Privacy and data protection policy

In compliance with the principle of transparency and duty of information established by the General Data Protection Regulation (EU) 2016/679, the SOX6 Foundation proceeds to inform interested parties about the circumstances and conditions of the processing of their data, as well as the rights that assist them.

Who is responsible for processing your data?

Identity: SOX6 Foundation.
Tax Identification Number (CIF): G70982749
Postal Address: Calle Guillem de Castro, 9 – 1 46007 Valencia (València) Spain.
Email: hello@sox6foundation.org

For what purpose do we process your personal data?

At the SOX6 Foundation, we process the personal data of interested parties for the following purposes:
Managing the Foundation’s activities.
Managing the relationship with our staff, associates, volunteers, collaborators, and clients.
Managing the relationship with our candidates.
Maintaining and managing the commercial relationship with our product and service providers.
Ensuring the safety of people, property, and facilities.
Responding to queries made by users through the contact form on our website.
Managing voluntary donations made by users, as well as the relationship with donors.

How long do we keep your data?

Personal data will be kept for the time necessary to fulfill the purpose for which it was collected and to determine any possible liabilities that may arise from said purpose and the processing of the data.

What category of data do we collect?

The following categories of data are processed by the SOX6 Foundation, as appropriate to each of the interested parties: Identification data: Name and surname, address (postal and electronic), identity document and image. Other personal data: Date and place of birth, age, sex and nationality. Academic data: Education and qualifications. Family data. Professional data: Professional experience, membership of professional associations. Bank details. Sensitive data: Health data. Commercial information data: Activities, businesses and commercial licenses.

What is the legitimacy for the processing of your data?

The legal basis for the processing of your personal data will be related to the purpose for which the data was collected. In this sense, the processing of your personal data will be legitimized by some of the following conditions:
The execution of the contract as a basis of legitimacy for the maintenance and management of the relationship with the interested parties.
The execution of the employment contract and compliance with a legal obligation as a basis of legitimacy to manage the employment relationship with our employees, as well as compliance with the obligations imposed by tax and social security regulations.
Compliance with a mission carried out in the public interest and legitimate interest as a legitimizing basis for the use of video surveillance systems in order to guarantee the safety of people, property and facilities.
The consent granted through a clear affirmative action by the interested party as a legitimizing basis to manage job vacancies and the relationship with the candidates.
The consent granted through a clear affirmative action by the interested party as a legitimizing basis to respond to queries made by users through the contact form on our website.
The consent granted through a clear affirmative action by the interested party as a legitimizing basis for sending information about the foundation’s activities.

To which recipients will your data be communicated?

In general, personal data will not be communicated to third parties, except for legal obligation.
No international data transfers are planned.

What are your rights when you provide us with your data?

Any person has the right to obtain confirmation as to whether the SOX6 Foundation is processing personal data that concerns them.
Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes that were collected. In such cases, the SOX6 Foundation will communicate this to each of the recipients to whom their personal data has been communicated.
In certain circumstances, the interested parties may request the limitation of the processing of their data, in which case, we will only keep them for the exercise or defense of possible claims.
In certain circumstances, and for reasons related to their particular situation, the interested parties may object to the processing of their data. The SOX6 Foundation will stop processing the data, except for compelling legitimate reasons or the exercise of defense of possible claims.
They will also have the right to withdraw their consent at any time, without affecting the legality of the treatment based on the consent prior to its withdrawal.
The interested parties will have the right to receive the personal data that concerns them, that they have provided to the SOX6 Foundation, in a structured format, of common use and mechanical reading.
For the exercise of the rights mentioned in the previous sections, users can send a written communication to the registered office of the SOX6 Foundation or to the email address indicated in this privacy policy, identifying themselves adequately in both cases. If the Data Controller has reasonable doubts regarding the identity of the person making the request, they may request that additional information be provided to confirm the identity.
We also inform you of your right to file a claim with the competent Control Authority, if you consider that your rights are not being respected in the processing of your data.

What security measures do we have in place?

The SOX6 Foundation informs you that it has implemented the necessary technical and organizational security measures to guarantee the security of your personal data and prevent its alteration, loss and unauthorized processing or access.
Likewise, the SOX6 Foundation has established measures to reinforce the confidentiality and integrity of information in its organization. Continuously maintaining the supervision, control and evaluation of the processes to ensure respect for data privacy.