General Privacy Policy
COOPERATING VOLUNTEERS, S.L. is dedicated to organizing combined trips specialized in volunteer experiences, facilitating for those interested the immersion experience in various destinations, as well as accommodation services, activities, and internal transportation in the destinations listed on the website. To achieve this, it is necessary to process the personal data of users or clients. In compliance with our obligation to inform, we have developed the following privacy policy aimed at providing all the information needed to understand the scope and purpose of data processing so that the acceptance of the processing carried out is based on fully informed consent, as required by Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, and Regulation 2016/679, of April 27, 2016, concerning the protection of natural persons regarding the processing of personal data and the free movement of such data.
What is the source and category of data?
The personal data we process comes from the information provided by the interested parties when requesting information through the contact channels we make available to users, including social media, instant messaging (WhatsApp), phone calls, email, or website contact forms.
The categories of data we will process are general identification data, such as your full name, ID or passport number, email/postal address, phone number; banking information; and image, if you have given your consent.
Data related to personal characteristics include: date of birth, nationality, gender, academic or professional data.
We may also process special categories of data, as defined in Article 9 of the GDPR, relating to special diets/allergies, food intolerances, or significant illnesses, which are essential for the proper management of the services, if provided by the client. If the user provides this type of data concerning health information, they expressly authorize its processing as it may be necessary (and mandatory for service provision) for your data to be communicated to providers such as accommodations and other service providers, who will be required to use the data solely and exclusively to fulfill the contract’s purpose. These accessory data will be processed with all reasonably applicable security and confidentiality guarantees in accordance with the technology and will be deleted from our systems once the service or trip is concluded. Failure to accept this processing means that it will be impossible to provide personalized services that require knowledge of special data.
To comply with the provisions contained in Organic Law 8/2021, of June 4, on the comprehensive protection of children and adolescents against violence, or other applicable regulations, and because the services we organize involve regular contact with minors, the presentation of a negative Certificate of Sexual Offenses will be required.
All personal data is treated confidentially in accordance with the privacy and security policies implemented at COOPERATING VOLUNTEERS, S.L.
Who is responsible for processing your data?
The data controller is COOPERATING VOLUNTEERS, S.L, hereinafter COOPERATING VOLUNTEERS, with Tax ID Number B-66231218, and registered address at Avinguda Carrilet, 3, Edifici D, planta 2a, 08902 L’Hospitalet de Llobregat (Barcelona). You can contact us by letter addressed to our postal address, as indicated in this paragraph, by phone at 937021954, or via email at infoprotecciondedatos@cooperatingvolunteers.com.
What are the purposes for processing personal data?
COOPERATING VOLUNTEERS will process the personal data provided by users with the aim of achieving the following objectives:
- For the development, management, execution, and fulfillment of the contracted services.
- For communication with users, COOPERATING VOLUNTEERS will use any of the methods provided by users for this purpose, including email address, landline or mobile phone, instant messaging services, as well as social networks. These channels will be used to inform about any relevant information regarding the contracted services, changes, or notifications.
- To manage inquiries made by users through any of the indicated contact methods. If the interested party has only contacted COOPERATING VOLUNTEERS to request information about the services provided, your data will be processed to respond to requests or inquiries regarding the offered services. COOPERATING VOLUNTEERS will only process the personal data that is strictly necessary to manage or resolve the request or inquiry.
- For commercial purposes, an interested party who is actually a customer of COOPERATING VOLUNTEERS may receive updates on similar products also provided by COOPERATING VOLUNTEERS. However, the customer is informed that they may object at any time by contacting COOPERATING VOLUNTEERS through the already indicated methods.
- For the management of our social networks. What is the legal basis for processing your data?
- In any case, COOPERATING VOLUNTEERS offers all appropriate guarantees within its reach regarding the protection of personal data for the transfer of personal data to third countries or international organizations, to provide an appropriate level of protection.
- To manage the data of website users that is collected through cookies, which will be processed to ensure that the website’s operation allows the user to navigate and use the different options offered by the portal, as well as to analyze visitor and session data.
- Furthermore, as long as the interested party, not yet a customer, has given their consent, your personal data will be processed for sending commercial, advertising, and/or promotional communications. Users may object to this processing at any time through the address provided in each of these communications by indicating “No Ads” in the subject line.
What is the legal basis for the processing of your data?
COOPERATING VOLUNTEERS processes the personal data provided by users for the following purposes:
- To provide the contracted services, whose legal basis is based on art. 6.1.b of the GDPR, as we collect and process your personal data for the execution of pre-contractual and, where applicable, contractual measures for the requested services according to the terms and conditions set out in such contracts.
- To contact users or clients by any of the indicated means of communication (telephone, instant messaging, email or postal mail) to inform them of matters affecting the contracted volunteer experience, with the same legal basis indicated in the previous paragraph.
- To manage the queries raised through the means of communication informed for customer communications. This processing is based on article 6.1.f) of the GDPR, the legitimate interest, which COOPERATING VOLUNTEERS has to attend to the information requirements that are received.
- Sending commercial emails to our customers: whose legal basis is based on the exception set out in art. 21.2 of Law 34/2002, of July 11, on information society and electronic commerce services, without the need for your express consent, you may express your opposition to this type of processing at any time without the exercise of this right conditioning the execution of the contract, by communicating to any of the addresses informed in this privacy policy, both at the time of data collection and in each of the commercial communications that we send you.
- Manage the data of website users that is collected through cookies, this processing is legitimized by the unequivocal consent granted by users.
- Due to the fact that our destinations are outside the European economic area, international data transfers are carried out for the management and provision of services, whose legal basis is found in article 49.1 b) of Regulation (EU) 2016/679, as it is transfers necessary for the execution of a contract between the data subject and the controller or for the execution of pre-contractual measures taken at the request of the data subject.equivalent protection to that provided by the European framework with the suppliers, through data processing annexes using Data Protection Standard Clauses adopted by the Commission.
- The non-acceptance of this processing implies the impossibility of providing the service and fulfilling the contract.
- For the fulfillment of legal obligations.
We also inform you that the non-provision of the required information implies the impossibility of your subscription and fulfillment of the contract.
How long do we keep your personal data?
COOPERATING VOLUNTEERS processes your personal data for the period necessary to fulfill the purposes established in this Privacy Policy, as well as to retain your personal information in compliance with the provisions of relevant laws and regulations.
Specifically, the data will be retained for the entire duration of the contract and will be blocked upon its expiration. In this way, the data will be blocked and preserved for 5 years, which is the statute of limitations for any actions that may arise from the contractual relationship.
Data for which the user has given consent for the sending of commercial information will be kept until the user requests to unsubscribe, at which point it will be deleted.
The data received or collected will be the minimum necessary to fulfill the indicated purposes.
To whom will your data be communicated?
We will communicate the collected data to third-party providers related to COOPERATING VOLUNTEERS whose involvement is necessary for the fulfillment of the purposes described here (developers, online marketing, billing, management, legal advice, transportation companies, accommodations, local partners, and destination personnel involved in the projects chosen by volunteer experience travelers).
Due to the nature of the services we organize, some service providers are located in territories outside the European Economic Area that do not provide a level of data protection equivalent to that of the European Union. In such cases, we inform you that we transfer your data with adequate guarantees, always ensuring the security of your data. For the fulfillment of legal obligations, we transfer your data with adequate guarantees, always ensuring the security of your data.
COOPERATING VOLUNTEERS applies the guidelines of the European Data Protection Committee regarding the implementation of appropriate measures to ensure the appropriate level of protection.
Google reCAPTCHA and Analytics.-
In order to ensure protection against misuse of our website and to prevent spam, we use the Google reCAPTCHA service. By verifying manual input, this service prevents automated software from engaging in abusive activities on the website. In accordance with Article 6.1 f) of the GDPR, this serves to protect our legitimate interests in safeguarding our website from misuse and ensuring the smooth presentation of our online presence.
We also use the Google Analytics tool, which allows us to understand where our users come from through small snippets of text added to the end of our URL, thereby better understanding our users, web traffic, and social media presence of our proposals, and adapting them accordingly.
For more information on Google’s privacy policy, you can access www.google.com/policies/privacy/
Outside of the cases described here, no data will be communicated except where required by law.
Social Media
COOPERATING VOLUNTEERS has a presence on social media platforms for which it acts as the data controller in relation to the data published by COOPERATING VOLUNTEERS. The social media platforms are detailed below:
Instagram: https://www.instagram.com/cooperatingvolunteers/
LinkedIn: https://www.linkedin.com/company/cooperatingvolunteers/?originalSubdomain=es
YouTube: https://www.youtube.com/channel/UCz2eopTIwOCd8Y8U_Ex4knQ
TikTok: https://www.tiktok.com/@cooperatingvolunteers?lang=es
Facebook: https://www.facebook.com/cooperatingvolunteers
Users of social media platforms are responsible for the content they post. By doing so, they guarantee that the content is solely owned by them, complying with the conditions set forth by the respective social media platform and respecting privacy rights, publicity rights, copyrights, trademarks, contractual rights, or any other rights of any individual or entity.
Users of the respective social media platforms can configure privacy and security options through the tools provided by the social media platform itself. COOPERATING VOLUNTEERS is not responsible for the processing of user data on the social media platform.
What are your obligations when you provide us with data?
The data provided by users must be true, accurate, complete, and up-to-date. The user is responsible for any direct or indirect damage or harm that may arise as a result of the failure to comply with this obligation.
If the user provides data belonging to a third party, they must ensure and guarantee that they have informed such third party that their data will be subject to data processing for the purposes stated in our Privacy Policy and obtained their consent to provide us with their data for the intended processing purpose. All this, prior to supplying the data of a third party.
What are your rights when you provide us with your data?
Any person has the right to obtain confirmation as to whether COOPERATING VOLUNTEERS is processing personal data concerning them.
The data subject shall have the right to withdraw their consent at any time, provided that the processing is not necessary for the performance of the contract. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
You can exercise your rights as a data subject: access, rectification, erasure, restriction, portability, and objection regarding the processing of your personal data, at any time and free of charge, by sending an email to infoprotecciondedatos@cooperatingvolunteers.com or by sending a written request to COOPERATING VOLUNTEERS, S.L at the postal address indicated in the section on data controller, stating the right you wish to exercise and your identifying information.
Requests to exercise rights will be responded to within one month from the receipt of the request, which may be extended by another two months if necessary, taking into account the complexity and number of requests. Additionally, if you believe that your rights have not been addressed, you may file a complaint with the Spanish Data Protection Agency (AEPD) as the national supervisory authority for data protection.
Last updated: April 2024