Privacy policy

Our privacy policy

In this privacy policy we explain how we collect, use, share and protect your personal information provided due to you contracting and using our products, services and/or our website. This privacy policy will be updated, but each time we make a change this will be published on our website digicraft.fundacionvodafone.es (“website”).

Last update: 14 August 2019.

Who we are

We are Vodafone Foundation, S.A.U (single shareholder corporation), with Tax ID: G-81326084 (hereafter “Foundation”). Note that in this privacy policy:

  • "we/our" means Foundation;
  • "third-party" means a third person or entity other than you and Vodafone Foundation, and
  • our registered office is Avenida de América, 115, 28042, Madrid. You can also contact us via the various channels provided on our website.

Contact us

Your opinion is very important to us so if you have any questions about our Privacy policy, you can contact us at the address provided in the previous paragraph or through our Data Protection Representative via this email address: dpo-spain@vodafone.com.

Our principles

Respecting your privacy is important to us, so we want to let you know, with full transparency, how we may handle your personal data; you can then make a decision on that basis. Therefore, we ask that you take a few moments to read this privacy policy.

The main objective of our Privacy Policy is to guarantee total compliance with the current regulations regarding data protection and privacy, and safety in the handling of your personal data.

The personal information that we gather about you

The information we gather about you, and how we do it, may vary depending on how you use the website, or on the information that we have obtained via a third-party who has your permission to share it with us.

Foundation will use your personal data to:
  1. Comply with a legal obligation, such as, for example, to fulfil our accounting and fiscal obligations
  2. Process your data in line with the consent that you have given us where Foundation has no recourse to other legal grounds. You will always be able to revoke any consent that you may have given. For more information, visit the Your Rights section of this policy.

We will collect your personal information when, for example:

  • You subscribe to bulletins, alerts or other services and/or activities
  • You contact us through our channels
  • You take part in a competition, a raffle or survey
  • You visit or browse our website or other Vodafone Foundation websites
  • You have given your permission to other third-party companies, such as our partners or suppliers to share your information with us
  • Using your information is permitted when it is legally and publicly available, or

We will also gather information from certain organisations when it is appropriate and as long as we have legal reasons for doing so.

We use cookies (small text files stored on your browser) and other technology such as web beacons (small image files used to follow your movements on our website). For more details on how we use these cookies and how to opt out of them, check the Cookies Policy on our website.

We may have the following types of information about you, where appropriate:

  • Your name, address, date of birth, gender, email address and a personal photograph, if relevant
  • Audiovisual (videos) material produced or obtained by Vodafone Foundation through the various collaborators associated with DigiCraft,
  • Credentials such as passwords and usernames to access our accounts and services
  • If you accept our cookies, data related to language and site preferences. We can also use this information in an aggregated way to understand how you behave when visiting the portal and to improve the experience.

We will not gather nor handle any information from minors nor information that could be classified as being of a more sensitive nature: health, sexual orientation, union membership, religion or race.

How we use your personal information

We will use your personal information for the following purposes:

  • To offer you the activity associated with the project or initiative managed through Vodafone Foundation
  • To improve our activities

We will gather anonymous and agregated information that is not associated with you, to improve our activities

How we share your personal information

Where necessary, we will share information about you with:

  • Companies from the Vodafone Group, principally for internal reporting
  • Companies that Foundation has contracted to work with in supplying Foundation's services or for Foundation
  • Judges and courts, government organisations or other types of public authorities in the event of legal obligation or authorisation
  • Third-parties, where a disclosure of this type is necessary to comply with the relevant law or other legal or judicial requirements
  • Third-parties, for activities together with said third-party. Said third-parties will be responsible for complying with all the relevant privacy laws, where you have given us authorisation for this
  • Other third-parties, when you have given them consent to divulge your information

Third-parties we work with

When you sign-up for specific activities through a third-party or a partner organisation, we often exchange information with them as part of that relationship and with the purpose of managing your account – for example, to be able to validate and certify your voluntary activity with some of our collaborators.

International Data Transfers

We may need to transfer your information to suppliers of services in countries outside the European Economic Community (EEC). The EEC is formed by countries belonging to the European Union, and Switzerland, Iceland, Liechtenstein and Norway: it is considered that they have equivalent laws for privacy and data protection. This type of data transfer may occur if our servers (that is, where we store data) or our service suppliers are situated in countries not belonging to the EEC, or if you use our services or products while visiting countries that do not belong to the EEC.

If Foundation sends your information to a country that does not form part of the EEC, we will ensure that your information is appropriately protected. We always ensure that there is an appropriate contract that covers data transfer. Furthermore, if it is considered that the country does not have laws equivalent to the data protection standards of the EU, we will request that the third-party enters into a legal agreement that reflects these standards. In addition where necessary, we will request authorisation in advance from the Spanish Data Protection Agency to be eligible to carry out the international transfer.

How long we keep your personal information

We will store your information for the time required by law. If it is not required by law, we will only store it for as long as needed.

Storing your personal information safely

We have specialist security teams who constantly check and improve, our security measures to protect your personal information from unauthorised access, accidental loss, disclosure or destruction. Communication through the internet (such as by email) is not secure unless it has been encrypted. Your communications may pass through an unknown number of countries before being delivered, that being the nature of the internet.

We cannot accept any type of responsibility in case of unauthorized access or loss of personal information that is outside our control.

We will never ask you for any type of personal information through the internet by an unofficial means of communication. You are responsible for keeping both your personal information and your account information safe, and not to share it with anyone else. If you have any doubts, please contact us before providing your information.

Our website may provide links to third-party web pages. We are not responsible for their security or for their contents. Make sure that you read the privacy policy and the cookies policy of said companies before using them and introducing personal information on their web pages. The same for any web page or third-party contents to which you connect while using our products and services.

You can choose to disclose your information in certain ways, such as by using social network plugins (including those offered by Google, Facebook, Twitter, or Pinterest) or through third-party services that allow you to publish reviews or other types of information. A third-party could use the aforementioned information. The plugins and social network applications are operated through their own social networks and are subject to their own terms of use and privacy policies and cookies. You should check that you are familiar with their terms.

Your rights

Next, we explain your rights with regard to data protection and how to exercise them:

Right to rectification of personal data

You have the right to correct information stored about you that is not accurate.

Right to access personal data

You have the right to request a copy of the personal data that Foundation keeps about you.

Right to data portability

You have the right to obtain the data you have given us in certain circumstances.

Right to object to the use of your personal data

You have the right, in some circumstances, to object to the processing of your personal information by Foundation.

Right to erasure

Foundation makes every effort to process and store your data only for as long it is necessary. In some circumstances, you have the right to request the deletion of the personal data that we keep about you. The storage of this data will be protected and accessible only by specific people in the event that we might need it to deal with any claim or respond to our obligations.

Right to restriction

You have the right to request restrictions on how your data is handled so that Foundation may store your data, but not use it. This right may only be used in specific circumstances, such as when:

  • You tell us of the error in your personal data, within the time that we need to check that it is correct
  • Processing your personal data might be illegal and you do not want us to delete it
  • You have objected to some processing that Foundation may carry out on the basis of legitimate interest, during the period that we need to check that your right takes precedence over said interest
  • Foundation no longer needs the personal data for processing purposes, but you need it for the wording, execution or defence of any claims.

As well as the specific means established for each right, you can exercise your rights of access, rectification, erasure, objection, restriction and portability, such as revoking given consent, by writing, and sending a photocopy of your ID, to Foundation with the reference: "Vodafone Foundation - DigiCraft Data Protection", at Avenida de América, 115, 28042, Madrid, or by email dpo-spain@vodafone.es

How to send a complaint/claim

If you want to contact us in relation to your rights or if you want to make a complaint about how we are using your personal information, contact us by email hola@digicraft.es.

You can send any complaint to the Spanish Data Protection Agency. For more information consult www.agpd.es.

We will do everything we can to resolve your complaint as quickly as possible.