Privacy Policy

1. Data Controller Identity

The data controller responsible for processing your personal data is the entity operating under the brand name Monlarento, with NIF E64598417, registered address at Paseo de la Castellana, 163, Tetuán, 28046 Madrid, Spain. Contact: info@monlarento.com / +34 911 590 510.

This privacy policy applies to all personal data collected through the website monlarento.com and through any interaction with our programme services.

2. Data We Collect

We collect personal data that you provide directly to us, including:

• Full name and contact details (email address, telephone number)
• Information about your background in the child protection system, where voluntarily provided for programme eligibility purposes
• Communications you send us via email or the contact form
• Technical data collected automatically during website use (IP address, browser type, pages visited, time of visit), processed via cookies as described in our Cookie Policy

We do not collect sensitive categories of personal data beyond what is strictly necessary for the operation of the programme, and we do so only with your explicit consent where required by law.

3. Purposes and Legal Basis for Processing

We process your personal data for the following purposes and on the following legal bases under the General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD):

• Responding to enquiries: Processing is necessary for the performance of pre-contractual steps at your request (Article 6(1)(b) GDPR).
• Programme management: Processing is necessary for the performance of the programme participation agreement (Article 6(1)(b) GDPR).
• Legal compliance: Processing is necessary for compliance with applicable legal obligations (Article 6(1)(c) GDPR).
• Legitimate interests: Improving our services and maintaining website security (Article 6(1)(f) GDPR), where such interests are not overridden by your rights and freedoms.
• Consent: For the use of non-essential cookies and any optional communications (Article 6(1)(a) GDPR). Consent may be withdrawn at any time.

4. Data Retention

Personal data collected through the contact form is retained for a maximum of 12 months from the date of last contact, unless you become a programme participant, in which case data may be retained for the duration of your participation and for up to 5 years thereafter for legal and accounting purposes.

Technical and analytical data is retained in aggregated, anonymised form after 26 months. We do not sell, rent, or otherwise transfer your personal data to third parties for commercial purposes.

5. Data Recipients and Transfers

Your personal data may be shared with the following categories of recipients:

• Technology service providers who host our website and communications infrastructure, bound by data processing agreements
• Public authorities when required by applicable law
• EU funding bodies for audit and reporting purposes, where required by the terms of the European Social Fund Plus (ESF+) programme

Where data is transferred outside the European Economic Area, we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR, including Standard Contractual Clauses where applicable.

6. Your Rights

Under the GDPR and LOPDGDD, you have the following rights regarding your personal data:

• Right of access: To obtain confirmation of whether we process your data and to receive a copy.
• Right to rectification: To request correction of inaccurate or incomplete data.
• Right to erasure: To request deletion of your data in certain circumstances.
• Right to restriction of processing: To request that we limit how we use your data.
• Right to data portability: To receive your data in a structured, commonly used format.
• Right to object: To object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@monlarento.com. We will respond within one month. You also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos, www.aepd.es).

7. Cookies

Our website uses cookies and similar technologies. Strictly necessary cookies are used without consent as they are essential for the website to function. Other cookies (analytics, marketing) are only placed with your prior consent, which you can provide or withdraw via the cookie settings panel accessible from the shield icon in the bottom-right corner of any page.

For full information on the cookies we use, please see our Cookie Policy.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include encryption of data in transit (TLS/HTTPS), access controls, and regular security assessments. While we take these measures seriously, no method of transmission over the internet is completely secure.

9. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.

For questions about this policy or our data practices, contact us at info@monlarento.com.