Privacy
What data we ask for, what for, who receives them and how you can exercise your rights.
In the event of any discrepancy, the Spanish version prevails.
Controller
Carmelitas Descalzas Sevilla, C/ Santa Teresa, 7, 41004 Sevilla (España). Email: causamariadesanjose@gmail.com.
What data we process and for what purpose
Endorsement
- Data
- Name, town or city, country, email, telephone (optional), signed letter and, if you wish, your reasons.
- Purpose
- To include your endorsement in the documentation that the community is gathering for the cause. If you agree separately, to publish your name and town or city in the list of endorsements.
- Legal basis
- Your consent (Art. 6(1)(a) GDPR).
Report a favour
- Data
- Name, email or telephone, the account and the documents you attach, which may include health data.
- Purpose
- To include the testimony in the confidential archive of the cause and, if necessary, to contact you to expand on it.
- Legal basis
- Your explicit consent (Arts. 6(1)(a) and 9(2)(a) GDPR).
Who receives the data
The forms are not stored in any database on this website: they reach the community of Discalced Carmelites of the Convent of San José del Carmen by email, and the community keeps them. When the cause requires it, endorsements and testimonies will be handed to the General Postulation of the Order of Discalced Carmelites, which handles the cause before the Church. They are not passed on to anyone else.
These providers are involved in running the website and act as data processors:
- Hostinger International Ltd., based in Cyprus (European Union): website hosting and sending the forms by email.
- Google Ireland Limited, based in Ireland (European Union): Gmail, the mailbox where the community receives the forms.
Google may process data outside the European Economic Area. In that case the safeguards of the EU-US Data Privacy Framework and the European Commission's standard contractual clauses apply.
How long we keep them
- Endorsements and testimonies: for the duration of the cause, as part of its archive, unless you request their deletion.
Your rights
You may request access to your data, their rectification or erasure, the restriction of or objection to their processing and their portability, and withdraw your consent at any time, by writing to causamariadesanjose@gmail.com or by post to the address above.
If you believe we have not dealt properly with your request, you may complain to the Spanish Data Protection Agency (aepd.es).
As an entity of the Catholic Church, the community also applies the General Decree of the Spanish Episcopal Conference on data protection.
Minors
If you are under 14, ask your father, mother or guardian to send the form for you.