Pursuant to Regulation (EU) 2016/679, of 27 April on the protection of natural persons with regard to personal data processing and the free movement of such data (hereinafter, the GDPR), in the event that the Website User provides personal data, the ONCE's data protection policy shall be as follows:
Data will only be collected with the User’s consent to include said data in files owned by the ONCE and processed exclusively for the purpose specified in the legend attached to the collection form. The data obtained through the corresponding forms will be essential in order to provide the service or information requested by the User.
As the sole party responsible for the file, the ONCE undertakes to comply with its obligation to maintain the secrecy of personal data and its duty to safeguard it, to treat the data with the appropriate level of protection, as established in the GDPR, and to adopt the necessary security measures to prevent their alteration, loss, unauthorised processing or access by third parties who may use them for purposes other than those for which they have been requested from the User, considering the state of the art at any given time.
Users may revoke their consent to the processing of their data at any time, and exercise their rights of access, rectification, deletion and portability of the data, and their rights of limitation and opposition to its processing, by sending a written communication to the following address: Dirección General de la ONCE, calle Prado, 24, 28014 Madrid or an email to email@example.com. These rights shall be exercised personally, so only the User may, directly or through a legal representative or volunteer, exercise these rights with regard to the personal data legitimately owned.