Personal Data Protection Policy of the https://marrakech.once.es/ website

Responsible for the treatment: The ONCE, with registered office in 18 José Ortega y Gasset St., Madrid, Spain, 28006, ID number Q-2866004-A, is the entity responsible for the file to which the personal data of the Users that register on the https://marrakech.once.es/ website will be incorporated.

Applicable regulations: The collection of personal data, processing and later use by the ONCE are carried out in full compliance with the legislation in force in Spain on data protection, established by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (From no own, the GDPR), to the Organic Act 3/2018 of 5 December, on Personal Data Protection and Digital Right Safeguarding, and to its complementary regulations.

Collection of the data: The collection of the personal data will be carried out, mainly, through the filling by the User of the registration request as a user (either in his own name, or as representative of an authorized entity), for access and use of the https://marrakech.once.es/ website. Personal data may also be collected through the User Customer Service (from now on, SAU) that are necessary to manage all issues and incidents that the User submits through it. When the calls to the SAU are recorded, the User will be notified of them at the beginning of the same.

The categories of the personal data collected and for which the User grants consent for the indicated treatments are "personal data of identifying nature".

If a User doesn’t want the ONCE to process their personal data, they must refrain from completing the registration request on this website.

Purpose of the processing: The personal data collected by the filling of the registration application that appears on the https://marrakech.once.es/ website, as well as through the SAU, will be processed in order to process the request, allow the access and download of copies in accessible format of adapted works available in the previously mentioned website and manage the relationship with the user.

Only in the case that the User expressly authorizes it in the registration application or subsequently by marking the corresponding options on the https://marrakech.once.es/ website, the purpose of the processing of your data will also be, and depending on the options marked, the sending of communications related to the works in accessible format available on the https://marrakech.once.es/ website, with the social activities carried out by the ONCE and / or with the realization of surveys on the quality of the service, the contents and functionalities of the website and the degree of satisfaction of the User. In any case, in each communication of this type that is sent, the ONCE will inform the User of the possibility of opposing the processing of their data for these purposes or of revoking the consent given to not receive further communications in the future, for which purpose In any case, an electronic address will be provided to exercise these rights, without prejudice to other additional ways.

Legal basis of the processing: The legal basis of the processing of the users personal data is found on the express and informed consent and in the need to execute the contractual relationship that originates between the ONCE and the User with the formalization of the registration on the https://marrakech.once.es website.

In the case of sending communications related to the works in accessible format available on the https://marrakech.once.es/ website, with the social activities carried out by the ONCE and / or conducting surveys on the quality of service, the legal basis of data processing is in the express and informed consent of the user.

No data transfer: The ONCE will not transfer users personal data to any third party, unless the assignment is necessary for the fulfilment of a legal obligation applicable to the ONCE as responsible for the processing.

Non existence of automated decisions: Users of the https://marrakech.once.es/ website are not profiled and automated decisions are not made.

Data preservation: The users personal data will be preserved while he has the condition of registered User on the https://marrakech.once.es/ website. When the User no longer has such condition, personal data will be cancelled once the legal obligations deriving from the contractual relationship between the ONCE and the User are prescribed.

Rights of the User: The User may at any time revoke the consent for the processing of their data, as well as exercise their rights of access, rectification, deletion, limitation or opposition to the processing of data and the portability of data, directing a written communication to the following address: General Directorate of the ONCE; 24 Prado St., 28014 Madrid or email dpdatos@once.es. The exercise of these rights is personal, so that only the user himself, directly or through a legal or voluntary representative, may exercise said rights with regard to the personal data of which he is the legitimate owner. The revocation of consent will not affect the legality of the treatment based on the initial consent.

Data Protection Delegate: The ONCE has appointed a Delegate for Data Protection, with email dpdatos@once.es and contact address at 24 Prado St., 28014 Madrid, so that, if you wish, you can get in touch with her for any question related to your personal data.

Claim before a Control Authority: The User, if consider it appropriate, has the right to file a claim with the Spanish Data Protection Agency.

Confidentiality duty: The personal data will be processed with the appropriate protection level, as the GDPR requires, taking the necessary security measures to prevent alteration, loss, or unauthorized access or processing by third parties who can use it different purposes for which they have been requested to the User. As sole responsible for the file where the personal data collected by the ONCE will be included, the latter is committed to fulfilling its obligation of secrecy of personal data and its duty to keep them and will take the necessary measures to prevent its alteration, loss, or unauthorized access or processing, taking into account at all times the state of the technology. The ONCE will only be responsible and will guarantee the confidentiality and security with respect to the personal data that it collects from the User through the https://marrakech.once.es/ website.