Pursuant to Regulation 2016/679 of the European Parliament and the Council of 27 April 2016, with regard to the processing of personal data and their free circulation (GDPR) and Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and the guarantee of digital rights (LOPDGDD, in Spanish), users of this webpage are hereby informed that the personal data they provide through it, both to complete all forms and by email or by any other means, shall be processed pursuant to this Data Protection Policy.
As follows, in the form of questions and answers, we hereby inform you of the conditions under which our entity processes your personal data:
You are hereby informed that we have a Data Protection Officer (DPO), a role set forth by law whose main duties are to inform and advise the Fundación on its obligations with regard to personal data protection and supervise its compliance with them. Moreover, the DPO acts as a point of contact between you and the Fundación for any issue regarding personal data protection. As such, if you so wish, you may address them:
The data provided shall be processed for the following purposes, depending on the reason for which they were provided:
1. Sending commercial communications (programmes, bulletins, surveys, contests, drawings, activities, etc.) from the Fundación. These communications inform users of different programmes, events, contests, activities, and functions organised by the Fundación (normally in art and culture and the environment). Additionally, and in terms of the Canal Educa programme's bulletin, if you subscribe to it, you will also be informed regarding the contents and activities of third parties, provided they are related to the educational and environmental scope of our Canal Educa programme, which addresses sustainable water use and the search for solutions for climate change.
To this end, the Fundación may contact data subjects and send them information through customary electronic means. The Fundación may also do this via WhatsApp, although this application will only be used when users have granted their specific consent.
In relation to sending the aforementioned communications, based on the information you have provided, we may prepare commercial profiles to offer you the information that best adapts to your interests.
2. Answering requests for information from users through the Fundación's public information access form to guarantee compliance with standards on transparency.
3. Resolving any other query, question or request made by the user through any of the contact forms made available to the user on the Fundación's website, including email.
4. Managing users' subscription to the blog on environmental content published by Fundación Canal, for the purposes of sending them a notification every time a new entry is included in the blog.
Authorisation to process data for these purposes is voluntary, and the only consequence of refusal is that users may not request information on our programming or in relation to our entity's transparency, nor receive a response to any query or question users may wish to ask us nor subscribe to our blog.
5. Managing the registration and participation of users in contests or drawings that the Fundación may hold.
6. Managing registration for activities conducted by the Fundación through the Canal Educa Portal.
7. Managing sale and shipment of products purchased by users
It is mandatory to process data for these purposes since, otherwise, users may not participate in contests or drawings organised by the Fundación, register for activities conducted by the Fundación, or purchase the products it offers.
Personal data may be used by the Fundación to conduct statistical studies. In any event, the result of these studies shall be entirely anonymous.
Information obtained from statistical studies conducted by the Fundación is stored indefinitely, although results are entirely anonymous.
The data collected for the purposes set forth in points 1, 2, 3, and 4 of the section "Why are we processing your personal data?" shall be processed on the legal basis of the consent provided by the subject who provides their data. This consent may be withdrawn at any time; however, this shall not affect the legality of the processing before said withdrawal. Categories of data processed for each one of said purposes are:
The data collected for the purposes set forth in points 5, 6, and 7 of the section "Why are we processing your personal data?” shall be processed on the legal basis of the existence of a contractual relationship entered into between the parties, either as a result of purchasing the Fundación's products or as a result of registering for, and participating in, the activities, contests, or drawings it conducts.
The data used for conducting statistical studies will be processed on the legal basis of the Fundación's legitimate interest, which is considered to prevail given that:
- Only user identification, year of birth, company, school, and contact data are processed. - The consequences for user privacy are minimum. - The results of studies are anonymised.If you friend or follow the Fundación on social media, we will process your data to keep you abreast of our activities and promotions through said channels. These data shall be processed on the legal basis of your consent and shall be stored as long as you are a friend or following of the Fundación. You may withdraw your consent at any time, but this shall not affect the legality of processing occurring before said withdrawal. Providing your data for this purpose is voluntary, although if you do not, you cannot be friend or follower on our social media channels.
In the event that a user registers via social media, the personal data we will process come from the social media platform in question, to which the data subject has previously provided said data for the purposes set forth in the pertinent privacy policies. The categories of data we collect from the social media platform in question shall be those you have provided to said social media platform. If, in order to register on our website, it were essential to provide more data than those provided by the social media platform, you must additionally provide them through our registration form, subject to the privacy conditions set forth in this policy.
If, because you are interested in an internship and/or working with us, you send us your CV, we shall process the information included therein in order to carry out the pertinent staff hiring processes. That data that you provide or that we obtain to participate in a specific staff hiring process underway shall be stored until said process concludes and shall then be cancelled, unless the candidate is selected, in which case the data shall be incorporated into their employee file. If candidates who are not hired wish for us to save their CV for future hiring processes, they must expressly request this by email. In this case, and also when you provide us with your CV spontaneously (simply so we might consider it in future hiring processes), the data shall be stored until the end of the calendar quarter of the year after you sent us the latest copy. You must keep the personal data that you provide updated, especially data related to education and professional experience.
On occasion, during the hiring processes, we may use employment portals to seek candidates who match professional profiles of our interest, subject to the Privacy Policies of said platforms.
The categories of personal data we will process are the following: identification data, personal characteristic data, professional experience data, academic and professional data, and any other information that candidate may have published on the employment portal or included on their CV, or that they may provide during the interviews in which they may participate in the future.
The legal basis for processing the CVs that you send to us or that we obtain from employment platforms for a specific staff hiring process underway is the existence of a pre-contractual relationship. Additionally, more data may be collected during interviews or hiring processes, which shall be processed under the same grounds.
The legal basis for processing the data contained in your CV when you have asked us to store it after a hiring process, or when you have sent it to us spontaneously, is your consent. You may
withdraw this consent at any time. Notwithstanding, data processing before said withdrawal shall not lack legality based on the fact that consent was later withdrawn.
It is mandatory to provide your data if you wish to participate in the Fundación's staff hiring processes. Otherwise, you cannot participate in them.
Data shall not be shared with any third party, barring Public Administrations in the cases set forth by law and for the purposes established therein, as well as with financial entities to manage collections pursuant to the purposes set forth in section 7 of the section "Why are we processing your personal data?"
The Fundación may use WhatsApp to send the entity's commercial communications if users have previously consented to receiving them by this method. In this case, the data shall be stored at WhatsApp LLC, located in the United States, which would constitute an international data transfer. Notwithstanding, this entity provides adequate data protection guarantees, since it is a signatory of the Data Privacy Framework agreement - For further information: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt00000011sfnAAA&status=Active
Moreover, the personal data collected through the forms on Canal Educa (www.fundacioncanal.com/canaleduca/) shall be stored on the Survey Monkey platform, owned by SurveyMonkey Inc, which stores its data in the United States. Just as described in the paragraph above, this constitutes an international data transfer. In any event, this entity provides adequate data protection guarantees, since it is a signatory of the Data Privacy Framework agreement - For further information: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt00000011sfnAAA&status=Active
All persons are entitled to obtain confirmation whether we are processing personal data that concern them. Data subjects have the right to access their personal data, and to request correction of inaccurate data, or if applicable, to request erasure when, in addition to other reasons, the data are no longer necessary for the purposes for which they were collected.
Under the conditions set forth in the GDPR and in the LOPDGDD (Spanish data protection act), data subjects may request that the processing or transferability of their data be restricted. In this case, we shall only store your data to lodge or defend against claims.
Data subjects may object to the processing of their data under certain circumstances and for reasons related to their particular situation. If you have granted consent for a specific purpose, you are entitled to withdraw said consent at any time, this not affecting the legality of the processing based on said prior consent and its withdrawal. In these cases, we shall cease processing your data or, if applicable, we shall cease doing so for that specific purpose, barring legitimate overriding reasons or to lodge or defend against possible claims.
Moreover, data protection regulations allow you to object to being the subject of decisions solely based on the automated processing of your data, when applicable.
All the aforementioned rights may be exercised through the contact forms at the beginning of this policy.
When the Fundación is uncertain regarding the identity of the data subject, they may request that you prove your identity by providing a photocopy or scanned copy of your DNI (National ID Document) or equivalent document, or a documentation proving powers of representation if said right is exercised through a representative.
In the event of any violation of your rights, especially when you have not been able to satisfactorily exercise them, you may file a claim with the Spanish Data Protection Agency (www.agpd.es) or another competent supervising authority. You may also obtain further information on the rights to which you are entitled by addressing these entities.
The user is liable for the truthfulness of the information that they provide through this website. To this end, the user is liable for the truthfulness of all data provided, and shall keep the provided information appropriately updated, so that it pertains to the user's actual status. The user shall be liable for the false or inaccurate information they provide, and the damages that this causes to the owner of the website or to third parties.
The Fundación undertakes to use the personal data provided for the purposes set forth in this Data Protection Policy, guaranteeing their security and confidentiality. To this end, it has implemented technical and organisational security measures that are necessary to prevent said data's alteration, loss, and unauthorised processing and access, pursuant to provisions in applicable law.
The personal data we process at the Fundación come from the data subject.
Notwithstanding the aforementioned, if third-party personal data have been provided, it is at the exclusive liability of the individual providing said data to obtain prior consent from the individual whose data we are processing. Said individual must be informed of all provisions in article 14 of the General Data Protection Regulation in advance.
In the event that minors' data are provided to register for events or activities, the individual providing said data must hold authority to provide the data or have authorisation from the parents or legal guardians to provide said data to this end.
