FUNDACIÓN CUDECA, con NIF G92182054, y domicilio en Avda. del Cosmos, 6, CP 29631, Benalmádena, Málaga, a la que en lo sucesivo nos referiremos como CUDECA, consciente de la importancia de garantizar su derecho a la intimidad y a la protección de datos, ponemos en su conocimiento nuestra Política de Privacidad tendente a dar cumplimiento a las obligaciones establecidas en la vigente normativa sobre protección de datos personales, compuesta por el Reglamento (UE) 2016/679 del Parlamento Europeo y del Consejo de 27 de abril de 2016, relativo a la protección de las personas físicas en lo que respecta al tratamiento de datos personales (en adelante RGPD), y la Ley Orgánica 3/2018, de 5 de diciembre, de protección de datos personales y garantía de los derechos digitales (en adelante LOPDGDD).
Likewise, we inform you that CUDECA has proceeded to designate its Data Protection Officer (DPO) in order to monitor the proper compliance with data protection regulations. You may contact CUDECA's DPO through the address: datos@cudeca.org.
Data controller
CUDECA identifies itself as the data controller for the personal data that may be collected in the performance of its duties and activities. This data will be processed confidentially at all times, and with absolute respect for the obligations established by the GDPR and the LOPDGDD. This data will be used specifically in accordance with what is established below:
Applicants for Healthcare Services
PurposeTo attend to the request for care submitted and to assess whether it complies with the established medical criteria.
Lawful basisConsent of the data subject (Arts. 6, 7, and 9 GDPR)
Retention periodThe information will be used as long as the care request made to CUDECA is being attended to and assessed. Subsequently, it will be blocked for the legally established period.
Patients and Users
PurposeThe data will be used to provide patients and users with the specific healthcare services offered by CUDECA.
Lawful basisi) Consent of the data subject (Arts. 6, 7, and 9 GDPR).
ii) Execution of the contractual relationship between the user and CUDECA (Art. 6.1.b GDPR).
Retention periodUsers' information will be used continuously while the provision of healthcare services is taking place. Subsequently, the data will be deleted once the statute of limitations for any legal liability has expired.
Collaborators and Volunteers
PurposeThe personal data required will be used to articulate and manage the collaboration and voluntary aid relationship with CUDECA, which is carried out by collaborators and volunteers.
Lawful basisi) Consent of the data subject (Art. 6.1.a GDPR).
ii) Execution of the contractual relationship between the user and CUDECA (Art. 6.1.b GDPR).
Retention periodThe information of CUDECA’s collaborators and users will be used continuously throughout the period in which the former hold such status. Subsequently, the data will be deleted once the statute of limitations for any legal liability has expired.
Billing, Accounting and Tax Management
Purposei) To manage billing, collection, and payment operations by CUDECA.
ii) To comply with tax and accounting obligations.
Lawful basisTo comply with the legal obligations to which the foundation is subject (Art. 6.1.c GDPR).
Retention periodThe data will be retained for the period established by the applicable regulations in each case.
Sending communications about CUDECA's latest news
PurposeIf requested, the data will be used to keep you informed of developments and latest news regarding CUDECA, as well as events and activities.
Lawful basisConsent of the data subject (Art. 6.1.a GDPR).
Retention periodThe data will be used as long as the user or client does not object to the processing taking place.
Development of events, activities and workshops
PurposeManagement, organisation, and development of different activities, events, workshops, and initiatives carried out by CUDECA.
Lawful basisConsent of the data subject (Art. 6.1.a GDPR).
Retention periodThe data will be processed while the activity or event in which the data subject wishes to participate is taking place and, once concluded, will be retained for the period during which the legal liabilities that could derive from it remain in effect.
Personnel Selection Processes
PurposeManagement and development of the different selection processes that may be announced and carried out by CUDECA.
Lawful basisConsent of the data subject (Art. 6.1.a GDPR).
Retention periodThe data collected will be processed during the personnel selection process. Subsequently, it will be deleted.
Members / Donors
PurposeArticulation and management—legal, accounting, and tax-related—of donations and contributions made by third parties in favour of CUDECA.
Lawful basisTo comply with the legal obligations to which the foundation is subject (Art. 6.1.c GDPR).
Retention periodThe data will be retained for the period established by the applicable regulations in each case.
Video Surveillance
PurposeTo proceed with the video recording of CUDECA's facilities in order to preserve their security.
Lawful basisTo serve a legitimate interest of CUDECA, such as maintaining the security of the facilities (Art. 6.1.f GDPR).
Retention periodThe data (images) will be deleted every 30 days starting from the moment of their collection.
Whistleblowing Channel
PurposeThe data will be used within the framework established by Law 2/2023, of February 20, regulating the protection of persons who report normative infringements and the fight against corruption.
Lawful basisTo serve a legitimate interest of CUDECA, such as maintaining the security of the facilities (Art. 6.1.f GDPR).
Retention periodOnce the reported incident has been managed, the data will be retained for the period indicated in the applicable regulations.
Communication of data
As a general rule, personal data will not be communicated to third parties outside of CUDECA and its community, except under legal obligation or with the prior consent of the data subject.
Security Measures
The processing of personal data carried out by CUDECA will adopt the necessary technical and organisational measures to guarantee the security of personal data and prevent its alteration, loss, unauthorised processing, or access, taking into account the state of technology, the nature of the stored data, and the risks to which they are exposed.
Rights of the data subjects
In accordance with current regulations, you have the following rights:
Right of access
You may obtain information regarding whether or not CUDECA is processing data that concerns you, as well as know the content and purpose for which it is intended.
Right of rectification
You have the right to rectify your personal data when it is inaccurate or incomplete.
Right to erasure / right to be forgotten
You may request that your personal data be erased or deleted.
Right to restriction of processing
The right to request that the purposes for which we use your personal data be restricted.
Right to data portability
The possibility of requiring that your personal data be transmitted to another data controller different from CUDECA.
Right to object
You have the right to object to the processing of your personal data when it is subject to processing based on public interest or a legitimate interest pursued by CUDECA.
You may exercise the aforementioned rights before CUDECA at the address Avda. del Cosmos, 6, postal code 29631, Benalmádena, Málaga, or via the email address datos@cudeca.org.
Likewise, we inform you that, if you believe your rights have been violated, you may appeal to the Spanish Data Protection Agency (Agencia Española de Protección de Datos) to request the due protection of your rights, for which we provide the following contact information:
Modifications to this Privacy Policy
CUDECA reserves the right to modify this Privacy Policy at any time. Any such changes will be duly brought to the attention of the personal data subjects.
