Legal warning

Website Manager

Legal name: Forestry Association of Galicia.

CIF: G-15112121

Registered office: 33 Rúa do Vilar, 1st floor, 15705 Santiago de Compostela

Email address: afg@asociacionforestal.org

Central Register of Associations: 2004/007827-1

 

 

Privacy policy

Identification and contact details of the data controller

ASOCIACIÓN FORESTAL DE GALICIA, a company with its registered office at 33 Rúa do Vilar, 1st floor, 15705, Santiago de Compostela, (A Coruña) – Spain, with CIF G-15112121, is the data controller for the processing of personal data carried out through this website. This clause provides information on how the association will use personal data.

Likewise, the present Privacy Policy aims to provide information on the rights that are available to both registered and non-registered users under the GDPR 2016/679 and Organic Law 3/2018 on the Protection of Personal Data. For any queries regarding the processing of personal data, the Association can be contacted at Calle do Vilar, No. 33, 1st Floor, 15705, Santiago de Compostela, (A Coruña) – Spain.

Data processing

The Galician Forestry Association informs, through this website, of its privacy policy regarding the processing and protection of personal data of any data subject with whom it maintains a relationship that requires the processing of personal data.

The technical operations, management and procedures, whether automated or non-automated, that enable the collection, the storage, modification, transfer and other actions on personal data, are considered personal data processing, and in this case we inform you of joint processing in those cases necessary for the management of contracted services and/or products, without prejudice to the provisions of section 4 of this policy.

Maximum transparency in information: for this reason, we explain how we process data, even when we do not collect any data from the website.

We do not share data with third parties; the data is secure and will only be disclosed to third parties when there is an obligation under a regulation or when it is essential to provide a particular service. We provide information on this in the “Recipients” section.

Legal compliance, the FORESTRY ASSOCIATION OF GALICIA is compliant with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR), Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights, and Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSICE or LSSI) and although repealed, by virtue of regulating the LOPD 15/99, we continue to implement the security measures of Royal Decree 1720/2007.

Data Controller

In compliance with current Data Protection legislation, we inform you that the personal data you voluntarily provide to us through any of our information collection channels will be incorporated into automated and/or manual processing, and the person responsible for this processing is the FORESTAL ASSOCIATION OF GALICIA, with whom you have a contractual relationship. The data will not be transferred to third parties except in cases where there is a legal obligation.

Likewise, the FORESTRY ASSOCIATION OF GALICIA declares and guarantees that it maintains the security levels for the protection of personal data as required by current legislation, and that it has established all the technical means at its disposal to prevent loss, misuse, alteration, unauthorised access, or theft of the data provided by data subjects, and that its staff comply with these requirements, as well as the duty of confidentiality regarding the data under protection and other applicable confidentiality obligations.

What personal data do we process?

Processing the data is necessary to grant access to the content and/or features of our website or, where required, to send information or provide the services made available through it. In this regard, we are firmly committed to processing personal data lawfully and consistently in accordance with the principles and legal obligations set out in the current personal data protection legislation.

When browsing our website and, in particular, when interacting with it, data are provided directly, for example when completing any online form or request in accordance with the processing purposes indicated in each case (for example, the contact form).

The data provided are in relation to such forms. We will always request only those data that are appropriate, relevant and limited to what is necessary for the aforementioned processing purposes (principle of minimisation of personal data):

• Contact and identifying data: name, surname(s), address, telephone number, email address.
• Commercials and preferences: information provided to us about preferences, for example the type of services in which interest is shown.
• Those who decide to facilitate voluntarily.
• Data derived from communications maintained with us.
• Information relating to navigation in the case of online services, (IP address or information derived from cookies or similar devices (you can see our policy of cookies on the web).
• That information which is available in publicly accessible sources, to which we can legitimately access.
• The data arising from the contractual or pre-contractual relationship maintained with us, including personal images, in which case you will always be informed of the possibility of capturing your personal image.
• Those that third parties provide us about the user, where there is a legitimate basis for this or where consent has been obtained for it.
• Third-party data provided by the user, with the prior consent of the third party concerned.

How we handle data

At the FORESTRY ASSOCIATION OF GALICIA, we always process personal data in strict compliance with current legislation. Furthermore, we inform you that we have the appropriate technical and organisational measures in place to ensure an optimal level of security, guaranteeing that only authorised persons will have access, that we will keep them intact, preventing any intentional or accidental loss, and that we reinforce our data processing systems and services.

The operations, managements and technical procedures that we carry out, whether automated or not, and which enable the collection, storage, modification, transfer and other actions on personal data, are considered personal data processing.

Purpose of the data

The Galician Forestry Association processes personal data for the following purposes:

• To enable navigation of our website, thereby allowing access to the information and content available on it.
• Attend to and manage your enquiries and requests.
• To provide all the necessary information regarding the features of the service you have requested.
• If so accepted, or if there is sufficient legal basis for this, to send information and publicity about courses and activities.
• To provide appropriate services to the person concerned.
• To carry out quality control on our services by conducting possible opinion surveys.
• In the event that he/she were to accept the policy of cookies, for the development of the purposes associated with the different types of cookies informed through this. At any time, if desired, the use of the cookies, exercising a right to withdraw their consent for the purposes associated with the cookies. We inform you that the revocation of consent to the processing of personal data with regard to certain types of cookies as they are session or technical cookies, they may prevent you from browsing our website (see the policy of cookies).
• Adopt all protective measures that are applicable in accordance with current legislation, including, where possible, the anonymisation of personal data by applying the appropriate techniques available for this purpose. Consequently, in this context, anonymisation and pseudonymisation may also be carried out to better protect personal data.
• Apply the appropriate security measures, technical and/or organisational, to personal data with a focus on the risk present at any given time.
• In general, for the fulfilment of legal and regulatory obligations, in accordance with the sector of activity, (not in a limiting or exclusive sense) by judicial authorities, regulatory and supervisory bodies and the State's security forces and agencies, with whom we are obliged to comply with the laws of the countries in which we operate, including measures aimed at detecting fraud and preventing offences or illicit activities.

Legitimacy of the treatment

The basis for the legitimacy of processing personal data is the user's explicit consent (Article 6(1)(a) of the GDPR) and, depending on the case, the pursuit of a legitimate interest (Article 6(1)(f) of the GDPR), whether our own or that of third parties, in the application of pre-contractual measures (Article 6(1)(b) of the GDPR) at the request of the data subject or with their consent (Article 6(1)(a) of the GDPR).

In the sending of information and advertising about offers, products, services, promotions, gifts and campaigns, in commercial communications the legal basis for the processing of personal data is the user's consent (Article 6(1)(a) of the GDPR), and where such may be based on the provisions of Article 21(2) of Law 34/2002 of 11 July on Information Society Services and Electronic Commerce, on legitimate interest (Article 6(1)(f) of the GDPR).

Minors

Persons under the age of 14 may not use the services available through the website without the prior authorisation of their parents, guardians or legal representatives, who shall be solely responsible for all acts carried out through the website by the minors in their care, including filling in the forms with the minors' personal data and ticking, where applicable, the accompanying boxes. In this regard, and insofar as the FORESTRY ASSOCIATION OF GALICIA is unable to verify whether users are minors or not, parents and guardians are advised that they must implement the necessary mechanisms to prevent minors from accessing the website and/or providing personal data without supervision. The FORESTRY ASSOCIATION OF GALICIA accepts no responsibility whatsoever in this regard.

Electronic communications

• If you receive communications by these means (emails, automated response messages from forms, and other communication systems), please note that the messages are addressed exclusively to the intended recipient and may contain privileged or confidential information. If you are not the intended recipient, you are hereby notified that any use, disclosure and/or copying without authorisation is prohibited under current legislation.
• In accordance with the provisions of Law 34/2002 of 11 July on Information Society Services and Electronic Commerce, and Directive 2002/58/EC, we inform you that if you do not wish to receive commercial communications and information by this electronic means, you must indicate this by the same channel, stating 'UNSUBSCRIBE COMMUNICATIONS' in the subject line, so that your personal data may be removed from our database. The request will be processed within 10 days of its receipt. In the event that we do not receive an express reply, we will understand that you accept and authorise our association to continue making the aforementioned communications.

How long do we keep the data?

Personal data relating to natural persons that the FORESTRY ASSOCIATION OF GALICIA collects by any means will be retained until the data subject requests its erasure. Likewise, it will be retained for as long as the relationship that gave rise to the processing of the data continues, always respecting the legally required retention periods. Once this period has concluded, personal data will be deleted from all systems of the FORESTRY ASSOCIATION OF GALICIA.

To which recipients will the data be disclosed?

There will be no disclosure, transmission or transfer of personal data, other than those already disclosed, except by legal obligation. If, by request of the Public Administration or the autonomous institutions within the scope of the functions expressly assigned to them by law, we are asked for personal data, such data will be transmitted.

Should there be any cession, transmission or transfer of personal data outside the cases previously provided for, prior notice will be given so that the data subject may give their consent, where appropriate.

But in order to organise ourselves properly, to have good operational procedures that ensure the effective management of the Galician Forestry Association, it may be necessary to engage the services of advisers, professionals or other service companies to process data under our instructions.

This processing on behalf of third parties is governed by a contract in writing or in any other form that allows proof of its conclusion and content, expressly specifying that the person responsible for the processing will handle the data in accordance with our instructions and will not apply or use them for purposes other than those set out in the contract, nor disclose them, not even for storage, to any other person.

What are people's rights when they provide us with their data?

Data protection legislation grants the data subject the following rights:

• Right to withdraw any consent previously given.
• Right of access: to know what type of data is being processed and the characteristics of the processing being carried out.
• Right of rectification: the ability to request the modification of inaccurate or untrue data.
• Right to portability: the ability to obtain a copy in an interoperable format of the data being processed.
• Right to restriction of processing in cases where you consider it unnecessary.
• Right to erasure: to request the cessation of data processing and its erasure when its retention is no longer necessary.
• Right to lodge a complaint with the Spanish Data Protection Agency, Calle Jorge Juan, 6, 28001 Madrid – Fax: 91 448 36 80 – Tel.: 901 100 099 – email address: ciudadanos@agpd.es
• If you would like more information regarding the processing of personal data, to rectify any that are inaccurate, to object to and/or restrict any processing that you consider unnecessary, or to request the erasure of the processing when the data are no longer necessary, you must write to: rúa do Vilar, nº 33, 1º, 15705, Santiago de Compostela, (A Coruña) – Spain, email: afg@asociacionforestal.org, tel.: 981 564 011.
  • The communication must include the following information: the user's full name, the request, the address and the supporting documentation.
  • The exercise of rights must be carried out by the user themselves. However, they may be exercised by an authorised person as the legal representative of the authorised user. In such cases, documentation proving this representation must be provided.

Purposes of the data processing

Below we detail the purposes of the data processing carried out by the data controller:

Record of Activities: Contacts

• Purpose: sending commercial information, offers, information about products and/or services to customers and/or potential customers.
• LEGAL BASIS: express consent of the data subject (Article 6(1)(a) of the GDPR).
• DESCRIPTION: category of personal data (identifying data: name and surname, telephone number, email address).
• DATA DISCLOSURE: no data will be disclosed to third parties.
• DATA RETENTION PERIOD: until your request for information is resolved.

Record of Activities: Members

• Purpose: management of the relationship with the associated persons.
• Legal basis: legitimisationthe legal or contractual relationship necessary for the provision of the service (Article 6(1)(b) of the GDPR) and the legitimate interest in developing the relationship.
• DESCRIPTION: category of personal data (identification: first name and surname, tax identification number, postal address, telephone number, email address, image/voice, signature; personal characteristics: marital status, date and place of birth, age, sex, nationality; bank details: for the direct debit of payments).
• DISCLOSURE OF DATA: banks and financial institutions, data processors, Tax Authority.
• DATA RETENTION PERIOD: until the data subject requests the cancellation or erasure of their data and, once erased, they will be retained for a maximum period of six years at the disposal of public authorities, judges and courts, for the purpose of addressing and defending any potential liabilities arising from the processing.