Privacy Policy
Last updated: August 9, 2019
1.- Data Controller and Description
1.1.- Data Controller
The data controller for this website is ARIZMENDIARRIETA SOCIAL ECONOMY THINK TANK (ASETT) (hereinafter, “The Company“), located at PASEO DE MIRACONCHA 48, 20007 DONOSTIA, Spain. Tax ID: G-22515191 Correo Email: info@asett.org1.2.- Description
Acceptance of The Company’s privacy policy (hereinafter, “Privacy Policy”) is a necessary condition for using our website, service for purchasing products and/or services, online store, and social media (hereinafter, the “Service”). This Privacy Policy governs the collection, processing, and use of your personal and non-personal information as a user of www.asett.org, effective from the date shown in the header. To process your personal data, the Company complies with applicable local and European legislation, as well as its implementing regulations.2.- Information Collected
The Service can be used without providing any data, although to purchase a ticket you will need to provide some personal information. The information (personal or non-personal) collected by the Service may vary depending on this. The personal and non-personal information collected by the Service will reach us through three channels: 1) information collected automatically, 2) information you provide voluntarily, and 3) information provided by third parties.2.1.- Information Collected Automatically
This information will consist of:- Information collected through cookies or similar mechanisms stored on your device, always with your consent or in accordance with other legal bases. Consult our Cookie Policy for more information.
- The IP address from which the connection is made, the type of device used and its characteristics, the operating system version, the browser type, the language, the date, the country, the time of the request, the referring URL, the destination URL, and the mobile network used, among other things.
- Service usage data and any errors detected during its use.
- In addition, the Company uses Google Analytics, an analytics service provided by Google, Inc., located in the United States with headquarters at 1600 Amphitheatre Parkway, Mountain View, California 94043. To provide these services, Google Analytics uses cookies that collect information, including the user’s IP address, which will be transmitted to, processed by, and stored by Google under the terms set forth on the website www.google.com. This includes the possible transfer of such information to third parties when required by law or when such third parties process the information on Google’s behalf.
2.2.- Information You Voluntarily Provide
This information will consist of:- The information required by the Company to complete the purchase of a product or service: name, surname, email address, address, tax identification number (NIF), and telephone number.
- Information, personal or otherwise, that may be contained in messages sent through the contact or feedback channels established in the Service, such as your name, username, or email address.
- Your photograph, name, nickname, or geolocation if you decide to participate in any of our social media activities.
- Information required to subscribe to our newsletter, such as your email address.
2.3.- Information provided by third parties
This information will consist of:- Information provided by payment systems or credit card processors, such as the time of purchase or the amount.
- Information provided by the courier services that deliver your order, such as the delivery date and location.
3.- Rights and purposes
Please note that completing the forms is voluntary. However, if you do not fill in the required fields (usually marked with an asterisk), the use of some Service functions will not be possible or will be limited. The personal data you provide will be incorporated into and processed in the Register of Processing Activities held by the Company, among others, in order to respond to your requests, provide the requested service, and keep you informed about matters relating to the company’s activities and services. You may exercise your rights of access, rectification, erasure, restriction of processing, objection, and data portability at any time by sending an email to: info@asett.org or by mail to: PASEO DE MIRACONCHA 48, 20007 DONOSTIA, SPAIN. In both cases, you must identify yourself with your full name and a copy of your national identity document (DNI or ID). If you have given your consent for a specific purpose, you have the right to withdraw that consent at any time, without affecting the lawfulness of the processing based on consent before its withdrawal. Furthermore, if you believe there is a problem with how the Company is handling your data, you can address your complaints to the relevant data protection authority, which in the case of Spain is the Spanish Data Protection Agency (AEPD).4.- Age
Regarding the use of the online service, you declare that you are of legal age and have the necessary legal capacity to be bound by this agreement and use the site in accordance with its terms and conditions, which you fully understand and acknowledge. You declare that all the information you provide to access the Service, both before and during its use, is true, complete, and accurate.5.- Use of Data
The Company will use the collected data to:- Administer, provide, and update the Service (the legal basis being the contract).
- Address your inquiries (the legal basis being our legitimate interest in responding to our users’ requests).
- Process your payments (the legal basis being the contract).
- Share data, such as your image, on our social media (the legal basis being our legitimate interest in the dissemination and promotion of our products).
- Send you our newsletter and promotional offers via email (the legal basis being your consent or our legitimate interest based on the prior contractual relationship, as applicable).
- Maintaining the security of the Service, investigating illegal activities, enforcing our terms and conditions, and assisting law enforcement agencies in their investigations (the legal basis being our legitimate interest in ensuring and maintaining the security of the Service and its users).
5.1.- In emails and contact forms
The Service website uses SSL encryption, which allows users to securely send their personal data through standard contact forms. The personal data collected will be processed automatically and incorporated into the corresponding files of the processing activities register, for which the Company is the data controller. In this regard:- We will receive your IP address, which will be used to verify the origin of the message in order to offer you appropriate recommendations (for example, presenting the information in the correct language) and to detect possible irregularities (for example, possible cyberattacks against the Service), as well as data related to your ISP.
- You may also provide us with your data by telephone, email, and other indicated means of communication.
- Our payment service providers for processing payments for our services are VISA and Mastercard. At no time will the Service or its staff have access to this data.
5.2.- On Social Networks
The Company maintains profiles on some of the main social networks and is responsible for the processing of data published on them (for example, photos uploaded by the Company that include people’s faces). The processing that the Company will carry out with the data within each of these networks will be, at most, that which the social network allows for corporate profiles. Therefore, the Company may inform our followers, when not prohibited by law, through any means permitted by the social network, about its products or offers, as well as provide personalized customer service. Under no circumstances will the Company extract data from social networks unless it obtains the user’s explicit and specific consent to do so.5.3.- In prize draws
When participating in promotional activities organized exclusively by the Company, the data you provide will be processed solely by us for the purpose indicated in the description of the activity and its corresponding legal terms and conditions.6.- Data Retention
The following indicates how long the data processed by the Service is retained:- Disaggregated data will be retained indefinitely.
- Customer data will be retained for the minimum necessary period, which may be up to:
- 5 years, according to Article 1964 of the Civil Code (personal actions without a specific limitation period).
- 6 years, according to Article 30 of the Commercial Code (accounting records or invoices, for example).
- Newsletter subscriber data will be retained from the time the user subscribes until they unsubscribe.
- User data uploaded by the Company to its social media accounts will be retained from the moment the user gives their consent, or the data is uploaded based on the Company’s legitimate interest, until the user removes it.
7.- Data Shared with Third Parties
There are third parties that manage parts of the Service. The Company requires them to comply with this Privacy Policy where applicable, in addition to having their own. However, the Company will not be responsible for compliance with said policy. Under certain circumstances, the Company may share, use, or retain some of the personal information collected with third parties:- To provide the Service:
- To cooperate with competent authorities:
- a) If we believe it is reasonably necessary to comply with any law, legal process, or legitimate interest anywhere in the world. In any case, we will only provide the information strictly required.
- b) If we believe this action is appropriate to enforce the Company’s terms and conditions.
- c) If necessary to detect or prevent fraud or issues related to the security of the Company, its suppliers, and users.