INTERSONORAThis is a courtesy translation. In case of discrepancy, the Spanish version prevails.
This policy explains how InterSonora processes personal data related to the use of the website and to the messages that interested people choose to send to the organisation.
Data controller
- Controller
- INTERSONORA, non-profit association
- Register
- Registro Nacional de Asociaciones · section 1 · no. 633592
- Contact
- info@intersonora.es
No Data Protection Officer has been appointed. With the activity and processing currently described, no obligation requiring one has been identified.
What data is processed and where it comes from
InterSonora processes the data that a person provides voluntarily when getting in touch: name, email address, the institution, label or collective they identify with (optional), the content of their message and any other data they choose to include.
The contact form sends this data to the website's server, which forwards it over an encrypted connection to the info@intersonora.es mailbox. The website does not store it in any database or use external form providers. The date and time of sending and the IP address it was sent from are recorded with the message. If sending fails, the website offers to prepare the same message in the visitor's email program, and the visitor decides whether to send it.
You can also write directly to info@intersonora.es and, if you wish, attach a dossier, a demo or other materials.
Purposes and legal bases
Answering enquiries, messages and requests for information.
- Usual data
- Identification, contact details and message content.
- Legal basis
- InterSonora's legitimate interest in answering communications related to its activity and, where the request aims to establish a relationship or collaboration at the person's request, pre-contractual measures.
Assessing and managing possible collaborations or cultural relationships started by the person, including any dossiers and materials they send.
- Usual data
- Identification, contact details, organisation and the professional or cultural content shared.
- Legal basis
- Pre-contractual measures requested by the person and/or legitimate interest in managing institutional and cultural relationships.
Preventing abuse of the form: at most five messages per hour from the same address.
- Usual data
- IP address and time of sending.
- Legal basis
- Legitimate interest in protecting the service against abuse.
Security and operation of the web hosting.
- Usual data
- Technical connection data the server logs automatically: IP, browser, page and time.
- Legal basis
- Legitimate interest in keeping the website available and secure.
Complying with legal obligations or requests from authorities.
- Usual data
- Only what is strictly necessary in each case.
- Legal basis
- Compliance with a legal obligation.
InterSonora will not use data received through an enquiry to send newsletters or regular promotional messages unless there is a specific legal basis for it. The website currently has no newsletter. No profiling takes place.
Special categories of data
The contact channel is not designed to receive special categories of personal data or sensitive documents. Please do not include information about health, political opinions, trade union membership, religion, sexual orientation, biometric data, criminal records or other specially protected information unless it is strictly necessary and there is an appropriate legal reason to process it.
Retention
Enquiries and messages are kept for as long as needed to answer them and, where applicable, to manage the relationship that follows. When a conversation does not lead to a further relationship, a reasonable review and deletion criterion is applied, without prejudice to keeping, for the legally required periods, any information needed to bring, exercise or defend claims or to meet legal obligations.
The IP address appears in the message received and is kept with it. To apply the sending limit, the server also stores a pseudonymised fingerprint of the IP (SHA-256 hash) with the time of recent sends; it is not used beyond one hour and is then deleted automatically. The hosting's technical logs are kept for the period set by the provider.
Recipients and providers
Data will not be disclosed to third parties for their own purposes unrelated to InterSonora, except where required by law or where a specific collaboration requires it and there is an appropriate legal basis. InterSonora does not treat the contact channel as a way to pass on people's data to institutions, artists or counterparts.
To provide its services, InterSonora uses technology providers that act as data processors:
- Zoho
- Corporate email, where messages sent to info@intersonora.es are received and managed. InterSonora's account is hosted in Zoho's European Union data centre (Netherlands and Ireland).
- Hostinger
- Web hosting. The server is in France.
International transfers
Through the current website, InterSonora does not carry out international data transfers to put users in touch with foreign counterparts. The association's international activity does not, by itself, turn any processing into an international transfer.
Some providers may use sub-processors located outside the European Economic Area. In Hostinger's case, its data processing agreement provides for the Standard Contractual Clauses approved by the European Commission in those cases.
Your rights
You can request access to your data, its rectification or erasure and the restriction of processing, object where applicable, and exercise the right to data portability in the cases provided by law. Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
To exercise these rights, write to info@intersonora.es, stating the right you wish to exercise and providing only the information needed to verify your identity when there is reasonable doubt about it.
You can also lodge a complaint with the Spanish Data Protection Agency (aepd.es) if you consider that the processing of your personal data breaches the applicable rules.
Security
InterSonora applies technical and organisational measures proportionate to the nature of the data and the risk involved. The website does not keep a contact database and uses no analytics or tracking tools. The form validates the data on the server, limits sends per address and transmits them to the mailbox over an encrypted connection. The security of the email and hosting also depends on the correct configuration of the accounts, access controls and contracted services.
Children
The website and its contact channel are not specifically aimed at children. InterSonora does not intend to knowingly collect children's personal data through the site. If activities specifically aimed at children are developed in the future, the information, legal basis and, where appropriate, authorisation mechanisms will be reviewed beforehand.
Changes to this policy
This policy will be updated when the purposes, categories of data, providers, features, tracking technologies or forms of collaboration that involve new processing of personal data change. The date of the last update appears at the top.