es | ca | en |

Privacy policy

1.- RIGHT TO INFORMATION

In accordance with Article 11 of Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (hereinafter, LOPDGDD) and Article 13 of the General Data Protection Regulation 2016/679 (GDPR), we hereby inform you of the following:

1.1.- Identification of data controllers:

The data controller is the entity that decides to collect data and how the information it manages will be used. In this case, it is:

the Private Foundation of the Higher School of Cinema and Audiovisuals of Catalonia (hereinafter, ESCAC), with registered address at Plaza de la Harinera 9, 08222 Terrassa (Barcelona), tax identification number G60464229, registered in the Foundations Register

Contact email: info@escac.es

Telephone: +34 937 361 555

You can contact the data protection officer by email at lopd@escac.es. The officer is responsible for ensuring that the rules governing the processing of information carried out by the data controller are correctly applied.

 

1.2.- Purpose of data processing, retention periods and legal basis.

1.2.1.- General purpose

The data controller will use the data you provide to us by any means for as long as you maintain a relationship with it. The data will be incorporated, as provided by you, into a database owned by the data controller.

We will use the data to:

  • provide you with the services you request
  • send you information about our activities by email, post or WhatsApp.

The legal basis for this processing will be the contractual or other relationship you maintain with the data controller and the consent you give by accepting this notice.

The data generated will be retained for as long as you maintain a relationship with the data controller and, thereafter, for the limitation period applicable to legal actions, which in some cases may be up to 10 years.

1.2.2.- Processing of images.

The data controller documents the public events it organises with photographs and videos in order to share them on its website or in other public information channels, such as the website itself, social media accounts held by the data controller, its own publications or the press. The social media platforms on which ESCAC has an account are: Instagram, Facebook, X, LinkedIn, TikTok.

You can find out more about this section by consulting the data controller’s website or contacting the DPO.

The processing of these images is lawful on the basis of the consent of the persons concerned or pursuant to Article 8 of Organic Law 1/1982 on the protection of the right to honour, privacy and one’s own image.

The images captured will be retained for historical purposes until you revoke the authorisation you have given us.

1.3.- Categories of recipients.

To fulfil the purposes set out above, the following parties will have access to your data:

  • Personnel duly authorised by the data controller.
  • The suppliers required to fulfil your request.
  • Public administration bodies acting within the scope of their powers.

You can find out more by consulting the DPO.

1.4.- International data transfers.

The data controller uses the following platforms, which may involve transfers of data outside the Schengen Area:

  1. Google (G-Suite). For more information: https://support.google.com/a/answer/2888485?hl=es
  2. Microsoft. For more information: https://privacy.microsoft.com/es-es/privacystatement
  3. Mailchimp: For more information: https://www.intuit.com/privacy/statement/
  4. Social media listed on our website

All information about the rights of users who have consented to digital processing is included in the legal notices of the websites hosting the software and applications. Since access is free, we consider the full content of those notices to be reproduced here. Given the length of the published policies, you may request a copy by contacting the data controller at the addresses listed in section 1.1 of this document.

1.5.- Rights of the data subject

You have the right to access, rectify and erase your data, to object to its processing, to restrict processing, to request data portability, not to be subject to automated individual decision-making, and to withdraw any consent you have given.

To exercise these rights, you may write to the data controller at the addresses stated in this policy, or send an email to lopd@escac.es with “PROTECCIÓN DE DATOS” in the subject line, attaching a photocopy of your DNI, NIE or passport to the email.

1.6.- Right to lodge a complaint.

The authority competent to oversee the proper application of the rules on information processing is the Spanish Data Protection Authority, located at Calle Jorge Juan n. 6, Madrid.

1.7.- Obligations of the data subject.

The data subject must provide accurate and up-to-date information in all data collection processes and is solely responsible for any breach of this obligation.

The data that must be provided are marked on the data collection forms, according to the request made by the data subject. Failure to provide this data may make it impossible to participate in the activity or provide the requested service.

1.8.- Profiling

To achieve the data controller’s objectives and, above all, to provide users with more personalised, attentive and effective service, it is sometimes necessary to create profiles of service recipients. Profiles are never created by exclusively automated means.

 

2.- USER CONSENT

The user is understood to accept the established conditions by clicking the ‘ACCEPT’ button found on all data collection forms, or by sending an email to the contact addresses listed on the website.

Personal data are stored in the data controller’s general administration database; the data controller, in all cases, guarantees the technical and organisational measures needed to preserve the integrity and security of the information it processes.

 

3.- SECURITY

The general database has the required security document and uses all technical means at its disposal to prevent the loss, misuse, alteration, unauthorised access to or theft of the data you provide. Personal data are processed in accordance with the provisions of Organic Law 3/2018 on the protection of personal data and the guarantee of digital rights, and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.

 

4.- USE OF IP ADDRESSES

To help you explore resources we believe are of interest to you, you can find links to other pages on this website.

This privacy policy applies only to this website. The data controller does not guarantee that this policy is complied with on other websites, nor is it responsible for access via links from this site.

Title
Popupcontent
Contacta con nosotros
Aceptar