DATA PROTECTION POLICY

Object

In accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regards to the processing of personal data (GDPR), this policy is intended to supply you with the information provided for in Articles 13 and 14 of that Regulation, as well as any other information deemed necessary about how we collect and how we use your personal data.

Who is responsible for processing your data?

The party responsible for processing your personal data is the Federació de Curses d’Orientació de Catalunya (FCOC), a non-profit organisation that brings together and coordinates people and sport organisations dedicated to the practice and promotion of orienteering, with:

VAT Number: G-59428805
Contacte e-mail: protecciodades@orientacio.cat
Adress: Rambla Guipúscoa, 23-25, 4C, 08018 Barcelona
Telephone: 93 303 30 29

The representative of the party responsible for processing your data is the president of the FCOC.

As a public entity, the FCOC has appointed a Data Protection Officer (DPO). Their contact details are:

E-mail: protecciodades@icgc.cat
Adress: Rambla Guipúscoa, 23-25, 4C, 08018 Barcelona

For what purpose do we process your personal data?

We process your personal data for the following purposes:

Processing of federation licenses for both sports clubs and athletes
Organization of sports competitions for clubs and federated athletes
Supplier administrative management
Human resources management of our employees, volunteers and candidates.
Management of training activities
Information and promotion of sport
Management of the information and contents of our website orientacio.cat and our social networks.
Image capture to ensure the safety of people and property.

Legitimation for the treatment of data

The treatment is carried out in accordance with a contractual relationship, a legal obligation for the responsible party, and the consent of the interested party.

How do we collect your personal data and what is it?

Information you provie us through web forms

Some of the web forms through which we collect your personal data are:

Contact mailboxes.
Registration for events organized by the FCOC.
Orders from the e-store.
Request for public information (transparency).
User registration, for downloading information or using certain services. In these cases, at the time of data collection, basic information on data protection is shown, especially on its purpose.

In these cases, at the time of data collection, basic information on data protection is shown, especially on its purpose.

In general, the personal data you provide us through these forms are:

E-mail adress
Name and surname
Postal adress
Username and password to access our web applications and services

Information you provide us via email, telephone, social networks and other communication channels

In these cases, the information we collect is what you proactively and voluntarily provide us, and we only use it to manage your queries, requests, suggestions, complaints, etc. Part of this data may reside on third-party servers (Twitter, Facebook, etc.).

Information we collect from your visits to our websites

Simply by browsing our websites, we collect limited user information and anonymous global statistics.

We use this information to improve access to content and services we offer you, and to monitor its performance.

We obtain this information through cookies stored in your browsers and logs stored on our web servers.

For more information, see the cookies policy.

Information we collect when you authenticate

Some of our web services and applications allow personalized use. For this purpose, it is necessary that you identify yourself with a username and password, data that can be saved in cookie format in your browser so that you can enjoy this personalization or so that you do not have to authenticate at each access.

For more information, see the cookies policy.

Data of minors

Although the contents of our websites and applications may be used by minors, in no case do we require their personal data.

If you are a minor, please do not try to register as a user of our websites or applications. If a minor provides data, their parents or guardians will be solely responsible for this situation. If we discover that we have obtained personal information from a minor, without the consent of the legal guardians, we will delete that information as soon as possible.

How long will we keep your data?

We only store your personal information to the extent that we need it, in order to be able to use it according to the purpose for which it was collected, and according to the legal basis of its treatment, in accordance with applicable law.

We will keep your personal information for as long as you are registered as a user of our services, as long as there is a contractual or commercial relationship, or as long as you do not exercise your right to delete or limit the processing of your data (see the section on your rights for more information). In these cases, we will keep the information duly blocked, without making any use of it, for as long as it may be necessary for the exercise or defense of claims or any type of judicial, legal or contractual responsibility that may arise from the processing of your data, which must be attended to, and for which it may be necessary to recover it.

We may also retain your personal data for a reasonable additional time to facilitate the response to queries, requests or complaints that you may subsequently address to us.

To determine the retention periods of personal data, we take into account:

the amount of data,
the nature of the data,
the sensitivity of the data,
the potential risk of damage from unauthorized use or disclosure of your data,
the purposes for which we process your data and whether we can achieve these purposes through other mechanisms, and the applicable legal requirements.

On some occasions, we anonymize your personal data (so that it cannot be associated with you) for statistical purposes. In these cases, we store this (anonymous) information indefinitely, without notifying you.

Who can we communicate your data to?

Most of the data we collect resides on our servers, but in some cases it is necessary to communicate the information you have provided to us to third parties, in order to provide you with the requested service; For example, the delivery of material in the event that we have to send it to you by courier.

There are also companies that provide us with other types of services, for example, in the information technology environment. These third parties only have access to the personal information they need to carry out their services. They are required to maintain confidentiality with respect to your data and may not use it in any way other than as we have requested.

In all cases, we assume responsibility for the personal information you provide to us and ask those companies with whom we share your data to apply the same degree of protection as we do.

Likewise, your personal information will be available to public administrations, judges and courts, for the attention of possible responsibilities arising from the processing.

The data will not be communicated to other categories of recipients, except in the cases provided for by law or when you have previously consented to it.

Social Networks

The FCOC informs users that it has proceeded to create a profile on social networks (Facebook, Twitter, Instagram and YouTube), with the main purpose of advertising its products and services.

The user can access at any time the privacy policies of the same social network, as well as configure their profile to guarantee their privacy.

The FCOC has access to and processes the user’s public information, especially their contact name. This data will only be used within the same social network. They are not incorporated into any processing system.

In accordance with the rights conferred by current regulations on data protection, you may exercise your rights of access, rectification, deletion and opposition, exercising them before the FCOC, directing your request through email protecciodades@orientacio.cat, in accordance with the GDPR, must have the following nuances:

Access: it will be defined by the functionality of the social network and the ability to access the information of the user profiles.
Rectification: it can only be satisfied in relation to information that is under the control of the FCOC. For example, delete comments posted on the same page.

Normally, this right must be exercised before the social network.

Deletion or Opposition: as in the previous case, it can only be satisfied in relation to information that is under the control of the FCOC. For example, stop being attached to the profile.

The FCOC will carry out the following actions:

Access to public profile information.
Publication in the user’s profile of all information and content exclusively related to the activities of the FCOC.
Send personal and individual messages through the channels of the social network.
Actions of the state of the page that were published in the user’s profile.

The user can always control their connections, delete content that no longer interests them and restrict who shares their connections with, so they must access their privacy settings.

Publications

The user, once joined to the FCOC page, may publish comments, links, images or photographs or any other type of multimedia content supported by the social network. The user, in all cases, must be the owner of the same, enjoy the copyright and intellectual property rights or have the consent of the third parties affected. Any publication on the page, whether texts, graphics, photographs, videos, etc. that attempt or are likely to violate morality, ethics, good taste or decorum, or that infringe or violate intellectual or industrial property rights, the right to image or the law, is expressly prohibited. In these cases, the FCOC reserves the right to immediately remove the content, and may request that the user be permanently blocked.

The FCOC shall not be liable for the content freely posted by a user.

The user must bear in mind that their publications will be known by other users, so users themselves are primarily responsible for their own privacy.

The images that can be published on the page will not be stored in any file by the FCOC, but they will remain on the social network.

Contests and promotions

The FCOC reserves the right to hold contests and promotions in which users linked to its page may participate. The bases of each of the contests and promotions, when the platform of the social network is used for this, will be published on it, always complying with the LSSI-CE law, and any other applicable norms.

The social network does not sponsor, endorse or administer, in any way, our promotions, nor is it associated with any of them.

Advertising

The FCOC will use the social network to advertise its products and services, in any case, if FCOC decides to process your contact data to carry out direct commercial prospecting actions, it will always be in compliance with the legal requirements of current data protection regulations and the LSSI-CE.

Recommending the FCOC website to other users so that they too can enjoy the promotions or be informed of its activity will not be considered advertising.

Below we detail the link to the privacy policy of the social network(s):

Facebook: https://www.facebook.com/help/323540651073243/
Twitter: https://twitter.com/privacy
Instagram: https://instagram.com/about/legal/privacy#
YouTube: https://www.youtube.com/yt/policyandsafety/en/

How do we protect your data?

Whenever they are under our control, we will do our best to ensure that your personal data is processed in a manner that guarantees the security necessary to prevent unauthorized or illegal use, accidental loss, destruction or damage thereto.

To this end, we use appropriate technical and organizational measures that, in turn, are periodically reviewed. We protect your personal information through the use of a combination of security controls both physical and logical, including access controls that restrict and manage how your personal data is processed, administered and managed. We also ensure that our employees are properly trained to protect your personal information.

We have established procedures to manage any suspicious incident related to personal data that may occur, which would be notified to you, as well as any regulation applicable to the incident that we are legally obliged to comply with.

What are your data protection rights and how can they be exercised?

Withdrawal of consent: Where we are using your personal information on the basis of your consent, you have the right to withdraw it at any time.
Right to be informed: You have the right to be informed about the use of your personal information. This policy, and the summarized legal texts that we use in our communications and forms, are intended to be a clear and transparent description in this regard.
Right of access: You can ask us (in writing) what information we hold about you and/or ask us for a copy.
Right to erasure: As of 25 May 2018, you can exercise your “right to be forgotten”, that is, to delete data that can personally identify you. There may be occasions when we are unable to comply with this request for legal reasons, which would be notified to you. In some cases, we will suggest unsubscribing from future communications, rather than deleting the data.
Right of rectification: If your data is incorrect in our databases, you have the right to ask us to update it.
Right to limitation of processing: In certain situations, you have the right to ask us for a limitation on how we process your data, if you do not agree with its accuracy or fair use. This entails the marking of the personal data kept, in order to limit its future processing.
Right to data portability: Where we are using your personal information with your consent, the law allows you to ask us for the portability of your data to another service provider. In this case, we will provide you (or the third party you have indicated to us) your personal data in a structured, commonly used and legible format, provided that it is technically feasible.
Right of opposition and automated individual decisions: You may, provided that none of the exceptions provided for in the Regulations exist, object to your data being processed. This opposition can be presented at any time, and may be based on reasons related to your particular situation. In this case, we will stop processing your personal data.

Some of these rights can be exercised directly through the web forms enabled for this purpose and also through the corresponding link in the informative emails we send you (if applicable).

In addition, you can request the exercise of any of these rights by sending an email to protecciodades@orientacio.cat.