| Basic information on Data Protection | |
| Data Controller | SOCIAL INNOVATION FOR COMMUNITIES, UP SOCIAL S.L. B66224007 Travessera de Gràcia 88, 1-1, 08006, Barcelona |
| Contact | loto@upsocial.org |
| Purpose | 1) Enquiries and requests for information from customers and third parties: responding to the request made. 2) Subscription to the newsletter or registration on UPSocial: sending of periodic communications and registration on the website to access information on the activities organised by UpSocial. |
| Legal basis | 1) Enquiries and requests for information from customers and third parties: legitimate interest in attending to the data subject in response to emails received and explicit consent in the contact form. 2) Subscription to the newsletter or registration on UPSocial: explicit consent in the form. |
| Storage | The information collected from the data subject will be kept for as long as necessary to fulfil the purpose for which the personal data were collected, so that once the purpose has been fulfilled, the data will be cancelled. This cancellation will result in the blocking of the data, which will only be kept at the disposal of public administrations, judges and courts in order to address any liabilities that may arise from the processing, for the duration of the period of limitation of such liabilities, after which the data will be destroyed. The second level of information specifies the periods of storage of the information in relation to different matters. See below for more information on the second level of information. |
| Origin | 1) Enquiries and requests for information from customers and third parties: the data subject or their legal representative. 2) Subscription to the newsletter or registration on UPSocial: the data subject or their legal representative. |
| Recipients | These data will be processed by “UPSocial”. We share your data with service providers that assist us or provide support (Data Processors), with whom the required contract has been entered into in the terms provided for in Article 28 of the GDPR. |
| International transfers | We do not conduct international data transfers with your data. |
| Rights | Access, rectification, objection, erasure, restriction of processing and portability of the personal data, as explained in the corresponding section. |
| Additional information | You can consult additional and detailed information about data protection in the breakdown of sections presented below (second level oof information). |
General information
The purpose of this Privacy Policy is to inform you about the conditions that govern the collection and processing of your personal data by our organisation in order to safeguard fundamental rights, your honour and freedoms, in compliance with regulations in force governing the Protection of Personal Data: Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, GDPR); and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter, LOPD-GDD).
In accordance with these regulations, we need to obtain your authorisation and consent for the collection and processing of your personal data. Therefore, we provide you below with all the relevant details regarding how we carry out these processes, their purposes, which other entities may have access to your data and what your rights are.
Data Controller. Who is the Data Controller of your data?
The Data Controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
We inform you that SOCIAL INNOVATION FOR COMMUNITIES, UP SOCIAL S.L. (hereinafter, “UPSocial”) is the owner of the website upsocial.org, with Tax ID no. B66224007 and registered address at Travessera de Gràcia 88, 1-1, 08006, Barcelona. You may contact us by email at info@upsocial.org.
The personal data requested, where applicable, will consist only of the data strictly necessary to identify and process the request made by the interested party, hereinafter referred to as the data subject. This information will be processed fairly, lawfully, and transparently in relation to the data subject. Furthermore, personal data will be collected for specific, explicit and legitimate purposes, and will not be further processed in a manner that is incompatible with those purposes.
The personal data collected will be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
The data subject will be informed, prior to the collection of their data, of the general aspects regulated in this policy so that they can provide specific, informed and unambiguous consent for the processing of their data, if necessary and in accordance with the following aspects.
Purpose. For what purpose do we process your data?
The personal information you provide us through emails and forms will be kept confidential and protected. Under no circumstances will it be used for other purposes or disclosed to third parties without your consent, in accordance with the principles of GDPR 2016/679 and O.L. 3/2018. To comply with various legal requirements, we have established different levels of security to protect the personal data you provide us, and we have taken all technical measures within our reach to prevent the loss, misuse, alteration, unauthorised access and manipulation of such personal data.
The envisaged uses and purposes are the following:
1) Enquiries and requests for information from customers and third parties: to provide a response to the request made.
2) Subscription to the newsletter or registration on UPSocial: to send periodic communications and registration to the website to access information on the activities organised by UpSocial.
Legal basis. What is the legal basis for the processing of your data?
The collection and processing of your data is always legitimised by one or more legal bases, which we detail below:
1) Enquiries and requests for information from customers and third parties: legitimate interest in attending to the data subject in response to emails received and explicit consent in the contact form.
2) Subscription to the newsletter or registration on UPSocial: explicit consent in the form.
Storage. How long will we keep your data?
We use your data for the time strictly necessary to fulfil the purposes stated above. How long we keep your data for is detailed in the following list:
For information purposes, we outline the storage periods for information related to different subjects:
| DOCUMENT | PERIOD | LEGAL REF. |
| Employment-related or Social Security-related documentation | 4 years | Article 21 of Royal Legislative Decree 5/2000, of 4 August, which approves the consolidated text of the Law on Infractions and Sanctions in the Social Order |
| Accounting and fiscal documentation for commercial purposes | 6 years | Article 30, Commercial Code |
| Accounting and fiscal documentation for tax purposes | 4 years | Articles 66 to 70 General Tax Law |
| Data for sending information about services | As long as the data subject does not request their erasure | Not applicable |
| Data of persons who have contacted | As long as their erasure is not requested | Not applicable |
Origin. How have we obtained your data?
Visiting the “UPSocial” website does not imply that users are obliged to provide any information about themselves.
“UPSocial” expressly prohibits children under the age of eighteen from providing personal data without the prior consent of their parents or guardians.
The origin of the data is as follows:
- Enquiries and requests for information from customers and third parties: the data subject or their legal representative.
The contact form will request your email address and your first and last name(s). Optionally, it will request the name of your organisation.
- Subscription to the newsletter or registration on UPSocial: the data subject or their legal representative.
When subscribing to the newsletter, you will be asked for your email address, first and last name(s), the language of the newsletter, the autonomous community (only for Spain) and the country.
To register with UPSocial, please contact the e-mail address info@upsocial.org.
Security measures. What do we do to protect your data?
“UPSocial” implements the necessary organisational and technical measures to ensure the security and privacy of your data, preventing its alteration, loss, unauthorised access or processing, depending on the state of the technology, the nature of the stored data and the risks to which they are exposed.
We would highlight, among others, measures to ensure:
· the ongoing confidentiality, integrity, availability and resilience of processing systems and services;
· the ability to restore the availability of and access to personal data in a timely manner in the event of a physical or technical incident;
· a process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of the processing;
· the pseudonymisation and encryption of personal data, in the case of sensitive data.
Recipients. To whom will your data be disclosed?
These data will be processed by “UPSocial”. We share your data with service providers that assist us or provide support (Data Processors), with whom the mandatory contract has been entered into in accordance with Article 28 of the GDPR.
We do not conduct international transfers with your data.
Rights. What are your rights when you provide us with your data?
The data protection regulations in force protect you with a series of rights in relation to the use we make of your personal data. Every one of your rights is personal and non-transferable, meaning they can only be exercised by the data subject, upon verification of their identity.
We inform you that you have the following rights:
· To access your personal data
· To request rectification of your data
· To request the erasure or elimination of your data (“right to be forgotten”)
· To restrict or object to the use of your data
· To data portability for cases of telecommunications or Internet services
· To withdraw your consent at any time
· To present a complaint in relation to data protection matters to the Supervisory Authority: Agencia Española de Protección de Datos
How can you exercise your rights?
If you wish to exercise your rights of access, rectification, erasure, restriction or objection, data portability and withdrawal of your consent, you may do so as follows:
In person or by email to:
SOCIAL INNOVATION FOR COMMUNITIES, UP SOCIAL S.L.
B66224007
info@upsocial.org
In addition to the rights that correspond to you, if you believe that your data is not being collected or processed in accordance with data protection legislation currently in force, you may lodge a complaint with the Supervisory Authority, whose contact details are as follows:
Agencia Española de Protección de Datos
C/ Jorge Juan, 6. 28001, Madrid.
Email: info@agpd.es
Telephone: 912663517
Website: https://www.agpd.es
Consent and acceptance
Acceptance of this document indicates that you understand and agree to all the clauses of our Privacy Policy and that you consent to the collection and processing of your personal data in accordance with these terms.
Contact
Travessera de Gràcia, 88
08006, Barcelona
Subscribe to the UpSocial Newsletter
© UpSocial 2025