Privacy Policy
This policy describes how Fundalario collects, uses, and protects personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).
Section 1
Data Controller
The data controller responsible for processing your personal data is:
Fundalario
P.º de la Castellana, 200, Chamartín, 28046 Madrid, Spain
NIF: G98147165
Email: info@fundalario.com
Phone: +34 917 936 741
Fundalario is a non-profit entity registered in Spain. As data controller, Fundalario determines the purposes and means of processing personal data collected through this website and through its research and educational activities.
Section 2
Data Collected
Fundalario collects personal data in the following circumstances:
- Contact form: When you submit a message through our contact form, we collect your name, email address, and the content of your message.
- Voluntary participation in surveys: When individuals participate in our research surveys, we collect responses to questionnaire items. Survey data is collected anonymously and is not linked to identifiable individuals unless explicit consent is given for a follow-up contact.
- Website analytics: If you have consented to analytics cookies, we collect anonymised information about how you interact with the website, including pages visited, time spent, and general geographic region (country level). No individual is identifiable from this data.
- Server logs: Our hosting provider automatically records standard server log data, including IP addresses, browser type, and access timestamps, for security and operational purposes. This data is retained for a maximum of 30 days.
We do not collect special categories of personal data (sensitive data) as defined under Article 9 GDPR, and we do not collect financial account details or payment information of any kind.
Section 3
Legal Basis for Processing
Fundalario processes personal data on the following legal bases as established in Article 6 of the GDPR:
- Consent (Article 6(1)(a)): For analytics cookies and for any processing beyond what is strictly necessary to respond to your enquiry. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
- Legitimate interests (Article 6(1)(f)): For server log data retained for security purposes, where our legitimate interest in maintaining website security is balanced against your privacy rights.
- Performance of a task carried out in the public interest (Article 6(1)(e)): For anonymised survey data collected as part of our research activities, which constitute a public interest function of a non-profit educational entity.
Section 4
Purposes of Processing
Personal data collected through this website and our research activities is processed for the following purposes:
- To respond to enquiries submitted through the contact form
- To conduct anonymised research on financial literacy levels in Spain
- To improve the functionality and user experience of this website
- To maintain the security and integrity of our systems
- To comply with legal obligations applicable to Fundalario as a non-profit entity registered in Spain
We do not use personal data for marketing purposes, profiling, automated decision-making, or for any commercial activity. Fundalario does not sell, rent, or share personal data with third parties for their own marketing or commercial use.
Section 5
Retention Periods
We retain personal data only for as long as necessary for the purpose for which it was collected:
- Contact form data: Retained for a maximum of 12 months from the date of submission, unless an ongoing correspondence requires longer retention, in which case data is retained for the duration of that correspondence plus 6 months.
- Server logs: Retained for a maximum of 30 days, after which they are automatically deleted.
- Analytics data: Retained in aggregated, anonymised form. No individual-level data is retained beyond the active session.
- Survey data: Anonymised survey responses are retained indefinitely as part of our longitudinal research dataset. No personally identifiable information is retained in connection with survey responses.
Section 6
Third Parties and Data Processors
Fundalario may share personal data with the following categories of third parties, acting as data processors under our instruction:
- Hosting provider: Our website is hosted on servers located within the European Economic Area. The hosting provider processes server log data on our behalf.
- Email service provider: Messages submitted through the contact form are transmitted via a third-party email service. This provider processes message data solely for the purpose of delivery.
- Analytics provider: If you have consented to analytics cookies, anonymised usage data is processed by a third-party analytics service.
All third-party processors are bound by data processing agreements that require them to process data only on our instructions and in accordance with the GDPR. We do not share personal data with public authorities except where required by law.
Section 7
International Data Transfers
Fundalario processes personal data within the European Economic Area (EEA) wherever possible. Where any service provider is located outside the EEA, we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR, including Standard Contractual Clauses approved by the European Commission or adequacy decisions applicable to the recipient country.
You may request information about the specific safeguards applicable to any international transfer by contacting us at info@fundalario.com.
Section 8
Your Rights
Under the GDPR and the LOPDGDD, you have the following rights with respect to your personal data:
- Right of access (Article 15 GDPR): You may request confirmation of whether we process your personal data and, if so, access to that data.
- Right to rectification (Article 16 GDPR): You may request correction of inaccurate personal data.
- Right to erasure (Article 17 GDPR): You may request deletion of your personal data in certain circumstances.
- Right to restriction of processing (Article 18 GDPR): You may request that we restrict processing of your data in certain circumstances.
- Right to data portability (Article 20 GDPR): Where processing is based on consent or contract, you may request your data in a structured, commonly used, machine-readable format.
- Right to object (Article 21 GDPR): You may object to processing based on legitimate interests.
- Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at info@fundalario.com. We will respond within one month of receiving your request, as required by Article 12 GDPR. If you are not satisfied with our response, you have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos, AEPD) at www.aepd.es.
Section 9
Cookies
This website uses cookies. For detailed information about the cookies we use, the purposes for which they are used, and how to manage your cookie preferences, please refer to our Cookie Policy.
You can manage your cookie preferences at any time using the cookie settings panel accessible from the consent notice displayed when you first visit the site.
Section 10
Changes to This Policy
Fundalario may update this Privacy Policy from time to time to reflect changes in our data processing activities, applicable law, or regulatory guidance. When we make material changes, we will update the "Last updated" date at the top of this page.
We encourage you to review this policy periodically. Continued use of the website after any changes constitutes acknowledgement of the updated policy. If you have questions about any changes, please contact us at info@fundalario.com.