Legal notice
Legal notice of the website
Website owner
Welcome to the website of ASOCIACIÓN ESTUDIANTIL JUNIOR EMPRESA ASTRA (hereinafter, ASTRA), with tax ID (NIF) G56716616 and registered address at Uribitarte Kalea, 6, 1st floor, 48001 Bilbao, Bizkaia. Contact by email at [email protected]. Registered in the Registry of Associations under number AS/B/25451/2024.
Intellectual property
The contents of this website (texts, images, sounds, animations, etc.), as well as its graphic design and source code, are protected by Spanish legislation on intellectual and industrial property rights in favour of the companies that make up ASTRA. Their reproduction, distribution or public communication, in whole or in part, without the express authorisation of ASTRA is therefore prohibited.
Website content and links
At ASTRA we are not responsible for any misuse of the contents of our website, which is the sole responsibility of the person who accesses or uses them. Nor do we accept any responsibility for the information contained on third-party websites that may be accessed through links or search engines from this website.
Updates and changes to the website
ASTRA reserves the right to modify or remove, without prior notice, both the information contained on its website and its configuration and presentation, without assuming any liability for doing so.
Technical matters
ASTRA accepts no liability arising from technical problems or failures in computer equipment that occur during connection to the Internet, nor for damage that may be caused by third parties through unlawful intrusions beyond ASTRA’s control. We are also released from all liability for any damage or loss the user may suffer as a result of errors, defects or omissions in the information we provide when it comes from sources other than ourselves.
Privacy policy
Website privacy policy · Last updated 15 March 2024
Identification of the data controller
ASOCIACIÓN ESTUDIANTIL JUNIOR EMPRESA ASTRA (hereinafter, ASTRA), with tax ID (NIF) G56716616 and registered address at Uribitarte Kalea, 6, 1st floor, 48001 Bilbao, Bizkaia.
Contact: [email protected]
Who is responsible for processing your data?
This privacy policy applies to all personal data that the data subject provides to ASTRA, and to every natural person interested in the activities and services that ASTRA offers through its websites and through any other means of communication. The purpose of ASTRA’s Privacy Policy is to be transparent about how we process your personal data in compliance with current data protection regulations.
The data subject may contact ASTRA using the details given in the identification of the data controller.
For what purpose do we process your personal data, and on what legal basis?
ASTRA keeps a Record of Processing Activities detailing each of the following processing operations it carries out as data controller:
IDENTIFYING PERSONAL DATA OF MEMBERSManagement of membersArt. 6.1(b) GDPR: processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract.
PERSONAL AND IDENTIFYING DATA OF CONTACT PERSONSManagement of the contacts database (people linked to clients, suppliers, institutions, public administrations and companies in general)Art. 6.1(f) GDPR: processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.
PERSONAL DATA OF WEBSITE USERSManagement of people requesting information and contact through the websiteArt. 6.1(f) GDPR: processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, in relation to managing the request and commercial promotion.
PERSONAL AND FINANCIAL DATA FOR ACCOUNTINGAdministrative and accounting management of clientsArt. 6.1(b) GDPR: processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract.
IDENTIFYING AND CONTACT DATA FOR EVENT MANAGEMENTRegistration and management of event attendeesArt. 6.1(a) GDPR: the data subject has given consent to the processing of their personal data for one or more specific purposes. Art. 6.1(f) GDPR: processing is necessary for the purposes of the legitimate interests pursued by the controller in relation to advertising and commercial promotion.
Where duly justified, if you need more detail about the Record of Processing Activities, you may contact ASTRA through any of the channels identified.
How long do we keep your personal data?
ASTRA will keep the data of data subjects for as long as their relationship with the organisation lasts and, after that, the data will be kept in accordance with the archiving and documentation rules established by each applicable law. If you exercise a right, your data will be deleted according to the right you have requested.
Who has access to your personal data?
ASTRA may transfer or disclose personal data to meet its obligations to Public Administrations where required under the legislation in force at any given time.
What are the rights of data subjects?
We inform you that you may exercise the following rights:
- Right of access to your personal data, to know which of your data are being processed;
- Right to rectify any inaccurate personal data;
- Right to erasure of your personal data, where possible;
- Right to request restriction of the processing of your personal data when the accuracy, lawfulness or need for the processing is in doubt, in which case we may keep the data for the establishment, exercise or defence of claims;
- Right to object to the processing of your personal data when the legal basis that allows us to process it is legitimate interest. ASTRA will stop processing your data unless it has a compelling legitimate interest, or for the establishment, exercise or defence of claims;
- Right to data portability, when the legal basis, among those indicated, that allows us to process your data is your consent.
These rights may be exercised free of charge by the data subject, and where applicable by their representative, by written request to [email protected].
In addition to the above rights, the data subject has the right to withdraw the consent given at any time, without this withdrawal affecting the lawfulness of the processing carried out before it. ASTRA may continue to process the data subject’s data to the extent permitted by applicable law.
ASTRA reminds the data subject that they have the right to lodge a complaint with the competent supervisory authority of the country in which they are located.
Unsubscribing from commercial communications
The data subject has the right to revoke, at any time, the consent given for receiving commercial communications by simply notifying ASTRA that they no longer wish to receive them. To do so, the data subject may click the link included in each communication to cancel electronic commercial communications, or revoke their consent by writing to [email protected].
What security measures have we implemented?
ASTRA undertakes to comply with its obligation of secrecy regarding personal data and its duty to safeguard them, and will adopt the necessary measures to prevent their alteration, loss, processing or unauthorised access, in accordance with the applicable regulations.
ASTRA has implemented the technical and organisational security measures necessary to guarantee the security of your personal data and to prevent their alteration, loss and processing and/or unauthorised access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed, whether from human action or from the physical or natural environment, in accordance with the applicable regulations.
Links
ASTRA’s website may include hyperlinks to other sites that are not operated or controlled by ASTRA. Therefore, ASTRA does not guarantee, and is not responsible for, the lawfulness, reliability, usefulness, accuracy or timeliness of the contents of such websites or of their privacy practices. Before providing your personal information to these websites outside ASTRA, please bear in mind that their data protection compliance may differ from ours.
Changes to the Privacy Policy
ASTRA may modify its Privacy Policy in accordance with the legislation applicable at any given time. In any case, any change to the Privacy Policy will be duly notified to the data subject so that they are informed of the changes made to the processing of their personal data and, where required by applicable law, can give their consent.
Last updated: ASTRA Privacy Policy, 15 March 2024.