Your personal data and your rights
Your personal data collected on this form are processed by the joint controllers FRC and SRC for the management and online publication of your project on the website, as well as for prospecting and communication activities related to the FRC and SRC’s actions and projects, and surveys about your experience on the website, unless you object to them.
The lawful bases for processing are:
– For management and online publication of the projects on the website, and for prospecting and communication activities related to the FRC and SRC’s actions and projects, and surveys about your experience on the website: the FRC and SRC’s legitimate interests to manage their relations with you, and to communicate to you information relating to their actions and projects for the FRC and SRC’s development.
– For management of your right to object to receive prospecting and communication operations: FRC and SRC’s legal obligations.
Fields marked with an asterisk in the personal data collection form must be provided. Otherwise, the FRC and the SRC will not be able to process your request.
The recipients of your personal data will be the FRC and SRC’s authorised personnel. However, your personal data may be communicated to technical service providers to achieve certain objectives on our behalf (for example, companies in charge of website development and maintenance, website hosting, etc.). These technical service providers:
- have limited access to your personal data, only for the performance of their services;
- have a contractual obligation to use your personal data in accordance with our instructions and with data protection legal provisions;
- are likely to be located outside the European Union, in particular in countries that do not ensure an adequate level of data protection. In this case, these data transfers are covered by appropriate safeguards, in particular the signing of standard contractual clauses adopted by the European Commission.
Personal data are kept:
- For management and online publication of the projects on the website: until your deletion of your project, or until the deletion of your project by the joint decision of the FRC and the SRC after having informed you in writing;
- For prospecting and communication activities related to the FRC and SRC’s actions and projects: two years from the date of your last contact with the FRC and the SRC, then removal;
- For the management of your right to object to receive prospecting and communication operations: 3 years from your exercise of your right to object.
Please note that you have the right to access your personal data, and to request that your personal data be rectified. In some cases, you have the right to request that your personal data be deleted, and to request restriction of processing of your personal data.
You also have the right to object to processing of your personal data, and to object to processing of your personal data for direct marketing purposes.
In accordance with article 26 of the Regulation EU 2016/679, you may exercise your rights in respect of and against the SRC and the FRC. The SRC’s Data Protection Officer serves as a point of contact. If you wish to make a request, please contact us at dpo@cruzroja.es or at the following address:
Spanish Red Cross
Data Protection Officer
C/ Av. Reina Victoria 26-28
28003 Madrid
If you think that your rights are not sufficiently respected, you can complain to the Spanish Data Protection Authority (AEPD) at www.aepd.es.
If you wish to contact the FRC’s data protection officer, please contact us at dpo@croix-rouge.fr, or by post at the following address:
French Red Cross
Data protection officer
98 Rue Didot
75014 Paris
If you think that your rights are not sufficiently respected, you can complain to the French Data Protection Authority, the “Commission nationale de l’informatique et des libertés” or CNIL, which is the lead supervisory authority.
