Privacy Policy

Entity of the person in charge of the personal data processing

The person responsible for the processing of personal data is: ASOCIACIÓN FRANCESA DE EDUCACION DE BENEFICENCIA Y DE DEPORTES DE BILBAO with CIF: N0011452J (hereinafter referred to as the Data Controller). Its contact details are as follows:

Address: BARRIO GALBARRIATU, 10, ZAMUDIO (VIZCAYA)

Contact telephone: 944544013

Contact email: administration@lyceefrancaisbilbao.net

Data Protection Delegate (DPD): dpd@lyceefrancaisbilbao.net

Purposes of the processing for which the personal data are used

The personal data are collected and managed by ASOCIACIÓN FRANCESA DE EDUCACION DE BENEFICENCIA Y DE DEPORTES DE BILBAO in order to facilitate, expedite and fulfill the commitments established between the website and the user or the maintenance of the relationship established in the forms that the latter fills out or to respond to a request or inquiry.

Likewise, the data may be used for the purpose of sending newsletters, as well as informative communications and/or advertising of the FRENCH ASSOCIATION OF BENEFICIAL EDUCATION AND SPORTS OF BILBAO.

Categories of personal data

The categories of data that are processed by ASOCIACIÓN FRANCESA DE EDUCACION DE BENEFICENCIA Y DE DEPORTES DE BILBAO to manage the aforementioned processing are the contact data provided in the contact form, registration information and newsletter subscription.

We inform that the required data are essential to carry out the requested services, implying the refusal to provide them the impossibility to develop them.

The information that the User provides to ASOCIACIÓN FRANCESA DE EDUCACION DE BENEFICENCIA Y DE DEPORTES DE BILBAO through the forms must be accurate and truthful. The user guarantees the authenticity of all the data he/she communicates and will keep the information given to the FRENCH ASSOCIATION OF BENEFICIARY EDUCATION AND SPORTS OF BILBAO updated so that it corresponds, at all times, with the real situation of the User. In the event of inaccurate, incomplete or false statements communicated by the User, the User shall be solely responsible for any damages that may be caused to the FRENCH ASSOCIATION OF BENEFICIENCY EDUCATION AND SPORTS OF BILBAO or third parties as a result.

Legal basis for the processing of personal data

The legal basis for the processing of personal data is the express and explicit consent given by the user in each case, being able to withdraw it at any time.

Regarding the management of the contracting of services, payment, invoicing, the basis of legitimacy of the processing of your personal data is established in the need for such processing for the execution of the contract.

As for the processing of personal data for the sending of information related to the services provided by the firm, the basis of legitimacy will be the legitimate interest of the FRENCH ASSOCIATION OF BENEFICENT EDUCATION AND SPORTS OF BILBAO.

Periods of conservation of personal data

Personal data will only be kept for the minimum time necessary for the purposes of their processing and, in any case, until the user requests their deletion.

Notwithstanding the foregoing, this period may be extended until the statute of limitations of any liabilities arising from its relationship with the Controller.

Recipients of personal data

The user’s personal data will be shared with the following recipients or categories of recipients: Public Administrations competent in educational matters; Bank Entities for payment management purposes; the Tax Agency, Social Security, Courts and Tribunals if required by these bodies.

In case the Controller intends to transfer personal data to a third country or international organization, the user shall be informed about the third country or international organization to which the data is intended to be transferred, as well as the existence or absence of an adequacy decision of the Commission.

Personal data of minors

Respecting the provisions of Articles 8 of the RGPD and 7 of the Organic Law 3/2018 of December 5, 2018, on the Protection of Personal Data and guarantee of digital rights, only those over 14 years of age may give their consent to the processing of their personal data in a lawful manner by the FRENCH ASSOCIATION OF BENEFICIAL EDUCATION AND SPORTS OF BILBAO.

In the case of a minor under 14 years of age, the consent of the parents or guardians is required for the processing, and the processing will only be considered lawful to the extent that the parents or guardians have authorized it.

Secrecy and security of personal data

THE FRENCH ASSOCIATION OF BENEFICIAL EDUCATION AND SPORTS OF BILBAO undertakes to adopt the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected, so as to ensure the security of personal data and to prevent the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or the unauthorized communication of or access to such data.

Personal data will be treated as confidential by the Data Controller, who undertakes to inform and to ensure by means of a legal or contractual obligation that such confidentiality is respected by its employees, associates, and any person to whom it makes the information accessible.

Rights deriving from the processing of personal data

The user may exercise against the Data Controller the following rights recognized in the RGPD and in the Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights:

Right of access: this is the user’s right to obtain confirmation as to whether or not the FRENCH ASSOCIATION OF BENEFICIENCY EDUCATION AND SPORTS OF BILBAO is processing his/her personal data and, if so, to obtain information about his/her specific personal data and the processing that the FRENCH ASSOCIATION OF BENEFICIENCY EDUCATION AND SPORTS OF BILBAO has performed or will perform, as well as, among others, the information available about the origin of said data and the recipients of the communications performed or planned for said data.
Right of rectification: this is the user’s right to have personal data that is inaccurate or, taking into account the purposes of the processing, incomplete, modified.
Right of deletion: is the right of the user, unless otherwise provided for by the legislation in force, to obtain the erasure of his/her personal data when they are no longer necessary for the purposes for which they were collected or processed; the user has withdrawn his/her consent to the processing and the processing has no other lawful basis; the user objects to the processing and there is no other legitimate reason to continue the processing; the personal data have been processed unlawfully; the personal data must be deleted in compliance with a legal obligation; or the personal data have been obtained as a result of a direct offer of information society services to a minor under 14 years of age. In addition to deleting the data, the Controller, taking into account the technology available and the cost of its implementation, shall take reasonable steps to inform controllers who are processing the personal data of the data subject’s request for the deletion of any link to such personal data.
Right to limitation of processing: this is the user’s right to limit the processing of his or her personal data. The user has the right to obtain the limitation of processing when he/she contests the accuracy of his/her personal data; the processing is unlawful; the Controller no longer needs the personal data, but the user needs it to make claims; and when the User has objected to the processing.
Right to data portability: in the event that the processing is carried out by automated means, the user shall have the right to receive from the Data Controller his/her personal data in a structured, commonly used and machine-readable format, and to transmit them to another Data Controller. Whenever technically feasible, the Controller shall transmit the data directly to such other controller.
Right of opposition: this is the user’s right not to have his or her personal data processed or to stop the processing of such data by the FRENCH ASSOCIATION OF BENEFICIAL EDUCATION AND SPORTS OF BILBAO.
The right not to be subject to a decision based solely on automated processing, including profiling.

Users may exercise their rights by writing to the Data Controller at the following address and/or e-mail address:

Postal address: Barrio Galbarriatu, 10. 48170 Zamudio (Bizkaia)

E-mail: dpd@lyceefrancaisbilbao.net

Links to third party websites

The website may include hyperlinks or links that allow access to websites of third parties other than ASOCIACIÓN FRANCESA DE EDUCACION DE BENEFICENCIA Y DE DEPORTES DE BILBAO and which are therefore not operated by ASOCIACIÓN FRANCESA DE EDUCACION DE BENEFICENCIA Y DE DEPORTES DE BILBAO.

The owners of these websites will have their own data protection policies, being themselves, in each case, responsible for their own files and their own privacy practices.

Complaints to the supervisory authority

In the event that the user considers that there is a problem or infringement of the regulations in force in the way in which his personal data are being treated, he will have the right to effective judicial protection.