Privacy policy

PRIVACY AND DATA PROTECTION POLICY

Respecting the provisions of current legislation, ICRA Art (hereinafter, also the Website) undertakes to adopt the necessary technical and organizational measures, according to the security level appropriate to the risk of the data collected.

Laws incorporated into this privacy policy

This privacy policy is adapted to current Spanish and European regulations regarding the protection of personal data on the internet. Specifically, it complies with the following rules:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
  • Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).
  • Royal Decree 1720/2007, of December 21, approving the Regulations for the development of Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).
  • Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce (LSSI-CE).

Identity of the person responsible for the processing of personal data

The person responsible for the processing of personal data collected at ICRA Art is: Aina Amblàs Casals, with NIF: 47854773F (hereinafter, Data Controller). Her contact details are as follows:

  • Address: Rambla Sant Domènec, 22. Taller ICRA Art. 08500, Vic (Barcelona). Catalonia.
  • Contact Phone: 621621868
  • Contact Email: icra.ac@gmail.com

Personal Data Register

In compliance with the provisions of the GDPR and the LOPD-GDD, we inform you that the personal data collected by ICRA Art through the forms provided on its pages will be incorporated and processed in our file in order to facilitate, streamline, and fulfill the commitments established between ICRA Art and the User, or to maintain the relationship established in the forms filled out by the latter, or to respond to a request or inquiry. Furthermore, in accordance with the provisions of the GDPR and the LOPD-GDD, unless the exception provided for in article 30.5 of the GDPR applies, a record of processing activities is maintained that specifies, according to its purposes, the processing activities carried out and other circumstances established in the GDPR.

 

Principles applicable to the processing of personal data

The processing of the User’s personal data will be subject to the following principles set out in article 5 of the GDPR and in article 4 and following of Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights:

  • Principle of lawfulness, fairness, and transparency: the consent of the User will be required at all times following completely transparent information on the purposes for which the personal data are collected.
  • Principle of purpose limitation: personal data will be collected for specified, explicit, and legitimate purposes.
  • Principle of data minimization: the personal data collected will be only those strictly necessary in relation to the purposes for which they are processed.
  • Principle of accuracy: personal data must be accurate and always kept up to date.
  • Principle of limitation of the storage period: personal data will only be kept in a form that allows the identification of the User for the time necessary for the purposes of its processing.
  • Principle of integrity and confidentiality: personal data will be processed in a way that guarantees its security and confidentiality.
  • Principle of proactive responsibility: the Data Controller will be responsible for ensuring that the above principles are met.

Categories of personal data

The categories of data processed at ICRA Art are solely identifying data. Under no circumstances are special categories of personal data within the meaning of article 9 of the GDPR (data revealing ethnic origin, political opinions, religious beliefs, genetic or biometric data, or data concerning health or sexual orientation) processed.

Legal basis for the processing of personal data

The legal basis for the processing of personal data is consent. ICRA Art undertakes to obtain the express and verifiable consent of the User for the processing of their personal data for one or more specific purposes. The User shall have the right to withdraw their consent at any time. It shall be as easy to withdraw consent as it is to give it. The withdrawal of consent will not condition the use of the Website.

Purposes of the processing for which the personal data are intended

Personal data are collected and managed by ICRA Art for the purpose of facilitating, streamlining, and fulfilling the commitments established between the Website and the User, or maintaining the relationship established in the forms filled out by the latter, or responding to a request or inquiry. Likewise, the data may be used for commercial purposes of personalization, operational and statistical activities, and activities inherent to the corporate purpose of ICRA Art, as well as for data extraction, storage, and marketing studies to adapt the Content offered to the User and improve the quality, operation, and navigation of the Website.

Personal data retention periods

Personal data will only be retained for the minimum time necessary for the purposes of its processing and, in any case, only for the following period: 18 months, or until the User requests its deletion.

Recipients of personal data

The User’s personal data will not be shared with third parties. In the event that the Data Controller intends to transfer personal data to a third country or international organization, the User will be informed at the time the personal data are obtained.

Personal data of minors

Respecting the provisions of articles 8 of the GDPR and 7 of Organic Law 3/2018, of December 5, only those over 14 years of age may lawfully grant their consent for the processing of their personal data by ICRA Art. If the user is under 14 years of age, the consent of parents or guardians will be required.

Secrecy and security of personal data

ICRA Art undertakes to adopt the necessary technical and organizational measures to guarantee the security of the data and avoid its destruction, loss, or accidental alteration. The Website has an SSL (Secure Socket Layer) certificate, which ensures that data is transmitted securely and encrypted.

Rights derived from the processing of personal data

The User may exercise the following rights against the Data Controller:

  • Right of access: To obtain confirmation of whether their data is being processed.
  • Right of rectification: To modify inaccurate or incomplete data.
  • Right of erasure: To request that data be deleted when no longer necessary.
  • Right to restriction of processing: To restrict the use of data in certain cases.
  • Right to data portability: To receive data in a structured, commonly used, and machine-readable format.
  • Right to object: To object to the processing of their data by ICRA Art.
  • Right not to be subject to automated decision-making.

The User may exercise their rights by means of a written communication addressed to the Controller with the reference “RGPD-www.icra-art.cat”, including name, surname, a copy of their ID (DNI), specific request, address for notification purposes, date, and signature. It can be sent to:

  • Postal address: Rambla Sant Domènec, 22. Taller ICRA Art. 08500, Vic (Barcelona). Catalonia.
  • Email: icra.ac@gmail.com

Complaints before the supervisory authority

In the event that the User considers there is an infringement, they have the right to file a complaint with a supervisory authority, in the case of Spain, the Spanish Data Protection Agency (https://www.aepd.es/).

ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

The use of the Website will imply the acceptance of its Privacy Policy. ICRA Art reserves the right to modify this policy according to its own criteria or legislative changes. It is recommended to consult this page periodically.