Privacy Policy
Personal data processing information in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Law 3/2018 (LOPDGDD).
Last updated: November 2025
1. Data controller
2. Purposes and legal basis
- Contact forms — Legal basis: legitimate interest and consent (Art. 6.1.a and 6.1.f GDPR).
- Volunteer applications — Legal basis: pre-contractual relationship (Art. 6.1.b GDPR).
- Donations — Legal basis: legal obligation and contract performance (Art. 6.1.b and 6.1.c GDPR).
3. Data recipients
We do not transfer your data to third parties except by legal obligation. We use Hostigal (hosting, Spain) as a data processor.
4. Retention periods
Data is retained for the time necessary to handle your request and, thereafter, for the legally applicable periods (minimum 3 years for communications; 5 years for accounting records).
5. Your rights
You may exercise your rights of access, rectification, erasure, restriction, portability and objection by writing to info@riendasdeesperanza.org. You also have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es).
6. Security
We apply appropriate technical and organisational security measures including HTTPS/TLS encryption, access restriction and CSRF tokens on all forms.