Privacy policy

Last updated: [date] · Document pending legal review

This policy explains how we process the personal data you provide through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

01 · Data controller


Controller	`[FULL LEGAL NAME OF THE ASSOCIATION]`
Tax ID (NIF)	`[NIF]`
Address	Room D7-010, Building D7, Campus del Baix Llobregat, 08860 Castelldefels (Barcelona), Spain
Contact	acsarteam@gmail.com
Data protection officer	`[not appointed / contact details]`

02 · What data we process

Contact form: name, email address, subject and message content.
Email: whatever data you include when you write to us directly.
Technical browsing data: [state whether the hosting provider keeps access logs with IP addresses and for how long].

We do not collect special category data, and we do not carry out profiling or automated decision-making.

03 · Purpose and legal basis


Answering enquiries	Replying to the messages you send us. Legal basis: your consent when submitting the form (art. 6.1.a GDPR).
Handling applications	Assessing you joining the team if you write to take part. Legal basis: consent and pre-contractual measures (art. 6.1.a and 6.1.b GDPR).
Companies and sponsors	Handling collaboration proposals. Legal basis: legitimate interest and pre-contractual measures (art. 6.1.f and 6.1.b GDPR).

We do not send marketing communications or newsletters unless you expressly subscribe. [Update if a mailing list is enabled.]

04 · How long we keep the data

We keep the data for as long as needed to handle your request and, afterwards, for [period, e.g. 12 months] in order to evidence the service provided, unless the law requires a longer period or you request erasure.

05 · Recipients and processors

Formspree (Formspree, Inc., USA) processes contact form submissions. International transfers rely on [standard contractual clauses / EU-US Data Privacy Framework — confirm before publishing].
[hosting provider], for website hosting.
[email provider], for receiving and managing messages.

We do not share data with third parties beyond the cases listed, except where legally required.

06 · Your rights

You may exercise your rights of access, rectification, erasure, restriction, objection and portability, and withdraw consent at any time, by writing to acsarteam@gmail.com and proving your identity.

If you believe your request has not been handled properly, you may lodge a complaint with the Catalan Data Protection Authority (apdcat.gencat.cat) or the Spanish Data Protection Agency (aepd.es).

07 · Cookies

This site uses no tracking, analytics or advertising cookies. Fonts are loaded from Google Fonts, which means your browser connects to Google’s servers. [To avoid those connections, self-host the fonts; if analytics are added, a consent banner is required and this section must be updated.]

08 · Security

We apply reasonable technical and organisational measures to protect the data. The site is served over HTTPS.

09 · Changes to this policy

We may update this policy to reflect changes in legislation or in the service. The date of the latest update is shown at the top.