Privacy Policy

Last updated: December 5, 2024

Who is responsible for processing your data?

The data controller is the UNICEF Spanish Committee Foundation (hereinafter UNICEF Spanish Committee or the Data Controller), with Tax ID G-84451087, registered office at c/ Mauricio Legendre, 36; Madrid (Postal Code: 28046). You can contact us via our customer service phone number: 913789555, or by email at: protecciondatos@unicef.es. The website created for registration in the Global Caregiver Forum is managed by Worldwide Events Mister Poppins, S.L, located at C/ Francisco Villaespesa, 10, 28017 Madrid, Tax ID B-65534547 on behalf of UNICEF Spanish Committee. Likewise, when you give your consent, certain data may be shared with the United Nations Children's Fund (UNICEF) and the World Health Organization (WHO) so that they can process it for their own purposes, in particular to keep you informed about the Event by any means, including electronic communication. For these purposes, UNICEF and WHO will act as independent data controllers.

How do we collect your personal data?

The personal data has been provided by you through the registration form. You are responsible for its accuracy and for keeping it up to date. In the event that the personal data provided belongs to a third party, you guarantee that you have informed said third party of this Privacy Policy and obtained their authorization to provide their data to UNICEF Spanish Committee for the stated purposes. Likewise, you guarantee that the data provided is accurate and up to date, and you will be liable for any damage or harm, direct or indirect, that may arise as a result of failing to comply with this obligation.

For what purpose do we process your personal data?

The personal data provided through the registration form will be included in processing records owned by UNICEF Spanish Committee for the following purposes: Purpose 1: Manage and guarantee your attendance at the event
  • Manage your attendance at the Event
  • Legal basis: For mere participation in the described activity, the legal relationship itself shall constitute the lawful basis for using the indicated personal data.
Purpose 2: Management of incidents and inquiries
  • Address incidents that may arise regarding your attendance at the event, as well as handle inquiries about it
  • Phone calls may be recorded to ensure service quality
  • Emails may report confirmation of receipt and reading
  • Legal basis: The processing is necessary for the proper development of the contractual relationship between you and UNICEF Spanish Committee
Purpose 3: Information about UNICEF and WHO activities
  • If you consent, certain identification and contact data may be communicated to UNICEF and WHO so that these entities can keep you informed, by any means, including electronic, about the Event
  • Legal basis: your consent (art. 6.1.a GDPR), which you can revoke at any time
  • The lack of authorization for this purpose does not in any way condition the formalization of your registration or your attendance at the event
Purpose 4: Fraud prevention and security
  • Prevent fraudulent operations or misuse of the Website and strengthen the security of our operations and systems
  • Legal basis: legitimate interest in ensuring the security of transactions and the Website (art. 6.1.f GDPR)

What personal data do we process?

The categories of data we may process are:
  • Identification and contact data (such as name, surname, and email or phone number) provided by the User to attend the Event
  • Professional and origin data (position, country of origin) provided by the User to attend the Event
  • Health data (mobility, visual and/or hearing needs; food intolerances and/or allergies)
  • Website navigation and use data: IP address, device identifiers, usage statistics, access logs, data derived from cookie use (see Cookie Policy)

How do we obtain your data?

Personal data comes from:
  • Information you provide directly when registering or contacting us
  • Data generated as a result of your attendance at the event
  • Navigation data obtained through the use of cookies and similar technologies, with your informed consent (see Cookie Policy)

To whom will your data be disclosed?

In general, your personal data may be communicated to:
  • Public administrations and competent authorities, when necessary for compliance with legal obligations (for example, tax authorities, consumer authorities, judicial bodies)
  • Technology and service providers (for example, registration platform, web hosting, IT support, analytics services, communication sending services, Event facilitators) acting as data processors, with whom we have signed the corresponding processor contracts in accordance with art. 28 GDPR
In the event that international data transfers are made, appropriate safeguards will be adopted (such as standard contractual clauses approved by the European Commission or other measures recognized by regulations) to ensure a level of protection equivalent to the European level. Likewise, and only when you consent, certain identification and contact data may be communicated to UNICEF and WHO, so that they can process them to keep you informed, by any means, including electronic, about the Event. For these purposes, UNICEF and WHO will act as independent data controllers. When any of the above providers or recipients are located outside the European Economic Area, appropriate safeguards will be adopted (such as standard contractual clauses approved by the European Commission or other valid mechanisms) to ensure a level of protection equivalent to the European level.

How long do we keep your data?

In general:
  • Data related to event attendance (customer and order data) will be kept for the duration of the contractual relationship and, subsequently, during the applicable limitation periods (for example, up to 6 years for commercial purposes and 4 years for tax purposes)
  • Navigation data obtained through cookies will be kept for the periods indicated in the Cookie Policy and/or in the configuration panel
After the indicated periods, the data will be properly blocked for the time necessary to address possible legal, administrative or contractual responsibilities, and will subsequently be securely deleted.

What are your rights?

You can exercise the following rights at any time:
  • Access: know what personal data of yours we process
  • Rectification: request the correction of inaccurate or incomplete data
  • Erasure: request the deletion of your data when, among other reasons, they are no longer necessary for the purposes for which they were collected
  • Restriction of processing: request that we limit the processing of your data in certain cases
  • Opposition: object to the processing of your data when it is based on legitimate interest or for direct marketing purposes
  • Portability: receive your data in a structured, commonly used and machine-readable format, and transmit it to another controller, when the processing is based on consent or a contract and is carried out by automated means
  • Withdrawal of consent: when the legal basis is consent, you may withdraw it at any time, without affecting the lawfulness of previous processing
To exercise these rights, you can contact us through: Email: protecciondatos@unicef.es, indicating "Data Protection" in the subject. You must attach a copy of an identity document (ID card, residence permit, passport or equivalent document) when necessary. Regarding the processing carried out by UNICEF and WHO as controllers for their own purposes, you may also exercise your rights by contacting: Email: dataprotection@unicef.org and internet@who.int Likewise, you have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that the processing of your data does not comply with current regulations.

Data Security

UNICEF Spanish Committee applies appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including, where appropriate, encryption of communications (SSL), access controls, password policies and backup procedures. However, no system is completely infallible, so we cannot guarantee the absolute invulnerability of our systems. We recommend that you use strong passwords, keep them confidential, close sessions when you finish using the websites, especially when using shared devices.

Minors

The website is not aimed at children under 14 years of age. If we became aware that personal data has been collected from a minor under 14 years of age without proper authorization from their parents or guardians, we will proceed to delete it immediately.

Privacy Policy Update

We may update this Privacy Policy to adapt it to legislative changes, jurisprudential criteria or variations in the services provided. In case of significant changes, we will communicate it to you through the Website (banner, pop-up notice, etc.) or, when appropriate, through individual communication. The current version of the Policy will always be available on the Website.