1. Data controller

In compliance with the General Data Protection Regulation —GDPR— and Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights —LOPDGDD—, users are informed that the personal data provided through the website https://asefop.com will be processed by:

Controller: ASEFOP
Legal form: aisbl : Association Internationale Sans But Lucratif
Tax identification number: 0434.921.076
Registered office: Rue du Gruyer, 14 – 1170 Bruxelles – Belgique
Contact email address: fannymoreau75@gmail.com
Telephone: +494 35 60 24 

European regulations require clear information to be provided on who processes the data, for what purpose, what the legal basis is, how long the data will be retained and what rights the data subject may exercise.

2. Purpose of data processing

ASEFOP may process the personal data provided by users through asefop.com for the following purposes:

• To respond to requests for information sent through contact forms, email or other enabled channels.
• To manage the relationship with members, collaborators, entities, professionals or users interested in ASEFOP.
• To process registrations for activities, conferences, courses, events, meetings or initiatives promoted by the association.
• To send informative communications related to ASEFOP’s activities, services, projects or news, provided that there is a legal basis for doing so.
• To manage administrative, technical or professional enquiries related to the purposes of the association.
• To comply with legal obligations applicable to ASEFOP.
• To improve the security, operation and user experience of the website.

ASEFOP will not use personal data for purposes that are incompatible with those for which they were collected.

3. Personal data processed

Depending on the form or channel used, ASEFOP may process the following categories of data:

• Identification data: name, surname, entity or association to which the user belongs.
• Contact data: email address, telephone number, postal address.
• Professional data: position, company, organisation or field of activity.
• Data related to requests, enquiries, registrations or communications sent by the user.
• Technical browsing data, such as IP address, cookie identifiers, browser, device or information derived from the use of the website, where applicable.

ASEFOP will request only the data necessary for each purpose.

4. Legal basis for processing

The legal basis for processing personal data may be:

• Consent of the data subject, when the user voluntarily submits a form, registers for an activity or agrees to receive communications.
• Performance of a contractual or pre-contractual relationship, when the processing is necessary to manage a request, registration, membership application or provision of services.
• Compliance with legal obligations, when ASEFOP is required to retain or disclose certain data pursuant to legal requirements.
• Legitimate interest, to maintain the security of the website, respond to previously initiated communications or manage institutional relationships, provided that the user’s rights and freedoms do not prevail.

The GDPR recognises different legal bases for processing, including consent, the performance of a contract, compliance with legal obligations and the legitimate interest of the controller.

5. Data retention

Personal data will be retained for the time necessary to fulfil the purpose for which they were collected and, subsequently, for the periods required by the applicable regulations.

As a general rule:

• Data sent through contact forms will be retained for the time necessary to respond to the enquiry.
• Data relating to members, collaborators or persons registered for activities will be retained for as long as there is a relationship with ASEFOP.
• Data used for informative communications will be retained until the user requests to unsubscribe or withdraws their consent.
• Data necessary to comply with legal obligations will be retained for the periods required by the corresponding regulations.

Once these periods have expired, the data will be deleted or blocked where applicable.

6. Disclosure of data to third parties

ASEFOP will not sell or transfer users’ personal data to third parties without their consent, except where legally required or when necessary for the provision of a service related to the purpose of the processing.

Certain providers that provide services to ASEFOP may have access to the data, such as:

• Web hosting providers.
• Technical maintenance services.
• Email marketing or communication delivery platforms.
• Web analytics tools.
• Form, registration or event management services.
• Consultants, administrative advisors or administrative service providers, where necessary.

These third parties will act as processors and must process the data in accordance with ASEFOP’s instructions and with the regulations in force.

7. International data transfers

As a general rule, ASEFOP will endeavour to ensure that personal data are processed within the European Economic Area.

However, some technology providers may be located outside the European Economic Area. In such cases, ASEFOP will adopt the appropriate safeguards provided for by the applicable regulations, such as adequacy decisions by the European Commission, standard contractual clauses or other legally valid mechanisms.

The LOPDGDD refers the regime for international transfers to the provisions of the GDPR and Spanish data protection regulations.

8. Users’ rights

Users may exercise the following rights in relation to their personal data:

• Access: to know what personal data ASEFOP processes.
• Rectification: to request the correction of inaccurate or incomplete data.
• Erasure: to request the deletion of their data where applicable.
• Objection: to object to the processing of their data in certain circumstances.
• Restriction of processing: to request that the use of their data be restricted.
• Portability: to receive their data in a structured, commonly used and machine-readable format, where applicable.
• Withdrawal of consent: to withdraw the consent granted at any time, without affecting the lawfulness of the processing previously carried out.

To exercise these rights, the user may contact ASEFOP by email at: fannymoreau75@gmail.com

The request must clearly indicate the right the user wishes to exercise, and supporting documentation proving the identity of the applicant may be required where necessary.

The Spanish Data Protection Agency includes these rights among the safeguards that data subjects may exercise before the data controller.

9. Complaint before the supervisory authority

If the user considers that ASEFOP has not processed their personal data in accordance with the regulations in force, they may file a complaint with the competent supervisory authority.

In Spain, the supervisory authority is the Spanish Data Protection Agency —AEPD—.

10. Data security

ASEFOP will apply the technical and organisational measures necessary to ensure a level of security appropriate to the risk involved in the processing of personal data.

These measures are aimed at preventing the loss, alteration, unauthorised access, disclosure or improper processing of the data.

Nevertheless, the user should bear in mind that no computer system or data transmission over the Internet can guarantee absolute security.

11. Data relating to minors

The website asefop.com is not specifically aimed at minors.

If ASEFOP processes data relating to minors in the context of specific activities, events, registrations or projects, the necessary authorisations will be requested in accordance with the applicable regulations.

12. Sending of informative communications

ASEFOP may send informative communications related to its activities, projects, events, news or services, provided that there is a valid legal basis for doing so.

The user may unsubscribe from these communications at any time through the link provided in each communication or by requesting it by email at:

[indicar email de contacto]

13. Website forms

The forms available on asefop.com will include, where necessary, a specific information clause on data protection.

By submitting a form, the user declares that the data provided are true, accurate and up to date. The user shall be responsible for any damage or loss arising from the communication of incorrect, false or incomplete data.

14. Cookies and similar technologies

The website may use first-party and third-party cookies for technical, analytical, personalisation or other purposes.

The user may obtain further information in the website’s Cookie Policy.

15. Amendments to the Privacy Policy

ASEFOP reserves the right to amend this Privacy Policy in order to adapt it to legislative, technical, organisational or website operation changes.

The version in force shall be the one published at any given time on https://asefop.com.