Fundación RANA, hereinafter the CONTROLLER, is Responsible for processing the Users’ personally identifiable data and informs them that these data will be processed in accordance with the provisions of the Regulation (EU) 2016/679 of 27th April (GDPR) and the Organic Law 3/2018 of 5th December (LOPDGDD), therefore, the following processing information is provided:
End of processing: manage our site’s different functions involving that you provide your personal data. The operations planned for the processing are:
Legal basis of the processing: your consent to send the newsletter and answer your requests sent through the contact form. Donations, being a RANA volunteer partners and legacy, are data necessary to execute a contract in which you are involved.
Data retention criteria: constant during our relationship (whilst you are a member, volunteer, etc.). The data related to donations and legacy will be kept during the limitation period for tax obligations (four years). The data received through the contact form will be kept for one year.
Data reporting: data shall not be reported to third parties, except when there is a legal obligation.
Rights for the User:
Contact information to exercise your rights:
Fundación RANA. C/ de la Mare Jeanne Jugan, 3A, 1C, 07010, Palma de Mallorca. Email: pilar@fundacionrana.org DPO contact details: C/San Miguel 36, 5D, 07002 Palma de Mallorca - diego.fanjul@finchabogados.com
By checking the relevant boxes and entering data in the fields marked with an asterisk (*) in the contact form or submitted in downloadable forms, the Users expressly, freely and unequivocally accept that their data are necessary for the provider to be able to answer their request, and entering in the remaining fields is voluntary. The User guarantees that the personal data provided to the CONTROLLER are true and is liable for communicating any changes.
The CONTROLLER expressly informs and guarantees users that their personal data will not be transferred to third parties under any circumstances, and that, when any type of personal data transfer is made, the express, informed and unequivocal consent of the Users will be requested in advance. All the data requested through the website are mandatory, since they are necessary to provide the User with an optimal service. Otherwise, we cannot guarantee that the information and services provided will be completely adapted to their needs.
That, in accordance with the provisions of the current regulations on personal data protection, the CONTROLLER is fulfilling all the provisions of the GDPR to process personal data held, expressly with the principles described in Article 5 of the GDPR, establishing that the data should be processed in a lawful, loyal and transparent manner in relation to the interested party, and that they are adequate, pertinent and limited to the extent necessary in relation to the purposes for which they are processed.
The CONTROLLER guarantees that it has implemented the appropriate technical and organisational policies to apply the security measures set forth by the GDPR in order to protect the rights and freedoms of Users and has communicated the appropriate information so that they can exercise them.