Privacy Policy

At IRÍDIA, we work to ensure that personal data, particularly special categories of personal data, are properly protected and processed.

We process data confidentially, rigorously, responsibly, fairly and transparently, and subject to strict security measures.

Who is responsible for processing your data?

The Association IRÍDIA, CENTRE FOR THE DEFENCE OF RIGHTS (‘IRÍDIA’)

Registered address: C/ Riera d’Escuder 38, Unit 1, ground floor, 08028 Barcelona
Email: [email protected]
Telephone: 693 563 529
Data Protection Officer: [email protected]

For what purpose do we process your data?

At IRÍDIA, we process the information provided for different purposes, depending on the category of data subject concerned:

  • Enquiries and requests: We process users’ personal data in order to manage requests for information received through the website.
  • Donations: Where applicable, we may also process data provided by members and donors in order to manage their relationship with our organisation and, in particular, to collect their contributions.
  • Events: In connection with events, activities or campaigns, data will be processed in order to respond to the request received or manage the event for which you have registered.

Where applicable, the data may also be processed for the purpose of sending informational communications, including electronically, concerning the organisation’s events, news or campaigns, as well as those of organisations with which IRÍDIA may collaborate.

Under no circumstances do we intend to create profiles, make automated decisions using the data or cross-reference datasets.

For statistical purposes, IRÍDIA may disaggregate numerical data according to personal characteristics without revealing the source of the data, while maintaining confidentiality and anonymity.

How long will we keep your data?

  • Enquiries and requests: Until we have responded to the relevant enquiry or request, unless you have also stated that you wish to receive marketing information. In this case, we will retain your data until you withdraw your consent or request its erasure.
  • Donations: For the minimum period required under applicable legislation, particularly civil, tax and accounting legislation, anti-money laundering regulations and legislation governing grants and subsidies.
  • Activities: Until the relevant event or activity has taken place, unless you have also stated that you wish to receive marketing information. In this case, we will retain your data until you withdraw your consent or request its erasure.

What is our lawful basis for using your data?

  • Enquiries and requests / Activities: The lawful basis is the consent provided by accepting the Privacy Policy. You may withdraw your consent at any time, without this having any retrospective effect on the processing of personal data carried out before its withdrawal.
  • Donations: Performance of the contractual relationship.

To whom and why could we provide your data to third parties?

As a general rule, data will not be disclosed to third parties. However, donors’ data may be disclosed to financial institutions or payment platforms, as well as to public authorities where required or permitted by law.

Notwithstanding the above, data may be processed by organisations located outside the European Union, subject to appropriate security and confidentiality measures and the necessary legal safeguards. Information about these safeguards may be obtained by emailing [email protected].

What are your rights in relation to your personal data?

You may access your personal data and request the rectification of inaccurate data. Where applicable, you may also request the erasure of data that are no longer required for the purposes for which they were collected. In certain circumstances, and for reasons relating to your particular situation, you may also request the restriction of processing, exercise your right to data portability or object to the processing of your data.

You may also withdraw your consent to receive communications from IRÍDIA and exercise these rights by sending an email to [email protected].

Should you not receive a satisfactory response and wish to lodge a complaint or obtain further information about any of these rights, you may contact the Spanish Data Protection Agency.

Applied measures and good practices

In Irídia we keep the record of data processing activities updated, as we work with data that may pose a risk to the rights and freedoms of interested parties, relating to convictions, criminal data, health data and data of minors, therefore we work to ensure at all times that the security measures are applied.