by the processing of personal data, in particular as a result of the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or the unauthorized communication or access to such personal data.

The application of the planned technical and organizational measures takes into account the state of the art, the costs of application, and the nature, scope, context and purposes of the treatments, as well as the risks of probability and severity for the rights and freedoms of individuals.

These security measures are applied to ensure an adequate level of security to mitigate the risks detected in the analyses carried out prior to processing and throughout the life cycle of personal data and its processing.

Changes to the Privacy Policy

The co-managers reserve the right to modify this Privacy Policy when necessary to adapt new legislation or other regulations, to the good practices and procedures of the co-managers and at the request of the supervisory authorities.

Notwithstanding, the relationships established with users, prior to the modification of the Privacy Policy, shall be governed by the rules provided at the time the user accessed the website, without prejudice to the provisions of the General Data Protection Regulations.

We recommend that users read it before each access and web browsing.