Privacy policy

Last updated: 13/10/2026

1. Data controller

In accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), please be informed that the controller of the personal data collected through this website is:

• Entity: Asociación Canaria Clúster de Agrotecnología «Clúster Agrotech».
• Trading name: Clúster Agrotech Canarias.
• NIF: G23815202.
• Registered office: Calle Escritor Benito Pérez Galdós, 37, 35002 Las Palmas de Gran Canaria, España.
• Data protection contact email address: info@agrotechcanarias.org
• Website: https://agrotechcanarias.org/

2. Personal data processed

Clúster Agrotech Canarias may process the following categories of personal data, depending on the relationship established with each individual:

• Identification and contact details: first name, surnames, email address, telephone number, position and the entity represented.
• Data provided through contact forms, information requests and communications addressed to the Cluster.
• Professional and representative details necessary to manage relationships with members, collaborating entities and participants in activities.
• Data relating to registration, participation and the management of conferences, meetings, projects and other Cluster initiatives.
• Administrative and financial data necessary to manage membership relationships and comply with the relevant legal obligations.
• Technical browsing data, where necessary for the operation and security of the website or used in accordance with the Cookie Policy.

The Cluster will endeavour to collect only data that are adequate, relevant and limited to what is necessary for each purpose.

Information relating to special categories of personal data is not generally requested through the website's standard forms.

3. Purposes and legal bases for processing

Personal data may be processed for the following purposes, as applicable:

3.1. Handling enquiries and requests

Responding to enquiries, requests for information and proposals for collaboration submitted through forms, email or other available contact channels.

Legal basis: the data subject's consent where applicable, or the association's legitimate interest in responding to professional communications and communications relating to its activities, following an assessment of the appropriateness of that basis.

3.2. Managing membership applications and membership relationships

Processing membership applications, managing relationships with members, keeping contact details up to date, administering membership fees and sending the communications necessary for the association's operation.

Legal basis: taking steps prior to entering into a contract at the data subject's request, performing the membership relationship where appropriate, and complying with the relevant legal obligations. In the case of data relating to representatives or contact persons of entities, legitimate interest may apply under the conditions laid down by law.

3.3. Organisation of activities and projects

Managing registrations, participation and operational communications relating to meetings, conferences, training activities, collaborative projects and other initiatives promoted by the Cluster.

Legal basis: performing the participation relationship or the commitments undertaken, consent where necessary and, in the cases provided for by law, legitimate interest.

3.4. Informational communications

Sending information relating to the Cluster's institutional activities, projects, events and opportunities for collaboration.

Where these communications are commercial or promotional and sent by electronic means, they will comply with the legal bases and requirements established by the applicable legislation, including consent where required.

Recipients may request to stop receiving non-mandatory communications through the mechanisms provided.

3.5. Compliance with legal obligations

Meeting the administrative, tax, accounting, employment and other legal requirements applicable to the association.

Legal basis: compliance with legal obligations applicable to the data controller.

3.6. Website operation and security

Maintaining the availability and security of the website, preventing misuse and managing the technologies necessary for its operation.

Legal basis: legitimate interest in ensuring the security of systems, where appropriate, and consent for technologies or processing that legally require it.

4. Mandatory or voluntary provision of data

Where applicable, forms will identify the mandatory fields necessary to process each request.

Failure to complete these fields may prevent the request from being dealt with or the requested service from being provided.

The provision of other data will be voluntary, unless there is a specific legal obligation or they are essential to manage the relevant relationship.

5. Data retention

Personal data will be retained for as long as necessary to fulfil the purposes for which they were collected.

In particular:

• Enquiry data will be retained for as long as necessary to respond to the enquiries and manage any resulting liabilities.
• Members' data will be retained for as long as the membership relationship remains in force and, subsequently, for the legally applicable retention and limitation periods.
• Data relating to activities and projects will be retained during their implementation and for the periods required by the relevant administrative, contractual or reporting obligations.
• Data used for informational communications based on consent will be processed until that consent is withdrawn, without prejudice to the minimum retention necessary to demonstrate that consent was obtained and address any potential liabilities.
• Financial, accounting and tax data will be retained for the periods established by the applicable legislation.

Once the main purpose has been fulfilled, the data may be retained in a duly blocked state where there is a legal obligation or where necessary for the establishment, exercise or defence of claims.

6. Recipients and access to data

Personal data may be disclosed to public authorities, supervisory bodies and other entities where there is a legal obligation or a legal basis permitting this.

Likewise, certain providers of technology services, web hosting, maintenance, email, administrative management or other support services may access personal data on behalf of the Cluster.

Where they act as data processors, such access will be governed by the relevant agreements and safeguards required by law.

Data will not be disclosed to third parties for their own promotional purposes without a valid legal basis.

7. International data transfers

Whether international data transfers take place will depend on the technology providers and services actually used by the Cluster.

There are no transfers outside the European Economic Area and, where applicable, the countries, adequacy mechanisms or applicable safeguards and how to obtain information about them.

8. Rights of data subjects

Individuals whose data are processed by Clúster Agrotech Canarias may exercise the following rights, where applicable:

• Access: to find out whether their personal data are being processed and obtain information about the processing.
• Rectification: to request the correction of inaccurate or incomplete data.
• Erasure: to request the deletion of data where the circumstances provided for by law apply.
• Objection: to object to certain processing in the cases established by law.
• Restriction of processing: to request the restriction of the use of data in the cases provided for by law.
• Portability: to receive or transmit their data where the legal requirements are met.
• Withdrawal of consent: to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise these rights, individuals may contact the following email address:

info@agrotechcanarias.org

The request must enable the data subject to be identified and specify the right they wish to exercise. Additional identification documentation will only be requested where there are reasonable doubts about their identity.

The Cluster will respond to requests within the time limits established by law.

If data subjects consider that their rights have not been duly addressed, they may lodge a complaint with the Agencia Española de Protección de Datos (AEPD), via https://www.aepd.es/.

9. Security and confidentiality

Clúster Agrotech Canarias will implement technical and organisational measures appropriate to the level of risk of the processing carried out, with the aim of protecting personal data against unauthorised access, alteration, loss, improper disclosure or other security incidents.

Individuals who access personal data in the performance of their duties will be subject to the corresponding duties of confidentiality.

10. Third-party data

Where an individual provides another person's contact details on behalf of an entity or in the course of a professional activity, they must do so lawfully and ensure that they have a legitimate basis for disclosing them.

The Cluster will provide data subjects with the required information when it receives data that have not been provided directly by them, under the terms established by the applicable legislation.

11. Photographs, videos and public activities

As part of its activities, meetings and projects, the Cluster may take photographs or make recordings to document and publicise its institutional activities.

Images of identified or identifiable individuals will be captured and published in accordance with the legal basis applicable in each case, respecting data protection legislation and individuals' rights over their own image.

Where necessary, specific information will be provided and the relevant authorisations will be requested.

12. Cookies and similar technologies

The use of cookies and similar technologies is described in the website's Cookie Policy.

Where these technologies require consent, the necessary mechanisms will be provided to enable users to give or refuse consent or change their preferences.

13. Policy updates

Clúster Agrotech Canarias may amend this Privacy Policy to adapt it to regulatory, organisational or technological changes, or to new website features.

The current version will remain accessible on the website, indicating the date on which it was last updated.