The website "41st ONCE School Contest" (hereinafter, "the Website") is owned by the ORGANIZACIÓN NACIONAL DE CIEGOS ESPAÑOLES (hereinafter, "ONCE"), with registered office at Calle José Ortega y Gasset, 18, 28006 Madrid and TIN Q2866004A. ONCE is the entity responsible for processing the personal data of Users who register on this Website (hereinafter, the "User" or "Users").
The collection, processing, and subsequent use of personal data by ONCE, as Data Controller, will be carried out in full compliance with current Spanish data protection legislation, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April (hereinafter the "GDPR"), Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (hereinafter the "LOPDGDD"), and their supplementary regulations.
ONCE will only be liable for and guarantee the confidentiality and security concerning the personal data it collects directly from Users through the Website. If a User does not wish ONCE to process their personal data, they should refrain from completing the form available on the Website.
ONCE has appointed a Data Protection Officer who can be contacted for any matters related to your personal data at the email address dpdatos@once.es and/or at the office located at Calle Prado, 24, 28014 Madrid.
This Policy provides users with all the required information about the processing of their personal data by ONCE through the Website. The relevant information about the cookies installed on this website, their types, purposes, and how to disable them is available in the Cookie Policy.
The collection of personal data will primarily be carried out through the User completing the data submission form for registration as a participant in the "38th ONCE School Contest" (hereinafter, "the Contest"), by filling out the form available on the website.
ONCE is not responsible for the processing and subsequent use of personal data carried out by third parties with data not gathered by the ONCE.
The categories of personal data collected through the form provided on the Website for which the User gives consent for the purposes of the specified processing are:
The personal data provided by Users through the Website will be processed for the purposes specifically indicated in this Privacy Policy, in the data form provided on the Website and, where applicable, as stipulated in the Terms and Conditions of the Contest.
In particular, the purposes of processing will be those derived from the User's voluntary request to participate in the Competition and their expressly selected preferences, that is, all those necessary to fulfil their participation and any regulatory aspects that may apply, including the management of personal data rights.
The legal basis for data processing is found in the unequivocal, express, and informed consent of Users who voluntarily provide their data through the corresponding form available on this website, as well as the execution of the terms governing the Contest Rules.
The data will be retained by ONCE for the essential and necessary time to manage participation requests in the Contest and during its development, as well as to comply with the legal obligations arising from the Contest.
In any case, when the personal data is no longer necessary for the purposes for which it was collected, ONCE will block it, making it available only to the competent authorities for the possible discharge of legal responsibilities during its processing, always in accordance with the applicable regulations, and it cannot be used for any other purposes. Once the corresponding legal time limits have elapsed in the event of blocking, such personal data will be deleted as provided by the applicable regulations, and may also, if applicable, be securely anonymised by ONCE.
If the User does not provide their personal data, it could lead to the inability to: 1) Navigate the website properly; 2) Access certain content or services; 3) Process your requests.
In any case, the User undertakes that the information and personal data provided to the ONCE, as applicable, must be: 1) Sufficient, accurate, limited and proportionate to the form on the Website; 2) Accurate, up-to-date and truthful, in order to properly verify your identity and access the services of the Website.
Users will be fully responsible for the data and personal information they provide to ONCE in connection with this Website.
The data subject to processing will not be disclosed to third parties, except for the transport companies responsible for delivering the participation gifts. In such cases, the name and phone number of the registered teacher will be provided to facilitate the delivery of these materials to the schools. Such providers shall be considered as data processors and shall operate under a service contract in the terms, conditions and guarantees contained in Article 28 of the GDPR.
International data transfers are not planned without prior notification to the Users and obtaining their express consent. In any case, adequate legal terms and conditions, as well as safeguards, will be in place for the assignment or transfer of personal data to any other third party, in accordance with applicable regulations.
The User may revoke their consent to data processing at any time and exercise their rights of access, rectification, erasure, restriction or objection to processing, as well as data portability, by sending a written request to the following address: Dirección General de la ONCE; C/ Prado, 24, 28014 Madrid or to the emaildpdatos@once.es. The exercise of these rights is personal, so only the user themselves, directly or through a legal or voluntary representative, can exercise these rights with respect to the personal data for which they are the legitimate holder. The withdrawal of consent shall not affect the legality of processing based on initial consent.
The exercise of the aforementioned rights by an unauthorised third party or by the User may constitute a criminal offence, notwithstanding any other consequences that may arise from civil or administrative actions to which the legitimate User, their representatives (if applicable), or ONCE itself, may be entitled.
If they deem it appropriate, the User has the right to file a complaint with the Spanish Data Protection Agency.
Personal data will be processed with appropriate levels of protection. To this end, ONCE, in compliance with current legislation, has implemented suitable technical and organisational security measures to ensure the proper security and protection of Users' personal data, aiming to prevent unauthorised alteration, loss, processing, or access — always considering the current state of technology. As the Data Controller for personal data collected through the website, ONCE is committed to maintaining the confidentiality of the obtained data and to fulfilling its obligation of secrecy. It will implement the most appropriate technical and security measures at all times, based on the prevailing risks (risk-based approach principle)
The ONCE reserves the right to modify this policy to adapt it to future legislative, doctrinal, or jurisprudential developments that may be applicable, or for technical or operational reasons, and will inform the User in advance of any changes that may arise, when possible. In any case, it is recommended that the User read this policy in detail, each time they access the Web, as any changes will be published herein.