Privacy Policy

GENERIC PRIVACY POLICY

Last modified: June 2018

Please read this privacy policy carefully. It contains important information on the processing of your personal data and the rights you have pursuant to current legislation in this area. We reserve the right to update our privacy policy at any time as a result of corporate decisions, and in order to comply with any possible changes in legislation or jurisprudence. If you have any queries or require an explanation regarding our privacy policy or your rights, you can contact us via the channels indicated below.

You can request a copy of this policy to keep.

You declare that the data you provide us with now or in the future are correct and truthful and you undertake to inform us of any change in them. If you are providing personal data of third parties, you undertake to obtain the prior consent of the data subjects and inform them of the contents of this policy.

Who is the data processing controller?

Controller: Fundació Es Baluard Museu d’Art Modern i Contemporani de Palma
Postal address: Plaza Porta de Santa Catalina, 10 07012 Palma
Tel.: (+34) 971-908200
E-mail: museu@esbaluard.org

Why will we process your data?

Our customers’ data will be processed for the administrative management of the relationship our volunteers have with us and in order to fulfil our legal obligations. We will also process your data to keep you informed about our initiatives and volunteering opportunities.

How long will we keep your data for?

Generally speaking we keep your data for the period of validity of the relationship with you, and in any case for the periods envisaged in the applicable legal regulations and the time necessary to attend to any possible liabilities arising from the processing. We will erase your data when they cease to be necessary or relevant for the purposes for which they were collected. The data processed to keep you informed on future initiatives will be kept until you request their erasure.

Legal basis for the processing

The legal basis for the processing of your personal data is your own request to take part in our volunteering programme, the fulfilment of our legal obligations and our legitimate interest in sending out notifications to you regarding future volunteering initiatives which may be of interest to you.

Generally speaking, we inform you that the information required will be necessary for processing your request to participate as a volunteer.

Who can we transmit your data to?

Your data will only be transmitted to third parties as a result of a legal obligation or when this is necessary for the programme.

What are your rights?

You have the right to obtain confirmation on whether or not we are processing your personal data and, if we are, to access them. You can also ask for your data to be rectified if they are inaccurate, or for incomplete data to be completed, and you may also request their erasure when, amongst other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, you can request the restriction of the processing of your data. In this case, we will only process the data affected for the establishment, exercise or defence of legal claims or with a view to protecting the rights of others.

Under certain conditions and on grounds related to your particular situation, you may also oppose the processing of your data. In this case, we will no longer process your data, except for compelling legitimate reasons which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

You may withdraw the consent you have given for certain purposes, and this shall not affect the lawfulness of processing based on consent before its withdrawal. You may lodge a complaint with the Spanish Data Protection Agency (AEPD).

We inform you that the European General Data Protection Regulation also recognises your right to the portability of your data.

If you wish to stop receiving information on our initiatives and future volunteering opportunities, you can send an e-mail to the following address: museu@esbaluard.org

To exercise your rights, you must send us a request accompanied by a copy of your national identity document or other valid identification document by post or e-mail to the addresses indicated in the section ‘Who is the data processing controller?’

You can obtain more information on your rights and how to exercise them on the site of the Spanish Data Protection Agency (AEPD) at:
http://www.agpd.es/portalwebAGPD/CanalDelCiudadano/derechos/index-ides-idphp.php

PRIVACY POLICY FOR CUSTOMERS, VISITORS AND «MEMBERS OF ES BALUARD»

Last modified: June 2018

Please read this privacy policy carefully. It contains important information on the processing of your personal data and the rights you have pursuant to current legislation in this area. We reserve the right to update our privacy policy at any time as a result of corporate decisions, and in order to comply with any possible changes in legislation or jurisprudence. If you have any queries or require an explanation regarding our privacy policy or your rights, you can contact us via the channels indicated below.

You declare that the data you provide us with now or in the future are correct and truthful and you undertake to inform us of any change in them. If you are providing personal data of third parties, you undertake to obtain the prior consent of the data subjects and inform them of the contents of this policy.

Who is the data processing controller?

Controller: FUNDACIÓ ES BALUARD MUSEU D’ART MODERN I CONTEMPORANI DE PALMA
Postal address: Plaza Porta de Santa Catalina, 10 07012 Palma
Tel.: (+34) 971908200
E-mail: museu@esbaluard.org

Why will we process your data?

Our visitors’ data will be processed for the administrative and economic management of the relationship you have with us, and in order to provide the services requested and fulfil our legal obligations. We will also process your data to keep you informed about our promotions and services and for quality purposes.

If we have your consent, the images taken during the activities may be disseminated via any type of advertising, promotion, publication, including the Internet, mailing, television and press, or by any other means for purposes of informing on the Foundation’s activities.

Finally, for security reasons we need to know who accesses the museum installations and as a result we will process your data to carry out access control.

How long will we keep your data for?

Generally speaking we keep your data for the period of validity of the relationship with you, and in any case for the periods envisaged in the applicable legal regulations and the time necessary to attend to any possible liabilities arising from the processing. We will erase your data when they cease to be necessary or relevant for the purposes for which they were collected. The data processed for commercial purposes will be kept until you request their erasure.

Legal basis for the processing

The legal basis for the processing of your personal data is the management of the contractual relationship with our customers and users, the fulfilment of our legal obligations and our legitimate interest in promoting and improving our products and services as well as, if you have provided it, your authorisation to receive our notifications by electronic means. The legal basis for the capture and dissemination of images of the activities is your consent.

The lawfulness of carrying out access control is based on our legitimate interest in ensuring the security of the museum installations.

Who can we transmit your data to?

Your data will only be transmitted to third parties as a result of a legal obligation or when this is necessary to provide the services requested.
With regard to the capture of images, said images may be disseminated via any type of advertising, promotion, publication, including the Internet, mailing, television and press, or by any other means for purposes of informing on the Foundation’s activities, and as such are accessible to the public.

What are your rights?

You have the right to obtain confirmation on whether or not we are processing your personal data and, if we are, to access them. You can also ask for your data to be rectified if they are inaccurate, or for incomplete data to be completed, and you may also request their erasure when, amongst other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, you can request the restriction of the processing of your data. In this case, we will only process the data affected for the establishment, exercise or defence of legal claims or with a view to protecting the rights of others.

Under certain conditions and on grounds related to your particular situation, you may also oppose the processing of your data. In this case, we will no longer process your data, except for compelling legitimate reasons which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

You may withdraw the consent you have given for certain purposes, and this shall not affect the lawfulness of processing based on consent before its withdrawal. You may lodge a complaint with the Spanish Data Protection Agency (AEPD).

We inform you that the European General Data Protection Regulation also recognises your right to the portability of your data.

If you wish to request the cessation of processing for advertising purposes, you can send an e-mail to the following address: museu@esbaluard.org.

To exercise your rights, you must send us a request accompanied by a copy of your national identity document or other valid identification document by post or e-mail to the addresses indicated in the section ‘Who is the data processing controller?’

You can obtain more information on your rights and how to exercise them on the site of the Spanish Data Protection Agency (AEPD) at:
http://www.agpd.es/portalwebAGPD/CanalDelCiudadano/derechos/index-ides-idphp.php

PRIVACY POLICY, COMPETITIONS

Please read this privacy policy carefully. It contains important information on the processing of your personal data and the rights you have pursuant to current legislation in this area.

If you have any queries or require an explanation regarding our privacy policy or your rights, you can contact us via the channels indicated below.

Who is the data processing controller?

Controller: FUNDACIÓ ES BALUARD MUSEU D’ART MODERN I CONTEMPORANI DE PALMA
Postal address: Plaza Porta de Santa Catalina, 10 07012 Palma
Tel.: (+34) 971908200
E-mail: museu@esbaluard.org

Why will we process your data?

Our visitors’ data will be processed for the management of the competition and in order to contact the winner and send her/him the prize.

How long will we keep your data for?

Generally speaking we keep your data for the period of validity of the competition and for as long as is necessary to award the prize. We will erase your data when the competition has ended.

Legal basis for the processing

The legal basis for the processing of your personal data is your own participation in the competition.

Who can we transmit your data to?

Your data will only be transmitted to third parties as a result of a legal obligation or when this is necessary to award the prize to you.

What are your rights?

You have the right to obtain confirmation on whether or not we are processing your personal data and, if we are, to access them. You can also ask for your data to be rectified if they are inaccurate, or for incomplete data to be completed, and you may also request their erasure when, amongst other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, you can request the restriction of the processing of your data. In this case, we will only process the data affected for the establishment, exercise or defence of legal claims or with a view to protecting the rights of others.

Under certain conditions and on grounds related to your particular situation, you may also oppose the processing of your data. In this case, we will no longer process your data, except for compelling legitimate reasons which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

You may withdraw the consent you have given for certain purposes, and this shall not affect the lawfulness of processing based on consent before its withdrawal. You may lodge a complaint with the Spanish Data Protection Agency (AEPD).

We inform you that the European General Data Protection Regulation also recognises your right to the portability of your data.

To exercise your rights, you must send us a request accompanied by a copy of your national identity document or other valid identification document by post or e-mail to the addresses indicated in the section ‘Who is the data processing controller?’

You can obtain more information on your rights and how to exercise them on the site of the Spanish Data Protection Agency (AEPD) at:
http://www.agpd.es/portalwebAGPD/CanalDelCiudadano/derechos/index-ides-idphp.php

PRIVACY POLICY, VIDEO SURVEILLANCE

Please read this privacy policy carefully. It contains important information on the processing of your personal data and the rights you have pursuant to current legislation in this area. We reserve the right to update our privacy policy at any time as a result of corporate decisions, and in order to comply with any possible changes in legislation or jurisprudence. If you have any queries or require an explanation regarding our privacy policy or your rights, you can contact us via the channels indicated below.

You can request a copy of this policy to keep.

Who is the data processing controller?

Controller: FUNDACIÓ ES BALUARD MUSEU D’ART MODERN I CONTEMPORANI DE PALMA
Domicile: Plaça de la Porta de Santa Catalina, 10 07012 Palma

Which personal data do we obtain?

The data we process are those obtained from the video surveillance camera installed for the security of the installations.

Why will we process your data?

We will process the data captured for purposes of video surveillance and security of the installations.

How long will we keep your data for?

The data will be erased within a maximum period of one month as from when they were captured, without detriment to their storage for the periods envisaged in applicable legal provisions, for example to accredit the commitssion of acts which violate the integrity of people, assets or installations.

Legal basis for the processing

The legal basis for the processing of the data captured via the video surveillance system is the legitimate interest in ensuring the security of the installations.

Who can we transmit your data to?

Your data will not be transmitted to third parties, unless legally necessary.

What are your rights?

You have the right to obtain confirmation on whether or not we are processing your personal data and, if we are, to access them. You can also ask for your data to be rectified if they are inaccurate, or for incomplete data to be completed, and you may also request their erasure when, amongst other reasons, the data are no longer necessary for the purposes for which they were collected. In certain circumstances, you can request the restriction of the processing of your data. In this case, we will only process the data affected for the establishment, exercise or defence of legal claims or with a view to protecting the rights of others. Under certain conditions and on grounds related to your particular situation, you may also oppose the processing of your data. In this case, we will no longer process your data, except for compelling legitimate reasons which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims. In addition, and under certain conditions, you may request the portability of your data so that they can be transmitted to another data processing controller. To exercise your rights, you must send us a request accompanied by a copy of your national identity document or other valid identification document by post or e-mail to the addresses indicated in the section ‘Who is the data processing controller?’ You can obtain more information on your rights and how to exercise them on the site of the Spanish Data Protection Agency (AEPD) at:
http://www.agpd.es/portalwebAGPD/CanalDelCiudadano/derechos/index-ides-idphp.php

PRIVACY POLICY, WEBSITE

Last modified: June 2018

This privacy policy applies to the website www.esbaluard.org. Please read it carefully. It contains important information on the processing of your personal data and the rights you have pursuant to current legislation in this area.

We reserve the right to update our privacy policy at any time as a result of corporate decisions, and in order to comply with any possible changes in legislation or jurisprudence. If you have any queries or require an explanation regarding our privacy policy or your rights, you can contact us via the channels indicated below.

You declare that the data you provide us with now or in the future are correct and truthful and you undertake to inform us of any change in them. If you are providing personal data of third parties, you undertake to obtain the prior consent of the data subjects and inform them of the contents of this policy.

Generally speaking, the fields of our forms that are marked as mandatory must be completed in order to process your requests.

1. Who is the data processing controller?

The data processing controller for the personal data collected on this website is:
Controller: FUNDACIÓ ES BALUARD MUSEU D’ART MODERN I CONTEMPORANI DE PALMA
Postal address: Plaza Porta de Santa Catalina, 10 07012 Palma
Tel.: (+34) 971908200
E-mail: museu@esbaluard.org

2. Which personal data do we obtain?

The data we process are those obtained:

  • From the forms you fill out and the requests you make on the website, e.g. when you decide to make a contribution using our “Amics d‘Es Baluard” form, or ask to receive our newsletter.
  • From analyses obtained based on the browsing habits of users of the website.

The data we obtain are provided either by you directly, or by the third parties who process requests on your behalf.
The categories of data which we process typically consist of:

  • Identification and contact data, DNI (national identity document) or passport;
  • Data on personal characteristics, such as language, gender, date of birth and nationality;
  • Economic data and data on transactions;
  • Data related to your browsing, e.g. the IP address from which you connect to the website, weblogs, pages visited or actions carried out on the website. For this purpose, we use cookies and similar technology which may involve the tracking of your browsing. More information on our cookies policy is available at www.esbaluard.org.
  • Data related to your history of reservations and contact with the group;

3. Why will we process your data?

Our users’ data will be processed for the management of our relationship with them, to answer their requests and consultations, for the administration and management of the security of the website and in order to fulfil our legal obligations. These data will also be processed for analytics purposes and in order to improve the quality of our services. Moreover, we will process their data for the sending of commercial messages.

4. How long will we keep your data for?

Generally speaking we keep your data for the period of validity of the relationship with you, and in any case for the periods envisaged in the applicable legal regulations, for example regarding accounting and taxation, and for the time necessary to attend to any possible liabilities arising from the processing. We will erase your data when they cease to be necessary or relevant for the purposes for which they were collected. The access logs to restricted areas of the website will be erased one month after they are generated. The information on browsing will be erased after the website connected has ended and the statistics have been compiled. The data processed for commercial purposes will be kept until you request their erasure.

5. Who can we transmit your data to?

Your data will only be transmitted to third parties as a result of a legal obligation, with your consent or when your request necessitates such a transmission.

6. Legal basis for the processing

The legal basis for the processing of your personal data is the management of the legal relationship with our users, the fulfilment of our legal obligations and our legitimate interest in managing the security and quality of the website and promoting our services.

7. What are your rights?

You have the right to obtain confirmation on whether or not we are processing your personal data and, if we are, to access them. You can also ask for your data to be rectified if they are inaccurate, or for incomplete data to be completed, and you may also request their erasure when, amongst other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, you can request the restriction of the processing of your data. In this case, we will only process the data affected for the establishment, exercise or defence of legal claims or with a view to protecting the rights of others. Under certain conditions and on grounds related to your particular situation, you may also oppose the processing of your data. In this case, we will no longer process your data, except for compelling legitimate reasons which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims. In addition, and under certain conditions, you may request the portability of your data so that they can be transmitted to another data processing controller.
You may withdraw the consent you have given for certain purposes, and this shall not affect the lawfulness of processing based on consent before its withdrawal. You may lodge a complaint with the Spanish Data Protection Agency (AEPD).

If you wish to request the cessation of processing for commercial purposes, you can send an e-mail to the following address: museu@esbaluard.org
To exercise your rights, you must send us a request accompanied by a copy of your national identity document or other valid identification document by post or e-mail to the addresses indicated in the section ‘Who is the data processing controller?’

You can obtain more information on your rights and how to exercise them on the site of the Spanish Data Protection Agency (AEPD) at http://www.agpd.es.