I. Introduction

Visits to the website of Fundación Deportiva Municipal de València (hereinafter, OA FDM) are initially anonymous.

In order to access any of the website’s services that require specific management or processing, users must provide the personal data necessary for the provision of the requested service.

This data will be incorporated into the corresponding processing activities of OA FDM and will be processed for the specific purpose of each processing operation, in accordance, mainly, with the regulations established by Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).

The Portal owned by OA FDM contains links to third-party websites, whose privacy policies are unrelated to that of OA FDM. When accessing such websites, you can decide whether to accept their privacy and cookie policies. In general, when browsing the internet, you can accept or reject third-party cookies from your browser settings.

II. General information on privacy and data protection

Below, OA FDM provides general information about the safeguarding of privacy and the protection of personal data applied to the processing activities it carries out on the Portal, as well as by other means:

1. Who is responsible for processing your personal data?

OA FDM is the Data Controller, advised and supervised by our Data Protection Officer: dpd@fdmvalencia.es

2. Why do we process your personal data?

The data provided to us, as well as any other data generated during the course of our relationship with the citizen/interested party, may be processed for different purposes depending on the services provided and, in any case, to maintain contact and communication with them and to manage the provision of services requested/provided by OA FDM.

Your personal data collected will be processed for the following purposes:

• Management of activities and events organised by OAM FDM.
• Communication with participants and management of registrations.
• Compliance with legal and administrative obligations.
• Processing of personal data for registration in the Gay Games Valencia XII, managed by the Gay Games Federation.

Where applicable, more explicit and specific purposes may be indicated in the information clauses included in each of the data collection channels (web forms, paper forms, announcements or posters and information notes) for specific cases.

In any case, you can consult the record of personal data processing activities carried out by OA FDM in order to find out the specific uses or purposes of each personal data processing operation. Consult the Record of Personal Data Processing Activities.

3. What is the legal basis that legitimises the processing of your personal data? In other words, what is the basis or justification for us to process your personal data?

The legal basis that legitimises our processing of your data may vary: (i) normally, in the public sector, the legitimacy lies in the need to comply with a legal obligation, a mission carried out in the public interest or in the exercise of the public powers or competences granted to OA FDM; (ii) and, where applicable, the performance of a contract to which you as a contractor or successful tenderer, such as the consent that may have been required for the processing of your personal data.

The provision of the data we request is mandatory because it is essential for us to respond to your request or provide our services; if you do not provide it, we will not be able to respond to your request or provide our services.

In the event that the processing is based on your consent, it will be understood to have been given unequivocally, with the provision of the data being considered a clear affirmative act on your part, expressing such consent.

In the case of the processing of your personal data by the Gay Games Federation, such processing will be carried out with the consent of the participant when registering for the event.

If you provide personal data of other individuals, you must respect their privacy. Only the owner of the data can authorise the processing of their personal data. You will be entitled to process the personal data of other individuals if you act as their legal or voluntary representative or if, with their knowledge, the data is transmitted for the purpose of reporting or claiming rights against them.

The publication of third-party data without their consent may infringe not only data protection regulations but also those relating to the right to honour, privacy or the image of those third parties.

4. How long do we keep your personal data?

In general, we will keep the personal data provided to us in order to maintain a service history and manage our services efficiently, unless the data subject requests its deletion. Even if deletion is requested, the data will remain blocked for as long as necessary, and its processing will be limited to only one of the following cases: to comply with any legal/contractual obligations to which we are subject and/or during the legal periods established for the limitation of any liabilities on our part and/or the exercise or defence of claims arising from the relationship with the citizen/data subject.

In any case, you can obtain more information, depending on the personal data processing activity in question, in our Register of Personal Data Processing Activities.

5. Who may be the assignees or recipients of your personal data?

The data you provide may be transferred or communicated to public or private entities to which the transfer is mandatory or necessary for the achievement of specific and legitimate purposes.

For the proper management of registrations for the Gay Games Valencia XII, the personal data entered in the registration form on the website will be processed directly by the Gay Games Federation, the event organiser.

In this regard, the OA FDM will not be responsible for the processing of this data once it has been transferred to the Gay Games Federation, which will act as an independent entity in accordance with its own privacy policy.

In any case, you can obtain more information about who may be recipients or transferees, depending on the personal data processing activity in question, in our Register of Personal Data Processing Activities.

6. Personal data security.

In accordance with the First Additional Provision of Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights, the security, technical and organisational measures adopted by OA FDM and intended to safeguard the confidentiality and protection of personal data, preventing its loss, alteration or unauthorised access, are those established in Annex II of Royal Decree 3/2010, of 8 January, regulating the National Security Scheme in the field of Electronic Administration (ENS).

The Gay Games Federation will be responsible for applying its own security measures with regard to the data it manages.

What are your data protection rights and how can you exercise them?

You may exercise your rights of access, rectification, erasure, restriction or, where applicable, objection. To do so, you must submit a written request to the Fundación Deportiva Municipal de València, Paseo de la Petxina, No. 42, Valencia (46008). In the letter, you must specify which of these rights you are requesting to be exercised and, in turn, you must show or, in the case of postal delivery, enclose a photocopy of your ID card or equivalent identification document. If you are acting through a legal or voluntary representative, you must also provide a document proving their representation and their identification document. Likewise, if you consider that your right to personal data protection has been violated, you may file a complaint with our Data Protection Officer (dpd@fdmvalencia.es) or, where appropriate, with the Spanish Data Protection Agency (www.aepd.es).

For data managed by the Gay Games Federation, you should contact the channels provided by that entity.

Below is further information about exercising your data protection rights:

1. • What are my rights?
   • Who can exercise these rights before OA FDM?
   • How and where can I exercise these rights?
   • Additional information

a) What are my rights?
Data protection regulations allow you to exercise your rights of access, rectification, opposition, erasure (‘right to be forgotten’), restriction of processing and not to be subject to individualised decisions before the data controller, OA FDM, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter ‘GDPR’) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD):

Right of access
You have the right to know:

• • Whether or not we are processing personal data concerning you.
  • The source of your data, if you did not provide it to us.
  • The purposes of the processing of your data.
  • The categories of data concerned.
  • The recipients or categories of recipients to whom the personal data have been or will be disclosed.
  • If possible, the envisaged period for which the personal data will be stored (or, if not possible, the criteria used to determine this period).
  • The right to lodge a complaint with a supervisory authority.
  • Whether we make automated decisions, including profiling, using your personal data.

Right of rectification
You have the right to have your personal data rectified:

• • By completing it, if it is incomplete.
  • By updating or rectifying it, if for any reason it no longer reflects the current situation or is inaccurate.
  • By exercising your right of rectification, we will ensure that all your personal data is accurate and complete.

Right to erasure
You have the right to have your personal data erased when any of the following conditions apply:

• • The data is no longer necessary for the purposes for which it was collected or processed.
  • You withdraw the consent on which we based the processing of your data and there is no other legal basis for the processing.
  • You have successfully exercised your right to object to the processing of your data.
  • The personal data has been processed unlawfully.

Right to restriction of processing
You have the right to obtain restriction of the processing of your personal data (i.e. for us to store it without using it for the intended purposes) provided that any of the following conditions are met:

• • You request the rectification of your personal data, for a period that allows OA FDM, as the data controller, to verify its accuracy.
  • The processing is unlawful and you oppose the erasure of the personal data, requesting instead the restriction of its use.
  • You have objected to the processing while it is being verified whether the legitimate grounds of OA FDM prevail over your right.

Right to object
You have the right to request that we stop using your personal data, for example, when you believe that the personal data we hold about you may be incorrect or you believe that we no longer need to use it.

b) Who can exercise these rights before OA FDM?
You, as the data subject or owner of the personal data, acting on your own behalf and in your own right.

Through another person acting as your duly accredited legal representative (e.g. when parents or guardians act on behalf of a person under the age of 14 or when acting as the legal representative of a person with functional diversity) or volunteer (a person to whom you have freely and voluntarily granted powers of representation for this purpose).

c) How and where can I exercise these rights?
You can submit your request through the Registry Office, by post to Fundación Deportiva Municipal de València, Paseo de la Petxina, No. 42, Valencia (46008) or by email to: dpd@fdmvalencia.es.

You must:

• • Provide sufficient data and information to process the request. For this purpose, you may use the form templates provided by the Spanish Data Protection Agency https://www.aepd.es/es/derechos-y-deberes/conoce-tus-derechos
  • Sign the form by hand or, if applicable and if you have a recognised digital certificate, sign it electronically.
  • Attach a photocopy of your ID card, passport, foreigner identification number (NIE) or other equivalent identification document. If you are acting on behalf of a third party, you must also include a copy of their ID card or equivalent identification document, as well as the document proving that you represent the interested party.
  • Send the form and documents proving your identity by any of the means mentioned above.

d) Additional information
OA FDM will analyse whether or not the request complies with the law. It will notify the petitioner of the decision taken and proceed accordingly: if the request is granted, it will take the appropriate measures in accordance with the right exercised; if the request is rejected, it will indicate the legally established appeals system. In the event that the requests are manifestly unfounded or excessive (e.g., repetitive in nature), OA FDM may: (i) Charge a fee proportional to the administrative costs incurred (ii) Refuse to act.

For further information or clarification regarding your rights in relation to personal data protection, please contact our Data Protection Officer at dpd@fdmvalencia.es.

Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights.

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

III. Specific information on the use of surveillance cameras or video cameras by OA FDM

Video surveillance in buildings and facilities

In order to guarantee the security of property, facilities and premises, as well as the people who work there or access them, OA FDM hereby informs you that it has installed surveillance cameras or video cameras. The aim is to take proactive and preventive measures against possible risks, dangers or infringements that may affect people, property and facilities.

The images captured by the video surveillance systems are processed by OA FDM as the data controller.

The lawfulness of the processing is based on Article 6.1.e) of the GDPR: the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, based on Organic Law 4/2015 of 30 March on the protection of public safety.

The images (personal data) will be kept for a maximum period of one month, unless they must be blocked for disclosure to the competent public authorities in the event that illegal or irregular acts have been captured. Thus, the images may be transferred, where appropriate, to law enforcement agencies, as well as to courts and tribunals.

Note: In order to exercise your rights of access or deletion of images of yourself (or, where applicable, of your representative), you must provide (in addition to the information mentioned above in relation to the exercise of your rights) an up-to-date photograph so that you can be identified, where applicable, in the recorded images. You must also indicate, as accurately as possible, the date(s), time(s) and place(s) where you were allegedly recorded.