Privacy Policy

This Privacy Policy is intended to inform users (hereinafter, the “User”) of the website www.spainnab.org (hereinafter, the “Website”) about the collection and processing of their personal data.

1. Data Controller

The data controller responsible for processing your personal data is SpainNAB (hereinafter, the “Controller”), with tax identification number G-88115142 and registered office at Paseo de la Castellana, 194, 28046 Madrid, Spain.

For any questions regarding this Privacy Policy or the processing of your personal data, you may contact us at: dpd@spainnab.org

2. Legal Basis for Processing

The Controller processes the User’s personal data in order to provide the services requested through the Website. The legal basis for such processing is the User’s consent, which is given by accepting this Privacy Policy and selecting the relevant checkboxes.

We are committed to protecting your privacy and handling your personal data in a secure and transparent manner, in full compliance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR).

3. Purpose of Data Processing

Your personal data will be processed for the following purposes:

To provide the services requested by the User through the Website.

To send newsletters and commercial or promotional communications related to our services by email, SMS/MMS, post, telephone, or other equivalent electronic means, where the User has given consent.

You may withdraw your consent to receive marketing communications at any time by using the unsubscribe link included in each communication or by contacting us at info@spainnab.org.

4. Data Retention

Personal data will be retained for as long as necessary to fulfill the purposes for which it was collected and, where applicable, for the duration of the contractual relationship between the parties, unless the User requests its deletion.

Data will not be processed for purposes incompatible with those described above.

5. Accuracy of Data

The User guarantees that the personal data provided is accurate, complete, and up to date, and agrees to notify the Controller of any changes.
The Controller reserves the right to exclude Users who provide false or inaccurate data from its services, without prejudice to any legal actions that may apply.

Users are encouraged to take appropriate security measures to protect their data.

The Controller shall not be liable for any unlawful loss, alteration, or unauthorized access to data beyond its control.

6. User Rights

Users have the right to:
Access their personal data
Request rectification of inaccurate data
Request erasure of their data (“right to be forgotten”)
Request restriction of processing
Object to processing
Request data portability

Not be subject to decisions based solely on automated processing.

To exercise these rights, Users must provide proof of identity (e.g., a copy of a valid ID document) and contact the Controller using the details provided above.

Users also have the right to lodge a complaint with a supervisory authority, particularly in the EU Member State of their habitual residence, place of work, or place of the alleged infringement, if they believe their data has been processed unlawfully.

7. Data Security

The Controller implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including protection against unauthorized or unlawful processing, accidental loss, destruction, or damage.

Access to personal data is restricted to authorized personnel only.

However, Users are informed that no internet-based system is completely secure, and absolute security cannot be guaranteed.

.

8. Third-Party Links

The Website may contain links to third-party websites. The Controller is not responsible for the privacy practices or data processing carried out by such third parties.
Users are advised to review the privacy policies of any external websites they visit.

9. Changes to this Privacy Policy

The Controller reserves the right to modify this Privacy Policy at any time. Any changes will be communicated to Users via the Website or by other appropriate means depending on the circumstances.