PRIVACY POLICY
Last updated: September 8, 2026
1. Responsible for the processing
The person responsible for the processing of personal data is:
ARTransforma Association
NIF: G65497265
Registered in the Register of Associations of the Generalitat of Catalonia with number 41121
Email: info@artransforma.org
Web: www.artransforma.org
For any queries related to privacy or data protection, you can write to info@artransforma.org .
2. To whom this policy applies
This policy applies to data from:
- People participating in ARTransforma activities and projects.
- Families, contact persons, representatives and people who provide support.
- Associates, protectors and donors.
- Professionals, suppliers, volunteers, artists and interns.
- Candidates for selection processes or who send their CV.
- People who contact ARTransforma, fill out forms or use the website and social networks.
The data may be provided directly by the interested party; by their mother, father, guardian or representative with legally attributed powers; by a person who provides support, or by participating or collaborating centers, schools, facilities and entities.
3. Personal data that we may process
Depending on the relationship with ARTransforma, we can treat:
- Identification and contact details.
- Representation and relationship data with the participating person.
- Registration details, group, center, participation and attendance.
- Data necessary to adapt the supports.
- Academic and professional data.
- Financial, banking, billing, fee or donation data.
- Tax data required to issue donation certificates.
- Consultations, communications and incidents.
- Health data provided voluntarily.
- Images, photographs, voice, audio and audiovisual recordings.
- Technical data derived from the use of the website and authorized cookies.
ARTransforma will only collect the appropriate, relevant and necessary data for each purpose.
4. Purposes and legal bases
Inquiries and requests
We process the data to answer queries, provide information and respond to requests received.
The legal basis is the management of the interested party’s request and, where applicable, their consent.
Registration and participation in activities
We process data for:
- Manage registration and participation.
- Organize groups, calendars, activities and spaces.
- Manage attendance, fees and payments.
- Coordinate with participants, families, centers and facilities.
- Provide the necessary supports.
- Attend to incidents.
- Provide, monitor, evaluate and improve activities and projects.
The legal basis is the management of the requested relationship, compliance with legal obligations and the legitimate interest of ARTransforma in monitoring and improving its activities.
Whenever possible, data used in reports, statistics or evaluations will be presented in an aggregated or anonymized manner.
The data indicated as mandatory is necessary to manage the activity. Refusal to provide it may prevent processing the registration or providing the activity adequately.
Communications related to an activity
ARTransforma can send the necessary communications to manage the activity in which a person is registered: schedules, changes, meetings, payments, incidents or other organizational information.
These communications are part of participation management and do not depend on consent to receive information about other activities.
Information about other activities and news
We will only send information about other activities, projects, events or news from ourselves or collaborating entities when the recipient has authorized it.
The legal basis is consent, which can be withdrawn at any time by writing to info@artransforma.org .
Unsubscribing from these communications does not affect participation in activities in which the person is already registered.
Health data
Health data provided voluntarily will be processed solely to adapt support, prevent risks, adequately address participation or act in the event of an incident or emergency.
The legal basis is the explicit consent of the interested party or of whoever has legal powers to represent them. In case of emergency, essential data may also be processed or communicated to protect vital interests.
Health data is specially protected and may only be accessed by personnel who need it to carry out their functions, with the corresponding duty of confidentiality.
ARTransforma will only administer rescue medication when it has a specific authorization, completed and signed, with the necessary instructions.
Associates, protectors and donors
The data will be processed to manage:
- The admission and discharge as an associated or protective person.
- Fees, contributions and donations.
- Communications linked to this relationship.
- Issuance of donation certificates.
- Administrative, accounting and tax obligations.
- The communication of legally required data to the Tax Agency.
In the case of donations, the name and surnames or the company name, the DNI, NIE or NIF, the tax address, contact details, the amount, the date and the method of payment may be processed.
The legal basis is the management of the associative relationship or donation and the fulfillment of ARTransforma’s legal, accounting and tax obligations.
Professionals, suppliers, volunteering and internships
The data will be processed to manage requests, contracts, collaborations, billing, payments, insurance, coordination, monitoring and legal obligations arising from the relationship with ARTransforma.
The legal basis is the management of the requested or established relationship, compliance with legal obligations and, when necessary, consent.
Applications and CVs
The data provided to participate in a selection process or send a resume will be processed to assess the candidacy and manage the corresponding process.
If the person does not join ARTransforma, the data will be kept for a maximum of six months, unless they expressly authorize a longer period.
5. People represented and family participation
A person can provide data and grant authorizations for themselves and for minors or adults over whom they have parental responsibility, guardianship or legally attributed representative powers that include these decisions.
Being a relative does not automatically allow you to decide for another adult.
When a person can make their own decisions, even if they need support to understand or fill out a form, their wishes must be respected.
Whenever conditions of maturity and understanding allow it, the people represented will be informed in an understandable and accessible way and their will and preferences will be respected.
When a form includes multiple people, the permissions selected will apply equally to all of them. If you want to give different permissions, you will need to fill out separate forms.
6. Images, voice and recordings
ARTransforma can capture and process photographs, voice, audio and audiovisual recordings made during activities.
The treatment will be based on the express authorization of the interested party or of whoever has legal authority to represent them.
The conditions of use of images may vary according to each activity or project. When the capture or recording is objectively necessary to carry out a specific activity and this condition has been clearly informed before formalizing the registration, ARTransforma will indicate the minimum level of image authorization necessary to participate. Participation will not be conditioned to image uses that are not necessary for the development of the activity.
In the case of minors, they will be provided with information appropriate to their age and their wishes will be respected. Identifiable images will not be captured or disseminated if the minor objects, even if the person exercising parental responsibility, guardianship or representation has authorized their use.
ARTransforma establishes the following authorization levels:
0. No image authorization
The capture, reproduction, use or dissemination of images, voice or recordings in which the person is identifiable is not authorized.
This does not prevent the use of general images in which the person does not appear or cannot be identified.
1. Authorization only for ARTransforma
ARTransforma is authorized to capture and use images, voice or recordings for monitoring, evaluation, documentation, communication and dissemination of activities.
This includes ARTransforma’s own channels and materials: website, social networks, video platforms, reports, dossiers, leaflets, publications, exhibitions, presentations, conferences, talks, training and other dissemination and awareness-raising actions.
This option does not authorize professionals, volunteers, students, artists, photographers or other collaborators to publish the images on their own profiles, works, websites or portfolios.
2. Authorization for ARTransforma and related or collaborating third parties
ARTransforma and related or collaborating third parties are authorized to capture, reproduce and disseminate images, voice or recordings to document, communicate and give visibility to the activities and social, artistic, cultural and educational purposes of ARTransforma.
This may include:
- Professionals, volunteers, interns, artists, photographers and other collaborators.
- Participating or collaborating centers, schools, facilities, entities and institutions.
- Media, television, press, production companies and other entities that record or broadcast the activities.
- Social networks, websites, professional portfolios, academic work, presentations, news, reports, documentaries and other materials linked to activities.
Under no circumstances does this authorization allow the images to be used for purposes other than the activities and purposes of ARTransforma.
ARTransforma will not associate images with diagnoses, health data or other particularly sensitive information. Nor will it publish the person’s full name along with their image without specific authorization.
Validity and withdrawal
Image authorization is free and non-exclusive and includes printed, audiovisual and digital media, including the internet.
It allows new uses during participation in the activities and for the five years following.
Images legitimately published or incorporated into memoirs, dossiers, reports, documentaries, videos or other finished works may continue to form part of them, in accordance with applicable regulations and the technical and legal possibilities for elimination.
Authorization may be withdrawn at any time by writing to info@artransforma.org . Withdrawal will not affect previously legitimate uses.
Following withdrawal, ARTransforma will not make new uses of it and will remove, whenever reasonably possible, the contents of the channels it directly manages. The elimination of copies or publications made by third parties outside the control of ARTransforma cannot be guaranteed.
7. Recipient persons and entities
They will be able to access the data:
- ARTransforma staff duly authorized.
- Professionals, volunteers and interns who need the data to carry out their functions and are subject to a duty of confidentiality.
- Providers of technology services, web hosting, forms, email, storage, management, administration, accounting, insurance or other necessary services.
- Centers, schools, facilities and participating or collaborating entities, when necessary to coordinate activities.
- Banking entities and payment platforms.
- Management offices, consultants and insurance companies.
- Public administrations, Tax Agency, judicial bodies, emergency services and competent authorities, when necessary or legally required.
- The people and entities included in the image authorization granted.
Suppliers who process data following ARTransforma’s instructions will act as data processors and will be subject to the corresponding contractual obligations of confidentiality, security and data protection.
Centers, media, social networks or other entities that process data for their own purposes and means can act as independent controllers and apply their privacy policies.
8. Digital platforms and international transfers
ARTransforma uses or may use digital services to manage forms, documents, email, messaging, videos, social networks and communications, including Google Workspace, Google Forms, Google Drive, YouTube, WhatsApp, Instagram, Facebook, X or other equivalent services.
Some of these providers may process data outside the European Economic Area or allow access to it from other countries.
When international transfers occur, ARTransforma will ensure that they are based on an adequacy decision from the European Commission, standard contractual clauses or other guarantees recognized by European regulations.
The publication of content on the internet, social networks or messaging services may allow third parties to copy, share or reuse it outside the control of ARTransforma.
9. Retention periods
The data will be retained according to its purpose:
- Participation data, while the relationship with ARTransforma is maintained and, subsequently, during the periods necessary to meet obligations and possible responsibilities.
- Health data, as long as it is necessary to provide the activity safely and, subsequently, blocked when necessary to meet possible responsibilities.
- The data of associates, protectors, donors, payments and tax certificates, during the periods required by association, accounting and tax regulations.
- The data of professionals, suppliers, volunteers and interns, for the duration of the relationship and during the applicable legal periods.
- The CVs of people not employed, for a maximum of six months, unless expressly authorized to keep them for longer.
- Data to send information about other activities, until consent is withdrawn.
- Authorizations and evidence of consent, for the time necessary to prove their validity and address possible responsibilities.
- Images and recordings, in accordance with the terms indicated in this policy.
- The data obtained through cookies, during the periods indicated in the Cookies Policy.
When they are no longer necessary, the data will be deleted, anonymized or kept blocked exclusively to meet legal obligations.
10. Human rights
Anyone can exercise the rights of access, rectification, deletion, opposition, limitation of processing and portability, as well as withdraw the consents granted.
The withdrawal of consent does not affect the legality of the processing carried out previously.
To exercise these rights, you can write to:
The request must indicate the right that is to be exercised and the data necessary to identify the interested party. When necessary, ARTransforma may request additional information to reasonably verify their identity.
You can also file a complaint with the Spanish Data Protection Agency:
11. Security, confidentiality and automated decisions
ARTransforma applies appropriate technical and organizational measures to protect data against loss, alteration, unauthorized access, disclosure or improper processing.
Access is limited to people who need the data to carry out their functions, who are subject to the duty of confidentiality.
ARTransforma does not adopt automated decisions or develop profiles that produce legal effects or significantly affect people.
12. Cookies
The website may use technical cookies necessary to function and, with the user’s consent, analytical cookies or other categories.
You can consult the complete information and modify your preferences at:
https://www.artransforma.org/art/politica-de-cookies/
13. Policy modifications
ARTransforma may update this policy when the treatments, services used or applicable regulations change.
The current version will always be the one published on this page, with indication of the update date.