Privacy policy

This is a courtesy translation; the legally binding version is the Spanish one.

Below, we set out the Privacy Policy that applies whenever the data subject provides us with their personal data while browsing the website https://tierradeamani.org/ (the "Website"). This Privacy Policy explains how the personal data you provide will be used, including the data we collect simply through your browsing of our Website.

Identification of the Controller

Holder: Tierra de Amani, a non-profit association ("Tierra de Amani" or the "Controller");

Registered office: Urb. Doña Pilar n.º 27 (new no. 8), 29650 – Mijas (Málaga), Spain;

Tax ID No. (NIF): G-92625920;

Public Register: Registered with the Register of Associations of the Ministry of the Interior in Málaga, Section One, entry no. 6821;

Email: hola@tierradeamani.org.

Information and Consent

In accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights ("LOPDGDD"), by accepting this Privacy Policy the website user (the "Data Subject") GIVES their informed, express, free and unambiguous CONSENT to the processing of the personal data collected through the Website, whether through the forms provided for that purpose or through the information collected by cookies.

The Data Subject also consents to this data being processed by the Controller in order to provide its services, applying the organisational and security measures required by the GDPR.

All personal data requested from the Data Subject on the Website is mandatory; the service cannot be provided without the corresponding processing of data by the Controller. Browsing the Website is, nonetheless, free of charge.

The Data Subject warrants that the personal data provided to the Controller is true and accurate. Tierra de Amani will not be liable for any incident arising from the inaccuracy or falseness of the information provided by Data Subjects, without prejudice to the Data Subject's right to rectification.

Where the Data Subject provides us with the data of third parties, they will, as controller or processor, be responsible for complying with all applicable data protection legislation. The Data Subject further warrants that they have obtained all legally required consents, authorisations and/or approvals before including third-party personal data on the Website.

Source, Purpose and Legal Basis

The personal data of the Data Subject, or of third parties disclosed by the Data Subject, will be treated confidentially and incorporated into the Controller's relevant processing activity.

The processing activities carried out by the Controller are as follows:

Activity: Contact by the Data Subject via email

Source. From the Data Subject themselves, by email to the address available on the Tierra de Amani Website.

Legal basis. GDPR, in particular Art. 6(1)(b): performance of a contract and/or implementation of pre-contractual measures at the Data Subject's request.

Purposes of processing. To handle and respond to the queries submitted by the Data Subject.

Data subjects concerned. Natural or legal persons.

Categories of data. Email address; any other personal data the Data Subject voluntarily provides in their query.

Recipients. No disclosure to third parties is envisaged, except where legally required.

International transfers. No international transfer of data is envisaged.

Retention periods. Data will be kept for the period strictly necessary to fulfil the purpose for which it was collected, unless the Controller must retain it to comply with a legal obligation or to defend itself against a possible claim.

Activity: Contact by the Data Subject via social media

Source. From the Data Subject themselves, by contacting Tierra de Amani through its profile on a social network (e.g. Instagram).

Legal basis. GDPR, in particular Art. 6(1)(b): performance of a contract and/or implementation of pre-contractual measures at the Data Subject's request.

Purposes of processing. To handle and respond to the queries submitted by the Data Subject.

Data subjects concerned. Natural or legal persons.

Categories of data. Username on the relevant social network; any other personal data the Data Subject voluntarily provides in their query.

Recipients. No disclosure to third parties is envisaged, except where legally required.

International transfers. No international transfer of data is envisaged.

Activity: Child sponsorship request submitted through the Website

Source. From the Data Subject themselves, through the form provided on the Website.

Legal basis. GDPR, in particular Art. 6(1)(b): implementation of pre-contractual measures at the Data Subject's request and performance of the collaboration relationship with Tierra de Amani.

Purposes of processing. To manage the sponsorship request made by the Data Subject; to contact them in order to send the corresponding SEPA mandate; to process and manage their recurring financial contribution to the Tierra de Amani association; to handle queries related to that contribution; to maintain the communications needed for its administrative management; and, where applicable, to issue the corresponding tax certificates.

Data subjects concerned. Natural persons and representatives of legal persons.

Categories of data. Identification and contact data: full name or company name, NIF/DNI (tax/national ID), postal address, postcode, city, province and email address. Data relating to the financial contribution: amount of the contribution and chosen frequency. Banking data contained in the SEPA mandate subsequently submitted by the Data Subject, including, where applicable, account holder and IBAN.

Recipients. No disclosure of data to third parties is envisaged, except where legally required or where necessary to manage payments and the collaboration relationship with Tierra de Amani, including banks and providers acting as processors.

International transfers. No international transfer of data is envisaged.

Retention periods. Data will be kept for as long as the collaboration relationship with Tierra de Amani is maintained and, thereafter, for the periods necessary to address potential legal and tax liabilities. Once those periods have elapsed, the data will be deleted or, where applicable, duly blocked in accordance with applicable legislation.

Activity: Management of one-off donations

Source. From the Data Subject themselves, by making a donation via bank transfer, Bizum or other payment methods enabled by Tierra de Amani.

Legal basis. GDPR, in particular Art. 6(1)(b): implementation of pre-contractual measures and management of the relationship arising from the one-off donation made by the Data Subject.

Purposes of processing. To manage the receipt of one-off donations; to carry out the resulting administrative, accounting and tax actions; to handle queries related to the donation; and, where applicable, to issue the corresponding tax certificates.

Data subjects concerned. Natural persons and representatives of legal persons.

Categories of data. Identification and contact data of the donor where necessary to manage the donation or issue tax certificates. Financial and banking data associated with the donation made.

Recipients. Banks, the competent public authorities and any third parties whose involvement is required by law.

International transfers. No international transfer of data is envisaged.

Retention periods. Data will be kept for the periods required by tax, accounting and other applicable legislation, as well as for the time necessary to address potential legal liabilities.

Activity: Sending the newsletter to the Data Subject

Source. From the Data Subject themselves, as part of their request to register as a member.

Legal basis. GDPR, in particular Art. 6(1)(b): performance of a contract.

Purposes of processing. To inform the Data Subject electronically about content of interest connected to the activities carried out by Tierra de Amani.

Data subjects concerned. Natural persons or representatives of legal persons.

Categories of data. Email address.

Recipients. No disclosure to third parties is envisaged, except where legally required.

International transfers. No international transfer of data is envisaged.

The Data Subject's Data

The Data Subject warrants that they are over eighteen (18) years of age and that the data provided is true, accurate, complete and up to date. The Data Subject is responsible for any direct or indirect damage or loss that may arise from failing to meet this obligation, without prejudice to their right to rectification.

Where personal data of minors is provided (for example, the Data Subject's children), the Data Subject warrants that they hold parental authority or legal representation over the minor, or that they have the consent of the minor's legal representatives, and that the latter have been informed of the matters contained in this privacy policy. In cases of shared parental authority, the Data Subject declares that they have the consent of the other parent or, where applicable, sufficient authorisation to disclose the minor's data.

Where the personal data belongs to a third party, the Data Subject warrants that they have informed that third party of the matters contained in this document and obtained their authorisation to provide their data to the Controller for the purposes indicated above.

The Controller cannot guarantee the absolute invulnerability of its systems and therefore accepts no liability for damages arising from alterations that third parties may cause to computer systems, electronic documents or files.

Cookies Policy

In accordance with the GDPR and Spanish Law 34/2002 on Information Society Services and Electronic Commerce, all personal data obtained through cookies during use of the Website will be processed in accordance with the Cookies Policy.

Exercising Your Rights

In accordance with the GDPR, you may exercise your rights of access, rectification, erasure, objection, data portability and restriction of processing directly with the Controller.

To exercise these rights, the Data Subject may send a message to that effect, stating their identifying details, to the following email address: hola@tierradeamani.org.

If the Data Subject considers that their request to exercise these rights has not been properly addressed by the Controller, they may also exercise their rights by lodging a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD).

Acceptance of the Privacy Policy

The Data Subject ACKNOWLEDGES AND ACCEPTS THAT THEY HAVE READ AND UNDERSTOOD this Privacy Policy, the content of which constitutes the entire agreement between the Data Subject and the Controller regarding the use and processing of their personal information. The Data Subject expressly agrees to be bound by the terms of this Privacy Policy in their entirety and scope, without excluding any of its provisions.

Express acceptance of this Privacy Policy is mandatory when the Data Subject registers through the Website by completing the relevant registration form.