In this privacy policy (the “Policy”), you can find information about how the Agbar Foundation collects, processes and shares personal data and about how you can exercise the rights conferred on you in relation to the protection of personal data by relevant law.
Who is the data controller for personal data that you provide?
The data controller for your personal data is the Agbar Foundation (the “Agbar Foundation“) with UTR G-58120353 and whose registered office is at carretera de Sant Joan Despí, 1, 08940 Cornellà de Llobregat.
If you have any query about the processing of your personal data, you can contact the Agbar Foundation’s data protection officer in the following ways: email to dpofundacioagbar@agbar.es or by post to the address set out above.
Merely visiting the website does not entail the collection of users’ personal data without prejudice to the terms of the cookies policy. However, if you fill in the subscription form for the newsletter of the Agbar Foundation or the Agbar Museum with your personal data, your personal data will be collected and processed as set out in the Policy.
What is the purpose of the processing of your personal data? How long will processing go on?
The Agbar Foundation processes personal data provided when filling in the form to collect information for subscription to the newsletter of the Agbar Foundation or the Agbar Museum for the following purposes:
- To send to users of the website who so request a periodic newsletter that contains commercial information and publicity concerning the activities and events organised by the Agbar Foundation and the Agbar Museum. The newsletter may also contain information about activities related to the fields of education, cultural, society and the environment and other activities or participatory processes that they carry out, alone or with third parties, and information about activities organised by third parties directly related to the activities of the Agbar Foundation.
We use third-party monitoring technology to send the newsletter by email through the relevant provider of such services that inform us about us about when it is opened and whether the links that it contains are clicked on. The Agbar Foundation ensures that those providers comply with the law relating to the protection of personal data. We use that information to measure the effectiveness of campaigns. - To analyse statistics or aggregated data by the post codes given at registration which helps us to improve our business.
Your personal data are processed from the time at which you give your consent for us to do so and for so long as you do not withdraw your consent. At the end of that period, the Agbar Foundation will retain your personal data blocked during the period when any liability could arise relation to the processing of your personal data or to any purpose. When those liabilities can no longer arise, your personal data will be irrecoverably deleted.
You can of course request at any time that we cease to process your personal data for any or all of the stated purposes without prejudice to the legitimacy of processing up to the point of withdrawal of consent. In order to so, just send a request to the email address fundacioagbar@agbar.es and attach to the request a copy of your national identity document or an equivalent identity document and the minimum content required by relevant law.
What personal data do we collect and process?
Contact information: name, surnames, email address and post code (in order to analyse statistics and aggregated data to help us to improve our business).
What is the legal basis for the processing of your personal data?
The legal basis for sending the periodic newsletter of the Agbar Foundation or the Agbar Museum to which you have chosen to subscribe is your consent.
The legal basis for the analysis of statistics or aggregated data, specifically the post code stated in the subscription form, that help us to improve our services is our legitimate interest.
What security measures have been implemented to protect your personal data?
The Agba Foundation processes your personal data in an absolutely confidential manner. Consequently, it has adopted technical and organisational measures that are sufficient to ensure the security of personal data and to prevent their destruction, loss, unauthorised access and unauthorised alteration. In determining those measures, account has been taken of matters such as the scope, the context and the purpose of processing, the state of the technology and the risks that exist.
Are there other entities that may have access to your personal data to assist the Agbar Foundation with some of its tasks?
The Agbar Foundation has a number of providers that help to carry out different tasks related to the processing of personal data, such as storage and IT systems support. The Agbar Foundation ensures that all such entities are in compliance with the law relating to the protection of personal data which applies to them in their capacity as data processors.
The Agbar Foundation has contracted for the provision of certain services with the Microsoft Corporation which is based in the United States of America (USA). Any international transfer of personal data to the USA will be lawful because adequate steps have been taken to protect personal data through adopting contractual provisions of the type adopted by decision of the European Commission and corresponding adaptations to the specific service, without prejudice to the eventual adoption of additional measures proposed by the European Data Protection Committee in accordance with the principle of proactive responsibility.
Does the Agbar Foundation disclose your personal data to third parties who use it for their own purposes?
Only when you have provided your consent by checking the appropriate box will the Agbar Foundation disclose your personal data to Sociedad General de Aguas de Barcelona, SA (the Barcelona General Water Company) (“SGAB”), and to the Empresa Metropolitana de Gestió del Cicle Integral de l’Aigua, SA (the Metropolitan Water Cycle Management Company) (“Barcelona Water”) to send commercial communications and publicity by electronic means about activities and participatory processes they may carry out themselves alone or together with third parties and information about activities organised by third parties directly related to the business of SGAB and the water cycle management service provided by Barcelona Water.
Your personal data will be disclosed to third parties if required to comply with any legal obligations that may arise.
What rights do you have?
You have the following rights in relation to the protection of your personal data:
|
Right |
What is it? |
|
Right of access |
To be told which of your personal data we hold. |
|
Right of rectification |
To rectify any of your personal data that we hold that are inaccurate or incomplete. |
|
Right of objection |
To request that we do not process your personal data for certain specific purposes (for example, for the sending of commercial communications). |
|
Right of erasure |
To request us to delete your personal data. |
|
Right of restriction of processing |
To request us to restrict the processing of your personal data. |
|
Right to data portability |
To request that we provide to you in computer-readable format the information that we hold about you or deliver or transfer that information to another data controller in a computer-readable format. |
|
Right to make a complaint to the competent authority |
To make a complaint to the competent authority for the safeguarding of your rights, through the website www.aepd. |
Those rights may be exercised by application to the Agbar Foundation either by email to the email address fundacioagbar@agbar.es, or by post to the address carretera de Sant Joan Despí, 1, 08940 Cornellà de Llobregat under subject “Data Protection”. Your request should contain a copy of your National Identity Document or an equivalent identity document and the minimum information required by relevant law. If your request does not meet the stated requirements, the Agbar Foundation may ask you to amend it. The exercise of those rights is free, but a fee may be charged when requests are baseless, excessive or repetitive.
Revisions to the privacy policy
This privacy policy may be revised every so often without prior notice to take account of legal, technical and business changes. You can see the date on which this privacy policy was last revised at the head of this page.
When we revise the privacy policy we will take appropriate steps to publicise the changes in function of their significance. However, if the changes are sufficiently significant to require your consent, we will request that consent prior to any further processing.
