1. Data controller

INSTITUTO PARA LA CALIDAD DE LAS ONG (hereinafter, “ICONG”) with CIF G85574978 and address at C/ Don Quijote 1, 28020, Madrid, is responsible for this website (www.icong.org) and all data collected on it.

ICONG is aware of the importance of the privacy of personal data and therefore has implemented a data processing policy aimed at providing maximum security in the use and collection of the same, ensuring compliance with current regulations on the subject and configuring this policy as one of the basic pillars in the lines of action of the entity. In this sense, we want to guarantee that we are committed to the protection of your data, so we have taken the necessary measures to prevent possible damage or loss of data.

This Privacy Policy, aims to provide you with the necessary information in relation to the treatment that we carry out of the data collected as well as the rights that assist you, in accordance with ICONG’s compliance with Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (RGPD) and other regulations relating to the protection of personal data.

We understand that if you visit our website, it is because you accept this privacy policy so we invite you to read it carefully, and in the event that you do not agree, you may not browse, visit or use our website.

2. What data do we collect and for what purpose?

ICONG collects the IP through cookies (see Cookie Policy in our Legal Notice) to perform statistical analysis and monitoring of the operation of the website. This information is treated in such a way that the person behind the IP cannot be identified and the purpose is to monitor the correct functioning of the page and to know, for example, which products, services, sections or news of the website have been most liked.

While browsing through the website it is possible that personal data may be requested through various forms provided for this purpose. Such data will be part of the relevant files depending on the specific and concrete purpose that motivates the collection of the same.

In this way, the particular information of each data processing will be provided with each web form, being common to all of them the data controller, indicated above, the place and form of exercising the rights of access, rectification, deletion, portability of your data, as well as limitation or opposition to their treatment, which must be formalized by written communication to the address indicated in the previous point or via email info@icong.org, including a copy of ID or equivalent identification document.

In the event that you provide your data through an e-mail message, the same will be part of a file whose purpose will be the management of your personal data.

Likewise, the general conditions of contracting ICONG services contain the characteristics and nature of the data processing that will be developed by the same in the event that you contract any of them.

The information you provide us when you voluntarily fill out any of our forms we treat it with the purposes and legitimacy that we indicate below:

CONTACT FORM

Data

Identity and contact information.

Purposes

To process your query/request.

To send you by any means, including electronic means, commercial information about products and services related to ICONG and/or Christmas greetings or similar.

Legitimation

The legal basis for the processing of your data is based on the legitimate interest for the processing of your query, and for sending advertising, on the consent that for these purposes we have requested or on the legitimate interest in specific cases, such as when we sent you commercial information for some time informing you in each communication that you could withdraw your consent to receive such advertising in a simple way that we made available to you and yet you have not withdrawn such consent.

3. Do we communicate the data to third parties?

ICONG will only communicate data to third parties when it is actually legitimized to do so, as in the following cases:

Legal obligation: For example, if it is necessary to provide the data to the Public Administration (Tax Administration or Security Forces).

Execution of contract: For example, for the management of sweepstakes/contests we will have to communicate data to third parties with whom we organize or collaborate for the management of the sweepstakes/contest (for example, to send the prize).

ICONG has data processors, i.e. suppliers who may access data in order to provide the contracted service, but who will only access such data for the purposes indicated by ICONG for the provision of the service (e.g. IT or marketing services).

4. How long will we keep your data?

ICONG will keep your data only as long as it is necessary for the purpose for which it was collected.

Your personal data will be kept for as long as the contracted service is maintained, or the response to your query or the selection process in which you participate is managed, and for the purpose of sending advertising, as long as you do not object or revoke your consent to it, in which case, the data will be deleted, understanding deletion as blocking them, in this sense, the blocked data will remain at the exclusive disposal of the court, the Public Prosecutor’s Office or other competent Public Administrations, in particular the data protection authorities, for the enforcement of possible liabilities arising from the processing and for the period of limitation of the same.

5. Security measures

ICONG has implemented the necessary technical and organizational measures to prevent the loss, misuse, alteration, unauthorized access and theft of Personal Data that interested parties may provide as a result of access to the different sections of the website by applying the security measures provided for in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR) and those derived from the corresponding risk analysis.

6. International transfers

ICONG will not carry out international transfers of data outside the European Union or with an adequate level of data protection declared by the European Commission.

7. Links to other sites 

This privacy policy applies, as we have informed you previously, to our web site, but we warn you that it does not apply to other pages that you may access through links to third party pages, so we urge you to carefully read the privacy policies of those other web sites that you access, even if you have accessed that web site through a link on our web site.

8. Rights

ICONG informs you below of your rights and how to exercise them. In this regard, we inform you that we will give you an answer within a maximum period of 1 month after we receive it:

Right of access

Data subjects may request information on whether we have your data, and if so, what data we have, what we use it for, whether it has been communicated to third parties, etc.

Right of rectification

Data subjects may request the modification of data that is inaccurate or contains errors.

Right to object

Data subjects may object at any time to the processing of their personal data.

Right of erasure

Data subjects may request the deletion of their data, for example when the purpose for which it was collected has ended.

Right not to be subject to individualized decisions

Data subjects have the right not to be subject to a decision based solely on automated processing, including profiling, and may request that such a decision be made by an individual.

Withdrawing consent

Data subjects may withdraw any consent they have provided at any time.

Right to lodge a complaint with the Spanish Data Protection Agency

If you consider that your rights have been violated, you may file a complaint with the Spanish Data Protection Agency, located at Calle Jorge Juan 6, 28001 Madrid, telephone 901 100 099, and website www.agpd.es.

9. Minors

Our websites are directed to adults, so by filling out any data collection form on our website, you warrant that you are over 18 years of age and will be entirely responsible in this regard. For this purpose we may require your ID card or equivalent supporting document at any time. In this regard, we encourage parents and guardians to supervise their children’s electronic activities, for example, by using parental control tools that help provide a safe electronic environment for minors.

10. Contact

If you want to contact us for any matter related to the protection of personal data, please send an e-mail to info@icong.org or write to us through  contact .

11. Updates

If in the future there are any changes to our Privacy Policy that may affect your personal data, we will notify you of such changes, which will be effective from the time they are announced.

Privacy Policy updated as of 24 February 2025