Skip to Content

Privacy Policy


1. INFORMATION TO THE USER 

Who is responsible for processing your personal data? 

FUNDACIÓN 26 DE DICIEMBRE is the CONTROLLER of the personal data of the USER and informs you that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679, of 27 April (GDPR), and Organic Law 3/2018, of 5 December (LOPDGDD). 

What do we process your personal data for and why do we do it? 

According to the form where we have obtained your personal data, we will process it confidentially to achieve the following purposes: 

In the form Curriculum 

  • To involve the interested party in the recruitment processes and analyse the applicant's profile with the aim of selecting a candidate for the vacant position of the responsible person. (by the consent of the interested party, 6.1.a GDPR) 

In the form Ethical or whistleblowing channel 

  • To properly manage the ethical channel, processing the corresponding irregularities reported through it, and deciding on the appropriateness of initiating an investigation, in order to detect possible crimes and prevent the imposition of any type of liability, as well as to avoid any type of conduct contrary to the internal or external regulations of the entity. (for compliance with a legal obligation, 6.1.c GDPR) 

In the form E-commerce 

  • Manage your online purchase or order, process the payment and proceed with the shipping or activation thereof, based on the general terms and conditions of contracting. (for the execution of a contract or pre-contract, 6.1.b GDPR) 
  • Manage, maintain, improve or develop the services provided. (for the execution of a contract or pre-contract, 6.1.b GDPR) 
  • Conduct satisfaction and quality surveys. (for the legitimate interest of the controller, art. 6.1.f GDPR) 

In the form Volunteer registration 

  • Manage the registration for volunteering through the different programmes carried out by the organisation. (by the consent of the data subject, 6.1.a GDPR) 

In the form Membership registration 

  • Manage and process any type of information request, including those aimed at becoming a member. Keep members informed about the actions we carry out. Disclosure of activities. (for the execution of a contract or pre-contract, 6.1.b GDPR) 
  • Send advertising commercial communications by e-mail, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, that allows for commercial communications. These communications will be made by the controller and will be related to their products and services, or those of their collaborators or suppliers, with whom they have reached some promotional agreement. In this case, third parties will never have access to personal data. (by the consent of the data subject, 6.1.a GDPR) 
  • Conduct statistical analyses and market studies. (for the legitimate interest of the controller, art. 6.1.f GDPR) 

In the form Donations 

  • To manage and comply with the legal obligations arising from the donation you make (by the consent of the data subject, 6.1.a GDPR and, where applicable, the application of pre-contractual measures requested by the data subject art. 6.1.b of the GDPR). 
  • ​

In the form Contact 

  • To respond to inquiries or any type of request made by the user through any of the contact forms made available on the website of the data controller. (by the legitimate interest of the controller, art. 6.1.f GDPR) 
  • Send advertising commercial communications by e-mail, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, that allows for commercial communications. These communications will be made by the controller and will be related to their products and services, or those of their collaborators or suppliers, with whom they have reached some promotional agreement. In this case, third parties will never have access to personal data. (by the consent of the data subject, 6.1.a GDPR) 
  • Conduct statistical analyses and market studies. (for the legitimate interest of the controller, art. 6.1.f GDPR) 

In the form Solidarity Will 

  • To manage your request for information about the Solidarity Will programme, address the inquiries raised and, where applicable, carry out the necessary actions to process and follow up on your wish to collaborate with the Foundation through a legacy or solidarity inheritance. (for the fulfilment of a legal obligation, 6.1.c GDPR) 

How long will we keep your personal data? 

They will be kept for no longer than necessary to maintain the purpose of the processing or where there are legal provisions that dictate their custody and when they are no longer necessary for that purpose, they will be deleted with appropriate security measures to ensure the anonymisation of the data or the total destruction thereof. 

Who do we share your personal data with? 

No communication of personal data to third parties is planned, except if necessary for the development and execution of the purposes of the processing, to our service providers related to communications, with whom the RESPONSIBLE has signed the confidentiality and data processing contracts required by current privacy regulations. 

What are your rights? 

The rights that assist the USER are: 

  • Right to withdraw consent at any time. 
  • Right of access, rectification, portability and deletion of your data, and to limit or object to its processing. 
  • Right to lodge a complaint with the supervisory authority (www.aepd.es) if you believe that the processing does not comply with current regulations. 

Contact details to exercise your rights: 

FOUNDATION 26 DECEMBER. Calle Fray Ceferino González, 4 - 28005 MADRID (Madrid). E-mail: lopd@fundacion26d.org Contact details of the data protection officer: RAPINFORMES ON LINE, S.L., Avd. de Brasil, 17, 6º, 28020 Madrid - rapinformes@rapinformes.es 


2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER 

The USERS, by marking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or presented in download forms, expressly and freely accept that their data is necessary to address their request by the provider, with the inclusion of data in the remaining fields being voluntary. The USER guarantees that the personal data provided to the RESPONSIBLE party is true and is responsible for communicating any modifications to it. 

The RESPONSIBLE party informs that all data requested through the website is mandatory, as it is necessary for the provision of an optimal service to the USER. If all data is not provided, it cannot be guaranteed that the information and services provided will be completely tailored to their needs. 

3. SECURITY MEASURES

 In accordance with the provisions of current regulations on personal data protection, the RESPONSIBLE party is complying with all provisions of the RGPD and LOPDGDD regulations for the processing of personal data under its responsibility, and manifestly with the principles described in Article 5 of the RGPD, by which they are processed lawfully, fairly and transparently in relation to the data subject and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed. 

The RESPONSIBLE party guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by the RGPD and LOPDGDD in order to protect the rights and freedoms of USERS and has communicated the appropriate information to them so that they can exercise them. 

For more information about privacy guarantees, you can contact the RESPONSIBLE through FOUNDATION 26 DE DICIEMBRE. Calle Fray Ceferino González, 4 - 28005 MADRID (Madrid). E-mail: lopd@fundacion26d.org Contact details of the data protection officer: RAPINFORMES ON LINE, S.L., Avd. de Brasil, 17, 6th, 28020 Madrid - rapinformes@rapinformes.es




Last update:  6 July 2026.