Privacy Policy

1. Data controller

The controller of your personal data is Asociación Albiétar, a non-profit organisation restoring woodland after the July 2026 wildfires in the provinces of Ávila and Toledo and in the Community of Madrid.

Address: carretera de Ávila a Casavieja 48, portal B, 1.º 7, 05113, Burgohondo, Castilla y León.

Data protection contact email: asociacionalbietar@gmail.com.

Spanish tax identification number (NIF): G05612056.

The association's registration number will be published on this page once the registration process is complete.

2. Data we process, depending on your request

We process data separately for each purpose and only collect what is strictly necessary:

• Ordinary membership: identification data required to meet the record-keeping obligations under Organic Law 1/2002 of 22 March on the Right of Association, concerning the membership register (first name, surname, date of birth and identity document). These are not requested in the website form.
• Volunteer membership: first name and surname, date of birth, email address, contact telephone number, municipalities where you wish to help and volunteering area. Date of birth is used solely to establish the age required for woodland work and for compulsory volunteer insurance (Article 14.2.c of Law 45/2015).
• Voluntary communications by email or through the WhatsApp community, where applicable (name, telephone number, professional profile or availability).
• Newsletter subscription: email address, subscription type (free or with a donation), and registration date and time as evidence of consent.

Email addresses and telephone numbers are requested to communicate with the person concerned and manage their membership relationship.

The registration form does not request a DNI/NIE. We do not collect special categories of data (health, ideology, trade union membership, etc.), create profiles or make automated decisions with legal effects on you.

This website is not intended for children under 14. If we detect a registration by a child below that age without permission from a parent or legal guardian, we will delete it.

3. Purposes and legal bases

Each purpose has its own legal basis under Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD). These purposes are independent: you may volunteer without receiving the newsletter, and vice versa.

• Managing the membership register. Legal basis: a legal obligation arising from Organic Law 1/2002 (Article 6.1.c GDPR).
• Organising volunteering: coordinating seeding days, fascines and woodland care, among other activities. Legal basis: performance of the volunteering relationship you request (Article 6.1.b GDPR), and compliance with Law 45/2015, particularly volunteer insurance (Article 6.1.c GDPR).
• Organising the WhatsApp community. Legal basis: your explicit consent (Article 6.1.a GDPR), which can be withdrawn at any time using the unsubscribe link.
• Managing donations and issuing receipts. Legal basis: performance of the requested relationship and compliance with accounting and tax obligations (Articles 6.1.b and 6.1.c GDPR).
• Sending the newsletter, without a fixed schedule, about wildfire developments, relevant news and reforestation proposals. Legal basis: your explicit consent (Article 6.1.a GDPR), which can be withdrawn at any time using the unsubscribe link.
• Loading the embedded map from an external provider (Tecnogeo/ArcGIS), which stores information on your device. Legal basis: your prior consent (Article 22.2 LSSI and Article 6.1.a GDPR).
• Responding to enquiries and collaboration proposals. Legal basis: your consent and the association's legitimate interest in responding to people who contact us (Articles 6.1.a and 6.1.f GDPR).

We do not use your data for third-party advertising or disclose it for commercial purposes.

4. Retention periods

We retain your email address while you maintain your relationship with the association and do not request to leave. Once you do so, we restrict its use for the period necessary to demonstrate compliance with our obligations and then delete it.

Donation-related data is retained for the statutory accounting and tax periods (generally six years).

Individual enquiries are retained for as long as needed to respond, and for no more than one year after the last communication.

5. Recipients and data processors

We do not sell or disclose your data to third parties. Only technology providers delivering hosting, database and email services have access, acting as processors under a signed agreement in accordance with Article 28 GDPR.

These providers process data on servers in the European Economic Area or, where applicable, with appropriate safeguards for international transfers (standard contractual clauses approved by the European Commission).

We may also disclose data to public authorities and courts where legally required.

6. Your rights

You may exercise the following rights at any time and free of charge:

• Access: find out what data we process about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion when your data is no longer necessary.
• Objection: object to processing based on legitimate interests.
• Restriction of processing in the circumstances provided by law.
• Portability: receive your data in a structured, commonly used format.
• Withdrawal of consent at any time, without affecting the lawfulness of earlier processing.

To exercise these rights, write to carretera de Ávila a Casavieja 48, portal B, 1.º 7, 05113, Burgohondo or email asociacionalbietar@gmail.com, identifying yourself sufficiently by electronic means or, otherwise, through a duly signed request, and stating the right you wish to exercise. We will only request an identity document if there are reasonable doubts about your identity. You may also unsubscribe from the newsletter using the link at the end of each email.

If you believe we have not handled your request correctly, you may complain to the Spanish Data Protection Agency (www.aepd.es).

7. Information security

We apply technical and organisational measures appropriate to the risk: HTTPS traffic encryption, role-based database access, access to subscriber lists restricted to authorised association staff, and regular backups.

If a security breach poses a risk to your rights, we will inform you and notify the supervisory authority within the statutory period.

8. Cookies and similar technologies

This website does not use third-party advertising, analytics or tracking cookies, and fonts are hosted on our own server without connections to external services.

Only one element requires prior consent: the embedded map from an external provider (Tecnogeo/ArcGIS), which does not load until you explicitly accept it. Essential technical storage for maintaining the association team's session is exempt under Article 22.2 LSSI.

You can consult the details and change your decision at any time in the Cookie Policy.

9. Changes to this policy

We may update this policy to reflect legislative changes or new services. We will always publish the date of the latest update and notify you by email if changes are substantial.