1. Company name
Identity: FUNDACIÓN ESCOLES FAMILIARS RURALS DEL PENEDÉS (referred to hereinafter as CAMP JOLIU)
Address: Carretera N-340 Km 1202. PC: 43720 L’Arboç (Tarragona).
What do we use the data for?
At CAMP JOLIU we process different types of personal data:
- Users’ data: in the enrolment process, different types of personal information about users are obtained so that we can provide the service requested.
- Family data: we obtain and process the personal data of the family members of the users that are enrolled in our programmes and also that of the families that have shown interest in our services at some time.
- You have a question form: the personal data obtained through this form will only be used to deal with your request.
- Covid-19 Health Data: the health data about the users and the personnel of the centre will only be obtained to detect anyone that might be infected and to stop them coming into the facilities so that they do not come into contact with anyone else.
What do we do with the data?
The personal data about the users is only processed to provide the service that is requested.
As for the personal data of the family members, this will only be processed for administrative purposes associated with the work involved in providing the service requested. If family members have asked for information about our range of services available without having completed enrolment, we will process their data to inform them about our activities, as long as they have given their consent for this.
How long do we keep your data for?
The data about the users that request the service will be processed for as long as there is a relationship between the user and the Centre. Once this relationship has come to an end, it will be kept for as long as it is necessary to comply with the responsibilities associated with providing the services.
The data about the family members of the enrolled users will be kept on file for as long as it is necessary to comply with the responsibilities associated with providing the services. If the family members have given their consent to be sent information about the Centre, their data will be processed until they withdraw this consent.
The health data obtained on the grounds of COVID-19 will be kept for as long as it is established by the competent public authorities, after this time it will be deleted.
If the services requested are provided by external companies that are not part of the Centre, the users’ data might be passed on to these companies so that their requests can be dealt with.
Prior and clear consent
For any other use of the data that is different from what is provided for in the existing educational legislation, we will ask you for your clear consent beforehand.
Moreover, the personal data of the employees will be processed in compliance with the contractual relationship.
Passing on the data to third parties
We will only pass on the personal data when there is a legal obligation to do so. In these cases the recipients of this data are usually public authorities that will have access to the data within the scope of their competences (Education Department, Mossos d’Esquadra, Juvenile prosecution service, Courts, CAP, Health Centres (in the event of an emergency).
In any other case we will ask for the clear consent from the data holder first, before we pass the information on.
5. Category of data
The Centre will process the following types of personal data in the course of its work:
- Identification details and official documents (name, surname, image, DNI (Spanish National Identification Card), book containing family details…).
- Contact details (address, telephone number, email…)
- Bank details (account numbers).
- Sensitive data: eventually and only to carry out our tasks or to deal with an emergency, we can obtain or process the most sensitive data such as information about your health (allergies, psychological and educational reports, medical reports, etc…).
- Data related to the social environment of the student: members of the family, income, “conflictive” family situations (divorce, separation, abuse…).
You are entitled to:
- Access the personal data.
- Rectify the personal data.
- Remove the personal data.
- File a complaint or a statement for the protection of your rights at the Spanish Data Protection Agency or at the data protection agency of the autonomous community where you live, if there is one.
- Be informed about any security issue that might affect your rights.
- Restrict data processing.