Privacy policy – Fundación ChusupTsang

Privacy policy of www.fundacionchusuptsang.org

This application collects some personal data from its users.

Data controller and data processor

Chu Sup Tsang Foundation
Aldea de Ventoselo de Beariz s/n
32455 San Amaro, Ourense, Spain

Chu Sup Tsang Foundation contact e-mail: secretaria@fundacionchusuptsang.org

Types of data collected

The types of personal data collected by this application, either directly or through third parties, include: email address; usage data; trackers; password.

Full information concerning each category of personal data collected is provided in the sections of this privacy policy dedicated to that purpose or through specific explanatory texts displayed prior to the collection of such data.
Personal data may be freely provided by the user or, in the case of usage data, will be collected automatically when using this application.
Unless otherwise indicated, all data requested by this application are mandatory and refusal to provide them may make it impossible for this application to proceed with the provision of its services. In cases where this application specifically indicates that certain data are not mandatory, users are free not to provide such data without this having any consequence on the availability or operation of the service.
Users who have doubts about which data are mandatory can contact the Chu Sup Tsang Foundation.
The use of Cookies – or other tracking tools – by this application or by the owners of third party services used by this application is for the purpose of providing the Service requested by the user, in addition to any other purposes described in this document and in the Cookies Policy.

The user assumes responsibility for the personal data of third parties obtained, published or shared through this application.

How and where the collected data are processed

Treatment modalities

The Chu Sup Tsang Foundation will process users’ data in an appropriate manner and will take appropriate security measures to prevent unauthorised access, disclosure, alteration or destruction of the data.
Data processing will be carried out by means of computers and/or IT tools, following organisational procedures and modalities strictly related to the stated purposes. In addition to the Chu Sup Tsang Foundation, in some cases, data may be accessed by certain categories of authorised persons related to the operation of this application (administration, sales, marketing, legal department and systems administration) or external contractors providing services to the Chu Sup Tsang Foundation (such as external technical service providers, courier companies, hosting companies, IT companies, communication agencies) who will be appointed by the Chu Sup Tsang Foundation as ‘data processors’, if necessary. An updated list of such persons may be requested from the Chu Sup Tsang Foundation at any time.

Place

The data is processed at the offices of the Chu Sup Tsang Foundation, as well as at any other location where the parties involved in the processing are located.
Depending on the location of users, data transfers may involve the transfer of users’ data to a country other than their own. For more information on the place of processing of such transferred data, users may refer to the section containing details on the processing of personal data.

Conservation period

Unless otherwise stated herein, personal data will be processed and retained for the time necessary and for the purpose for which they were collected and may be retained for a longer period due to a relevant legal obligation or on the basis of users’ consent.

Purpose of the processing of the data collected

Data relating to the user is collected to enable the Chu Sup Tsang Foundation to provide its service, fulfil its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its users or third parties), detect any malicious or fraudulent activity, as well as for the following purposes: Contacting the user, viewing content from external platforms and registration and authentication provided directly by this application.

Users can find specific information on the personal data used for each purpose in the section ‘Detailed information on the processing of personal data’.

Detailed information on the processing of personal data:

Personal data is collected for the following purposes and using the following services:

Contact form:

By filling in the contact form with your details, you authorise this application to use these details to respond to requests for information, quotations or any other type of request indicated in the form header.

Personal data processed: usage data; e-mail address.

Display content from external platforms

This type of service allows you to view content hosted on external platforms directly from the pages of this application and interact with it. Such services are often called widgets, which are small elements placed on a web page or application. They provide specific information or perform a specific function and often allow interaction with users.
Such services may collect web traffic data for the pages on which they are installed even if the user does not use them.

Google Fonts (Google LLC)

Google Fonts is a font family display service provided by Google LLC that allows this application to incorporate such content into its pages.

Personal data processed: usage data; trackers.

Registration and authentication provided directly by this application

By registering or authenticating, the user allows this application to identify him/her and give him/her access to dedicated services. Personal data is collected and stored for registration or identification purposes only. Only data necessary for the provision of the service requested by users are collected.

Direct registration

The user registers by filling in the registration form and providing his or her personal data directly to this application.

Personal data processed: usage data; e-mail address; password; trackers.

Cookie Policy

This application uses trackers. For more information, users can consult the Cookie Policy.

More information for users

Legal basis for processing

The Chu Sup Tsang Foundation may process the user’s personal data if one of the following conditions is met:

Where users have given their consent for one or more specific purposes.
When the collection of data is necessary for the performance of a contract with the user and/or any other pre-contractual obligation of the user;
When the processing is necessary for compliance with a legal obligation that the user must comply with;
Where the processing is related to a task performed in the public interest or in the exercise of official powers vested in the Chu Sup Tsang Foundation;
Where the processing is necessary for the purposes of a legitimate interest pursued by the Chu Sup Tsang Foundation or a third party.

In any case, the Chu Sup Tsang Foundation is at your disposal to define the specific legal bases that apply to the processing and in particular, whether the collection of personal data is a contractual or statutory requirement or a necessary requirement to enter into a contract.

More information on retention time

Therefore:

Personal data collected for the conclusion of a contract between the Chu Sup Tsang Foundation and the user shall be retained as such until the contract has been fully concluded.
Personal data collected in the legitimate interest of the Chu Sup Tsang Foundation shall be retained for as long as necessary to fulfil that purpose. Users can find specific information relating to the legitimate interest of the Chu Sup Tsang Foundation by consulting the relevant sections of this document or by contacting the Chu Sup Tsang Foundation.

The Chu Sup Tsang Foundation may retain personal data for an additional period where the user consents to such processing, provided that such consent remains valid. In addition, the Chu Sup Tsang Foundation may be obliged to retain personal data for a further period if this is necessary in order to comply with a legal obligation or an order from an authority.

Once the retention period has expired, the personal data must be deleted. Therefore, the rights of access, deletion, rectification and data portability cannot be exercised after the expiry of the retention period.

User rights based on the General Data Protection Regulation (GDPR)

Users may exercise certain rights in relation to their data processed by the Chu Sup Tsang Foundation.

In particular, users have the right to do the following, to the extent permitted by law:

Withdraw your consent at any time. Users have the right to withdraw their consent to the processing of their personal data if they have previously given it.
Objection to the processing of your data. Users have the right to object to the processing of their data if such processing is carried out on a legal basis other than consent.
Access to your Data. Users have the right to know whether their data are processed by the Chu Sup Tsang Foundation, to obtain information on certain aspects of the processing, as well as to obtain a copy of the processed data.
Verify and request rectification. Users have the right to verify the accuracy of their data and to request that it be updated or corrected.
Limit the processing of your data. Users have the right to limit the processing of their data. In this case, the Chu Sup Tsang Foundation will only process your data for the purpose of storage.
Delete or remove personal data. Users have the right to obtain the deletion of their data by the Chu Sup Tsang Foundation.
Receive your data and transfer it to another data controller. Users have the right to receive their data in a structured, commonly used and machine-readable format and, if technically possible, to have it transmitted to another controller without hindrance.
File a complaint. Users have the right to lodge a complaint with the competent personal data protection authority.

Users shall also have the right to know the legal basis for transfers of data abroad, including to any international organisation governed by public international law or consisting of two or more countries, such as the UN, and to know the security measures taken by the Chu Sup Tsang Foundation to safeguard their data.

Information on the right to object to processing

Where the processing of personal data is carried out in the public interest, in the exercise of public powers vested in the Chu Sup Tsang Foundation or on the grounds of a legitimate interest pursued by the Chu Sup Tsang Foundation, users may object to such processing by providing a reason related to their particular situation to justify their objection.

Users should be aware, however, that in the event that their personal data are processed for direct marketing purposes, they may object to such processing at any time, free of charge and without justification. As soon as the user objects to the processing for direct marketing purposes, the personal data may no longer be processed for such purposes. To find out whether users’ personal data is being processed by the Chu Sup Tsang Foundation for direct marketing purposes, users should refer to the relevant sections of this document.

How to exercise these rights

Any request to exercise the user’s rights may be addressed to the owner via the contact details provided in this document. Such requests are free of charge and the Chu Sup Tsang Foundation will respond to them as soon as possible and always within one month, providing users with the information required by law. The Chu Sup Tsang Foundation shall communicate any rectification or deletion of personal data or restriction of processing to each recipient, if any, to whom the personal data has been communicated, unless this is impossible or would require a disproportionate effort. Upon request, the Chu Sup Tsang Foundation will inform users about such recipients.
Translated with DeepL.com (free version)

Additional information on data collection and processing

Legal defence

The user’s personal data may be used for the legal defence of the Chu Sup Tsang Foundation in court or in the judicial phases prior to a possible lawsuit arising from the inappropriate use of this application or related services.
The user declares to be aware that the Chu Sup Tsang Foundation may be required by public authorities to disclose personal data.

Additional information about the user’s personal data

In addition to the information contained in this privacy policy, this application may provide the user with additional and contextual information relating to specific services or to the collection and processing of personal data.

System log and maintenance

For operation and maintenance purposes, this application and any other services provided by third parties that are used may collect a system log, i.e. files that record interaction with this application and that may contain personal data, such as the user’s IP address.

Information not contained in this privacy policy

Additional information about the collection and processing of personal data may be requested from the Chu Sup Tsang Foundation at any time. Contact information is indicated at the beginning of this document.

Modification of this privacy policy

The Chu Sup Tsang Foundation reserves the right to modify this privacy policy at any time by notifying users through this page and, if possible, through this application and/or if technically and legally possible by notifying users directly, if the Chu Sup Tsang Foundation has the necessary contact information for this purpose. It is strongly recommended that you check this page frequently, taking as a reference the date of the last update indicated at the bottom of the page.

In the event that the changes affect the processing activities carried out on the basis of the user’s consent, the Chu Sup Tsang Foundation shall, if necessary, obtain the user’s new consent.