Privacy Policy

In accordance with the provisions of Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights; Royal Decree 1720/2007, of December 21; Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR); Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE); and other applicable regulations, Fundación Consejo España–EE.UU guarantees the protection and confidentiality of all personal data provided by users in accordance with the General Data Protection Regulation.

The Foundation’s Data Protection Policy is based on the principle of proactive responsibility, under which the data controller is responsible for ensuring compliance with the legal and regulatory framework and must be able to demonstrate such compliance to supervisory authorities.

All personal data provided will be processed in accordance with the GDPR. Fundación Consejo España–EE.UU has adopted all legally required protection levels and implemented the technical measures available to prevent loss, misuse, alteration, or unauthorized access by third parties. However, users should be aware that no online security measures are completely infallible.

Data Controller: Who We Are

Name: Fundación Consejo España–EE.UU
Tax ID (CIF): G81737736
Address: Calle Serrano Galvache 26, Torre Sur, 8th Floor, 28033 Madrid
Telephone: +34 91 394 87 31
Email: general@spainusa.org

Purpose of Data Processing: What Do We Use Your Data For?

All data provided by clients and/or website visitors will be included in a data processing record maintained by Fundación Consejo España–EE.UU. This information is necessary to provide the requested services, address inquiries, manage information requests, and share updates about events, activities, or information that may be of interest.

Our policy is not to create user profiles based on the data provided.

Legal Basis: Why Do We Need Your Data?

Contractual relationship: Applies when you purchase one of our products or contract one of our services.
Legitimate interest: To respond to your queries or claims and manage the collection of outstanding amounts.
Consent: If you are a website user, by checking the box on the contact form, you authorize us to send you the necessary communications to respond to your inquiry or information request.

Data Sharing: Who Do We Share Your Data With?

We do not share your personal data with third parties except when required by law. For example, tax regulations may require us to provide information to the Tax Agency regarding financial operations above certain thresholds.

If, beyond these cases, we ever need to share your personal data with other entities, we will request your prior consent through clear and explicit options that allow you to decide.

Data Transfers: Where Could Your Data Be Sent?

We do not carry out international transfers of personal data for any of the purposes stated.

Data Retention: How Long Will We Keep Your Data?

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. When determining retention periods, we consider the risks of processing, our contractual, legal, and regulatory obligations, internal retention policies, and our legitimate business interests.

Once the relationship with you has ended, Fundación Consejo España–EE.UU will retain your data, duly blocked, for the period required by law to address potential liabilities.

Blocked data will be inaccessible and will only be processed for making them available to public authorities, courts, or tribunals in the event of legal claims or regulatory obligations.

Security: How Do We Protect Your Data?

We make every reasonable effort to maintain the confidentiality of the personal information processed on our systems. We maintain strict security standards to protect personal data against accidental loss, unauthorized access, misuse, or disclosure, taking into account technological developments, the nature of the data, and the risks to which they are exposed.

Our staff follow strict confidentiality rules, and any third parties providing support services are required to adhere to the same standards and allow us to audit compliance.

Your Rights: What Rights Do You Have as a Data Subject?

You may exercise the following rights at any time and free of charge:

Right of access – to know which personal data are being processed and how.
Right to rectification – to correct inaccurate or incomplete data.
Right to erasure – to delete your personal data when possible (e.g., when required by law).
Right to restriction of processing – to limit processing when accuracy, legality, or necessity is in doubt; data may be retained for legal defense purposes.
Right to object – to object to processing when based on legitimate interest. The Foundation will stop processing your data unless required for legal claims.
Right to data portability – to receive your data or transfer it to another controller when processing is based on consent or a contract.
Right to withdraw consent – to revoke your consent at any time.

To exercise your rights, contact us at Calle Serrano Galvache 26, Torre Sur, 8th Floor, 28033 Madrid, including a copy of your ID.

Right to File a Complaint: Where Can You Report a Violation?

If you believe your rights have not been properly addressed, you may file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) through:

Website: https://www.aepd.es
Postal address: C/ Jorge Juan, 6, 28001 Madrid
Telephone: 901 100 099 / 912 663 517

Updates: Changes to This Privacy Policy

Fundación Consejo España–EE.UU reserves the right to modify this policy to adapt it to new legislative or judicial developments that may affect compliance.