Privacy policy

This privacy policy has been drawn up in accordance with the European General Data Protection Regulation, EU 2016/679 (hereinafter, GDPR) and the Organic Law on Personal Data Protection and Guarantee of Digital Rights (hereinafter, LOPDGDD).

In this privacy policy we explain everything you need to know about the processing of personal data in our organisation. That is, what personal data we process and store when users browse our website, buy any of our products or sign up for any of our services, the reasons why we collect and process that data, whether we share it with third parties, for how long we store it, and what your rights are and how they can be exercised.

Controller
Data processing on this website
Social networks
Disclosures of data to third parties and international data transfers
Where do we store the data? For how long?
Rights of data subjects and how to exercise them
User responsibility
Minors
Security measures
Can this Privacy Policy be changed?
Regulatory compliance certificate

1. Controller

Under article 4.7 of the GDPR, the controller of personal data on this website is Associació Atesmaps.

The identification and contact details of the controller of personal data on this website are as follows:

Associació Atesmaps

Tax ID (NIF): G05481882
Address: C/ Reis Catòlics 3, 2on 1a- 08017 Barcelona
Telephone: +34 678 62 70 72
Email: info@atesmaps.org

If you have any questions about the processing of your personal data or want to exercise your rights, you can contact the controller by post or by email at the addresses given above.

2. Processing of personal data on this website

2.1 SSL encryption

For security reasons and, in particular, to prevent the leak or theft of personal or confidential data, our website uses SSL encryption technology. This technology encrypts the data traffic between your browser and our website, thus preventing third parties from seeing or intercepting the personal or confidential data you send us when you browse or buy through our website.

Web pages whose URL begins with "https://", as is the case with our website, offer a secure connection as they are protected by an SSL or TLS certificate that encrypts the flow of information.

2.2 Server log files

When you access our website we automatically collect and process a series of data provided by your browser, known as "server log files". This data includes:

Version and type of browser with which you accessed our website.
The operating system you use on your device.
Referring links.
Duration of the visit.
IP address.
Time and date of access to the website.

The data detailed above is technically necessary for you to browse our website in an optimal way, avoiding errors or failures in the playback of content or functionality of our website. This data will not be combined with other data sources.

The lawfulness of the processing of this personal data is based on our legitimate interest as operators of this website and of the APP -Art. 6.1.f) of the GDPR-. The legitimate interest pursued is to offer a website free of technical errors, compatible with the main browsers and operating systems and with navigation that is friendly for our users or customers.

2.3 Cookies

This website uses cookies. Cookies are small text files stored in your browser for the following purposes:

Enabling the playback of content and functionalities of the website.
Improving the browsing experience of users.
Analysing the use of our website in order to improve our services and products.
Personalising content and advertising.
Improving the security of our website.

If you would like more information about the use of cookies on our website, see our Cookies Policy.

2.4 Contact forms, registration in the ATESMAPS APP, calls and emails

If you decide to fill in any of the contact forms available on our website, or if you contact us by phone call or email, you may provide us with certain personal data so that we can reply to your query, complaint or request. That personal data would be, mainly, the following:

First name and surname
Date of birth
Contact telephone number
Email
Gender
Profession not related to avalanches - related to avalanches, specific to avalanches
Avalanche terrain training - no training - recreational level 1 - recreational level 2 - professional courses
Avalanche terrain experience - no experience - apprentice - expert
Frequency of outings - low - medium - high
Usual type of terrain - simple - challenging - complex
BPA danger level - level 1-2, level 1-3, level 1-4
Any other personal data that you decide to provide through the contact form.

The lawfulness of the processing of this personal data is based exclusively on the consent of the data subject -Art. 6.1.a of the GDPR-.

You have the right to withdraw your consent to this processing at any time; to do so, simply let us know by email to info@atesmaps.org or by post to C/ Reis Catòlics 3, 2on 1a- 08017 Barcelona (in any case, you will need to prove your identity by providing a photocopy of your DNI, NIE or passport).

2.5 User/registered customer account

To activate your account, you will need to provide us with certain personal data when you sign up, specifically:

Username
First name and surname
Date of birth
Contact telephone number
Email
Gender
Profession not related to avalanches - related to avalanches, specific to avalanches
Avalanche terrain training - no training - recreational level 1 - recreational level 2 - professional courses
Avalanche terrain experience - no experience - apprentice - expert
Frequency of outings - low - medium - high
Usual type of terrain - simple - challenging - complex
BPA danger level - level 1-2, level 1-3, level 1-4

In addition to the data needed to create your account, we may also process the following personal data related to your activity on our website, your geolocation when you use the APP, or information on the means of payment you have used.

The lawfulness of the processing of this personal data is based on the consent of the data subject -Art. 6.1.a) of the GDPR- or on its necessity for the performance of a contract or for the implementation of pre-contractual measures requested by the data subject -Art. 6.1.b) of the GDPR-.

We will store this data until you ask us to destroy it, withdraw your consent, decide to close your account permanently, or the reason for which the data was collected expires.

If you want to close your account permanently, you can do so from the settings panel of your user profile or ask us at the following email address: info@atesmaps.org.

2.6 Newsletter

To sign up for our Newsletter and receive our news and promotions you will need to provide us with an email address.

All our promotional emails have a link at the bottom that allows you to unsubscribe from our Newsletter. If you want to unsubscribe now, you can do so through the link in the Newsletter or by sending an email stating the email address you signed up with to info@atesmaps.org.

Our Newsletters are sent through the MailChimp platform, based in Georgia, United States. As this is an international data transfer and to ensure compliance with article 26, paragraph 2 of the GDPR, MailChimp has incorporated contractual clauses in order to add adequate safeguards regarding the protection of privacy and the fundamental rights and freedoms of individuals for the transfer to the US; if you want to read the whole document of the contractual clauses you can do so by following this link.

The lawfulness of the processing of this personal data is based exclusively on the consent of the data subject -Art. 6.1.a) of the GDPR-.

We will store your email address until you ask us to destroy it, withdraw your consent or unsubscribe from our Newsletter.

2.7 Observations

The website Atesmaps will publicly show the username, not the first name and surname, on the observations made by the user, together with their experience in avalanche terrain (TA Experience) according to the data provided by the user.

3. Social networks

The purpose of tools such as Facebook, Twitter, Instagram, etc. or other social networks is to give visibility and reach to the activities we carry out and to the products or services we offer. These tools store personal data on their respective servers and are governed by their own privacy policy. We recommend reviewing and reading the terms of use and privacy policies of the social networks used. We also recommend that you review the user privacy settings offered by each of these social networks.

Associació Atesmaps reserves the right to remove from its social networks any information posted by third parties that breaches the law, incites others to do so or contains messages that undermine the dignity of persons or institutions. It also reserves the right to block or report the profile that is the author of these messages.

4. Disclosures of data to third parties and international data transfers

As a general rule, Associació Atesmaps will not communicate or disclose your personal data to third parties, except where legally required, or in the case of notification of an accident or avalanche to entities related to the security forces or civil protection so that they can contact you and ask you some questions about the state of the avalanche, injured persons, etc., in which case it will only disclose what is strictly necessary to comply with the legal obligation.

Associació Atesmaps has contracted service providers that require access to certain personal data in order to provide their services (for example, payment service providers, hosting services, IT support services or accounting administration services).

These service providers act as processors, so they can only use the personal data they have access to in order to provide their services or follow the controller's instructions and, in no case, for their own purposes or to disclose it to third parties.

Associació Atesmaps has signed personal data protection contracts with these processors that set out the subject matter, duration, nature and purpose of the processing, the type of personal data, the categories of data subjects, the legal obligations of both parties on data protection and the rights of the controller.

No international data transfers to third countries are planned. If at any time they were to be carried out, you will be informed beforehand in order to obtain your express consent.

5. Where do we store the data? For how long?

The personal data obtained will be stored within the EU; where data is sent to third parties outside the EU, we will make sure that they offer a sufficient level of protection and have adequate safeguards, such as legally binding instruments between public authorities or bodies, binding corporate rules within a group of companies, standard data protection clauses, codes of conduct or certification mechanisms.

The data provided and collected through this website is stored on the servers of DigitalOcean LLC - EU528002224 101 Avenue of the Americas, 2nd Floor New York, in a data centre located in Amsterdam.

The information collected from the data subject will be kept for as long as it is necessary to fulfil the purpose for which the personal data was collected, so that, once the purpose has been fulfilled, the data will be deleted. Such deletion will lead to the blocking of the data, which will be kept only at the disposal of public administrations, judges and courts, to address possible liabilities arising from the processing, for the limitation period of those liabilities; once that period has elapsed, the information will be destroyed.

For information purposes, the legal retention periods of information in relation to different matters are set out below:

DOCUMENT	PERIOD	LEGAL REF.
Accounting and tax documentation for commercial purposes	6 years	Art. 30 Commercial Code.
Tax documentation for the purposes of tax debts	4 years	Articles 66 to 70 of Law 58/2003, of 17 December, General Tax Law.

6. Rights of data subjects and how to exercise them

You can address your communications and exercise your rights by sending a request to the following email address: info@atesmaps.org.

Under the GDPR you can request:

Right of access: you can ask for information on the personal data we hold about you.
Right to rectification: you can notify us of any change in your personal data.
Right to erasure and to be forgotten: you can request the deletion, after blocking, of your personal data.
Right to restriction of processing: this means restricting the processing of the personal data.
Right to object: you can withdraw your consent to the processing of the data, objecting to its continued processing.
Right to data portability: in some cases, you can ask for a copy of your personal data in a structured, commonly used and machine-readable format to transmit it to another controller.
Right not to be subject to individual decisions: you can request that no decisions be taken based solely on automated processing, including profiling, that produce legal effects or significantly affect the data subject

In some cases, in order to comply with legal obligations, we may not be able to delete all of your personal data.

Likewise, if you have any complaint about the processing of the data you can lodge a complaint with the data protection authority. For more information, see this link (in Spanish).

7. User responsibility

The user is solely responsible for the truthfulness and correctness of the data included, releasing Associació Atesmaps from any responsibility in this regard. Users guarantee and are in any case answerable for the accuracy, validity and authenticity of the personal data provided, and undertake to keep it duly updated. The user agrees to provide complete and correct information on the registration or subscription form. Associació Atesmaps reserves the right to terminate the contracted services that have been entered into with users if the data they have provided is false, incomplete, inaccurate or out of date.

Associació Atesmaps is not responsible for the truthfulness of information that is not its own and for which another source is indicated, and therefore does not accept any responsibility for hypothetical damage that may arise from the use of that information.

Associació Atesmaps reserves the right to update, modify or delete the information contained on its website and may even limit or not allow access to that information. Associació Atesmaps is released from liability for any damage or harm that the user may suffer as a result of errors, defects or omissions in the information provided by Associació Atesmaps, provided that it comes from sources other than itself.

Likewise, the user certifies that they are over 14 years of age and have the legal capacity necessary to give consent to the processing of their personal data.

8. Minors

In principle our services are not specifically aimed at minors. However, should any of them be aimed at children under fourteen, in accordance with article 8 of the GDPR and article 7 of Organic Law 3/2018, of 5 December (LOPDGDD), Associació Atesmaps will require the valid, free, unambiguous, specific and informed consent of their legal guardians to process the minors' personal data. In this case, the DNI or another form of identification of the person giving the consent will be required.

In the case of those over fourteen, data may be processed with the user's consent, except in cases where the Law requires the assistance of those holding parental authority or guardianship.

9. Security measures

Associació Atesmaps has adopted the legally required levels of security for the protection of Personal Data, and endeavours to install any other additional technical means and measures within its reach to prevent the loss, misuse, alteration, unauthorised access and theft of the Personal Data provided to Associació Atesmaps.

Associació Atesmaps is not responsible for hypothetical damage or harm that may arise from interference, omissions, interruptions, computer viruses, telephone failures or disconnections in the operation of this electronic system, caused by reasons beyond the control of Associació Atesmaps; from delays or blockages in the use of this electronic system caused by deficiencies or overloads of telephone lines or overloads in the Data Processing Centre, in the Internet system or in other electronic systems, nor from damage that may be caused by third parties through illegitimate intrusions beyond the control of Associació Atesmaps.

Links to other websites: the website may contain links to other websites. By clicking on one of these links and accessing an external website, the visit will be subject to the privacy policy of that website, and Associació Atesmaps is released from any type of responsibility for its privacy policy.

10. Can this privacy policy be changed?

Associació Atesmaps reserves the right to modify and/or update this Privacy and data protection Policy to adapt to legislative developments, so we recommend reading it before each visit and browsing of the website. Notwithstanding the above, relationships established with users prior to the modification of the Privacy Policy will be governed by the rules in force at the time the user accessed the website to establish them, without prejudice to the provisions of the GDPR.

11. Regulatory compliance certificate

The legal texts of this Website have been drafted by Qualgest, a company specialised in data protection; in the following link you can see the ATESMAPS data protection certificate.

Cookies Policy

Contribute!