Legal
Legal warning
Privacy Policy

Privacy Policy

Last updated: 08-10-2026

1. WHO WE ARE AND HOW TO CONTACT US

Data Controller: Nazioarteko Elkartasuna Solidaridad Internacional (hereinafter, Solidaridad Internacional), a private non-profit association.
• CIF: G-48301428
• Registered office: C/ Conde Mirasol 7, bajo, 48003 Bilbao (Bizkaia)
• Phone: (34) 944 792 258
• Email: solidaridad@sol-inter.org

2. WHAT DATA WE PROCESS AND FOR WHAT PURPOSE

Depending on how you interact with us, we process your personal data for the following purposes:

a) Reception of communications

If you give us your consent to receive communications, we will process your name and email address to send you information about our activities (courses, conferences, publications, magazines, film forums, campaigns, exhibitions, cooperation or humanitarian action project information, etc.). Legal basis: your consent (Art. 6.1.a GDPR). Retention: until you withdraw your consent or request deletion.
 

b) Contact, participation, and donation forms

b.1) Become a member:
If you fill out the form to become a member, we will process your data to manage your registration, maintain the membership relationship, and comply with the legal obligations derived from it (accounting, tax, etc.). Legal basis: performance of a contractual relationship (Art. 6.1.b GDPR). Retention: during the validity of the membership relationship and, thereafter, for the legally required periods.
b.2) Become a volunteer:
If you write to us by email to request information or register as a volunteer, we will process your data to handle your request. Legal basis: your consent (Art. 6.1.a GDPR), which you grant by sending us your message. If you ultimately formalize your incorporation, the legal basis will become the performance of the collaboration agreement formalized in the Individual Collaboration Commitment (Art. 6.1.b GDPR). Retention: for the time necessary to handle your request and, if you join, during the validity of your relationship with NESI and the applicable legal periods.
b.3) Occasional donations:
If you make a one-time donation (for example, via PayPal or bank transfer), we will process your data to manage the donation (issuance of certificates, tax obligations). If you subsequently authorize us expressly and separately, we will use your email address to send you information about our activity. Legal basis: your consent (Art. 6.1.a GDPR), which you grant when making the donation to manage it, and independently when subscribing to our communications (newsletter or magazines, available at https://mep.solidaridadsi.org). Retention: for the time necessary to comply with the legal obligations associated with the donation and, if you have consented to receive information, until you withdraw your consent.
To subscribe to our communications, you can do so through the subscription form available on our website.

c) Applications and résumés

If you send us your résumé to participate in a selection process, we will process the data it contains to manage your application. Legal basis: application of pre-contractual measures (art. 6.1.b GDPR). Retention: if you are not selected, we will delete your CV at the end of the selection process. If you send us your résumé without an open selection process, we will process your data solely to manage its reception. Once processed, we will delete your CV. You can exercise your rights by writing to: solidaridad@sol-inter.org. 

d) Online courses and training

If you register for one of our courses, we will process your data to manage your registration, deliver the training, evaluate your progress, and, where applicable, issue the corresponding certificate. Legal basis: performance of a contractual or pre-contractual relationship (Art. 6.1.b GDPR). Retention: registration and activity data on the platform are kept during the course and up to three years later. Issued certificates are kept for a maximum of 10 years to allow verification by students or third parties.
Platform: online training is provided through MoodleCloud (Moodle Pty Ltd), which acts as a data processor in accordance with Art. 28 GDPR.
Session recording: in virtual training mode, some sessions may be recorded. Only the speaker appears in these recordings. Recordings may be shared with course students or published on YouTube. Legal basis: speaker's consent (Art. 6.1.a GDPR). If students appear in any case, their express consent will be requested prior to recording. Retention: recordings are kept while they remain published on YouTube or are necessary for the educational purpose. Anyone who has formalized their consent to appear in the video may request its removal at any time by writing to solidaridad@sol-inter.org. Information: notification of the recording is provided when registering for the course or activity.
If you wish to receive information about future courses, you can grant us your consent independently by checking the corresponding box.
 

e) Web browsing and cookies

Our organization has two websites:
Both use cookies for their operation and to obtain statistical information about visits. You can consult detailed information in our Cookie Policy. Legal basis: your consent for non-essential cookies; legitimate interest for necessary technical cookies.

f) Magazine subscriptions (mep.solidaridadsi.org)

If you subscribe to our magazines through the website https://mep.solidaridadsi.org, we will process your email address for the sole purpose of sending you each new publication. Legal basis: your consent (Art. 6.1.a GDPR), which you grant when filling out the subscription form. Retention: until you withdraw your consent or request deletion.
 
We do not make automated decisions or profile users with your personal data under any circumstances.

3. RECIPIENTS OF THE DATA

Your data will not be disclosed to third parties, except under legal obligation or when necessary for the provision of a service. In such cases, providers act as data processors in accordance with Article 28 of the GDPR.
Providers involving international transfers:
  • MoodleCloud (Moodle Pty Ltd): online training platform. Its servers may be located outside the European Economic Area. In such cases, we apply the appropriate safeguards provided in Chapter V of the GDPR (standard contractual clauses or other equivalent mechanisms).
  • Google Analytics (Google LLC): tool for analyzing visits to our main website. Google processes browsing data as a data processor and may be located outside the EEA; in such cases, the safeguards of Chapter V of the GDPR apply.
  • YouTube (Google LLC): platform where recordings of training sessions or other activities may be published. Google may be located outside the EEA; in such cases, the safeguards of Chapter V of the GDPR apply.
  • Payments via PayPal: if you make a payment to our account through PayPal, the data necessary to manage the payment is processed by PayPal as an independent controller, in accordance with its own privacy policy.
  • We do not transfer data to third parties for commercial or advertising purposes.

4. HOW LONG WE KEEP YOUR DATA

We retain your data for the time necessary for each purpose and, thereafter, for the legally required periods. Once fulfilled, the data is securely deleted or anonymized.
Specifically, retention periods are as follows:
  • Communications (magazines, newsletter): until you withdraw your consent or request deletion.
  • Become a member: during the validity of the membership relationship and, thereafter, for the legally required periods (accounting, tax obligations, etc.).
  • Become a volunteer: for the time necessary to handle your request and, if you join, during the validity of your relationship with NESI and the applicable legal periods.
  • Occasional donations: for the time necessary to comply with the legal obligations associated with the donation (tax, accounting, etc.) and, if you have consented to receive information, until you withdraw your consent.
  • Applications and résumés (selection process): if you are not selected, your CV is deleted at the end of the process. If you consent to its retention, it is kept for a maximum of two years for future selections.
  • Applications and résumés (spontaneous CV): if you do not grant your consent, your CV is deleted once its receipt has been managed. If granted, it is kept for a maximum of two years.
  • Online courses and training: registration and activity data are kept during the course and up to three years later. Issued certificates are kept for a maximum of 10 years to allow verification.
  • Session recordings: while they remain published on YouTube or are necessary for educational or informative purposes.
  • Cookies: according to their typology, as indicated in our Cookie Policy.
  • In some cases, the law obliges us to retain data for longer periods (for example, tax, accounting, or money laundering prevention obligations). In such cases, the data is kept blocked and made available solely to the competent authorities.

5. YOUR RIGHTS

  • You can exercise the following rights at any time:
  • Access: know whether we process your data and obtain a copy.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: request the deletion of your data.
  • Objection: object to specific processing operations.
  • Restriction of processing: request the suspension of processing in certain cases.
  • Portability: receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and transmit it to another data controller.
  • Withdraw consent: when processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
To exercise these rights, write to us at:
Solidaridad Internacional
C/ Conde Mirasol 7, bajo, 48003 Bilbao (Bizkaia)
Phone: (34) 944 792 258
Email: solidaridad@sol-inter.org
 

6. COMPLAINTS TO THE SUPERVISORY AUTHORITY

If you consider that we have not correctly handled your rights, you can file a complaint with the Spanish Data Protection Agency (AEPD) through its electronic headquarters (www.aepd.es).

7. SECURITY MEASURES

We have adopted the necessary technical and organizational measures to guarantee the security of your personal data and prevent its alteration, loss, processing, or unauthorized access.

8. CHANGES TO THIS POLICY

We may update this policy to adapt it to legislative developments or changes in our processing practices. We recommend reviewing it periodically. The date of the last update appears at the beginning of the document.

9. ACCEPTANCE

Entering personal data into any of the forms on our website implies that you have read and accept this privacy policy.
Translated with the support of AI tools and reviewed by our team