Privacy and data protection policy
I. PRIVACY AND DATA PROTECTION POLICY
Respecting the provisions of current legislation, Catamia Mission (hereinafter, also the Website) undertakes to adopt the necessary technical and organizational measures, according to the security level appropriate to the risk of the data collected.
Laws incorporated into this privacy policy
This privacy policy is adapted to current Spanish and European regulations regarding the protection of personal data on the internet. Specifically, it complies with the following standards:
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
Organic Law 3/2018 of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).
Royal Decree 1720/2007 of December 21, approving the Regulation for the development of Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).
Law 34/2002 of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).
Identity of the person responsible for processing personal data
The data controller responsible for the personal data collected at Catamia Mission is: Victoria Rebal, with NIF: Y8564007V (hereinafter, Data Controller). Contact details:
Address: C/ del Estrecho los Aguilares Único, 5, Benahavís, Málaga, CP 29679
Contact phone: +34 623 065 558
Contact email: victoria@catamia.org
Personal Data Register
In compliance with the GDPR and LOPD-GDD, we inform you that personal data collected by Catamia Mission through the forms on its pages will be incorporated and processed in our file in order to facilitate, expedite, and fulfill the commitments established between Catamia Mission and the User, maintain the relationship established in the forms filled out, or respond to a request or inquiry. Furthermore, in accordance with the GDPR and LOPD-GDD, a record of processing activities is maintained specifying, according to their purposes, the processing activities carried out and other circumstances established in the GDPR.
Principles applicable to the processing of personal data
The processing of the User’s personal data shall be subject to the following principles set forth in Article 5 of the GDPR and Article 4 et seq. of Organic Law 3/2018:
Principle of lawfulness, fairness, and transparency: User consent will be required at all times following completely transparent information about the purposes for which personal data is collected.
Principle of purpose limitation: Personal data will be collected for specified, explicit, and legitimate purposes.
Principle of data minimization: Collected personal data will be strictly limited to what is necessary in relation to the purposes for which it is processed.
Principle of accuracy: Personal data must be accurate and kept up to date.
Principle of storage limitation: Personal data will only be kept in a form that permits identification of the User for no longer than necessary for the purposes of processing.
Principle of integrity and confidentiality: Personal data will be processed in a manner that ensures appropriate security and confidentiality.
Principle of proactive accountability: The Data Controller shall be responsible for ensuring compliance with the above principles.
Categories of personal data
The categories of data processed at Catamia Mission are exclusively identifying data. Special categories of personal data within the meaning of Article 9 of the GDPR are under no circumstances processed.
Legal basis for the processing of personal data
The legal basis for the processing of personal data is consent. Catamia Mission undertakes to obtain the express and verifiable consent of the User for processing personal data for one or more specific purposes. The User has the right to withdraw consent at any time, which shall be as easy to withdraw as to give. As a general rule, withdrawal of consent will not condition the use of the Website.
Purposes of processing personal data
Personal data is collected and managed by Catamia Mission to facilitate, expedite, and fulfill commitments between the Website and the User, maintain the established relationship, respond to inquiries, or for commercial, customization, operational, and statistical activities inherent to the corporate purpose of Catamia Mission.
Personal data retention periods
Personal data will only be retained for the minimum time necessary for the purposes of processing, or until the User requests its deletion.
Recipients of personal data
The User’s personal data will be shared with the following recipients: Catamia Mission, based in Málaga, Spain.
Personal data of minors
In compliance with Article 8 of the GDPR and Article 7 of Organic Law 3/2018, only individuals over 14 years of age may lawfully grant consent for the processing of their personal data by Catamia Mission. For minors under 14, consent from parents or legal guardians is required.
Secrecy and security of personal data
Catamia Mission undertakes to adopt the necessary technical and organizational measures to ensure personal data security and prevent accidental or unlawful destruction, loss, alteration, or unauthorized access.
Rights derived from the processing of personal data
The User may exercise the following rights recognized in the GDPR and Organic Law 3/2018 against the Data Controller:
Right of access
Right to rectification
Right to erasure (“the right to be forgotten”)
Right to restriction of processing
Right to data portability
Right to object
Right not to be subject to automated decision-making (including profiling)
To exercise these rights, the User must send a written communication to the Data Controller with the reference “RGPD-https://catamia.org/“, including name, surname, copy of ID/passport, specific request, notification address, date, and signature to:
Postal address: C/ del Estrecho los Aguilares Único, 5, Benahavís, Málaga, CP 29679
Email: victoria@catamia.org
Links to third-party websites
The Website may include hyperlinks to third-party websites not operated by Catamia Mission, which have their own privacy policies.
Complaints to the supervisory authority
If the User considers there is an infringement of regulations, they have the right to file a complaint with a supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (https://www.aepd.es/).
II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY
Using the Website implies acceptance of its Privacy Policy. Catamia Mission reserves the right to modify this Privacy Policy at its own discretion or due to legislative changes. Periodic consultation of this page is recommended.
