1.Who is responsible for your data
The data controller for personal data collected through this website is the coordinating organisation of the BlossomBeyondBorders project:
- Data controller
- Fundación Santa María la Real del Patrimonio Histórico (FSMLRPH)
- Tax identification number (C.I.F.)
- G-34147827
- Registered office
- Avenida Ronda, 1-3 · 34800 Aguilar de Campoo (Palencia) · Spain
- Legal status
- Foundation registered since 24 June 1994 in the Register of Foundations of the Spanish Ministry of Education, Culture and Sport
- Telephone
- +34 979 125 000
- Data protection contact
- protecciondatos@santamarialareal.org
- General contact
- comunicacion@santamarialareal.org
- Website
- santamarialareal.org
BlossomBeyondBorders is co-funded by the European Union under the Erasmus+ Programme (KA220-ADU, project reference KA220-ADU-5B472CB7) and is carried out by a consortium of European partner organisations listed in section 6.
2.What data we collect and why
We only collect the data you provide voluntarily through the registration form on this website. We do not create profiles, we do not take automated decisions about you, and we do not sell your data.
| Data collected | Purpose | Legal basis (Art. 6 GDPR) |
|---|---|---|
| First name, last name | To address you personally in our communications | Your consent, given by ticking the acceptance box on the form — Art. 6(1)(a) GDPR |
| Email address | To send you project updates, invitations to (Em)Power-up sessions and access to project results | |
| Country (optional) | To direct you to activities and partners in your region | |
| Type of interest (participant, mentor, organisation, institution) | To tailor the information we send you to your role | |
| Message (optional) | To answer specific questions or requests you send us | |
| IP address and date/time of submission | Security of the website, prevention of automated abuse, and proof of the consent you gave | Legitimate interest of the controller in securing its services — Art. 6(1)(f) GDPR |
Aggregated project reporting. As a project funded by the European Union, we are required to report on our activities to the Spanish National Agency (SEPIE) and to the European Commission. These reports contain anonymous and aggregated figures only — for example the number of registered participants per country. They never include your name, email address or any other information that identifies you.
3.How long we keep your data
- Registration data: for the duration of the BlossomBeyondBorders project and for up to five years after its conclusion, which is the period during which the European Union may audit the project — or until you ask us to delete it, whichever comes first.
- Messages sent through the form: until your request has been dealt with, and subsequently for a maximum of twelve months.
- Technical security data (IP address, timestamp): a maximum of twelve months.
When these periods expire, your data is deleted. If you withdraw your consent, we delete your data without undue delay.
4.Your rights
Under the GDPR you have the right to:
- Access — obtain confirmation of whether we process your data and receive a copy of it.
- Rectification — have inaccurate or incomplete data corrected.
- Erasure ("right to be forgotten") — have your data deleted.
- Restriction — ask us to limit the processing of your data.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on our legitimate interest.
- Withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, write to protecciondatos@santamarialareal.org or to the postal address in section 1, stating which right you wish to exercise and attaching a copy of an identity document. We will reply within one month.
Right to lodge a complaint. If you believe your data has not been handled correctly, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), C/ Jorge Juan 6, 28001 Madrid — www.aepd.es — or with the supervisory authority of the EU country where you live or work.
5.Who has access to your data
Your data is accessible to the staff of the coordinating organisation who manage project communications, and to the following categories of recipients:
- Partner organisations of the consortium, where necessary to invite you to activities taking place in your country. All partners are bound by the same confidentiality and data protection obligations.
- The hosting provider of this website, acting as a data processor under a contract that complies with Art. 28 GDPR.
- The email service provider used to send the messages generated by the registration form.
We do not transfer your data to any other third party, and we do not sell or rent it. No transfers of your data outside the European Economic Area are foreseen. Should such a transfer become necessary, it would be carried out only under the safeguards provided by Chapter V of the GDPR — an adequacy decision of the European Commission or Standard Contractual Clauses.
6.The project consortium
The BlossomBeyondBorders consortium is composed of the following organisations:
- Fundación Santa María la Real del Patrimonio Histórico (Spain) — coordinator and data controller
- Verein InterAktion!
- CONNECTIS
- FRAME
- IPES — Gender Equality Research Institute
- UMAR
- Oxfam Italia Intercultura
- Mentortec
7.Security of your data
This website is served over an encrypted HTTPS connection. The data submitted through the form is transmitted to our email system over an authenticated and encrypted SMTP connection, and any local copy is stored in an area that is not accessible from the web. Access is restricted to authorised project staff only.
No system can guarantee absolute security. Should a personal data breach occur that is likely to result in a high risk to your rights and freedoms, we will notify you and the competent supervisory authority in accordance with Articles 33 and 34 GDPR.
8.Cookies and third-party services
This website uses one strictly necessary technical cookie. Fonts, stylesheets, icons and scripts are hosted on our own server, so no third party is contacted simply by opening a page. The only external service is the optional Google Translate widget, which is loaded only if you consent to it. Full details are set out in our Cookie Policy.
9.Children
The activities of BlossomBeyondBorders are addressed to adults. We do not knowingly collect data from persons under 16 years of age. If you believe a minor has provided us with personal data, please contact us and we will delete it.
10.Changes to this policy
We may update this Privacy Policy to reflect changes in our activities or in the applicable legislation. The date of the latest version is always shown at the top of this page. Substantial changes affecting how we use your data will be communicated to you by email.
11.Contact
For any question about this policy or about how we handle your personal data, write to protecciondatos@santamarialareal.org or to Fundación Santa María la Real del Patrimonio Histórico, Avenida Ronda, 1-3, 34800 Aguilar de Campoo (Palencia), Spain.