Privacy policy
The Hortensia Herrero Foundation, in compliance with the provisions of the applicable data protection regulations, and as the party responsible for the website, informs all users who provide or will provide their personal data, that these will be subject to processing that has been registered among the processing activities of the Hortensia Herrero Foundation in accordance with the provisions of Article 30 of Regulation (EU) 2016/679, of 27 April 2016, General Data Protection Regulation (hereinafter, GDPR), as well as Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights.
Name: Hortensia Herrero, Fundación de la Comunidad Valenciana.
Address: C/ Mar núm. 29, planta 1a, puerta 2 (46003), Valencia
Tax ID No.: G-98409386
Comunitat Valenciana Foundations Register number 557-V
Contact email : rgpd@fundacionhortensiaherrero.org
INFORMATION ABOUT THE PROCESSING:
The Hortensia Herrero Foundation (hereinafter also referred to as “the Foundation”) through its activity at the Hortensia Herrero Art Centre (hereinafter also referred to as “the Centre”), will carry out the following data processing:
- Request for information and/or contact.
- Foundation contacts.
- Purchase of physical tickets and verification requirements met for free or reduced-price tickets, whether purchased online or in person.
- Purchase of tickets online.
- Attendance at events or activities organised by the Foundation at the Hortensia Herrero Art Centre.
- Evaluation and assessment form for visits to the Hortensia Herrero Art Centre and the activities organised by the Foundation.
- Guided tours to the Hortensia Herrero Art Centre.
- Use of images on social media, press releases and corporate communications.
- Press releases.
- Video surveillance.
- Selection process for job applicants.
- Relationship with artists.
- Lost property.
The information related to each of these is detailed below:
- Request for information and/or contact.
| Processing | Request for Information and/or contact by users through the website or by telephone. |
| Data | Name, surname and, in the case of the online form, email address. If by telephone, voice recording. |
| Purpose | Manage requests for information made to the Foundation, resolve any incident or complaint and for any need for contact between users and the Foundation. |
| Legitimate interest | Legitimate interest in resolving queries from data subjects, as well as at the data subject’s own request. |
| Recipients or transfers | There are no transfers to third parties, other than those that are necessary (banks, tax authorities, etc.), but services are provided by CALIBRE 360 CONSULTING, S.L., which uses the Novti tool and is in charge of the processing and has access to the data as a supplier of the Foundation. There are also other providers who, in the normal course of business, may have access to the data (legal services, IT, website maintenance, etc.). |
| International data transfers | There are no international data transfers. |
| Retention period | The data will be kept for as long as they are required for the purposes indicated or, where appropriate, for as long as is required by law. |
- Foundation contacts.
| Processing | Contacts the Foundation has due to a previous relationship, who are interested in the Centre’s activities or art-related activities. |
| Data | First name, last name, email and telephone. |
| Purpose | Invitation to the Centre’s events and activities (openings, galas, conferences, press conferences, talks, visits, etc.). |
| Legitimate interest | The Foundation’s legitimate interest and/or the user’s consent, which may be withdrawn at any time. |
| Recipients or transfers | There are no transfers to third parties, other than those that are necessary (banks, tax authorities, etc.). Services are provided by SALESFORCE, Inc. which acts as a data processor and has access to the data as a supplier of the Foundation. There are also other providers who, in the normal course of business, may have access to the data (legal services, IT, website maintenance, etc.). |
| International data transfers | There are legally regulated international transfers of data through SALESFORCE’S CRM software to the United States. |
| Retention period | The data will be kept for as long as they are required for the purposes indicated or, where appropriate, for as long as is required by law. |
- Purchase of physical tickets and verification requirements met for free or reduced-price tickets, whether purchased online or in person.
| Processing | Purchase of tickets from the Centre’s ticket offices and verification that requirements are met to gain access to the Centre by means of free or reduced-price tickets, whether purchased online or in person. |
| Data | Circumstances cited for obtaining free and/or reduced-price tickets, if any. |
| Purpose | Check that the requirements for free or reduced-price admission to the Centre are met. |
| Legitimate interest | Execution of the pre-contract or contract. |
| Recipients or transfers | There are no transfers to third parties, other than those that are necessary (banks, tax authorities, etc.). Services are provided by MENTA GLOBE CONSULTING S.L., which is the data processor and it has access to the data as a supplier to the Foundation. |
| International data transfers | There are no international data transfers. |
| Retention period | The data will be kept for as long as they are required for the purposes indicated or, where appropriate, for as long as is required by law. |
- Purchase of tickets online
| Processing | Online ticket sales through the forms available on the Centre’s website. |
| Data | Name, surname, ID number, email address, country of origin, postal code in the case of Spanish users, age, telephone number. |
| Purpose | Manage ticket purchase requests through the website, as well as check that the requirements for free or reduced-price admission to the centre are met.
The data will be used by the Foundation for statistical profiling of the users visiting the Centre and attending its activities. |
| Legitimate interest | Execution of the pre-contract or contract. |
| Recipients or transfers | There are no transfers to third parties. Services are provided by TIQUETEO SPAIN, S.L. and SALESFORCE, Inc, which are the data processors and which have access to the data as suppliers to the Foundation. There are also other providers who, due to the provision of the services, may have access to the data (legal services, IT, website maintenance, etc.). |
| International data transfers | There are legally regulated international transfers of data through SALESFORCE’S CRM software to the United States. |
| Retention period | The data will be kept for as long as they are required for the purposes indicated or, where appropriate, for as long as is required by law. |
- Attendance at events or activities organised by the Foundation at the Hortensia Herrero Art Centre.
| Processing | Attendance at events or activities organised by the Foundation at the Hortensia Herrero Art Centre. |
| Data | Name, surname, ID number, email address, country of origin, postal code in the case of Spanish users, age, telephone number. |
| Purpose | Manage requests for attendance at events or activities as well as managing participation in the event or activity.
The data will be used by the Hortensia Herrero Foundation to create profiles for purely statistical purposes on the users visiting the Centre and attending its activities. |
| Legitimate interest | Execution of the pre-contract or contract. |
| Recipients or transfers: | There are no transfers to third parties, other than those that are necessary (banks, tax authorities, etc.). Services are provided by SALESFORCE, Inc. which acts as a data processor and has access to the data as a supplier to the Foundation. There are also other providers who, due to the provision of the services, may have access to the data (legal services, IT, website maintenance, etc.). |
| International data transfers | There are legally regulated international transfers of data through SALESFORCE’S CRM software to the United States. |
| Retention period | The data will be kept for as long as they are required for the purposes indicated or, where appropriate, for as long as is required by law. |
- Evaluation and assessment form for visits to the Hortensia Herrero Art Centre and the activities organised by the Foundation.
| Processing | Evaluation and assessment form for visits to the Hortensia Herrero Art Centre and the activities organised by the Foundation to determine the users’ experience. |
| Data | Name, surname, ID number, email address, country of origin, postal code in the case of Spanish users, age, telephone number, companions during the visit/activity. |
| Purpose | To receive feedback on the visits we offer, to get to know our visitors and to be able to improve the programme the Centre offers and the activities we carry out.
The data will be used by the Hortensia Herrero Foundation to create profiles for purely statistical purposes on the users visiting the Centre and attending its activities. |
| Legitimate interest | Consent when answering the valuation survey which is not mandatory. |
| Recipients or transfers: | There are no transfers to third parties, other than those that are necessary (banks, tax authorities, etc.). Services are provided by SALESFORCE, Inc. in the case of tickets for events/activities that are purchased online, which acts as a data processor and has access to the data as a supplier to the Foundation. There are also other providers who, due to the provision of the services, may have access to the data (legal services, IT, website maintenance, etc.). |
| International data transfers | There are legally regulated international transfers of data through SALESFORCE’S CRM software to the United States. |
| Retention period | The data will be kept for as long as they are required for the purposes indicated or, where appropriate, for as long as is required by law. |
- Guided tours to the Hortensia Herrero Art Centre
| Processing | Guided tours of the Hortensia Herrero Art Centre to find out more about its works, architecture and other information of interest. |
| Data | Name and image. |
| Purpose | Promoting the Centre. |
| Legitimate interest | Fulfilling the contract. |
| Recipients or transfers | There are no transfers to third parties, other than those that are necessary (banks, tax authorities, etc.). Services are provided by MENTA GLOBE CONSULTING S.L and/or others, depending on the nature of the visit, who are understood to be guides, who act as data processors and who have access to the data as suppliers to the Foundation when interacting with visitors. |
| International data transfers | There are no international data transfers. |
| Retention period | The data will be kept for as long as they are required for the purposes indicated or, where appropriate, for as long as is required by law. |
- Use of images on social media, press releases and corporate communications.
| Processing | Use of images acquired at the Centre in social media posts, press releases and corporate communications, among others. |
| Data | Images. |
| Purpose | Promote the activities of the Hortensia Herrero Art Centre through the press, social media, corporate communications and videos. |
| Legitimate interest | Consent that you can withdraw at any time. |
| Recipients or transfers | There are no transfers to third parties. Services are provided by suppliers who, due to the provision of the services, can access the data (legal services, IT, website maintenance, communication, etc.). Where the activity is publicised through press releases or social media, this information will be visible to the users of the media and social media. |
| International data transfer | In the cases of Instagram, Facebook or X, there are international data transfers as the headquarters of these companies are located outside the European Economic Area. |
| Retention period | The data will be kept for as long as they are required for the purposes indicated or, where appropriate, for as long as is required by law. |
| Processing | Newsletter. |
| Data | First name, last name, email and interests. |
| Purpose | Periodically send, by email, electronic communications with information on the activities carried out by the Hortensia Herrero Foundation and the CAHH. |
| Legitimate interest | The consent of the data subject, which may be withdrawn at any time. |
| Recipients or transfers | There are no transfers to third parties, other than those that are necessary (banks, tax authorities, etc.). Services are provided by CALIBRE 360 CONSULTING, S.L. using the Novti software tool and SALESFORCE Inc which is the data processor and which has access to the data as a supplier to the Foundation. There are also other providers who, in the normal course of business, may have access to the data (legal services, IT, website maintenance, etc.). |
| International data transfers | There are legally regulated international transfers of data through SALESFORCE’S CRM software to the United States. |
| Retention period | The data will be kept for as long as they are required for the purposes indicated or, where appropriate, for as long as is required by law. |
- Press releases.
| Processing | Press releases. |
| Data | First name, last name, email, telephone, workplace. |
| Purpose | Send press releases from the Hortensia Herrero Art Centre, as well as relevant information related to the Foundation’s projects. |
| Legitimate interest | The consent of the data subject, which may be withdrawn at any time. |
| Recipients or transfers | There are no transfers to third parties, other than those that are necessary (banks, tax authorities, etc.). Services are provided by CALIBRE 360 CONSULTING, S.L. using the Novti software tool and SALESFORCE Inc which is the data processor and which has access to the data as a supplier to the Foundation. There are also other providers who, in the normal course of business, may have access to the data (legal services, IT, website maintenance, etc.). |
| International data transfers | There are legally regulated international transfers of data through SALESFORCE’S CRM software to the United States. |
| Retention period | The data will be kept for as long as they are required for the purposes indicated or, where appropriate, for as long as is required by law. |
- Video surveillance.
| Processing | Video surveillance. |
| Data | Images. |
| Purpose | Ensure the safety of people, property and the installations. |
| Legitimate interest | Public interest. |
| Recipients or transfers | If necessary, the images will be transferred to law enforcement agencies, courts and tribunals.
Services are provided by PROSEGUR COMPAÑÍA DE SEGURIDAD S.A. which acts as a data processor and has access to the data as a supplier to the Foundation. There are also other providers who, in the normal course of business, may have access to the data (legal services, IT, etc.). |
| International data transfers | There are no international data transfers. |
| Retention period | The data will be kept for 30 days, except for communication to the Security Forces and/or Courts and Tribunals, which will be kept for the duration of the criminal proceedings and, subsequently, for as long as is legally required. |
- Selection process for job applicants.
| Processing | Selection process for job applicants. |
| Data | Name, surname, employment data, training data, as well as other information contained in the curriculum vitae. |
| Purpose | Manage the application to an open selection process or reject applications if there is no selection process. |
| Legitimate interest | Legitimate interest, as well as pre-contract. |
| Recipients or transfers | There are no transfers to third parties. Services are provided by suppliers who, due to the provision of the services, can access the data (legal services, IT, website maintenance, etc.). |
| International data transfers | There are no international data transfers. |
| Retention period | The data will be kept for as long as they are required for the purposes indicated or, where appropriate, for as long as is required by law. |
- Relationship with artists.
| Processing | Relationship with artists. |
| Data | Name, surname, email, telephone, country of origin and residence, tax data and employment data. |
| Purpose | Manage the Foundation’s relationship with artists whose works of art form part of the Centre with the aim of maintaining contact, informing them of possible destinations for mobile works, informing them about creative activities to be carried out with their works, commissioning new works or inviting them to events.
Manage the Foundation’s relationship with artists who do not have works at the Centre with the aim of commissioning works of art, inviting them to events and assessing the possibility of collaborating with them. |
| Legitimate interest | Legitimate interest as well as the execution of a contract or pre-contract. |
| Recipients or transfers | There are no transfers to third parties, other than those that are necessary (banks, tax authorities, etc.). Services are provided by SALESFORCE Inc., which acts as data processor and has access to the data as a supplier to the Foundation, as well as to the person in charge of the artistic direction of the Art Centre. There are also other providers who, in the normal course of business, may have access to the data (legal services, IT, website maintenance, etc.). |
| International data transfers | There are legally regulated international transfers of data through SALESFORCE’S CRM software to the United States. |
| Retention period | The data will be kept for as long as they are required for the purposes indicated or, where appropriate, for as long as is required by law. |
- Lost property.
| Processing | Lost property. |
| Data | Name, surname, email, telephone, country of origin and residence, tax data and employment data. |
| Purpose | Security and control over the collection and delivery of objects lost or forgotten in the museum. |
| Legitimate interest | Execution of an agreement. |
| Recipients or transfers | There are no transfers to third parties, other than those that are necessary (banks, tax authorities, etc.). Services are provided by MENTA GLOBE CONSULTING S.L and/or PROSEGUR COMPAÑÍA DE SEGURIDAD S.A. which act as a data processor and have access to the data as suppliers to the Foundation. There are also other providers who, in the normal course of business, may have access to the data (legal services, IT, etc.). |
| International data transfers | There are no international data transfers. |
| Retention period | The data will be kept for as long as they are required for the purposes indicated or, where appropriate, for as long as is required by law. |
- .
| Processing | Give visitors access to the Centre’s lockers so that they can leave their bags before walking around the centre. |
| Data | Name, surname, ID. |
| Purpose | Identify which users visiting the Centre are using the lockers in order to hand in the keys and check their return, as well as to be able to contact them in the event that they leave an item in the locker. |
| Legitimate interest | Fulfilling the contract. |
| Recipients or transfers | There are no transfers to third parties, other than those that are necessary (banks, tax authorities, etc.). Services are provided by MENTA GLOBE CONSULTING S.L and/or PROSEGUR COMPAÑÍA DE SEGURIDAD S.A. which act as a data processor and have access to the data as suppliers to the Foundation. There are also other providers who, in the normal course of business, may have access to the data (legal services, IT, etc.). |
| International data transfers | There are no international data transfers. |
| Retention period | The data will be kept for as long as they are required for the purposes indicated or, where appropriate, for as long as is required by law. |
| Processing | Invoicing. |
| Data | Name, surname, ID No. and invoice address. |
| Purpose | Issue invoices requested by users. |
| Legitimate interest | Fulfilling the contract. |
| Recipients or transfers | There are no transfers to third parties, other than those that are necessary (banks, tax authorities, etc.). Services are provided by CALIBRE 360 CONSULTING, S.L. using the Novti software tool which is the data processor and which has access to the data as a supplier to the Foundation. There are also other providers who, in the normal course of business, may have access to the data (legal services, IT, etc.). |
| International data transfers | There are no international data transfers. |
| Retention period | The data will be kept for as long as they are required for the purposes indicated or, where appropriate, for as long as is required by law. |
Consent
We hereby state that the consents obtained from users for the different purposes are independent of each other, and that the user may revoke them individually, without this affecting the other consents given.
Accuracy of the data
The user undertakes to provide truthful data and to communicate any changes that may occur to the data.
Data from third parties
In the event that a user provides data relating to third parties, the user declares that they have received their consent, as well as that the third party has been informed of the information contained herein, the user exempts the Foundation from any liability in this respect and the consent obtained remains at its disposal in the event that it is required.
Underage children
If the user is a minor, they are required to have the prior consent of their parents or guardians before proceeding to the inclusion of their personal data in the different forms.
RIGHTS OF DATA SUBJECTS
The user as a data subject has the right to:
– Know if the Foundation is processing their personal data.
– Access their personal data.
– Rectify their personal data, if it is inaccurate or incomplete.
– Have their personal data deleted, when it is understood that the reason for which they were made available no longer exists, when consent has been withdrawn, etc.
– Object to the processing of their data, in certain circumstances and on grounds relating to their particular situation. The Foundation will cease to process the data, except for imperative legitimate reasons or for the exercise or defence of possible claims.
– Request the portability of the data.
– Withdraw the consents provided to the Foundation.
In addition to the above, the data subjects may complain to the Spanish Data Protection Agency when they consider that their rights have been violated by the Foundation or when the exercise of their data protection rights has not been satisfied. The Agency’s contact details can be found on the website: www.aepd.es.
Users may exercise their rights in relation to the Foundation at any time and free of charge by sending us a written communication, specifying the right they are exercising to any of the following:
– By post to the Foundation (RGPD: Ejercicio de derechos) C/ del Mar, núm. 29, planta 1a, puerta 2 (46003), Valencia.
– By email rgpd with the subject “RGPD: Ejercicio de derechos”.
MODIFICATION
The Foundation reserves the right to make any modifications it deems appropriate to its portal without prior notice, and it may change, delete or add to both the content and services provided through the same as well as the way in which they are presented or located on its portal.
APPLICABLE LAW AND COMPETENT JURISDICTION
The relationship between the Foundation and the user will be governed by current Spanish legislation and any dispute will be submitted to the Courts and Tribunals of the city of Valencia.