Privacy Policy

WEBSITE PRIVACY POLICY

Please read this policy carefully. In it you will find important information about the processing of your personal data and your rights under current legislation in the area.

We reserve the right to update our privacy policy due to business decisions, as well as to keep up with possible changes in legislation or jurisprudence. Should you have any doubts or need any clarifications about our privacy policy or your rights, you can contact us through the channels indicated below.

In general, In general, the fields in our forms marked as obligatory must be completed to be able to process your requests.

  1. Who is responsible for processing your data? The data controller for the personal details collected through this website is the Fundació Es Baluard Museu d’Art Modern i Contemporani de Palma, domiciled at Plaça de la Porta de Santa Catalina, 10, 07012 Palma (Balearic Islands); Tel. (+34) 971908200; Email: museu@esbaluard.org

You can contact our Data Protection Officer at dpd@esbaluard.org

  1. Why will we process your data and on what legal basis?

Managing relations with users and partners: we process the data supplied by our users and partners in their enquiries and other registration forms for Amigos (Friends) or other kinds of partnership to deal with your requests, provide the contractual services or handle the sale of entrance tickets, services or products.

Data from the transactions conducted on the website will also be processed for the purposes of accounting and administrative management and to meet our legal obligations in terms of tax and accounts.

This processing is necessary to fulfil the contract or to apply precontractual measures to the request by the interested party.

For statistical and quality management purposes: in order to assess and manage the quality of the website and our services, we process web browsing data, e.g. IP address, weblogs, pages visited or actions taken on the website (further info in our cookie policy).

This processing is based on our legitimate interest in assessing and managing the quality of the website and our services. To balance this interest with your rights and freedoms it is determined that the processing has a limited impact on the subjects’ privacy, meets their reasonable expectations and does not pose any significant threats.

Sending out commercial messages and managing distribution lists: we process the identifying and contact data supplied by our users and the people who register for our distribution lists to send them messages about our activities, products and services.

This processing is based on the consent requested. Not giving this consent or withdrawing it does not affect fulfilment of the order or the provision of the contractual services.

You may at any time request that we cease processing for commercial purposes by clicking on the link provided for this purpose in our messages or by sending an email to: museu@esbaluard.org

  1. Who can we pass your data on to? Your data will only be passed on to third parties by legal obligation, with your consent or when your request requires this communication.
  2. How long will we keep your data? In general terms we will keep your data while your relationship with us lasts and in any case for the times stipulated in applicable legal provisions, for example for accounting and tax purposes, and for the time necessary to meet any liabilities arising from their processing. We will delete your data when they have ceased to be necessary or pertinent to the purposes for which they were collected. Data processed for our informative and commercial messages will be kept as long as their deletion is not requested.
  3. What are your rights? You are entitled to confirmation of whether we are processing your personal data or not and, if so, to access them. You may also ask for your data to be corrected if they are inaccurate, or completed if they are incomplete, as well as asking for their deletion where, among other reasons, the said data are no longer necessary for the purposes for which they were collected.

In certain circumstances you may request the limitation of the processing of your data. In this case, we will only process the data affected for the formulation, exercise or defence of claims or with a view to protecting other people’s rights. Under certain conditions and for reasons related to your personal circumstances, you may also object to the processing of your data. In this case, we will cease to process the data except for pressing legitimate reasons that take precedence over your interests or rights and freedoms, or to formulate, exercise or defend against claims. Also, in certain circumstances you may request the portability of your data, for them to be passed on to another data controller.

You may withdraw any consent you had given for certain purposes, without this affecting the legitimacy of the processing based on prior consent before it was withdrawn, and submit a complaint to the Spanish Data Protection Agency.

To request that we cease processing for commercial purposes you may send an email to the following email address: museu@esbaluard.org

To exercise your rights you must send us a request by post or email at the addresses given in the section Who is responsible for processing your data?

You can find further information about your rights and how to exercise them on the website of the Spanish Data Protection Agency at www.aepd.es.

 

 

 

VOLUNTEER PRIVACY POLICY

Please read this privacy policy carefully. In it you will find important information about the processing of your personal data and your rights under current legislation in the area.

We reserve the right to update our privacy policy due to business decisions, as well as to keep up with possible changes in legislation or jurisprudence. Should you have any doubts or need any clarifications about our privacy policy or your rights, you can contact us through the channels indicated below.

You may request a copy of this policy for your records.

You declare that the data you supply to us, now or in the future, are correct and truthful and undertake to notify us of any change in them. In the event that you provide personal data about third parties, you undertake to obtain the prior consent of the subjects and inform them of the contents of this policy.

  1. Who is responsible for processing your data? The data controller for your personal details is the Fundació Es Baluard Museu d’Art Modern i Contemporani de Palma, domiciled at Plaça de la Porta de Santa Catalina, 10, 07012 Palma (Balearic Islands); Tel. (+34) 971908200; Email: museu@esbaluard.org

You can contact our Data Protection Officer at dpd@esbaluard.org

  1. Why will we process your data and on what legal basis?

Managing relations with volunteers: we process volunteers’ data for the administrative management of their relationship with us and to meet our legal obligations.

This processing is necessary to fulfil the contract or to apply precontractual measures to the request by the interested party.

Sending out commercial messages and managing distribution lists: we process the identifying and contact data supplied by volunteers who register for our distribution lists to keep them informed about our volunteer initiative and opportunities.

This processing is based on the consent requested. Not giving this consent or withdrawing it does not affect fulfilment of the order or the provision of the contractual services.

You may at any time request that we cease processing for commercial purposes by clicking on the link provided for this purpose in our messages or by sending an email to: museu@esbaluard.org

  1. Who can we pass your data on to? Your data will only be passed on to third parties by legal obligation, with your consent or when it is necessary to run the volunteer programme you are taking part in.
  2. How long will we keep your data? In general terms we will keep your data while your relationship with us lasts and in any case for the times stipulated in applicable legal provisions and for the time necessary to meet any liabilities arising from their processing. We will delete your data when they have ceased to be necessary or pertinent to the purposes for which they were collected. Data processed for our informative and commercial messages will be kept as long as their deletion is not requested.
  3. What are your rights? You are entitled to confirmation of whether we are processing your personal data or not and, if so, to access them. You may also ask for your data to be corrected if they are inaccurate, or completed if they are incomplete, as well as asking for their deletion where, among other reasons, the said data are no longer necessary for the purposes for which they were collected.

In certain circumstances you may request the limitation of the processing of your data. In this case, we will only process the data affected for the formulation, exercise or defence of claims or with a view to protecting other people’s rights. Under certain conditions and for reasons related to your personal circumstances, you may also object to the processing of your data. In this case, we will cease to process the data except for pressing legitimate reasons that take precedence over your interests or rights and freedoms, or to formulate, exercise or defend against claims. Also, in certain circumstances you may request the portability of your data, for them to be passed on to another data controller.

You may withdraw any consent you had given for certain purposes, without this affecting the legitimacy of the processing based on prior consent before it was withdrawn, and submit a complaint to the Spanish Data Protection Agency.

To request that we cease processing for commercial purposes you may send an email to the following email address: museu@esbaluard.org

To exercise your rights you must send us a request by post or email at the addresses given in the section Who is responsible for processing your data?

You can find further information about your rights and how to exercise them on the website of the Spanish Data Protection Agency at www.aepd.es.

 

CLIENTS, VISITORS AND “FRIENDS OF ES BALUARD” PRIVACY POLICY

Please read this privacy policy carefully. In it you will find important information about the processing of your personal data and your rights under current legislation in the area.

We reserve the right to update our privacy policy due to business decisions, as well as to keep up with possible changes in legislation or jurisprudence. Should you have any doubts or need any clarifications about our privacy policy or your rights, you can contact us through the channels indicated below.

You declare that the data you supply to us, now or in the future, are correct and truthful and undertake to notify us of any change in them. In the event that you provide personal data about third parties, you undertake to obtain the prior consent of the subjects and inform them of the contents of this policy.

  1. Who is responsible for processing your data? The data controller for your personal details is the Fundació Es Baluard Museu d’Art Modern i Contemporani de Palma, domiciled at Plaça de la Porta de Santa Catalina, 10, 07012 Palma (Balearic Islands); Tel. (+34) 971908200; Email: museu@esbaluard.org

You can contact our Data Protection Officer at dpd@esbaluard.org

  1. Why will we process your data and on what legal basis?

Managing relations with clients, visitors and “Friends of Es Baluard”: we process the data of clients, visitors and “Friends of Es Baluard” for the purposes of administrative management of their relationship with us, providing the services requested and meeting our legal obligations.

Data from the transactions conducted will also be processed for the purposes of accounting and administrative management and to meet our legal obligations in terms of tax and accounts.

This processing is necessary to fulfil the contract or to apply precontractual measures to the request by the interested party.

Sending out commercial messages and managing distribution lists: we process the identifying and contact data supplied by our clients, visitors and “Friends of Es Baluard” to send them messages about our activities, products and services.

This processing is based on the consent requested. Not giving this consent or withdrawing it does not affect fulfilment of the order or the provision of the contractual services.

You may at any time request that we cease processing for commercial purposes by clicking on the link provided for this purpose in our messages or by sending an email to: museu@esbaluard.org

Security purposes: we process the identifying data of people entering the museum site for the purposes of security of the people and assets in the museum.

This processing is based on our legitimate interest in ensuring the security of the site.

To balance this interest with your rights and freedoms it is determined that the processing has a limited impact on the subjects’ privacy, meets their reasonable expectations and does not pose any significant threats.

  1. Who can we pass your data on to? Your data will only be passed on to third parties by legal obligation, with your consent or when your request requires this communication.
  2. How long will we keep your data? In general terms we will keep your data while your relationship with us lasts and in any case for the times stipulated in applicable legal provisions, for example for accounting and tax purposes, and for the time necessary to meet any liabilities arising from their processing. We will delete your data when they have ceased to be necessary or pertinent to the purposes for which they were collected. Data processed for our informative and commercial messages will be kept as long as their deletion is not requested.
  3. What are your rights? You are entitled to confirmation of whether we are processing your personal data or not and, if so, to access them. You may also ask for your data to be corrected if they are inaccurate, or completed if they are incomplete, as well as asking for their deletion where, among other reasons, the said data are no longer necessary for the purposes for which they were collected.

In certain circumstances you may request the limitation of the processing of your data. In this case, we will only process the data affected for the formulation, exercise or defence of claims or with a view to protecting other people’s rights. Under certain conditions and for reasons related to your personal circumstances, you may also object to the processing of your data. In this case, we will cease to process the data except for pressing legitimate reasons that take precedence over your interests or rights and freedoms, or to formulate, exercise or defend against claims. Also, in certain circumstances you may request the portability of your data, for them to be passed on to another data controller.

You may withdraw any consent you had given for certain purposes, without this affecting the legitimacy of the processing based on prior consent before it was withdrawn, and submit a complaint to the Spanish Data Protection Agency.

To request that we cease processing for commercial purposes you may send an email to the following email address: museu@esbaluard.org

To exercise your rights you must send us a request by post or email at the addresses given in the section Who is responsible for processing your data?

You can find further information about your rights and how to exercise them on the website of the Spanish Data Protection Agency at www.aepd.es.

 

COMPETITION PRIVACY POLICY

Please read this privacy policy carefully. In it you will find important information about the processing of your personal data and your rights under current legislation in the area.

We reserve the right to update our privacy policy due to business decisions, as well as to keep up with possible changes in legislation or jurisprudence. Should you have any doubts or need any clarifications about our privacy policy or your rights, you can contact us through the channels indicated below.

You declare that the data you supply to us, now or in the future, are correct and truthful and undertake to notify us of any change in them. In the event that you provide personal data about third parties, you undertake to obtain the prior consent of the subjects and inform them of the contents of this policy.

  1. Who is responsible for processing your data? The data controller for your personal details is the Fundació Es Baluard Museu d’Art Modern i Contemporani de Palma, domiciled at Plaça de la Porta de Santa Catalina, 10, 07012 Palma (Balearic Islands); Tel. (+34) 971908200; Email: museu@esbaluard.org

You can contact our Data Protection Officer at dpd@esbaluard.org

  1. Why will we process your data and on what legal basis?

Managing relations with entrants in competitions and other forms of participation: we process the data of entrants in competitions and other forms of participation for the administrative management of relations with participants, to run the competition and to meet our legal obligations.

This processing is necessary to fulfil the contract or to apply precontractual measures to the request by the interested party to take part.

  1. Who can we pass your data on to? Your data will only be passed on to third parties by legal obligation, with your consent or when your participation requires this communication, for example in the case of publication to announce the identity of the winners of a competition, in accordance with the stipulations of the rules of the competition in question.
  2. How long will we keep your data? In general terms we will keep your data while your relationship with us lasts and in any case for the times stipulated in applicable legal provisions, for example for accounting and tax purposes, and for the time necessary to meet any liabilities arising from their processing. We will delete your data when they have ceased to be necessary or pertinent to the purposes for which they were collected.
  3. What are your rights? You are entitled to confirmation of whether we are processing your personal data or not and, if so, to access them. You may also ask for your data to be corrected if they are inaccurate, or completed if they are incomplete, as well as asking for their deletion where, among other reasons, the said data are no longer necessary for the purposes for which they were collected.

In certain circumstances you may request the limitation of the processing of your data. In this case, we will only process the data affected for the formulation, exercise or defence of claims or with a view to protecting other people’s rights. Under certain conditions and for reasons related to your personal circumstances, you may also object to the processing of your data. In this case, we will cease to process the data except for pressing legitimate reasons that take precedence over your interests or rights and freedoms, or to formulate, exercise or defend against claims. Also, in certain circumstances you may request the portability of your data, for them to be passed on to another data controller.

You may withdraw any consent you had given for certain purposes, without this affecting the legitimacy of the processing based on prior consent before it was withdrawn, and submit a complaint to the Spanish Data Protection Agency.

To exercise your rights you must send us a request by post or email at the addresses given in the section Who is responsible for processing your data?

You can find further information about your rights and how to exercise them on the website of the Spanish Data Protection Agency at www.aepd.es.

 

VIDEO SURVEILLANCE PRIVACY POLICY

Please read this privacy policy carefully. In it you will find important information about the processing of your personal data and your rights under current legislation in the area.

We reserve the right to update our privacy policy due to business decisions, as well as to keep up with possible changes in legislation or jurisprudence. Should you have any doubts or need any clarifications about our privacy policy or your rights, you can contact us through the channels indicated below.

  1. Who is responsible for processing your data? The data controller for your personal details is the Fundació Es Baluard Museu d’Art Modern i Contemporani de Palma, domiciled at Plaça de la Porta de Santa Catalina, 10, 07012 Palma (Balearic Islands); Tel. (+34) 971908200; Email: museu@esbaluard.org

You can contact our Data Protection Officer at dpd@esbaluard.org

 

  1. Why will we process your data and on what legal basis?

Security purposes: we process the data obtained from the video surveillance cameras installed for the purposes of video surveillance and the security of the site.

This processing is based on our legitimate interest in ensuring the security of the site.

To balance this interest with your rights and freedoms it is determined that the processing has a limited impact on the subjects’ privacy, meets their reasonable expectations and does not pose any significant threats.

  1. How long will we keep your data? The data will be deleted within a maximum of one month of being collected, notwithstanding their storage for the terms stipulated in applicable legal provisions, for example as evidence of attacks on the integrity of people, property or installations.
  2. Who can we pass your data on to? Your data will not be passed on to any third parties, except for the competent authorities in the event of attacks on the integrity of people, property or installations.
  3. What are your rights? You are entitled to confirmation of whether we are processing your personal data or not and, if so, to access them. You may also ask for your data to be corrected if they are inaccurate, or completed if they are incomplete, as well as asking for their deletion where, among other reasons, the said data are no longer necessary for the purposes for which they were collected.

In certain circumstances you may request the limitation of the processing of your data. In this case, we will only process the data affected for the formulation, exercise or defence of claims or with a view to protecting other people’s rights. Under certain conditions and for reasons related to your personal circumstances, you may also object to the processing of your data. In this case, we will cease to process the data except for pressing legitimate reasons that take precedence over your interests or rights and freedoms, or to formulate, exercise or defend against claims. Also, in certain circumstances you may request the portability of your data, for them to be passed on to another data controller.

You may withdraw any consent you had given for certain purposes, without this affecting the legitimacy of the processing based on prior consent before it was withdrawn, and submit a complaint to the Spanish Data Protection Agency.

To exercise your rights you must send us a request by post or email at the addresses given in the section Who is responsible for processing your data?

You can find further information about your rights and how to exercise them on the website of the Spanish Data Protection Agency at www.aepd.es.

 

CURRICULUM VITAE PRIVACY POLICY

Please read this privacy policy carefully. In it you will find important information about the processing of your personal data and your rights under current legislation in the area.

Should you have any doubts or need any clarifications about our privacy policy or your rights, you can contact us through the channels indicated below.

You declare that the data you supply to us, now or in the future, are correct and truthful and undertake to notify us of any change in them. In the event that you provide personal data about third parties, you undertake to obtain the prior consent of the subjects and inform them of the contents of this policy.

  1. Who is responsible for processing your data? The data controller for your personal details is the Fundació Es Baluard Museu d’Art Modern i Contemporani de Palma, domiciled at Plaça de la Porta de Santa Catalina, 10, 07012 Palma (Balearic Islands); Tel. (+34) 971908200; Email: museu@esbaluard.org

You can contact our Data Protection Officer at dpd@esbaluard.org.

  1. Why will we process your data and on what legal basis?

Personnel selection: we process the data of candidates who register for our job offers, to manage and control our personnel selection processes.

The legal basis for this processing is the taking of precontractual measures at their own request, as provided for in art. 6.1b) of the GDPR.

Job pool management: we process candidates’ data to set up a job pool to provide a list of candidates classified by jobs in order to fill future vacancies in the organisation. If you do not wish to be part of our job pool, you can tell us by sending an email to museu@esbaluard.org. In this event your CV will only be considered for the specific job vacancy for which you applied.

This processing is based on our legitimate interest in optimising and speeding up our selection processes. To balance this interest with your rights and freedoms we have determined the following:

  • Processing is compatible with the data subjects’ reasonable expectations, as they are people who have previously applied for a job in our organisation and as setting up a job pool is a common practice among employers.
  • The processing is appropriate and proportional to achieve the aim set, as it is limited to selection processes compatible with the professional and academic profile of the data subject.
  • The impact of the processing on the data subjects’ privacy is limited: the processing is for the subject’s own benefit by considering them to opt again for a job in the organisation, so boosting their chances of finding a job. The data included in the job pool are those the candidates themselves chose to share with the employer in order to be considered in selection processes. The candidate is offered the option of objecting to their CV being included in the job pool and a limit is set on how long CVs are to be kept in order to make sure they are up to date and valid (see the section “How long will we keep your data?” below).

 

  1. How did we obtain your data? The data processed for these purposes are obtained from the CV and covering letter sent to us either directly or through the employment website on which you registered to take part in one of our selection processes, as well as from any interviews and technical tests you may have done. The categories of data processed for these purposes are the following:
  • Identifying and contact details, such as ID/residence permit number (as appropriate), full name, address, telephone, email and photograph included in the CV (if appropriate).
  • Details of personal characteristics, such as nationality.
  • Academic and professional data;.
  • Employment data;.
  • If appropriate, disability and degree thereof, in compliance with the duty imposed by art. 42.1. of legislative royal decree 1/2013 of 29th November, approving the rewritten text of the general law on the rights of people with disabilities and their social inclusion.
  • Data generated during the process itself, e.g. communications with the candidate, report on interviews, results of technical tests, etc.

 

  1. How long will we keep your data? In general terms we keep your data for the length of time necessary to manage your participation in our selection processes, and in any case for the times stipulated in applicable legal provisions and for the time necessary to meet any liabilities arising from their processing. We will delete your data when they have ceased to be necessary or pertinent to the purposes for which they were collected. Specifically:
  • Selection files will be deleted a year after the process ends. However, if you are hired, the data concerning your selection process will be kept in your employment file.
  • CVs added to our job pool are kept for one year following their last update, so you will have to submit a new, updated CV or confirm the validity of the one you originally sent us if you wish to stay in our job pool.

 

  1. Who can we pass your data on to? Your data will not be passed on to any third parties except by legal obligation.
  2. What are your rights? You are entitled to confirmation of whether we are processing your personal data or not and, if so, to access them. You may also ask for your data to be corrected if they are inaccurate, or completed if they are incomplete, as well as asking for their deletion where, among other reasons, the said data are no longer necessary for the purposes for which they were collected.

In certain circumstances you may request the limitation of the processing of your data. In this case, we will only process the data affected for the formulation, exercise or defence of claims or with a view to protecting other people’s rights. Under certain conditions and for reasons related to your personal circumstances, you may also object to the processing of your data. In this case, we will cease to process the data except for pressing legitimate reasons that take precedence over your interests or rights and freedoms, or to formulate, exercise or defend against claims. Also, in certain circumstances you may request the portability of your data, for them to be passed on to another data controller.

You may withdraw any consent you had given for certain purposes, without this affecting the legitimacy of the processing based on prior consent before it was withdrawn, and submit a complaint to the Spanish Data Protection Agency.

To exercise your rights you must send us a request by post or email at the addresses given in the section Who is responsible for processing your data?

You can find further information about your rights and how to exercise them on the website of the Spanish Data Protection Agency at www.aepd.es.