Last Updated June, 2023
This Privacy Policy (hereinafter, “Privacy Policy”) tells you about El Camí de la Solidaritat and its subsidiaries’ policies and practices for the collection, use, processing, storage, transfer, and disclosure of personal data regarding users (the “Users”) who purchase the T-Shirts (“the T-Shirts”) from El Camí de la Solidaritat . If you have any questions or would like to receive more information in this regard, please write at dataprotection@elcami.eu
1. WHO IS THE DATA CONTROLLER OF YOUR DATA?
The data controller is the one who decide the purpose for which your personal data is processed, in this case, El Camí de la Solidaritat with NIF : G55771695, and registered office at C/Pau Vila 58, 43850, Cambrils (Tarragona), and contact address: dataprotection@elcami.eu , or tel: 915210955
2. WHAT DATA ARE PROCESSED BY THE CONTROLLER?
Personal data (“Data”) is any information about an identified or identifiable natural person (the “Data Subject”). The Personal Data that the Controller process comes from the information that you as an individual provide when you fill in the PURCHASE FORM, either through our own website or Indiegogo, in case you have purchased the t-shirt through this platform.
The form indicates the data that is mandatory, with an asterisk. Data that are not marked as mandatory by an asterisk are optional. Only the Data necessary for each purpose are collected. Please note that if you do not provide the mandatory information, the Controller may not be able to deal with your query or request or to manage the service. It is your responsibility to provide accurate data and keep them updated.
We collect personal information that you provide to us, either through our own website, through Indiegogo or other means, such as your name, mailing address, phone number, email address, credit card number and financial information. In the case of an invoice request, we will also process your ID-related data necessary for the issuance of the invoice.
3. FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?
The Controller will process your Data for the following purposes:
A. PURCHASE OF T-SHIRTS. When you purchase the T-Shirts, the Controller may use your Data to manage the purchase, to process the payment, to send you notifications about the same, as well as to comply with the applicable legal obligations. The Controller will also process your Data to contact you in relation to the purchase and/or payment of the T-Shirts.
B. MARKETING. In case you wish to receive marketing communications of El Camí de la Solidaritat and you give your consent by filling the corresponding forms. El Camí de la Solidaritat will process your Data for the purpose of managing the delivery of such marketing communications.
We provide you the opportunity to opt-out of having your Personal Information used for certain purposes. For example, if you purchase the T-Shirts but do not wish to receive any additional marketing material from us, you can indicate your preference on our order form. If you no longer wish to receive our newsletters and promotional communications, you may opt-out of receiving them by following the instructions included in each newsletter or communication or by emailing us at dataprotection@elcami.eu .
4. WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?
The legal basis for the processing of your Data for the purchase and/or payment of the T-Shirts. is the execution of the contract and the fulfillment of legal obligations (such as, for example, tax reporting). However, any additional information you provide which is not strictly necessary for the execution of the contract and is not marked with an asterisk will be processed on the basis of your consent and you may withdraw your consent at any time.
The legal basis for sending commercial communications in case you consent it, is the consent you have given by registering on the corresponding forms.
Remember that you can withdraw your consent at any time. You may also object to receiving commercial communications in the manner indicated in the footer of each communication.
5. HOW LONG WILL BE YOUR DATA KEPT?
Your Data will be kept for the period of time necessary for the purpose for which they were collected, and specifically:
a. In relation to the purchase and/or payment of the T-Shirts, your Data will be kept for the time necessary to provide you the T-Shorts, and thereafter will be kept blocked for the legally prescribed retention periods.
b. In relation to the marketing communications, the Data will be processed until you withdraw your consent or object to the processing.
Once the Data are no longer necessary for the purpose for which they are processed, they will remain blocked for the sole purpose of meeting any liability or obligations that may arise from the processing thereof.
6. WHO ARE THE DATA RECIPIENTS?
Your Data may be communicated to service providers that assist the Controller in carrying out its business, for example, IT tools, technical support services, payment providers, financial services, etc. It may also be communicated to partners involved in the supply chain of the T-Shirts, and/or the provision of other services, some of which might be located outside the European Economic Area (“EEA”).
When your Data may leave the EEA, they will maintain the same level of protection based on compliance with the provisions of European data protection law. In this regard, international data transfers will be made (i) to countries with an adequate level of protection declared by the European Commission (ii) on the basis of the provision of adequate safeguards (standard contractual clauses) or (iii) by virtue of authorisation by the competent supervisory authority or under other conditions provided for in the regulations.
To receive more information about international data transfers or to obtain confirmation or a copy of the safeguards used, you may contact at dataprotection@elcami.eu.
In cases where it is necessary to comply with El Camí de la Solidaritat’s legal obligations, the Data may be communicated to the Public Administration and the State Security Forces and Corps.
7. SECURITY MEASURES
The Controller is committed to keep your personal data secure, taking all reasonable measures to do so. The Controller will implement all necessary organizational and technical measures in accordance with the regulations in force against any unauthorized access and modification, disclosure, loss or destruction. We demand and legally bind our service providers who may handle your personal data to do the same.
8. WHAT ARE YOUR PRIVACY RIGHTS?
As the owner of your Data, you may request confirmation from the Controller regarding whether your Data is being processed and, if so, access to it. You can also request the rectification of inaccurate Data or, where appropriate, request its deletion when, among other reasons, the Data is no longer necessary for the purposes for which it was collected.
In certain circumstances, you may request the limitation of the processing of your Data, in which case the Controller will only retain them for the purpose of legal proceedings or the defense of claims.
You may withdraw your consent at any time, but please note that your data may be kept blocked for the prescription periods established by the applicable regulations.
You may also oppose the processing of your data, in which case we will not process your data, except for compelling legitimate reasons or for processing possible complaints.
To exercise your privacy rights, please contact us to the address dataprotection@elcami.eu. To help us process your request, please indicate “Data Protection” in the subject line and provide any information that will allow us to verify your identity. In certain situations where we cannot properly verify your identity with the information provided, we may ask you to provide us with a copy of your ID card, passport or similar documentation to assist us for this purpose (please, note that we will only need access to the minimum information necessary to identify you on your documentation, so you can anonymise/hide the rest of the information).
Likewise, if you have any questions regarding the exercise of your privacy rights you can contact us through the email address mentioned above. However, we remind you that you also have the right to lodge a complaint to the competent Data Protection Authority (in Spain, www.aepd.es) in the event that you become aware of or consider that an event may involve a breach of the applicable data protection regulations.