Privacy Policy
Last updated: September 24, 2026 (reservation section)
Table of Contents
Calendar 2027 reservations
- Controller
- Asociación 101 Vidas, NIF G22893168, info@101vidas.es.
- What we collect
- Name, email, number of calendars, collection town or shipping choice, and phone number for shipped reservations.
- Purpose
- To manage your calendar reservation and contact you about payment, collection or delivery.
- Legal basis
- Steps taken at your request before a purchase (GDPR Article 6(1)(b)).
- Who processes it
- Tally, a form provider based in Belgium, processes the reservation data on our behalf and stores it in the EU. We share reservation data only with the service providers needed to run the reservation, and we never sell it or use it for our newsletter.
- How long
- We delete reservation responses, exports and related emails by 31 March 2027. Tally may keep backup copies for up to 90 days after that. If you go on to pay, order and invoice records are kept for as long as accounting and tax law requires.
- Your rights
- Access, correction, deletion, restriction, objection and portability — email info@101vidas.es. You can also complain to the Spanish data protection authority (www.aepd.es).
The general privacy policy continues below.
Introduction
The 101 Lives Association ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services.
This policy complies with the General Data Protection Regulation (GDPR), Spanish Data Protection Law (LOPDGDD), and other applicable EU privacy laws.
Data Controller Information
The 101 Lives Association
For all privacy-related inquiries, data subject rights requests, or concerns about how we handle your personal data, please contact us at the above email address.
What Data We Collect
Contact Form Information
- Name and email address
- Organization name (optional)
- Message content
- Preferred language (EN/ES)
- Timestamp of submission
User Account Data
- Email address and password (encrypted)
- Organization details for verification
- Municipality and role information
- Account status and verification level
- Login history and session data
Resource Usage Data
- Downloaded resources and timestamps
- File access logs for security
- Usage patterns for service improvement
Technical Information
- IP address (anonymized for analytics)
- Browser type and device information
- Page visit data (via Plausible Analytics)
- Performance and error logs
Legal Basis for Processing
Consent (Article 6(1)(a))
Marketing communications, newsletter subscriptions, and optional data collection.
Legitimate Interest (Article 6(1)(f))
Platform security, fraud prevention, service improvement, and professional resource provision.
Legal Obligation (Article 6(1)(c))
Data retention for legal compliance, audit requirements, and regulatory reporting.
How We Use Your Data
Primary Uses
- Provide access to professional resources
- Respond to contact form inquiries
- Verify organization legitimacy
- Send operational notifications
- Maintain platform security
Secondary Uses
- Improve service quality and performance
- Generate aggregate usage statistics
- Develop new features and resources
- Ensure compliance with legal obligations
- Support ecosystem integration
Your Privacy Rights
Right to Access (Article 15)
Request a copy of all personal data we hold about you in a structured, machine-readable format.
Right to Rectification (Article 16)
Correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure (Article 17)
Request deletion of your personal data (with certain legal exceptions for audit purposes).
Right to Portability (Article 20)
Receive your personal data in a portable format to transfer to another service.
Right to Object (Article 21)
Object to processing based on legitimate interests or for marketing purposes.
Exercising Your Rights
To exercise any of these rights, please contact us at:
We will respond to your request within 30 days as required by GDPR.
Contact Information
Privacy Officer
Supervisory Authority
If you're not satisfied with how we handle your data, you can file a complaint with:
Agencia Española de Protección de Datos (AEPD)
www.aepd.es