PRIVACY POLICY

For what purpose do we process your personal data, and on what legal grounds?

NELTA maintains a Record of Processing Activities detailing the following purposes and their corresponding legal grounds:

• Members: Management of members’ information.
  Legal basis: Article 6.1(b) GDPR – Processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract.

• Contact Persons: Management of the contact database (individuals linked to clients, suppliers, institutions, public administrations, and organizations in general).
  Legal basis: Article 6.1(f) GDPR – Processing is necessary for the purposes of legitimate interests pursued by the data controller or by a third party.

• Administration: Administrative and accounting management of clients.
  Legal basis: Article 6.1(b) GDPR – Processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract.

• Website Users: Management of information requests and contact through the website.
  Legal basis: Article 6.1(f) GDPR – Processing is necessary for the purposes of legitimate interests pursued by the data controller or by a third party in relation to handling requests and commercial promotion.

• Event Management (Basque Country Off Road): Subscription management of participants in various routes and collection of related payments. Photographs of participants may also be obtained.
  Legal basis: Article 6.1(b) GDPR – Processing is necessary for the performance of a contract. Article 6.1(a) GDPR – The data subject has given consent for specific purposes.

• Event Management (Padel): Subscription management for padel tournament participants, payment collection, and obtaining photographs of participants.
  Legal basis: Article 6.1(b) GDPR – Processing is necessary for the performance of a contract. Article 6.1(a) GDPR – The data subject has given consent for specific purposes.

• Third-Party Processing Services: Currently not applicable.
  If applicable, NELTA will provide details upon request.

If further details regarding the Record of Processing Activities are required, individuals can contact NELTA through the identified communication channels.

How long do we retain your personal data?

NELTA will retain personal data as long as the relationship with the organization continues. Once this relationship ends, the data will be preserved in accordance with the archiving and documentation regulations stipulated by the applicable legislation. If a data subject exercises their rights, data will be deleted based on the specific right exercised.

Who has access to your personal data?

NELTA may disclose or share personal data to fulfill obligations with Public Administrations when required by current legislation.

What rights do you have as a data subject?

You have the right to exercise the following:

1. Right of Access: To know what personal data is being processed.

2. Right of Rectification: To correct any inaccurate personal data.

3. Right of Erasure: To request the deletion of personal data, when possible.

4. Right to Restriction of Processing: To request a limitation on the processing of your data when its accuracy, legality, or necessity is in question.

5. Right to Object: To object to the processing of your data when the legal basis is legitimate interest. NELTA will stop processing the data unless compelling legitimate grounds exist or for the defense of legal claims.

6. Right to Data Portability: To request your data in a structured, commonly used format when processing is based on consent.

These rights can be exercised free of charge by the data subject or their representative by submitting a written request to nelta.comp@gmail.com.

Additionally, data subjects have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. NELTA may continue processing data as permitted by applicable law.

Opting out of commercial communications:
Data subjects may revoke their consent for receiving commercial communications at any time by notifying NELTA or clicking the unsubscribe link included in each email.

What security measures are in place?

NELTA is committed to safeguarding the confidentiality and security of personal data. Technical and organizational measures have been implemented to prevent unauthorized alteration, loss, or access to personal data, considering the current state of technology, the nature of the data, and the risks involved.

Links to third-party websites:
NELTA’s website may include links to other websites not operated or controlled by NELTA. Therefore, NELTA cannot guarantee or be held responsible for the legality, reliability, or privacy practices of those websites. Please review their privacy policies before providing personal data.

Privacy Policy Modifications:
NELTA reserves the right to modify its Privacy Policy in accordance with applicable legislation. Any changes will be duly communicated to data subjects to ensure they are informed. Where required by law, consent will be requested for specific changes.

Last updated: November 20, 2024.