The GENERAL GOVERNMENT OF THE SISTERS HOSPITALLERS reserves the right to modify this Policy in order to adapt it to legislative developments, case law criteria, industry practices, or the interests of the institution. Any such amendment will be announced in due time to ensure absolute knowledge of its content.
The Data Controller is:
The GENERAL GOVERNMENT OF THE SISTERS HOSPITALLERS with a registered address at Calle Vaquerías 7, 28007 Madrid
The purpose of collecting and processing personal data through the email account owned by the Sisters Hospitallers – Province of Spain and made available to users, based on the specific case, is to manage and tend to requests for information, queries, or suggestions, as well as the publications, services, activities, acts, or events offered, supported, or sponsored by the Sisters Hospitallers – Province of Spain.
The personal data provided will be stored for the corresponding period in order to comply with legal obligations or until the data subject exercises his/her right to request its erasure.
The General Government of the Sisters Hospitallers is authorised to process personal data based on the consent given by the data subject for one or more specific purposes, as stated in article 6.1. a) of the General Data Protection Regulation.
In order to ensure the data in our digital and/or paper files reflects reality, it must be updated. For these purposes, Users must make changes directly, when possible, or duly notify the corresponding area or department of the Sisters Hospitallers General Government.
The personal data collected through the email belonging to the data controller will not be transferred or communicated to third parties, except when necessary to carry out, control, and fulfil the expressed purpose(s), in cases provided by law, as well as in specific instances of which Users are expressly informed.
Without exception, data subjects may exercise their rights in accordance with the GDPR, which are:
· The right to request access to the personal data of the data subject;
· The right to request rectification or erasure;
· The right to request the restriction of processing;
· The right to object to processing;
· The right to data portability.
Data subjects may exercise these rights upon request, by specifying the right to be satisfied, appending a photocopy of their national identification card, and submitting the request to: GENERAL GOVERNMENT OF THE SISTERS HOSPITALLERS, Calle Vaquerías 7, 28007 Madrid (registered address for these purposes).
SECURITY MEASURES The information system of the General Government of the Sisters Hospitallers is equipped with the appropriate technical and organisational measures (in compliance with the principle of proactive accountability) to guarantee the security and confidentiality of stored data and thus prevent its alteration, loss, unauthorised access or processing, taking into account the state of the art, the cost of application, and the nature, scope, context, and purpose of processing, as well as the risks of variable probability and severity associated with each process.
|Data Controller|| SISTERS HOSPITALLERS S.H.J. GENERAL GOVERNMENT|
Calle Vaquerías 7, 28007 Madrid
|Purpose and use of data||The SISTERS HOSPITALLERS S.H.J. GENERAL GOVERNMENT will process data in order to manage CONTIGO newsletter subscriptions.|
|Storage period||Personal data will be stored as long as the subscription remains valid.|
|Authorisation||Data is processed based on the consent given by completing the subscription form.|
|Data recipients (assignments or transfers)||Data will not be transferred or communicated to third parties, except in those instances established by law.|
As the data owner, you have
the right to obtain confirmation about the processing of your data, to access
your personal data, to request the rectification of inaccurate data or, where appropriate,
to request erasure when—among other reasons—the data is no longer relevant to
the purpose for which it was originally collected or if you, as the data
subject, withdraw your consent.|
In certain instances, data subjects may request the restriction of their data, in which case it will only be stored in accordance with current regulation.
In certain instances, you may exercise your right to data portability, which will be delivered to you or to the designated data controller in a structured, commonly used or machine-readable format.
You have the right to withdraw your consent to the processing of your data at any time.
We offer the forms required to exercise any of the aforementioned rights. However, you may also use the forms prepared by the Spanish Data Protection Agency (AEPD). These forms must be signed electronically or accompanied by a photocopy of the data subject’s national identification card. If you are acting on another’s behalf, a copy of their national identity card or electronic signature is required.
Forms must be submitted in person to the SISTERS HOSPITALLERS S.H.J. GENERAL GOVERNMENT or sent by post or email to the addresses that appear in the“Controller” section.
You have the right to file a claim against the SISTERS HOSPITALLERS S.H.J. GENERAL GOVERNMENT in the event that you feel the exercise of your rights has not been properly addressed.
The maximum resolution period will be one month from the receipt of your request and may be extended for a further two months based on the volume of claims submitted or their complexity.
Please, notify us in writing of any changes to your personal data in order to keep the information on file current.