In order to manage your relationship as a volunteer in the Palladium Volunteer Programme, we will process your personal data to fulfil different purposes, always in accordance with the provisions of the regulations, respecting your rights and with total transparency.
To this end, in this Privacy Policy, which you can access at any time https://www.fundacionabelmatutes.org/es/palladium-cares/4-causes-to-take-action/politica-de-privacidad you can consult the full details of how we will use your data in the relationships we establish with you.
The main rules that regulate the processing that we will do with your personal data are:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter the GDPR).
- Organic Law 3/2018 of 5 December 2018 on the protection of personal data and guarantee of digital rights (hereinafter the LOPD)
Responsible for the processing
The data controller is PALLADIUM GESTION, S.L.U. with address for these purposes at: Avenida Bartolomé Roselló, 18, 07800 Ibiza (Balearic Islands) and C.I.F B16652760. The processing activities carried out on our websites involve the processing of personal data by the group of entities linked to PALLADIUM GESTIÓN, S.L.U.
Data Protection Delegate
PALLADIUM GESTION, S.L.U. has appointed a Data Protection Delegate, who will be available to answer any questions regarding the processing of your personal data and the exercise of your rights.
You can contact the Data Protection Delegate to send your suggestions, queries, doubts or complaints via this dirección:dpo@palladiumhotelgroup.com
Exercise of rights and filing of complaints with the Spanish Data Protection Agency (AEPD)
You may exercise your rights of access, rectification, opposition, deletion, limitation, portability of your personal data, to withdraw your consent and not to be subject to an automated decision, in accordance with the law, at rgpd@palladiumhotelgroup.com
In addition, if you have any claims arising from the processing of your data, you can address them to the Spanish Data Protection Agency www.aepd.es.
Categories and origin of the data
In the Palladium Volunteer Programme we will process different personal data in order to manage your relationship as a volunteer and, if you have given us your consent, to also process your data for the activities based on it.
To make it easier for you to understand, we have organised the data we process into the categories listed below. Not all of the categories of data listed below are used for all data processing.
The categories of data used for the various processing operations set out below are as follows:
- Data that you have provided to us when you signed up as a volunteer or during your relationship with us.
- Identification and contact details: your identification document, name and surname, contact information and date of birth.
- Socio-economic data: details of your status as a Palladium employee or family/personal relationship with a Palladium employee.
- Data observed in the maintenance of the volunteering relationship and participation in activities.
- Participation data: data obtained from your participation in activities (type of activity, date and time).
- Specially protected data.
You guarantee to provide only accurate and up-to-date personal data.
Data processing
The processing carried out by the Palladium Volunteer Programme is described below, detailing its purpose and the legal basis that enables it:
Processing required for voting and selection of Opportunities among employees
These processing operations are necessary to manage their participation in the voting process for the social action Opportunities that each Hotel has at its disposal at the beginning of the Campaigns.
Processing necessary for the execution of the volunteer relationship
The legal basis of these processing operations is the fact that they are necessary to manage your participation in the volunteer programme, as well as in the different volunteer actions in which you wish to participate. Opposition to the processing of this data would imply your cancellation as a volunteer.
This includes the registration and management of your registration on the platforms, if any, where you can review and sign up for the volunteering activities that the Programme has at any given time.
Consent-based processing
These processing operations are based on your consent. We will ask you for your consent through the channels through which we interact with you, in the registration process or on the website.
The processing operations that we base on consent are the following:
- Capture, reproduction and/or publication of your image and/or sound in volunteer activities. If you consent, the photographic and/or audiovisual report/material in which your image(s) appear(s) may be disseminated in any media (TV, press, internet, etc.) and in any advertising and media support (brochures, banners, panels, website, activity reports, publications, reports, etc.), all without limitation and including any other media and supports necessary for the dissemination of the programmes and activities developed by the entities indicated, by themselves, by the entities indicated, by themselves, by the entities indicated, by the entities indicated and by the entities indicated. ), all without limitation and including any other medium and media necessary for the dissemination of the programmes and activities carried out by the aforementioned entities, by themselves or in collaboration with other entities, with the aim of promoting the activities of the aforementioned entities in compliance with their corporate or foundational purpose, and not for profit, for a maximum period of two (2) years from the date of acquisition.
- Use of additional information that you provide us with to develop your volunteer profile.
Data recipients
Communication of data in the outsourcing of services
On occasions, The Palladium Volunteer Programme uses service providers with potential access to personal data.
These service providers provide adequate and sufficient guarantees in relation to the processing of data, as we carry out a responsible selection of service providers that incorporates specific requirements in the event that the services involve the processing of personal data.
The types of services that we can commission from service providers are:
- Back office services
- Administrative support services
- Auditing and consultancy services
- Marketing and advertising services
- Survey services
- Call centre services
- Logistics services
- Physical security services
- IT services (systems and information security, cyber security, information systems, architecture, hosting, data processing)
- Telecommunications services (voice and data)
- Printing, enveloping, mailing and courier services
- Information storage and destruction services (digital and physical)
- Building, plant and equipment maintenance services
- Event organisation services
Retention periods
The Palladium Volunteer Programme will process your data for as long as you continue to maintain your volunteer status. Once your relationship as a volunteer is terminated, we will keep your data only to comply with legal obligations and to allow the formulation, exercise or defence of claims during the period of limitation of actions arising from your relationship with The Palladium Volunteer Programme. With respect to the data we process based on your consent, it will be used for as long as you have given your consent and we will stop using it when you revoke your consent.
Data transfers outside the European Economic Area
The Palladium Volunteer Programme processes your data within the European Economic Area and, in general, we contract service providers also located within the European Economic Area or in countries that have been declared with an adequate level of protection.
If we need to use service providers that carry out processing outside the European Economic Area or in countries that have not been declared with an adequate level of protection, we would ensure that we guarantee the security and legitimacy of the processing of your data.
To this end, we require adequate safeguards from these service providers in accordance with the GDPR, for example, by requiring them to have binding corporate rules that guarantee data protection similar to that provided by European standards or to subscribe to EU standard clauses.
Automated decisions
The Palladium Volunteer Programme does not carry out any processing operations in which decisions are taken that could have legal effects on you or could significantly affect you (based solely and exclusively on automated processing, i.e. without the participation of a person).
Revision
We will review this Privacy Policy from time to time in order to keep you informed, for example, when new rules or criteria are published or new processing operations are carried out.
We will notify you through the usual communication channels whenever there are material or important changes to this Privacy Policy.