Privacy Policy

For the purposes of current regulations on personal data protection, through this Privacy Policy, Fundación Banco antander (hereinafter, the ‘Foundation’) informs users (hereinafter, the ‘User’ or ‘Users’) of its website  https://www.fundacionbancosantander.com/ which it owns and is responsible for (hereinafter, the ‘Website’), about its privacy policy.

The Foundation fully complies with regulations on personal data protection and, in particular, REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter, ’ GDPR"), and therefore the processing of personal data obtained through the Website will be carried out in compliance with the applicable legal guarantees and obligations.

Through this Privacy Policy, Users are informed that the personal data they provide through the Website will be processed by the Foundation, as well as any other data they may provide to the Foundation in the future.

Users must carefully read this Privacy Policy, which has been written in a clear and simple manner to facilitate understanding, and freely and voluntarily determine whether they wish to provide their personal data to the Foundation.

  1. Who is responsible for processing your data?
    • Data Controller: Fundación Banco Santander
    • Tax identification number: G-80576200
    • Contact details of the Data Controller
  2. Mandatory nature of data provision
    The information requested in the forms on the Website is, in general, mandatory (unless otherwise specified in the required field) in order to fulfil the established purposes. Therefore, if this information is not provided or is not provided correctly, it will not be possible to respond to your request, although you will still be able to freely view the content of the Website.
  3. Why do we process your data?
    3.1. Description of the purposes of the processing
    Through the Website, we may collect your data for different purposes:
    a. When you decide to subscribe to the newsletter service. In this case, we use your personal data to register you for the service and send you information about the Foundation's activities related to the topics you have specified as being of interest to you.
    b. When you wish to register and participate in any of the project calls offered by the Foundation through our website. In this case, you must register on the Website; this registration will allow you to apply for participation in the relevant call and in any other using the same username and password already created. Therefore, we will use the data you provide in this policy to register you on the Website and to manage your participation in the corresponding call for applications.
    In the event that, in order to participate in a call for applications, personal data other than that initially requested for registration on the Website and the corresponding registration for the call is required, this data will be specifically requested and you will be informed of the purpose of the processing in the corresponding applicable privacy policy.
    c. When you wish to participate in activities for employees, family members, or friends of employees. In this case, we use your data to ensure the event is organised correctly and as smoothly as possible, including, in some cases, managing access and parking (for events held at Grupo Santander's Financial City) and accessibility for people with disabilities or special needs.
    We may also send a satisfaction survey by email to participants to gather your opinion on these activities, so that we can adjust or adapt them to your preferences, whenever possible.
    3.2. Data retention periods or criteria.
    The personal data provided will be kept as long as the relationship with the User remains active.
    a. When you decide to subscribe to the newsletter service. For Users registered for the newsletter service, until they unsubscribe or request to be removed by the Data Controller. Once the unsubscription has been processed, your data will be kept duly blocked for a period of three years in order to deal with any possible claims regarding data protection arising from its processing, after which it will be completely deleted.
    b. When you wish to participate in any of the project calls.
    The personal data provided for registration on the Website will be kept until you unsubscribe or request otherwise from the Data Controller.
    The personal data provided for registration in the corresponding Call for Applications will be kept for as long as necessary to manage your participation in the Call and will be kept once the Call has ended, duly blocked for a period of five years in order to deal with any possible claims arising from its processing, after which it will be completely deleted.
    c. When you wish to participate in activities for employees, their family members, or Friends
    Personal data provided for participation and attendance at activities for employees, family members or friends of employees will be kept for the period necessary for the organisation of the event. Once the Event has ended, personal data will be kept for a maximum period of 9 months in order to send out the corresponding satisfaction surveys. Likewise, with the aim of improving the organisation and attendance of activities, Fundación Banco Santander will compile statistics on attendance in order to improve internal activity management processes, using your name, surname(s) and email address.
    Once the retention periods set out in each of the activities have elapsed, the data will remain blocked for a period of five years in order to deal with any claims arising from their processing, after which they will be completely deleted.
    3.3. Automated decisions, profiling and applied logic.
    No automated decisions will be made and users will not be profiled.
  4. Where does your data come from?
    4.1. Detailed information on the origin of the data
    The data we process has been provided to us directly by Users through: (i) the corresponding forms on the Website, both for subscribing to the newsletter service and for registering for one of our events; or (ii) the registration forms on the Santander Group Intranet for activities for employees, family members or friends of employees.
    4.2. Categories of data processed
    a. When you choose to subscribe to the newsletter service
    The data processed for subscription to the newsletter service are:
    • Name
    • Surname
    • E-mail
    • Users may als
    • indicate which type of newsletters they wish t
    • subscribe to: Art, Social Action or communication of cultural events organised by third parties.
    • For clarification purposes, with regard t
    • cultural events organised by third parties, Fundación Banc
    • Santander will only provide information about their occurrence, but will not manage the attendance of users or any staff at such events.
    b. When you wish to register on the Website and participate in any of the calls for projects
    The personal data processed for registration on the Website are:
    • E-mail
    The personal data processed for the management of calls are:
    • Name
    • Surname
    • Date of birth
    • Place of birth
    • Place of residence
    • Telephone number
    c. When you wish to participate in activities for employees, their family members, or friends
    The data processed for the registration and execution of activities for employees, family members or friends of employees are:
    • Full names of all attendees (employee, adult companions and, where applicable, accompanying minors): ID number of all adults/age of minors
    • Car registration number
    • Employee's mobile phone number
    • Need for special assistance and accessibility t
    • the event (YES/NO)
    • If applicable, email address s
    • that, in case of doubt, we can verify consent for the processing of personal data of children under 14 years of age.
  5. Legal basis for processing
    a. When you decide to subscribe to the newsletter service (including third-party cultural events)
    The processing of data carried out in relation to the subscription to the newsletter service will be carried out with your consent. This consent may be withdrawn at any time, in accordance with the procedure set out in section 10 of this Privacy Policy, without affecting any processing carried out prior to withdrawal.
    b. When you wish to register on the Website and participate in any of the calls for projects
    The legitimate basis for processing your personal data for registration in any of the calls for projects through the Website is the execution of the contractual relationship between the parties, which is free of charge and will comply with the terms of the subscription requested and those of the legal notice and the terms and conditions of the Website, which will be displayed on the Website.
    c. When you wish to participate in activities for employees, their family members, or friends
    With regard to registration and the execution of activities for employees, family members or friends, the legal basis for processing your personal data related to registration and attendance at the event will be the consent and execution of an agreement between the Foundation and the User, which is formalised by the latter's acceptance of the invitation to the activity organised by the Foundation.
    If you request special assistance for attendance and accessibility to the event, a circumstance that could imply the existence of a disability or limitation of any kind related to health, the processing will be carried out based on your consent. The Foundation ensures the discreet and confidential treatment of this information in order to comply with our purpose and legal obligation to facilitate universal accessibility to activities.
    Likewise, the data of minors under the age of 14 will be processed based on the consent of their parent or guardian.
    The email address provided for the verification of consent for the processing of data of minors under the age of 14, in the event that the accompanying person is not the legal guardian or guardian of that minor, is processed in compliance with our legal obligation to make reasonable efforts to verify that consent was given or authorised by the legal guardian or guardian of the minor under the age of 14.
    The legitimate basis for sending satisfaction surveys to participants in activities for employees, family members or friends, as well as for compiling statistics, is the legitimate interest, on the one hand, in knowing your opinion about the activities and, on the other hand, in analysing and improving the management and organisation of the activities.
    The Foundation has carried out a balancing test to assess whether we can effectively carry out these processing operations based on our legitimate interest. Participants may request this from us using the contact details provided. However, some of the main conclusions of this analysis are set out below: (i) sending satisfaction surveys and preparing statistics is in our legitimate interest and is entirely lawful; (ii) it is proportionate because there are no less invasive measures that would allow us to pursue our interest in knowing your opinion about the activities we organise and to improve their organisation and management; (iii) it does not harm you in any way, but will allow us to adapt our activities to your preferences, if necessary, which is beneficial to you. Please also note that you can object to this at any time, from the outset, and that this is standard practice in the sector.
  6. Who do we share your data with?
    The User's data may be communicated to:
    • Public administrations with competency in the matter
    • Courts and Tribunals, in the event of specific requests made in accordance with applicable regulations.
    • State Security Forces, in the event of specific requests made in accordance with applicable regulations.
    In addition, the data may be accessible to suppliers of the Foundation, such access being necessary for the proper fulfilment of legal obligations and/or the purposes indicated above. These suppliers will not process your data for their own purposes that have not been previously informed by the Foundation. The Foundation will contract the provision of services by third parties who carry out their activities, including but not limited to, the following areas: cloud or IT hosting, sending commercial communication.
    In this regard, the Foundation follows strict criteria for selecting service providers in order to comply with its data protection obligations and undertakes to sign a data processing agreement, as required by law, imposing the following obligations, among others: to apply appropriate technical and organisational measures to ensure the security of personal data; to process personal data for the agreed purposes and in accordance with the documented instructions of the data controller; and to delete and return the data to the data controller once the services have been completed.
    The User is informed that their data will not be subject to international transfers to third countries or international organisations.
  7. Commercial communications
    Law 34/2002, of 11 July, on information society services and electronic commerce, allows commercial communications to be sent via the internet and other electronic means, provided that they can be identified as such and as coming from the entity sending them.
    The Foundation will send commercial communications by email about similar services that may be of interest to the User.
    However, the Foundation will offer the recipient the possibility of objecting to the processing of their data for promotional purposes, both at the time of data collection and in each of the commercial communications sent to them.
    Users may unsubscribe from these communications by writing to the Foundation's registered office at the above address or to the following email address: privacidadfundacionbs@gruposantander.com
  8. Social media
    The Foundation is present on several social networks. When you interact with any of its pages on social networks, the processing of data will be governed by the terms of use, privacy policies and access regulations belonging to the corresponding social network and previously accepted by the User.
    The Foundation will process your data for the purpose of properly managing its presence on the social network, informing you of activities, products or services, as well as for any other purpose permitted by the regulations of the social networks.
    Please note that the Foundation has no influence over the information that the social network collects or how it is processed.
  9. User Responsibility
    The User:
    • guarantees that they are over fourteen (14) years of age and that the information they provide to the Foundation is true, accurate, complete and up to date. For this purpose, the User is responsible for the accuracy of all the information they provide and will keep the information provided suitably updated so that it reflects their actual situation.
    • guarantees that they have informed any third parties whose data they provide, if applicable, of the aspects contained in this document. They also guarantee that they have obtained their authorisation to provide their data to the Foundation for the purposes indicated.
    • will be responsible for any false or inaccurate information provided through the Website and for any direct or indirect damages caused to the Foundation or third parties.
  10. 10. What rights do you have over your data?
    10.1. Reference to the exercise of rights
    As the owner of the personal data being processed, you have the right at any time to request access to, rectification, erasure, and portability of your data, as well as to restrict or object to its processing. The Foundation will cease processing the data unless there are legitimate reasons to do so or it is required for the exercise or defence of potential legal claims.
    10.2. How to exercise the rights of access, rectification, deletion and portability of your data, and limitation or opposition to their processing
    Interested parties may exercise their rights by writing to C/ Serrano, 57, 28006 Madrid and/or by email to: privacidadfundacionbs@gruposantander.com. If it is not possible to identify you correctly, the Foundation may request additional information.
    10.3. Right to lodge a complaint with the Supervisory Authority
    Data subjects have the right to contact the Spanish Data Protection Agency at Calle Jorge Juan 6, 28001, Madrid, or at www.aepd.es, if they believe that their personal data is not being processed correctly or that their rights have not been properly addressed.
  11. Security Measures
    The Foundation will treat the User's data at all times in an absolutely confidential manner and will maintain the mandatory duty of secrecy regarding such data, in accordance with the provisions of the applicable regulations, adopting the necessary technical and organisational measures to guarantee the security of the data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of technology, the nature of the data stored and the risks to which it is exposed, whether from human action or from the physical or natural environment.
  12. Revisions
    The Foundation reserves the right to revise its Privacy Policy whenever it deems appropriate, in which case it will notify the Users. For this reason, we kindly ask you to check this privacy statement regularly to read the most recent version of the Foundation’s Privacy Policy.
  13. Acceptannce and Consent
    The User declares that they have been informed of the conditions regarding personal data protection and accepts the content of this Privacy Policy.