Privacy policy

Please carefully read our website’s Privacy Policy.

The policy will provide you with all relevant legal information and enable you to better understand why and how we are going to process your personal data. It also lays out the legal justification that protects us in each situation and informs you of the rights that you have, among other matters.

First of all it is necessary to say that “personal data” refers to any information about you, such as your given name and surnames, your address, your email address, your phone number, whether you are of legal age or whether you are interested in any of our activities in particular. We will, of course, process all the data you give us in full and strict compliance with all legal requirements that apply to us. We say this because at Fundación Bancaria Ibercaja we attach great importance to your privacy and intimacy, and we strive to protect it.

That said, this Data Protection Policy provides you with general legal information about how we will use your personal data, whether anyone else will have access to it, whether we will retain it or use it for other purposes, and the particular rights that the law gives you to protect your privacy. You should also know that in each case we will tell you which specific privacy conditions are applicable to events, activities or services that may be of interest to you.

In relation to the previous paragraph, we must also say that information regarding the use of cookies and the data we collect from your browsing on our website (what information we collect, how we will use it, and what you can do in that regard) is available in detail in our “Cookies policy”.

 

Who is responsible for the processing of your data?

The entity responsible for the processing of your personal data is “Fundación Bancaria Ibercaja” (hereinafter, “the Foundation”), with registered office in Zaragoza, Calle Joaquín Costa nº 13 (CP 50001 Zaragoza, Spain).

Phone: 976 97 19 01

Email address: privacidadgdpr@fundacionibercaja.es

 

For what purpose and on what legal basis will we use your data?

At the Foundation we will process your personal data in order to be able to respond to and handle any requests you may have. More specifically, we may process them in order to manage and respond to your queries, to help you register for any of our activities or courses, as well as to provide all the information you need about our services. We may also inform you of services offered by third-party companies whose processing is handled by the Foundation.

We will also process your personal data to register you as a user when you ask us to do so, both through our website and through any of our different digital initiatives and services.

In short, at the Foundation we will process your data in order to attend to you in a more personalised way.

Having said that, we will now tell you the legal basis that enables us to process your personal data according to the use we are going to make of them in each case.

 

Legitimate interest

We will process your personal data in order to assist you whenever you request it using the form, the contact phone numbers or the email addresses on our website. We are referring to, among other possibilities, requests for any kind of information about our courses or activities.

We will also process your personal data to help you participate in one of our volunteer programmes, when you so request.

Similarly, if you have previously participated in or taken any type of course, activity or any other type of event organised by the Foundation, we will process your data in order to send you information about other activities of a similar nature that we will organise or sponsor.

In such cases, we understand that the Foundation has a legitimate interest in using the information you provide to respond to any requests you make that we believe will not harm your privacy or your expectations of privacy.

 

Fulfilment of the contractual relationship:

We may also process your data at your request to help you register for any of our activities or courses, as well as to manage those for which you are already registered. We are referring to those data that in each case we designate as “compulsory”.

However, as we said at the beginning, when you sign up for each of our activities, we will inform you of the specific privacy conditions that are applicable.

We understand that in such cases we will process your personal data because they are needed for you to register for or take part in an activity you are interested in, or to provide you with services you have requested.

 

Compliance with a legal obligation:

There may also be times when we will need to use your personal data to comply with certain legal obligations that apply to us; in such cases, and whenever possible, we will inform you of this and of the law that requires us to do so.

This is particularly important given our status as a foundation that is subject to special monitoring and supervisory processes carried out by official bodies and authorities.

For example, if you are a volunteer of the Foundation for certain activities in which you want to participate, we may have to ask you for some specific information and documents.

 

Consent:

To process your data for purposes that are not necessary for the performance of our contract with you or that are not legally required, or in which we do not have a legitimate interest, we will need your prior consent.

For example, we will need your prior authorisation if you ask us to register you on our website or on those of any of our initiatives. This will be necessary to identify you as a user of the website to which you have registered, to help process your registration for different activities, as well as to send you information about anything you specifically ask about.

We will need your authorisation to send you information by any means about other activities or services organised or sponsored by the Foundation. We will also need your consent to send you information about products or services offered by other Grupo Ibercaja entities that we believe may be of interest to you, or to share your personal data with them.

However, when this happens we will inform you in detail about what we want to use your data for and how we want to use them. And of course we will ask for your permission, which you are free to deny or withdraw as you see fit.

 

Are we going to share your personal data with anyone?

We, Fundación Bancaria Ibercaja, are the entity legally responsible for the collection, use, conservation and erasure, where applicable, of your data. Therefore, and as a general rule, we will only use your data within the Foundation, and we will not pass them on to any third party; we will only do so when legally obliged (for example, by law enforcement authorities or the courts, or at the request of any official agency), when you have expressly authorised us to do so, or when it is in the legitimate interest of you or the Foundation.

Other than in these cases, we will not disclose the information you provide to any third party.

However, we do want you to be aware that the Foundation works with third-party service providers who may occasionally have access to your personal data. These include, among other entities, technology or IT service providers, security companies or call centre services.

In this regard, we would like to clarify that we will enter into a contract with these providers that will require them to implement proper technical and organisational measures and to process the data that they access only to fulfil our orders and instructions, and also to delete or return the data upon termination of their services.

 

How long will we keep your data?

The Foundation will keep the information you provide strictly for the time needed to manage and respond to your requests. Once we have given you an answer, we will only keep your data in order to make them available to the courts or other official authorities should any complaint arise. We will keep these data, but they will be duly blocked and available only for this purpose and during the legally prescribed statute of limitations period.

We may have a legal obligation (for example, relating to the prevention of money laundering) to retain your data for a longer period of time if you have procured any of our services. In each case, we will inform you about how long we will keep and use your personal data.

 

What rights do you have when you provide your data to us?

The law gives you a number of rights, which you should be aware of and can exercise to protect your privacy. We mainly are referring to your right to:

  • Confirm whether we at the Foundation are processing your personal data, and if this is the case: (a) access them; (b) request their rectification if you believe them to be inaccurate; or where appropriate (c) request their deletion when, among other reasons, you consider that they are no longer necessary, bearing in mind the purpose for which you gave them to us.
  • In certain circumstances you may also ask us to limit our use of your data, or even object to our continued use thereof. In this case we will stop using them, except for compelling legitimate reasons or in the exercise or defence of any claims.
  • If we use your personal information to create behavioural profiles (for example, to better understand your interests and needs through your browsing of our website), and we do so in a fully automated manner, you have the right to be informed of this, to request personal intervention by any of our agents, to challenge any decisions based on those profiles or simply to express your point of view.
  • You will also have the right to request the portability of the data you have provided to us. If you are interested , we can send them directly to you or to a third party you designate in a commonly used and machine-readable format.
  • Of course, you have the right to withdraw any specific authorisations you may have given us to use your personal data at any time.
  • Finally, you may file a complaint with the Foundation and/or with the Spanish Data Protection Agency (as the data protection supervisory authority), especially when you have exercised a right and we have not dealt with it as provided for by law.

You may exercise these rights of which we have informed you by emailing: privacidadgdpr@fundacionibercaja.es; by post: Fundación Bancaria Ibercaja (C/ Joaquín Costa 13, 50001 Zaragoza); or by phoning: 976 97 19 01.

 

Who is the foundation’s data protection officer?

At the Foundation we have appointed a person, the Data Protection Officer, to protect your privacy and intimacy. They are also charged with ensuring our compliance with all legal requirements set out in Spanish and European personal data protection regulations.

This person will be charged with providing you with all the information you need about your personal data. If you need to contact them, you can do so by emailing: privacidadgdpr@fundacionibercaja.es