Data Protection Policy

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and the free movement of these data (hereinafter “RGPD”); and Organic Law 3/2018, of December 5, on the Protection of Personal Data and the guarantee of digital rights, the INTERNATIONAL BASQUE BALL FEDERATION, FIPV, according to its purposes, informs users that all information collected about personal data through different channels, forms, websites, etc. will be treated at all times, in accordance with the principles of lawfulness, loyalty, transparency, proportionality, data minimization, purpose limitation, confidentiality, integrity and accuracy established by the RGPD.
‍

1. INFORMATION FOR THE USER

The International Basque Ball Federation, hereinafter FIPV, is committed to full respect for the fundamental right to data protection, in accordance with applicable legislation.

Identification of the Responsible:

The FIPV, with address at; ARENA Pavilion — Casa del Deporte Plaza Aizagerria, 1, 31006 — Pamplona (SPAIN), is responsible for the processing of the user's personal data and informs them that these data will be processed in accordance with the provisions of Regulation (EU) 2016/679, of April 27 (RGPD), and Organic Law 3/2018, of December 5 (LOPDGDD).

Contact the Data Protection Officer

We inform you that the FIPV Data Protection Officer is responsible for ensuring and supervising compliance with data protection regulations in FIPV, as well as their participation and communication in all matters related to the protection of personal data with interested parties.

Interested parties and/or users may contact the Data Protection Delegate regarding all these issues in the email: dpo@gmx.es

If you have questions about FIPV's use of your personal data, or if you want to exercise any of your rights, you can contact the Data Protection Delegate at any time by writing to indicate the reason for exercising the right by e-mail: dpo@gmx.es
Or you can contact us through the following postal mail:
TO/A
Data Protection Officer
Data Protection and Privacy Directorate.
ARENA Pavilion — Sports Center Plaza Aizagerria, 1, 31006 Pamplona.
If the request is made by the legal representative or volunteer, they must provide the corresponding powers of specific representation or legal mandate expressly designated for the exercise of the rights.

Principles applied to data processing:
In the processing of your personal data, the following principles will apply, which comply with the requirements of the European data protection regulation (RGPD):
- Principle of Legality, Transparency and Loyalty: The Data Controller will always require consent for the processing of personal data, which may be for one or more specific purposes about which the Data Controller will inform the user beforehand with absolute transparency.
- Principle of data minimization: The person responsible will request only the data that is strictly necessary for the purpose or purposes that request them.
- Principle of Limitation of the Storage Period: The person responsible will keep the personal data collected for the time strictly necessary for the purpose or purposes of the treatment. It will also inform you of the corresponding conservation period depending on the purpose.
- Principle of Integrity and Confidentiality: The personal data collected will be treated in such a way that their security, confidentiality and integrity are guaranteed.
FIPV applies the necessary protocols to prevent unauthorized access or misuse of the personal data of its users by third parties.

Purpose of the Treatment:

When the user accesses the Website and wishes to maintain a relationship with the FIPV, the following processing operations may be carried out:
- The processing of inquiries, requests, or any type of request that is made by the user through any of the contact forms or forms that are made available on the Responsible's website.
- The management of complaints using the form indicated for this purpose.
- With the user's consent, the submission of communications related to sports activities, events, news, etc.
- Social media management: FIPV has created a profile on Social Networks: Facebook, Instagram, Twitter, LinkedIn, YouTube, LinkedIn, LinkedIn, LinkedIn, LinkedIn, Google+, or any other, so the following operations can be included:
-Process requests and inquiries made to the person in charge, report on activities and events organized by the person in charge.
-Inform about activities, championships, information related to Covid, etc.
-Interact through official profiles
‍

Legal basis of the treatment:

The processing of personal data is legitimate according to Article 6 of the RGPD as follows:

-With the user's consent:
- For social networks: the interested party has given their consent to the processing of their personal data for one or more specific purposes. The user has a profile on the same social network and has decided to join the FIPV social network, thus showing interest in the information published therein, therefore, when requesting a service or following our official profiles, they provide us with their consent for the processing of those personal data published in their profile.
- The user can access the privacy policies of the social network itself at any time, as well as configure their profile to guarantee their privacy. The FIPV has access to and processes the user's public information, especially their contact name. These data are only used within the social network itself and will only be incorporated into a FIPV file when necessary to process the user's request.
- To analyze user navigation. The Owner collects other non-identifying data that are obtained through the use of cookies that are downloaded to the user's computer when browsing the website whose characteristics and purpose are detailed in the Cookies Policy.
- For communications made by FIPV.
‍

-For the legitimate interest of the Responsible:
- Carry out market studies, statistics, etc...
- Process orders, requests, etc. at the user's request.
For the execution of a contract, the fulfillment of a legal obligation, the fulfillment of a mission in the public interest, the exercise of public powers or the legitimate interest of the FIPV or third parties.

When the processing of personal data is based on your consent, you can withdraw it at any time.

Data retention periods:

The data will be kept for the time necessary depending on the purpose for which they were provided or collected, without prejudice to, where appropriate, the exercise of your right of deletion.

In relation to the processing necessary for sending information, we will keep your data in the system as long as you do not ask us to delete it.
- Data for managing the relationship with the Federation, managing its services, billing, etc. will be kept for as long as the relationship is in force or until users revoke their consent. Once this relationship has ended, if any, the data may be kept for the time required by applicable legislation and until any responsibilities deriving from that relationship are prescribed. Statistical reports related to market studies may be kept indefinitely, although they do not include personal data.
- The data for the management of queries and requests will be kept for the time necessary to respond to them, with a maximum period of one year and will be deleted with appropriate security measures to ensure the anonymization of the data or the total destruction of the same.
‍

Data communication:

No communication of personal data to third parties is foreseen except, if necessary for the development and execution of the purposes of the processing, to our service, information technology and communication providers, with whom the responsible party has signed the confidentiality and data processor contracts required by current privacy regulations.

- Also for navigation analysis:
Google Analytics is a web analytics service provided by Google, Inc., a Delaware company whose main office is at 1600 Amphitheater Parkway, Mountain View (California), CA 94043, United States (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the Owner analyze the use made by Users of the Website. The information generated by the cookie about the use of the website (including the IP address) will be directly transmitted and stored by Google on servers in the United States.
More information at: https://analytics.google.com
- Google AdSense is a set of advertising services provided by Google, Inc., a Delaware company whose main office is at 1600 Amphitheater Parkway, Mountain View (California), CA 94043, United States (“Google”). AdSense uses cookies to improve advertising, segment it according to content that is relevant to users, and improve campaign performance reports.
More information at: https://www.google.com/adsense
On the page of Google Privacy Policy explains how Google manages privacy with regard to the use of cookies and other information.
You can also see a list of types of cookies that Google and its collaborators use and all the information related to their use of advertising cookies.

With regard to the information provided by the user through social networks, the FIPV, if the user becomes a friend or follower of the FIPV social networks, the data will be processed to keep you informed of our activities, competitions, sports-related news, etc... through these channels. These data will be treated on the legal basis of their consent and will be kept as long as the user remains a friend or follower, and may revoke the consent at any time, although this will not affect the lawfulness of the treatments carried out previously. Providing data for this purpose is voluntary, although, if not to do so, the user cannot be a friend or follower on social networks.

In those cases where user registration is carried out through social networks, the personal data that will be processed will come from the social network in question, to which, previously, the user will have provided such data for the purposes set out in their corresponding privacy policies. The categories of data that will be collected from the social network in question are those that appear in the registration form and those that have been provided to that social network.

FIPV recalls the importance of reading the Privacy Policies of social networks so that the user can configure from the profile the information they want to make public and their security and privacy restrictions.

Rights of the user/interested party:

We inform you that you can exercise the following rights:
- Right of access to personal data to know which ones are being processed and the processing operations carried out with them;
- Right to rectify any inaccurate personal data;
- Right to delete personal data, when this is possible;
- Right to request the limitation of the processing of personal data when the accuracy, legality or the need for the processing of the data is doubtful, in which case, we may keep them for the exercise or defense of claims;
- Right to the portability of your personal data, when the legal basis that enables us to process those indicated in the table above is the contractual relationship or consent;
- Right to object to the processing of personal data, when the legal basis that enables us to process those indicated in the table above is legitimate interest. For these purposes, we will stop processing your data unless we have an overriding legitimate interest or for the formulation, exercise or defense of claims.
- Right to revoke your consent at any time.
You can exercise your rights at any time and free of charge by contacting the International Basque Ball Federation (FIPV) at Plaza Aizagerria 1, 31006 Pamplona, Spain. Or by e-mail: dpo@gmx.es, indicating the right you wish to exercise and your identifying data.
- Right to file a complaint with the data protection supervisory authority, Spanish Data Protection Agency (www.aepd.es) if you consider that the treatment does not comply with current regulations.

‍

2. SECURITY MEASURES

The FIPV has adopted the necessary technical and organizational measures to guarantee the security of personal data and legally required by the RGPD and LOPDGDD, in accordance with the principles described in article 5 of the regulation, by which they are treated in a lawful, loyal and transparent manner in relation to the interested party and adequate, relevant and limited to what is necessary in relation to the purposes for which they are treated.

In addition, the FIPV has installed all the technical means and measures available according to the current state of technology and the nature of the data stored to prevent the loss, misuse, alteration, unauthorized access and theft of the data provided, whether they come from human action or from the physical or natural environment.

FIPV reviews the above-mentioned measures to ensure that they are adequate according to criteria of suitability and effectiveness, and management processes have been defined within our regulatory framework to detect changes in the nature, context, scope, purposes and risks of the treatment, to activate the updating of measures for the protection of the rights and freedoms of individuals.
For more information on privacy guarantees, you can contact the International Basque Ball Federation (FIPV). Plaza Aizagerria 1, 31006 Pamplona. email: info@fipv.net

‍

3. MINORS

‍Minors may not use the services available through the web without the prior authorization of their parents, guardians or legal representatives, who will be solely responsible for all acts carried out through the web by the minors in their care, including the completion of forms with the personal data of such minors and the marking, if appropriate, of the boxes that accompany them.

‍