In accordance with the provisions of the REGULATION (EU) 2016/679 on the protection of personal data and the Organic Law 3/2018, of December 5, on Data Protection and guarantee of digital rights, and in accordance with our policy on data protection we provide you with the following information:

 

Who is responsible for the processing of your data?

Data Controller: Asociación Internacional de Skål Clubes – A.I.S.C. - Skål International

Tax ID No.: G29167418

Address: Avda. Palma de Mallorca, 15 Edf. España 1º A

29620 Torremolinos - Malaga (Spain)

Phone: (+34) 952 38 91 11 DPD contact data: dpd@Skål.org

Purpose of the processing of your data:

· Carry out the administrative management of the calls for entries and the awarding of the sustainable tourism prizes.

· Contacting participants to offer them information related to the services of our Association.

· In case of winning the contest, the publication of your image, name and surname in public media such as our website, and in our social media profiles, magazines and press releases.

· The conservation and filing of the document requesting your consent, to prove that it was obtained in a lawful manner.

SKÅL INTERNACIONAL guarantees that your data will be treated following the principles relating to the treatment in accordance with the provisions of Art. 5 of the RGPD and adopting the appropriate technical and organizational security measures to prevent the accidental or unlawful loss, destruction or alteration of your personal data, in accordance with the provisions of the General Data Protection Regulation.

Processing Legitimation.

1. Your express consent Article 6.1 a) of the GDPR

2. Art. 7.1 GDPR. Conditions for consent

International transfer of data:

1. Art. 49 1.a) of the RGPD. Unambiguous consent of the data subject

2. Art. 45 of the RGPD. Transfers based on an adequacy decision.

Storage of your data

The storage of your data will vary depending on the purposes for which they were collected:

· Calls for entries and award ceremonies: your data will be deleted from our information systems once the evaluation of the entries has been completed or, where appropriate, the competition has ended.

· Contacting participants to provide them with information from Skål: if you participate in any call of the Skål Sustainable Tourism awards and have given your consent for us to

contact you, Skål will keep your data until it is no longer needed for this specific purpose or, failing that, until you decide to withdraw the consent given.

· To demonstrate that we obtained your consent in a lawful manner: if you have given your consent, we will keep the document that proves that we obtained your consent in a lawful manner for the duration of our relationship with you and, thereafter, for the statute of limitations provided for in the legal regulations on data protection. We remind you that you may withdraw your consent at any time.

Communications: We foresee the communication of your data to the following recipients:

· Spanish Data Protection Agency where applicable, in order to demonstrate that your consent was obtained legitimately.

· External professionals who provide us with auxiliary services necessary for the performance of our activity such as, for example, the provider of the corporate email domain (data hosting on external servers), applications for database management, professional photographers or computer technical support services.

· Judges of the Skål Sustainable Tourism Awards

International data transfers:

We inform you that the Judges who evaluate the Skål Sustainable Tourism Awards may be domiciled in countries outside the European Economic Area, producing, in these cases, an international transfer of your personal data will take place.

The legitimate basis for such transfers shall be as follows:

1.EC Adequacy Decision (Art. 45 GDPR): When the country or territory to which we communicate your personal data is on a list published by the European Commission (EC), the legitimate basis will be Art. 45 of the GDPR. The countries and territories on this list have been assessed by the EC, which ensures that they provide an adequate level of protection with regard to the protection of personal data.

You can check the updated list of countries at the following link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_es

2.Exceptions for specific situations (Art. 49 GDPR): Where the country or territory to which we communicate your personal data is not on the EC list, the international transfer of your data will be legitimised by your explicit consent. Art. 49.1 a) “the data subject has explicitly consented to the proposed international transfer of data, after having been informed of the possible risks of such transfers for the data subject due to the absence of an adequacy decision and appropriate safeguards”.

The elements that guarantee that a country or territory offers an adequate level of protection are, in particular, the following:

a. the rule of law, respect for human rights and fundamental freedoms, relevant legislation, both general and sectoral, including legislation concerning public security, defence, national security and criminal law, and access by public authorities to personal data, as well as the application of such legislation, data protection rules, professional standards and security measures, including rules on further transfers of personal data to another third country or international organisation observed in that country or international organisation, case law, as well as the provision of effective and enforceable rights and effective administrative remedies and judicial proceedings for data subjects whose personal data are being transferred;

b. the existence and effective operation of one or more independent supervisory authorities in the third country or to which an international organisation is subject, with responsibility for ensuring and enforcing data protection rules, including appropriate implementing powers, to assist and advise data subjects in the exercise of their rights, and to cooperate with the supervisory authorities of the Union and the Member States, and

c. the international commitments undertaken by the third country or international organisation concerned, or other obligations resulting from legally binding agreements or instruments, as well as from its participation in multilateral or regional systems, in particular with regard to the protection of personal data.

You are therefore informed that, where necessary, your personal data will be transferred to a country or territory that does not offer an adequate level of protection for personal data in accordance with the elements indicated. In these cases, we will ask for your explicit consent. You have the right to opt out of this consent.

If you need further clarification you can contact our Data Protection Officer by email: dpd@Skål.org

What are your rights when you provide us with your data?

Right to request access to your personal data.

Right to request the rectification or deletion thereof.

Right to request the limitation of your processing.

Right to object to processing.

Right to data portability.

Right to withdraw consent given.

Anyone has the right to obtain confirmation about whether the Asociación Internacional de Skål Clubes – A.I.S.C. - Skål International is processing personal data that concerns them or not. You have the right to access your personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

Under certain circumstances, you may request the limitation of the processing of your data, in which case we will only keep them for the exercise or defence of claims. Furthermore, in the legally established cases, you will be entitled to the portability of your personal data.

Under certain circumstances and for reasons related to your particular situation, you may object to the processing of your data. In this case, the Asociación Internacional de Skål Clubes – A.I.S.C. - Skål International will stop processing your data, unless there are compelling legitimate reasons or for the formulation, exercise and defence of possible claims.

You have the right to withdraw the consent given at any time, without it affecting the legality of the processing based on the consent prior to the withdrawal thereof.

You can materially exercise your rights by sending an email to our Data Protection Delegate dpd@skal.org or a postal letter addressed to 29620 Torremolinos - Malaga (Spain) Avda. Palma de Mallorca, 15 Edf. Spain 1º A

In the event that you feel your rights have been violated regarding the protection of your personal data, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the Spanish Agency for Data Protection through its website www.agpd.es