Last updated: September 2026<\/em><\/p>\n At Asociaci\u00f3n Vellmar\u00ed we look after your data with the same care we give the sea. This policy explains what data we collect, why, and what rights you have, in accordance with Regulation (EU) 2016\/679 (GDPR) and Spanish Organic Law 3\/2018 (LOPDGDD).<\/p>\n We do not make automated decisions or create profiles that affect you. Fields marked as required in forms are needed to handle your request.<\/p>\n We do not sell or pass on your data to third parties. Only the providers we need to run the website access it, as data processors:<\/p>\n We also report donation data to the Spanish Tax Agency where required by law. If you ask for your company to appear as a sponsor, its details are shared with that partner company only as far as the campaign requires.<\/p>\n Some of these providers (Google, Stripe, Automattic) may process data in the United States. They do so with the safeguards provided for in the GDPR: participation in the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission.<\/p>\n You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability<\/strong>, and withdraw your consent, by writing to info@asociacionvellmari.com<\/a> with the subject line \u201cData protection\u201d. We will reply within one month at the latest.<\/p>\n1. Data controller<\/h2>\n
\n
2. What data we process and why<\/h2>\n
\n\n
\n \nPurpose<\/th>\n Data<\/th>\n Legal basis<\/th>\n Retention<\/th>\n<\/tr>\n<\/thead>\n \n Posidonia adoptions, donations and purchases<\/strong>: managing your order and payment, and sending you your adoption card or certificate and thank-you email.<\/td>\n Name, surname, email, phone, billing address, amount and order details.<\/td>\n Performance of the relationship you start when you adopt, donate or buy (Art. 6.1.b GDPR).<\/td>\n For the duration of the relationship and, afterwards, for the periods required by tax and accounting law (up to 6 years).<\/td>\n<\/tr>\n \n Donation certificates and tax relief<\/strong>: issuing your certificate and reporting the donation to the Spanish Tax Agency (form 182).<\/td>\n Name, tax ID, address and amount donated.<\/td>\n Legal obligation (Art. 6.1.c GDPR; Spanish Law 49\/2002).<\/td>\n For the periods required by tax law.<\/td>\n<\/tr>\n \n Enquiries and contact forms<\/strong>, including the adoption certificate form.<\/td>\n Name, email and the content of your message.<\/td>\n Your consent and our legitimate interest in replying (Art. 6.1.a and f GDPR).<\/td>\n As long as needed to handle your enquiry and up to 1 year afterwards.<\/td>\n<\/tr>\n \n Volunteering, Dive Camp and educational activities<\/strong>: managing your registration and participation.<\/td>\n Contact details and the data needed for the activity. For minors, the details of their parents or guardians.<\/td>\n Your request and consent (Art. 6.1.a and b GDPR).<\/td>\n For the duration of the activity and up to 3 years afterwards.<\/td>\n<\/tr>\n \n Newsletter<\/strong>: sending you news about our projects.<\/td>\n Email address and name.<\/td>\n Your consent (Art. 6.1.a GDPR). You can unsubscribe at any time using the link in every email.<\/td>\n Until you unsubscribe.<\/td>\n<\/tr>\n \n Website statistics<\/strong>: understanding which content interests people most.<\/td>\n Pseudonymised browsing data (cookies).<\/td>\n Your consent through the cookie banner (Art. 6.1.a GDPR).<\/td>\n See our Cookie policy<\/a>.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n 3. Who we share your data with<\/h2>\n
\n
4. International transfers<\/h2>\n
5. Your rights<\/h2>\n