HAZI Fundazioa

Privacy Portal

DATA PROTECTION INFORMATION

FUNDACIÓN HAZI (HAZI FOUNDATION)
Address: Granja Modelo, s/n, 01192 Arcaute, Álava
Telephone No.: 945 00 32 40
Email address to exercise your rights: lopd@hazi.eus

FUNDACIÓN HAZI (HAZI FOUNDATION) processes personal information to manage the resources, products and services that it makes available to people. Please find below information about our data protection policy for the different services, in compliance with European Regulation 2016/679 on Data Protection and Law 3/2018 on Personal Data Protection and the guarantee of digital rights.

By clicking on each information policy, you will obtain detailed information about the management of personal data carried out by the organisation.


Controller	Who is the Data Controller? FUNDACIÓN HAZI Address: Granja Modelo, s/n, 01192 Arkaute, Álava Telephone No.: 945 00 32 40 Mail: lopd@hazi.eus
Purpose	Why do we process your data? Management of the processes for filling job vacancies at FUNDACIÓN HAZI and creating job banks.
Legal ground	What is the legal ground for the processing of your data? Consent: article 9.2.a) of the European General Data Protection Regulation.
Recipients	In what circumstances will we communicate your data? We will not transfer your personal data unless we need to do so to comply with a legally established obligation applicable to this processing or to provide support to the service.
International transfers	In what circumstances are these carried out? The management of data does not involve their international transfer.
Retention	For how long will we retain your data? Personal data will be retained until the data subject opts out or deregisters from the job bank, without prejudice to their updating by the organisation. These data will then be blocked with restricted access for the periods needed for the exercising of claims regarding their management in general and personal data in particular.
Rights	What are your rights when providing us with your data? Data subjects are entitled to obtain confirmation about whether FUNDACIÓN HAZI is processing personal data concerning them. Specifically, they also have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were obtained. Where the processing is based on obtaining the person’s consent, that person may revoke this consent. This will not affect any processing that has taken place prior to revoking consent. In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain them for the making or defending of claims. The data subject can exercise their rights by sending a request to the postal or electronic address indicated in the section identifying the controller. There is a model request form on our privacy portal for this purpose. You may submit a complaint to the Basque Data Protection Agency, especially if you are not satisfied with the exercising of your rights, using the postal and/or electronic address indicated on its website.
Security	The data will be processed confidentially and subject to suitable technical and organisational security measures to avoid their alteration, loss, processing or unauthorised access. The security measures (technical and organisational) implemented correspond to the provisions of Royal Decree 3/2010, of 8 January, which regulates the National Security System in the field of Electronic Government, and that are described in the documents forming the Data Protection and Information Security Policy of FUNDACIÓN HAZI.


Controller	Who is the Data Controller? FUNDACIÓN HAZI Address: Granja Modelo, s/n, 01192 Arkaute, Álava Telephone No.: 945 00 32 40 Mail: lopd@hazi.eus
Purpose	Why do we process your data? Activities to revitalise the agricultural and livestock sector organised by and involving FUNDACIÓN HAZI. To send information about the organisation’s activity. To record audiovisual material obtained as a result of the activity performed.
Legal ground	What is the legal ground for the processing of your data? Exercising of the public powers of Fundación Hazi based on its own by-laws for performing activities and sending information: article 6.1.e) of the European General Data Protection Regulation. Consent for recording audiovisual material: article 6.1.a) of the European General Data Protection Regulation.
Recipients	In what circumstances will we communicate your data? To the Department of Economic Development, Sustainability and the Environment at the Basque Government. The audiovisual material obtained may be disseminated through the website of FUNDACIÓN HAZI, social, professional and sectoral networks, informative newsletters and social media. Other transfers specifically established in a regulation.
International transfers	In what circumstances are these carried out? The management of data does not involve their international transfer.
Retention	For how long will we retain your data? Personal data will be retained for the duration of the performance of the activity in question and will then be blocked with restricted access once completed. This block will remain in force during the statute of limitation periods required by the applicable specific regulation, as well as during the statute of limitation periods related to the liability requirements arising from management in general and personal data in particular. The processing of data related to the creation and dissemination of audiovisual material will be managed until consent is revoked, where appropriate, by the data subject and after determining the outcome of the conflict between intellectual property and data protection carried out by the organisation, without prejudice to the organisation’s power to remove or update content regarding the creation and dissemination of audiovisual material.
Rights	What are your rights when providing us with your data? Data subjects are entitled to obtain confirmation about whether FUNDACIÓN HAZI is processing personal data concerning them. Specifically, they also have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were obtained. Where the processing is based on obtaining the person’s consent, that person may revoke this consent. This will not affect any processing that has taken place prior to revoking consent. In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain them for the making or defending of claims. The data subject can exercise their rights by sending a request to the postal or electronic address indicated in the section identifying the controller. There is a model request form on our privacy portal for this purpose. You may submit a complaint to the Basque Data Protection Agency, especially if you are not satisfied with the exercising of your rights, using the postal and/or electronic address indicated on its website.
Security	The data will be processed confidentially and subject to suitable technical and organisational security measures to avoid their alteration, loss, processing or unauthorised access. The security measures (technical and organisational) implemented correspond to the provisions of Royal Decree 3/2010, of 8 January, which regulates the National Security System in the field of Electronic Government, and that are described in the documents forming the Data Protection and Information Security Policy of FUNDACIÓN HAZI.


Controller	Who is the Data Controller? FUNDACIÓN HAZI Address: Granja Modelo, s/n, 01192 Arkaute, Álava Telephone No.: 945 00 32 40 Mail: lopd@hazi.eus
Purpose	Why do we process your data? To manage the process for granting the Eusko Label certificate in accordance with the requirements of the Product Regulation. Verification and/or audit procedure for the retention of the certification. To hold draws for events relating to Eusko Label.
Legal ground	What is the legal ground for the processing of your data? Legal relationship: article 6.1.b) of the European General Data Protection Regulation.
Recipients	In what circumstances will we communicate your data? We will not transfer your personal data unless we need to do so to comply with a legally established obligation applicable to this processing or to provide support to the service.
International transfers	In what circumstances are these carried out? The management of data does not involve their international transfer.
Retention	For how long will we retain your data? Personal data will be retained for the time necessary to manage the file relating to the Eusko Label certification and will then be blocked with restricted access once completed. This block will remain in force during the statute of limitation periods required by the applicable specific regulation, as well as during the statute of limitation periods related to the liability requirements arising from management in general and personal data in particular.
Rights	What are your rights when providing us with your data? Data subjects are entitled to obtain confirmation about whether FUNDACIÓN HAZI is processing personal data concerning them. Specifically, they also have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were obtained. In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain them for the making or defending of claims. The data subject can exercise their rights by sending a request to the postal or electronic address indicated in the section identifying the controller. There is a model request form on our privacy portal for this purpose. You may submit a complaint to the Basque Data Protection Agency, especially if you are not satisfied with the exercising of your rights, using the postal and/or electronic address indicated on its website.
Security	The data will be processed confidentially and subject to suitable technical and organisational security measures to avoid their alteration, loss, processing or unauthorised access. The security measures (technical and organisational) implemented correspond to the provisions of Royal Decree 3/2010, of 8 January, which regulates the National Security System in the field of Electronic Government, and that are described in the documents forming the Data Protection and Information Security Policy of FUNDACIÓN HAZI.


Controller	Who is the Data Controller? FUNDACIÓN HAZI Address: Granja Modelo, s/n, 01192 Arkaute, Álava Telephone No.: 945 00 32 40 Mail: lopd@hazi.eus
Purpose	Why do we process your data? To manage discount vouchers exchangeable for overnight stays at participating tourist establishments and aimed at consumers who make a minimum purchase of €100 on differentiated local produce and on drinks whose products are affiliated to the Basque Wine programme. To manage any appeals arising as a result of refusing discount vouchers. To send information about products, campaigns or actions by Fundación Hazi involving the promotion of differentiated local produce. For Fundación HAZI and the Basque Government department with responsibility for agriculture to run promotions for differentiated local produce. Fundación HAZI will not assign the data to the Basque Government, although it may use them within the framework of the Basque Government’s commissioning of the dissemination and promotion of the production and marketing of this type of product.
Legitimation	What is the legal ground for the processing of your data? Legal relationship for the management of the voucher: article 6.1.b) of the European General Data Protection Regulation. Exercising the public powers of Fundación Hazi based on its own by-laws to send information about the differentiated local produce: article 6.1.e) of the European General Data Protection Regulation.
Recipients	In what circumstances will we communicate your data? We will not transfer your personal data unless we need to do so to comply with a legally established obligation applicable to this processing or to provide support to the service.
International transfers	In what circumstances are these carried out? The management of data does not involve their international transfer.
Retention	For how long will we retain your data? The personal data related to the management of the voucher will be retained for the time required to manage the file on the on egin voucher. They will then be blocked with restricted access once this has been completed and this situation will continue for 15 years. The data related to the sending of information will be retained until the recipient unsubscribes or objects to this.
Rights	What are your rights when providing us with your data? Data subjects are entitled to obtain confirmation about whether FUNDACIÓN HAZI is processing personal data concerning them. Specifically, they also have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were obtained. In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain them for the making or defending of claims. The data subject can exercise their rights by sending a request to the postal or electronic address indicated in the section identifying the controller. There is a model request form on our privacy portal for this purpose. You may submit a complaint to the Basque Data Protection Agency, especially if you are not satisfied with the exercising of your rights, using the postal and/or electronic address indicated on its website.
Security	The data will be processed confidentially and subject to suitable technical and organisational security measures to avoid their alteration, loss, processing or unauthorised access. The security measures (technical and organisational) implemented correspond to the provisions of Royal Decree 3/2010, of 8 January, which regulates the National Security System in the field of Electronic Government, and described in the documents forming the Data Protection and Information Security Policy of FUNDACIÓN HAZI.


Controller	Who is the Data Controller? FUNDACIÓN HAZI Address: Granja Modelo, s/n, 01192 Arkaute, Álava Telephone No.: 945 00 32 40 Mail: lopd@hazi.eus
Purpose	Why do we process your data? To organise and manage attendance at events organised by FUNDACIÓN HAZI. To record audiovisual material obtained as a result of the event in question.
Legal ground	What is the legal ground for the processing of your data? Consent: article 6.1.a) of the European General Data Protection Regulation.
Recipients	In what circumstances will we communicate your data? Dissemination of audiovisual material on physical or electronic media owned by Fundación Hazi. Other assignments specifically established in a regulation.
International transfers	In what circumstances are these carried out? The management of data does not involve their international transfer.
Retention	For how long will we retain your data? Personal data will be retained for the time necessary to manage the activity in question and will then be blocked with restricted access once the file relating to the event has been archived. This block will remain in force during the statute of limitation periods required by the applicable specific regulation, as well as during the statute of limitation periods related to the liability requirements arising from management in general and personal data in particular. The processing of data related to the creation and dissemination of audiovisual material will be managed until consent is revoked, where appropriate, by the data subject and after determining the outcome of the conflict between intellectual property and data protection carried out by the organisation, without prejudice to the organisation’s power to remove or update content regarding the creation and dissemination of audiovisual material.
Rights	What are your rights when providing us with your data? Data subjects are entitled to obtain confirmation about whether FUNDACIÓN HAZI is processing personal data concerning them. Specifically, they also have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were obtained. Where the processing is based on obtaining the person’s consent, that person may revoke this consent. This will not affect any processing that has taken place prior to revoking consent. In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain them for the making or defending of claims. The data subject can exercise their rights by sending a request to the postal or electronic address indicated in the section identifying the controller. There is a model request form on our privacy portal for this purpose. You may submit a complaint to the Basque Data Protection Agency, especially if you are not satisfied with the exercising of your rights, using the postal and/or electronic address indicated on its website.
Security	The data will be processed confidentially and subject to suitable technical and organisational security measures to avoid their alteration, loss, processing or unauthorised access. The security measures (technical and organisational) implemented correspond to the provisions of Royal Decree 3/2010, of 8 January, which regulates the National Security System in the field of Electronic Government, and that are described in the documents forming the Data Protection and Information Security Policy of FUNDACIÓN HAZI.


Controller	Who is the Data Controller? FUNDACIÓN HAZI Address: Granja Modelo, s/n, 01192 Arkaute, Álava Telephone No.: 945 00 32 40 Mail: lopd@hazi.eus
Purpose	Why do we process your data? To keep a record of the people who enter and visit Hazi’s facilities and Data Processing Centre (DPC) through registration in the visitor application, visitor logbook and provision of the visitor card.
Legal ground	What is the legal ground for the processing of your data? Legitimate interest: article 6.1.f) of the European General Data Protection Regulation.
Recipients	In what circumstances will we communicate your data? We will not transfer your personal data unless we need to do so to comply with a legally established obligation applicable to this processing or to provide support to the service.
International transfers	In what circumstances are these carried out? The management of data does not involve their international transfer.
Retention	For how long will we retain your data? Personal data will be retained for the time necessary to achieve the purpose of the registration and will then be blocked with restricted access once completed. This block will remain in force during the statute of limitation periods required by the applicable specific regulation, as well as during the statute of limitation periods related to the liability requirements arising from management in general and personal data in particular.
Rights	What are your rights when providing us with your data? Data subjects are entitled to obtain confirmation about whether FUNDACIÓN HAZI is processing personal data concerning them. Specifically, they also have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were obtained. In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain them for the making or defending of claims. The data subject can exercise their rights by sending a request to the postal or electronic address indicated in the section identifying the controller. There is a model request form on our privacy portal for this purpose. You may submit a complaint to the Basque Data Protection Agency, especially if you are not satisfied with the exercising of your rights, using the postal and/or electronic address indicated on its website.
Security	The data will be processed confidentially and subject to suitable technical and organisational security measures to avoid their alteration, loss, processing or unauthorised access. The security measures (technical and organisational) implemented correspond to the provisions of Royal Decree 3/2010, of 8 January, which regulates the National Security System in the field of Electronic Government, and that are described in the documents forming the Data Protection and Information Security Policy of FUNDACIÓN HAZI.


Controller	Who is the Data Controller? FUNDACIÓN HAZI Address: Granja Modelo, s/n, 01192 Arkaute, Álava Telephone No.: 945 00 32 40 Mail: lopd@hazi.eus
Purpose	Why do we process your data? To manage the communication and response with the data subjects who contact FUNDACIÓN HAZI through the different face-to-face, physical and/or electronic communication channels to make general enquiries.
Legal ground	What is the legal ground for the processing of your data? Legitimate interest: article 6.1.f) of the European General Data Protection Regulation.
Recipients	In what circumstances will we communicate your data? We will not transfer your personal data unless we need to do so to comply with a legally established obligation applicable to this processing or to provide support to the service.
International transfers	In what circumstances are these carried out? The management of data does not involve their international transfer.
Retention	For how long will we retain your data? Personal data will be retained for the time necessary to respond to the request made by the person and will then be blocked with restricted access, remaining as such for a period of one year. After this time, they will be erased.
Rights	What are your rights when providing us with your data? Data subjects are entitled to obtain confirmation about whether FUNDACIÓN HAZI is processing personal data concerning them. Specifically, they also have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were obtained. In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain them for the making or defending of claims. The data subject can exercise their rights by sending a request to the postal or electronic address indicated in the section identifying the controller. There is a model request form on our privacy portal for this purpose. You may submit a complaint to the Basque Data Protection Agency, especially if you are not satisfied with the exercising of your rights, using the postal and/or electronic address indicated on its website.
Security	The data will be processed confidentially and subject to suitable technical and organisational security measures to avoid their alteration, loss, processing or unauthorised access. The security measures (technical and organisational) implemented correspond to the provisions of Royal Decree 3/2010, of 8 January, which regulates the National Security System in the field of Electronic Government, and that are described in the documents forming the Data Protection and Information Security Policy of FUNDACIÓN HAZI.


Controller	Who is the Data Controller? FUNDACIÓN HAZI Address: Granja Modelo, s/n, 01192 Arkaute, Álava Telephone No.: 945 00 32 40 Mail: lopd@hazi.eus
Purpose	Why do we process your data? To manage the personal information derived from the provision of external services procured by FUNDACIÓN HAZI.
Legal ground	What is the legal ground for the processing of your data? Legal relationship: article 6.1.b) of the European General Data Protection Regulation. Compliance with a legal obligation: article 6.1.c) of the European General Data Protection Regulation.
Recipients	In which cases will we communicate your data? We will not transfer your personal data unless we need to do so to comply with a legally established obligation applicable to this processing or to provide support to the service.
International transfers	In what circumstances are these carried out? The management of data does not involve their international transfer.
Retention	For how long will we retain your data? Personal data will be retained for the duration of the relationship involving the supply of services and will then be blocked with restricted access once that relationship ends. This block will remain in force during the statute of limitation periods required by the applicable specific regulation, as well as during the statute of limitation periods related to the liability requirements arising from management in general and personal data in particular.
Rights	What are your rights when providing us with your data? Data subjects are entitled to obtain confirmation about whether FUNDACIÓN HAZI is processing personal data concerning them. Specifically, they also have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were obtained. In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain them for the making or defending of claims. The data subject can exercise their rights by sending a request to the postal or electronic address indicated in the section identifying the controller. There is a model request form on our privacy portal for this purpose. You may submit a complaint to the Basque Data Protection Agency, especially if you are not satisfied with the exercising of your rights, using the postal and/or electronic address indicated on its website.
Security	The data will be processed confidentially and subject to suitable technical and organisational security measures to avoid their alteration, loss, processing or unauthorised access. The security measures (technical and organisational) implemented correspond to the provisions of Royal Decree 3/2010, of 8 January, which regulates the National Security System in the field of Electronic Government, and that are described in the documents forming the Data Protection and Information Security Policy of FUNDACIÓN HAZI.


Controller	Who is the Data Controller? FUNDACIÓN HAZI Address: Granja Modelo, s/n, 01192 Arkaute, Álava Telephone No.: 945 00 32 40 Mail: lopd@hazi.eus
Purpose	Why do we process your data? To monitor images for the exterior and interior security of the facilities and of the people using the facilities, with the exception of strictly private activities.
Legal ground	What is the legal ground for the processing of your data? Legitimate interest: article 6.1.f) of the European General Data Protection Regulation.
Recipients	In what circumstances will we communicate your data? We will not transfer your personal data unless we need to do so to comply with a legally established obligation applicable to this processing or to provide support to the service.
International transfers	In what circumstances are these carried out? The management of data does not involve their international transfer.
Retention	For how long will we retain your data? Maximum period of one month from their recording, except when the images have to be retained as evidence of the committing of actions that threaten the integrity of people, property or facilities, in which case they must be made available to the competent authority.
Rights	What are your rights when providing us with your data? Data subjects are entitled to obtain confirmation about whether FUNDACIÓN HAZI is processing personal data concerning them. Specifically, they have a right to access their personal data. The data subject can exercise their rights by sending a request to the postal or electronic address indicated in the section identifying the controller. There is a model request form on our privacy portal for this purpose. You may submit a complaint to the Basque Data Protection Agency, especially if you are not satisfied with the exercising of your rights, using the postal and/or electronic address indicated on its website.
Security	The data will be processed confidentially and subject to suitable technical and organisational security measures to avoid their alteration, loss, processing or unauthorised access. The security measures (technical and organisational) implemented correspond to the provisions of Royal Decree 3/2010, of 8 January, which regulates the National Security System in the field of Electronic Government, and that are described in the documents forming the Data Protection and Information Security Policy of FUNDACIÓN HAZI.


Controller	Who is the Data Controller? FUNDACIÓN HAZI Address: Granja Modelo, s/n, 01192 Arkaute, Álava Telephone No.: 945 00 32 40 Mail: lopd@hazi.eus
Purpose	Why do we process your data? To manage and respond to requests made by data subjects to exercise the rights related to the processing of their personal data.
Legal ground	What is the legal ground for the processing of your data? Compliance with a legal obligation: article 6.1.c) of the European General Data Protection Regulation.
Recipients	In what circumstances will we communicate your data? We will not transfer your personal data unless we need to do so to comply with a legally established obligation applicable to this processing or to provide support to the service.
International transfers	In what circumstances are these carried out? The management of data does not involve their international transfer.
Retention	For how long will we retain your data? The personal data generated from the request to exercise a right related to the processing of personal data will be retained until the completion and archiving of the process. This data will then be blocked with restricted access from that moment, remaining as such for a maximum period of three years corresponding to the maximum statute of limitation period in the area of management in general and personal data in particular.
Rights	What are your rights when providing us with your data? Data subjects are entitled to obtain confirmation about whether FUNDACIÓN HAZI is processing personal data concerning them. Specifically, they also have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were obtained. In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain them for the making or defending of claims. The data subject can exercise their rights by sending a request to the postal or electronic address indicated in the section identifying the controller. There is a model request form on our privacy portal for this purpose. You may submit a complaint to the Basque Data Protection Agency, especially if you are not satisfied with the exercising of your rights, using the postal and/or electronic address indicated on its website.
Security	The data will be processed confidentially and subject to suitable technical and organisational security measures to avoid their alteration, loss, processing or unauthorised access. The security measures (technical and organisational) implemented correspond to the provisions of Royal Decree 3/2010, of 8 January, which regulates the National Security System in the field of Electronic Government, and that are described in the documents forming the Data Protection and Information Security Policy of FUNDACIÓN HAZI.


Controller	Who is the Data Controller? FUNDACIÓN HAZI Address: Granja Modelo, s/n, 01192 Arkaute, Álava Telephone No.: 945 00 32 40 Mail: lopd@hazi.eus
Purpose	Why do we process your data? To manage the processes related to data protection security breaches, to determine the nature of the potential impact on the people involved, the severity of the consequences and the measures taken.
Legal ground	What is the legal ground for the processing of your data? Compliance with a legal obligation: article 6.1.c) of the European General Data Protection Regulation.
Recipients	In what circumstances will we communicate your data? We will not transfer your personal data unless we need to do so to comply with a legally established obligation applicable to this processing or to provide support to the service.
International transfers	In what circumstances are these carried out? The management of data does not involve their international transfer.
Retention	For how long will we retain your data? The personal data related to the management of security breaches will be retained until the archiving of the process. This will include, where appropriate, the procedure or claim involving the Data Protection Agency. Once this process is complete, they will be blocked with restricted access during the statute of limitation periods related to the liability requirements arising from management in general and personal data in particular.
Rights	What are your rights when providing us with your data? Data subjects are entitled to obtain confirmation about whether FUNDACIÓN HAZI is processing personal data concerning them. Specifically, they also have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were obtained. In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain them for the making or defending of claims. The data subject can exercise their rights by sending a request to the postal or electronic address indicated in the section identifying the controller. There is a model request form on our privacy portal for this purpose. You may submit a complaint to the Basque Data Protection Agency, especially if you are not satisfied with the exercising of your rights, using the postal and/or electronic address indicated on its website.
Security	The data will be processed confidentially and subject to suitable technical and organisational security measures to avoid their alteration, loss, processing or unauthorised access. The security measures (technical and organisational) implemented correspond to the provisions of Royal Decree 3/2010, of 8 January, which regulates the National Security System in the field of Electronic Government, and that are described in the documents forming the Data Protection and Information Security Policy of FUNDACIÓN HAZI.


Controller	Who is the Data Controller? FUNDACIÓN HAZI Address: Granja Modelo, s/n, 01192 Arkaute, Álava Telephone No.: 945 00 32 40 Mail: lopd@hazi.eus
Purpose	Why do we process your data? To manage communication with people of interest to FUNDACIÓN HAZI, linked to the public and private sector. To manage the commercial relationship with freelancers and representatives of companies that provide services to or for FUNDACIÓN HAZI and staff employed by them.
Legal ground	What is the legal ground for the processing of your data? Legitimate interest: article 6.1.f) of the European General Data Protection Regulation.
Recipients	In what circumstances will we communicate your data? We will not transfer your personal data unless we need to do so to comply with a legally established obligation applicable to this processing or to provide support to the service.
International transfers	In what circumstances are these carried out? The management of data does not involve their international transfer.
Retention	For how long will we retain your data? Personal data will be retained until the data subject expresses their objection or unsubscribes from this data processing, as well as when a change occurs to the status as holder of public office or representative of public and private organisations or linked or referenced to these.
Rights	What are your rights when providing us with your data? Data subjects are entitled to obtain confirmation about whether FUNDACIÓN HAZI is processing personal data concerning them. Specifically, they also have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were obtained. In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain them for the making or defending of claims. The data subject can exercise their rights by sending a request to the postal or electronic address indicated in the section identifying the controller. There is a model request form on our privacy portal for this purpose. You may submit a complaint to the Basque Data Protection Agency, especially if you are not satisfied with the exercising of your rights, using the postal and/or electronic address indicated on its website.
Security	The data will be processed confidentially and subject to suitable technical and organisational security measures to avoid their alteration, loss, processing or unauthorised access. The security measures (technical and organisational) implemented correspond to the provisions of Royal Decree 3/2010, of 8 January, which regulates the National Security System in the field of Electronic Government, and that are described in the documents forming the Data Protection and Information Security Policy of FUNDACIÓN HAZI.