Privacy policy

Last updated: 25 October 2026

1. Data controller

Asociación Integrativa AMADAY is the controller of the personal data collected through this website.

Tax ID (NIF): G19737261
Address: Avenida Mancomunidad 10B, Piso 1B, Edificio El Reducto, 35500 Arrecife, Lanzarote, Las Palmas, Spain.
Email: contacto@amaday.org
Phone: +34 633 082 373
Website: https://www.amaday.org

We process personal data in accordance with the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, and other applicable regulations.

2. What data we collect

Depending on your relationship with AMADAY and the form you use, we may collect:

• Name and email address.
• Name of the company or organisation, where applicable.
• Information you voluntarily share in your message.
• Data needed to manage your participation in activities, programmes, volunteering or membership.
• Administrative information needed to manage financial contributions or comply with legal obligations.
• Technical information needed for the operation and security of the website.

Mandatory data will be indicated in the corresponding forms.

3. What we use your data for

We use personal data for the following purposes:

Contact: answering your queries and requests for information.

Support requests: receiving your message, replying to you and assessing the possibilities for guidance or referral to suitable resources.

Volunteering and collaboration: managing requests and communications related to your participation.

Members: managing membership applications and maintaining the membership relationship in accordance with the Statutes.

Activities and projects: organising registrations and managing participation, informing you of any additional processing required.

AMADAY news: sending information about activities, initiatives and projects to those who have agreed to receive it.

Donations and contributions: managing transactions and complying with the corresponding administrative, accounting and tax obligations when these services are available.

4. Legal basis

The legal basis will depend on the purpose of the processing:

• Consent: for the initial handling of queries and requests submitted through this website's forms. The checkbox distinguishes reading the privacy policy from consent to process personal data for this specific purpose. Voluntary news subscriptions require separate, optional consent.
• Contractual relationship or pre-contractual measures: where necessary for a service, agreement or request of that nature.
• Compliance with legal obligations: for processing required by applicable legislation.
• Membership relationship: to manage the obligations and rights arising from membership, in accordance with the applicable legal bases.

Where processing requires consent, you may withdraw it at any time.

5. Support requests and confidentiality

The «Necesito ayuda» (I need support) form collects your name, email address and the message you choose to share.

Its purpose is to establish a first contact and assess how AMADAY can guide you.

To protect your privacy, we recommend that you do not include medical information, data about minors, identity documents, bank details or particularly sensitive personal documents.

Requests are stored in a private Lovable Cloud database with restricted access.

Requests are handled by the person authorised by AMADAY to attend to them.

The system uses Brevo to send internal notifications of receipt. The support notification links to a private screen requiring sign-in and administrator authorisation; it does not include the name or personal account. The person's email address is used as the reply-to address.

Support messages are not added to marketing lists.

If you voluntarily choose to receive news, your name and email address may be added to the corresponding Brevo list with the generic origin «web», without indicating that you requested support or including the content of your request.

Where particularly sensitive information is received spontaneously, its use will be limited and the safeguards required by the regulations will be applied. If it were necessary to process special categories of data to continue providing support, a valid legal basis and condition under article 9 of the GDPR would be required.

AMADAY will not share personal information from requests with other associations merely because it has collaboration agreements with them.

6. Communications and news

AMADAY uses Brevo to manage certain contacts and electronic communications.

You will only receive voluntary-subscription newsletters and news if you have given your consent.

The subscription option will be separate from other forms and will not be ticked by default.

Consent for the initial handling of the request and the news option are recorded separately: email address, server timestamp, language, purpose, exact wording displayed, version and choice. If the news choice cannot be recorded, no subscription is made. To prevent repetitions of the same submission, an identifier and content fingerprint are retained, without storing the personal account in that technical record.

You can unsubscribe using the link included in communications or by writing to contacto@amaday.org.

Unsubscribing from a newsletter does not necessarily end a membership, activity or collaboration that remains in force.

7. Data retention

We will keep data for as long as necessary for the purposes for which it was obtained, applying the following criteria:

Support requests and one-off queries: while they are being handled and, as a general rule, six months after they are closed. Where there is a legal obligation or a documented legitimate reason to keep them longer, the corresponding period will apply.

Volunteering or collaboration requests with no active relationship: up to twelve months from the last interaction, unless there is valid consent to maintain other communication or a legitimate reason for retention.

Members and active collaborations: while the corresponding relationship continues and, afterwards, for the legally applicable periods.

Registrations and projects: during the activity and for the corresponding administrative or legal periods.

News subscriptions: while consent remains in place. After unsubscribing, the minimum data needed to prove that the request was handled and to prevent further unauthorised mailings may be kept.

Financial contributions: for the applicable legal retention periods.

Once the corresponding periods have elapsed, data will be deleted, anonymised or blocked where legally appropriate.

8. Recipients and providers

AMADAY will not sell personal data or use it for purposes incompatible with those communicated.

Data may be processed by authorised people within the Association and by technology providers needed to deliver its services.

The providers used include:

• Lovable Cloud: application hosting and data storage.
• Brevo: contact management and electronic communications.
• Email services: receipt of AMADAY communications.

Public administrations or other entities may receive data where there is a legal obligation or another valid legal basis permitting disclosure.

Providers acting as processors must offer the guarantees required by the GDPR.

If any service involves international transfers of personal data, these must have the corresponding legal mechanisms. You can request information on the applicable safeguards by writing to contacto@amaday.org.

9. Your rights

Where applicable, you may exercise the rights of:

• Access to your personal data.
• Rectification of inaccurate data.
• Erasure of your data.
• Objection to certain processing.
• Restriction of processing.
• Data portability.
• Withdrawal of consent.

You also have the right not to be subject to certain decisions based solely on automated processing, in the cases provided for by law.

To exercise your rights you can write to:

contacto@amaday.org

We will reply within the corresponding legal deadlines. We will only request additional information to verify your identity when necessary.

If you believe your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (AEPD):

https://www.aepd.es

10. Security and protection of minors

AMADAY will apply appropriate technical and organisational measures to protect data against unauthorised access, loss or improper disclosure.

Where an activity requires processing data about minors, the specific safeguards provided for by law will be applied and the corresponding authorisations will be requested where necessary.

11. Cookies and updates

You can consult information on the cookies and similar technologies used in our Cookie Policy.

This Privacy Policy may be updated when our services, activities or processing of personal data change.

The current version will be available on this website.