INFORMATION ON THE COLLECTION OF PERSONAL DATA THROUGH THE WEBSITE WWW.FUNDACIONRAFANADAL.ORG
In accordance with current regulations on personal data protection, data controllers must provide users with certain additional information when collecting personal data.
The forms available on this website include the basic information on the collection and use of the data provided.
This privacy policy provides complementary and detailed information regarding the processing of your personal data.
At Fundación Rafa Nadal, we are committed to ensuring the confidentiality and security of the personal data we process.
Who is responsible for processing your data?
Fundación Rafa Nadal is the owner of the website www.fundacionrafanadal.org (the “Website”).
Fundación Rafa Nadal was established by public deed dated November 20, 2007, authorized by the Notary of Palma de Mallorca, Mr. Miguel Mulet Ferragut, and is registered in the Register of Foundations of the Ministry of Education, Culture and Sport under number 1539.
Contact details:
FUNDACIÓN RAFA NADAL
Ctra. Cales de Mallorca KM 1.2
07500, Manacor (Spain)
Tax ID (NIF): G-57533473
Email: info@fundacionrafanadal.org
Contact phone: +34 971 171 679
Principles applied in the processing of personal data
The following principles are applied by Fundación Rafa Nadal and by any member of its staff who has access to personal data. Personal data will always be:
- Processed lawfully, fairly, and transparently.
- Collected for specified, explicit, and legitimate purposes, and not further processed in a manner incompatible with those purposes.
- Adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
- Accurate and, where necessary, kept up to date, with all reasonable steps taken to ensure that inaccurate data are erased or rectified without delay.
- Kept for no longer than necessary for the purposes for which they are processed.
- Processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.
What personal data do we process?
The personal data provided through our Website will be limited to those strictly necessary for purposes related to the Foundation and its projects, and will be processed to handle requests for information or services made through the electronic means we provide.
The personal data collected from individuals who wish to receive our newsletter, request information, or make a donation include basic identifying and contact data such as name, surname, ID number, phone number, email address, date of birth, postal address, and professional details, as applicable, as well as information related to the donation (amount and frequency) only in the case of donors.
The personal data processed through our whistleblowing channels, secure space, or ethical mailbox are those necessary to handle the report, such as basic identification data, the relationship with the Foundation (if any), and details required to describe the facts being reported.
Users may choose not to identify themselves and may submit reports anonymously.
The information and personal data provided must be true, accurate, and complete, and must be kept up to date. Providing data through the forms is mandatory —at least those marked as such— and implies that you have been informed and have given your consent to this privacy policy.
Failure to provide this data, or providing incorrect data, will make it impossible for us to correctly process your requests.
All payments are processed through a secure payment gateway that operates under strict security standards for online transactions. The bank details entered are encrypted and securely transmitted to the bank’s servers and then verified with the issuing bank to prevent possible fraud or misuse. Payment method data are not stored.
For what purpose do we process your personal data?
On our Website, we may process your personal data to manage the sending of our newsletter to keep you informed about our activities and events, to provide you with the requested information, to manage your donation and issue the corresponding donation certificate (if requested), and also to handle any report submitted through any of the specific channels available on our Website.
How long do we retain your data?
Fundación Rafa Nadal will retain data for the period legally established to comply with its obligations, or for as long as necessary to fulfill the purpose for which they were collected and to determine any potential liabilities arising from that purpose and processing.
In the case of newsletters, data will be retained until you inform us that you no longer wish to receive them.
In the case of reports, the data will be kept only for as long as necessary to investigate the facts, unless the investigation leads to specific actions against the person reported, in which case the data may be kept for a longer period.
In any case, data are deleted three months after being entered into the whistleblowing system.
To determine the appropriate retention period for personal data collected on the Website, we also consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, and any applicable legal requirements.
What is the legal basis for processing your data?
The legal basis for processing your data for the purpose of sending newsletters is your consent.
For handling information or service requests, comments, or questions about our activities and projects, the legal basis is our legitimate interest.
In the case of donations, the legal basis is both the execution of a contract and compliance with legal obligations derived therefrom.
Finally, for the whistleblowing channels, the legal basis is compliance with legal obligations and the performance of a task carried out in the public interest.
Who will receive your data?
Personal data processed will not be communicated to third parties, except when required by law (for example, Tax Authorities, Judges and Courts, or Law Enforcement Agencies) or as expressly indicated in this policy.
Service providers acting as data processors on behalf of Fundación Rafa Nadal may have access to your data, always under the Foundation’s strict instructions.
These processors provide services related to IT support, web hosting, and communication or information systems used by the Foundation.
If you request a donation certificate, your data (name, surname, ID number, address, and donation amount) will be communicated to the Tax Administration to enable you to benefit from the corresponding tax deduction.
Personal data provided for the purpose of sending newsletters or invitations to participate in Fundación Rafa Nadal events may be processed by The Rocket Science Group LLC, a company based in the United States (USA).
Such processing constitutes an international data transfer, for which all guarantees required by applicable regulations have been observed — namely, the EU-U.S. Data Privacy Framework, which ensures that personal data transferred to the U.S. receive an equivalent level of protection as under the GDPR, or Standard Contractual Clauses, when applicable.
What are your rights?
Individuals who provide their personal data may exercise any of the rights established under personal data protection regulations, in particular:
- Right of access: to know whether your data are being processed and to obtain information about such processing.
- Right to object: to object to processing when it is based on legitimate interest.
- Right to rectification: to have inaccurate or incomplete personal data corrected.
- Right to erasure (“right to be forgotten”): to request the deletion of your personal data when there is no compelling reason for us to continue processing them.
- Right to restrict processing: in certain circumstances, you may request that processing be limited — in which case we will retain your data only for exercising or defending legal claims. Restriction applies when:
- You have exercised the rights of objection or rectification, and the Foundation is verifying whether your request should be granted.
- Processing is unlawful, but you oppose deletion.
- Data are no longer needed, but you request their retention for the establishment, exercise, or defense of legal claims.
- Right to data portability: to receive your data in a structured, commonly used, machine-readable format, and to transmit them to another controller.
- Right to withdraw consent: you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of prior processing based on consent before its withdrawal.
To exercise these rights, you may write to Fundación Rafa Nadal, Ctra. Cales de Mallorca KM 1.2, 07500 Manacor (Spain), or send an email to info@fundacionrafanadal.org, indicating “Data Protection – Exercise of Rights” in the subject line.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe your rights have been violated.
Use of Social Media and Social Buttons on the Website
Fundación Rafa Nadal has profiles on the following social media platforms: Instagram, X, YouTube, and LinkedIn, with the main purpose of informing the public about its mission, activities, campaigns, and any events or news that may be of interest to its followers.
The Website includes social buttons that allow users to access Fundación Rafa Nadal’s profiles on the aforementioned platforms. These buttons do not collect user data unless the user interacts with them and is already logged into the respective social network.
Processing of Personal Data on Social Networks
If a user who has a social media profile decides to follow or interact with Fundación Rafa Nadal’s page or profile (for example, by clicking “Follow” or “Like”), the user thereby consents to the processing of the personal data that are public on their profile (such as name, profile picture, and any other information configured as public).
These data will be processed by Fundación Rafa Nadal exclusively for community management purposes, including:
- Interacting with the user and managing participation in activities or campaigns.
- Sending direct or private messages through social media channels (when allowed by the user’s privacy settings and relevant to the Foundation’s purposes).
- Analyzing community statistics to improve Fundación Rafa Nadal’s communication and activities.
Responsibility
Fundación Rafa Nadal is responsible for the processing of personal data it directly manages through its social media profiles.
However, users should be aware that each social network is primarily responsible for the data processing carried out within its platform.
Therefore, we recommend reviewing the privacy policy of each social network before joining or following our profiles.
If you have any questions regarding the processing of your personal data, please contact Fundación Rafa Nadal at: info@fundacionrafanadal.org