Who are we?
The Privacy Policy is part of the General Terms and Conditions that govern this website https://santuariodelasnieves.es/
Who is responsible for processing your data?
NAME/CORPORATE NAME: PARROQUIA SANTUARIO DE NTRA SRA DE LAS NIEVES DE STA CRUZ DE LA PALMA
CIF: R3800115B
TAX DOMICILE: PLAZA LAS NIEVES NUM 5
TOWN: 38700 SANTA CRUZ DE LA PALMA (S.C. TENERIFE)
PHONE: 600 34 29 10.
EMAIL: info@santuariodelasnieves.es
You can contact us in any way you prefer.
We reserve the right to modify or adapt this Privacy Policy at any time.
Who can provide us with data?
User access to the website https://santuariodelasnieves.es/ may involve the processing of personal data. By accessing our website, you declare that you are of legal age and that all data you provide, whether mandatory for providing the service or information, or additional data that completes your information and request, is truthful and accurate. This data is provided voluntarily.
WEBSITE OR EMAIL CONTACTS:
What data do we collect through the Website?
Technical data: Your IP, operating system or browser, and duration of your visit (anonymised).
Data provided: First name, surname, email address and telephone number when you complete a contact form.
If you provide us with data in the contact form, it will be identified so that we can contact you if necessary.
For what purposes will we process your personal data?
- To answer your queries, requests or requests.
- To manage the requested service, answer your request, or process your request.
- Information by electronic means, concerning your request.
- Manage pastoral, liturgical and worship activities of the Sanctuary.
- To administer donations and acts of generosity of the faithful.
- Communicate religious events, celebrations and pastoral activities.
- To manage the relationship with collaborators and benefactors of the Sanctuary.
What is the legal basis for processing your data?
The acceptance and consent of the interested party: In cases where completing a form is required to make a request and clicking the “send” button, submitting the form will necessarily imply that you have been informed and have explicitly given your consent to the content of the clause attached to the form or acceptance of the privacy policy.
All our forms have an asterisk (*) next to mandatory fields. If you do not provide this information, or if you do not check the checkbox to accept the privacy policy, the information cannot be submitted. It generally has the following formula: “□ I have read and accept the Privacy Policy.”
What data do we collect?
When you contact us by email, we may ask you to provide some personal data, such as:
Basic and identifying data: Your full name
Contact data: email address and phone number.
We may also process your IP address, the operating system or browser you use, and even the duration of your visit, anonymously.
What is the legal basis for processing your data?
The legal basis is the acceptance of a contractual relationship, or otherwise your consent to contact us or offer us your products by any means.
The acceptance and consent of the interested party: In those cases where to make a request it is necessary to fill in a form and click on the send button, the completion of the same will necessarily imply that you have been informed and have expressly given your consent to the content of the clause attached to the form or acceptance of the privacy policy.
All our forms have the symbol * in the obligatory data. If you do not provide these fields, or do not tick the checkbox for acceptance of the privacy policy, the information will not be allowed to be sent. It usually has the following formula: ‘□ I have read and accept the Privacy Policy.’
The data processing is based on the legitimate purpose of the PARROQUIA SANTUARIO DE NTRA SRA SRA DE LAS NIEVES DE STA CRUZ DE LA PALMA as a religious entity in accordance with Article 6.1.e) of the RGPD, in the exercise of its public interest functions and religious activities legally recognised in Spain, being necessary for compliance with a legal obligation applicable to the data controller and for the performance of a task carried out in the public interest or in the exercise of public powers vested in the data controller.
Legal obligation applicable to the controller:
- Reglamento (UE) 2016/679 del Parlamento Europeo y del Consejo, de 27 de abril de 2016 (RGPD).
- Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y Garantía de Derechos Digitales (LOPD-GDD).
- Decreto General de la Conferencia Española sobre la Protección de Datos de la Iglesia Católica en España, el 22 de mayo de 2018 (DG).
Furthermore, certain processing of your data will be in accordance with the legitimate basis of your consent as set out in article 6.1.a) of the GDPR. For this purpose, we will ask you to grant us your consent by activating the specific validation boxes.
MEDIA
If you upload images to the website, you should avoid uploading images with location data (GPS EXIF) included. Visitors to the website can download and extract any location data from the images on the site.
COOKIES
If you leave a comment on our site you can choose to save your name, email address and website in cookies. This is for your convenience, so you don’t have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and log in to this site, we will set a temporary cookie to determine whether your browser accepts cookies. This cookie contains no personal data and is deleted when you close your browser.
When you log in, we will also set a number of cookies to store your login information and screen display options. The login cookies last for two days, and the display options cookies last for one year. If you select ‘Remember me’, your login will last for two weeks. If you log out of your account, your login cookies will be deleted.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie does not contain any personal data and simply indicates the ID of the article you have just edited. It expires after 1 day.
PROVIDERS/SERVICE PROVIDERS
Social Media Contacts
Personal data available on social media profiles, as well as any information you provide to the Responsible Party when contacting via this channel, will be processed for the purpose of:
- Managing your participation in various initiatives.
- Responding to your request or processing a query.
- Establishing a user-responsible relationship and creating a follower community.
What is the legal basis for processing your data?
The bases legitimizing the processing are the voluntary consent of the interested party for contacting us and, where applicable, the acceptance of a contractual relationship within the corresponding social media platform.
The processing of data within the social network will be carried out in accordance with their privacy policies:
Facebook http://www.facebook.com/policy.php?ref=pf
Twitter http://twitter.com/privacy
Instagram https://help.instagram.com/519522125107875/?maybe_redirect_pol=0
How long will we keep your personal data?
We can only consult or delete your data in a restricted manner based on having a specific profile. We will process your data as long as you continue to follow us, click “like,” “follow,” or similar buttons.
Any rectification of your data or restriction of information or publications must be done through the settings of your profile or user in the social network itself.
Do we include personal data of third parties?
No, as a general rule, we only process the data provided by the data subjects. If you provide us with third-party data, you must, beforehand, inform and obtain their consent, or otherwise, you exempt us from any responsibility for non-compliance with this requirement.
Are there automated decisions?
This entity may make automated decisions based on the legal coverage granted by Article 41 of Law 40/2015, of October 1, on the Legal Regime of the Public Sector. This would be any act or action carried out entirely by electronic means within the framework of an administrative procedure, where a person has not been directly involved.
The automated decision-making process should be regulated in specific regulations, which will define specifications, programming, maintenance, supervision, and quality control. This regulation will be available to citizens in the electronic headquarters of this entity.
What security measures do we apply?
We have adopted an optimal level of protection for Personal Data, installing all necessary technical and organizational measures according to the state of technology to prevent loss, misuse, alteration, unauthorized access, and theft of Personal Data.
It is communicated that PARROQUIA SANTUARIO DE NTRA SRA DE LAS NIEVES DE STA CRUZ DE LA PALMA, in accordance with the Additional First Provision of Organic Law 3/2018, of December 5, on Personal Data Protection and the Guarantee of Digital Rights, the security measures, technical and organizational, adopted and intended to safeguard the confidentiality and protection of personal data, preventing its loss, alteration, or unauthorized access, comply with Annex II of Royal Decree 3/2010, of January 8, which regulates the National Security Framework within the scope of Electronic Administration (ENS).
Similarly, the measures established in Regulation (EU) 679/2016, of April 27, on General Data Protection will also apply.
To whom will your data be communicated?
PARROQUIA SANTUARIO DE NTRA SRA DE LAS NIEVES DE STA CRUZ DE LA PALMA will process the data responsibly and proactively, complying with the principles established in Article 5 of the GDPR:
- Lawfulness, fairness, and transparency
- Purpose limitation
- Data minimization
- Accuracy
- Storage limitation
- Integrity and confidentiality
Similarly, it is expressly informed that the data will only be communicated to the competent public bodies or data processors necessary for the provision of the service. No international data transfers will be made, unless legally authorized.
Personal data may be communicated to data processors necessary for the provision of the service, who will have signed a data processing agreement obliging them to maintain the same level of privacy as the data controller.
PARROQUIA SANTUARIO DE NTRA SRA DE LAS NIEVES DE STA CRUZ DE LA PALMA does not plan to make international data transfers; however, if necessary, they will only be carried out in strict compliance with the obligations established in the European Regulation, or when there is a legal authorization to carry out the international transfer.
More information about the processing of your data
Donations
In accordance with current legislation, the personal data provided through the completion and submission of the donation form on this website will be processed by the PARROQUIA SANTUARIO DE NTRA SRA DE LAS NIEVES DE STA CRUZ DE LA PALMA (CIF R3800115B), in its capacity as Data Controller, for the purpose of managing your donation and issuing the corresponding receipts. The legal basis for the processing of this data is consent (Article 6.1a of the GDPR), which is obtained when making the donation.
Additionally, if you wish to benefit from tax deductions for your donations, the Parish may transfer your data to the Tax Agency and other legal entities to comply with the tax obligations derived from the law. Your data may also be accessible to auxiliary service providers (such as payment processors and other necessary services) who are duly accredited and who must act under the instructions of the Parish and comply with the current data protection regulations.
Your Rights and Access to Information
In accordance with current legislation, Regulation (EU) 679/2016 of April 27, 2016 (General Data Protection Regulation), and Organic Law 3/2018 of Personal Data Protection and Guarantee of Digital Rights, you have the possibility to exercise the following personal rights by reliably accrediting your identity, either through the entry registry, the electronic headquarters, or email.
Your rights are as follows:
- Right to revoke your consent and request that we do not process your data.
- Right to access the information we have regarding you, specifying the purposes of the processing we perform and the communications we have made to third-party administrations and companies, either because they are authorized by law or necessary for the provision of the service you have requested, or because you have given your consent.
- Right to rectify your data, by which we will update and correct the information and data we have based on the information you provide.
- Right to the deletion of your data, once the legal retention periods established by the applicable regulations have been met.
- Right to object to any data processing activity we carry out, through the revocation of your authorization/consent.
- Right to restrict the processing of your data, for example, if you file a complaint or wish us to retain your data for a longer period, preventing its deletion.
- Right to data portability, by which we will provide you with the data you have provided to us during your registration as a user in a commonly used file format.
To exercise your rights, you can contact us at info@santuariodelasnieves.es
Additionally, we inform you that you can always approach the Spanish Data Protection Authority (Agencia Española de Protección de Datos, www.agpd.es) to request its guidance or file a complaint regarding the processing of your personal data.
