This Privacy Notice explains how Yaran Foundation processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 («GDPR»), Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights («LOPDGDD»), and other applicable European and Spanish data protection laws.
By accessing or using this website, you acknowledge that you have read and understood this Privacy Notice. Where required by law, we will request your explicit consent before processing your personal data.
If you do not wish for your personal data to be collected, please do not submit it through this website. If you have already submitted personal data and wish to exercise your rights, you may contact us at info@yaranfoundation.org.
1. Personal Data We Collect
We collect different categories of personal data depending on how you interact with Yaran Foundation.
a) Information You Provide Directly
This may include:
- Name, email address, organization, and professional title
- Regional preferences for receiving updates
- Application data for programs, events, internships, employment, or expert participation (e.g., bio, photo, education, professional background, business ideas)
- User-generated content during programs, including submissions, evaluations, correspondence, and survey responses
Some information is mandatory to participate in certain programs; other information is optional and clearly indicated as such.
b) Information Collected Automatically
When you visit our website, we may automatically collect limited technical information such as:
- IP address (processed in anonymized or truncated form where possible)
- Browser type and settings
- Device and operating system information
- Language preferences
- Referring URLs
- Date, time, and duration of visits
- Pages viewed and interactions with the site
This information is used for security, analytics, and website improvement purposes.
2. Cookies and Similar Technologies
We use cookies and similar technologies to ensure the proper functioning of the website, improve user experience, and analyze site usage. Where required by law, cookies that are not strictly necessary are only placed with your prior consent.
You may manage or withdraw your cookie preferences at any time through your browser settings or our cookie management tool.
We may use third-party analytics services such as Google Analytics with IP anonymization enabled. Data collected through cookies is processed in accordance with the respective providers’ privacy policies.
3. Purposes and Legal Bases for Processing
We process personal data only where we have a lawful basis under GDPR, including:
- Performance of a contract or pre-contractual measures
- Compliance with legal obligations
- Legitimate interests (such as improving our programs and ensuring platform security)
- Your consent, where required
Personal data may be used to:
- Manage participation in programs, events, and activities
- Communicate with applicants, participants, mentors, and partners
- Match participants with mentors, judges, or collaborators
- Conduct surveys, research, and program evaluations
- Send newsletters or updates (with opt-out options)
- Improve our services, website, and operational effectiveness
We will not use your personal data for purposes incompatible with those described without informing you and, where required, obtaining your consent.
4. Sharing of Personal Data
We may share personal data with:
- Internal staff and authorized representatives of Yaran Foundation
- Trusted service providers and vendors acting as data processors under contractual safeguards
- Program partners, where necessary for participation
- Academic or research partners, in pseudonymized or aggregated form
We do not sell personal data. We do not disclose personal data for third-party direct marketing purposes without your explicit consent, in accordance with GDPR and Spanish data protection regulations.
Personal data may also be disclosed where required by law or in connection with legal claims, audits, or organizational restructuring, in compliance with GDPR.
5. International Data Transfers
Personal data is primarily processed within the European Economic Area (EEA). Where personal data is transferred outside the EEA, Yaran Foundation ensures that such transfers are carried out in compliance with GDPR Chapter V, using appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or other legally recognized transfer mechanisms.
6. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, contractual, or regulatory obligations.
Retention periods may include:
- Employment or internship applications: up to 3 years
- Program applications and participation records: up to 15 years
- Program deliverables and final submissions: up to 15 years
Data is securely deleted or anonymized once retention periods expire.
7. Your Rights Under GDPR
You have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Request erasure («right to be forgotten»)
- Restrict or object to processing
- Request data portability
- Withdraw consent at any time (where processing is based on consent)
- Lodge a complaint with the relevant data protection authority
To exercise your rights, please contact info@yaranfoundation.org.
8. Children’s Privacy
Yaran Foundation is committed to protecting the privacy of children and minors. In accordance with GDPR and Spanish law, personal data may only be processed from individuals aged 14 or older, unless parental or legal guardian consent is required and obtained.
We do not knowingly collect personal data from children below the applicable age of consent. If such data is identified, it will be deleted promptly.
9. Information Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure. These measures include encryption, access controls, secure servers, and regular security reviews.
Despite these safeguards, no system is completely secure, and users are encouraged to take appropriate precautions when transmitting information online.
10. Third-Party Websites and Content
Our website may contain links to third-party websites or platforms. Yaran Foundation is not responsible for the privacy practices of such third parties. Users are encouraged to review the privacy notices of any external websites they visit.
11. Public Forums and Blogs
Any information you choose to disclose through public forums, blogs, or discussion areas on the website becomes publicly available. Yaran Foundation cannot control how others may use such information and is not responsible for personal data voluntarily disclosed in these spaces.
12. Changes to This Privacy Notice
We may update this Privacy Notice from time to time to reflect legal, technical, or operational changes. The most current version will always be available on our website. Where required by law, we will notify you of material changes.
13. Contact Information
If you have questions, concerns, or requests regarding this Privacy Notice or our data protection practices, please contact us at:
Yaran Foundation
Email: info@yaranfoundation.org