Privacy Policy
Identification of the Controller: Welcome to the website of ASOCIACIÓN ESTUDIANTIL JUNIOR EMPRESA ALTHEA (hereinafter ALTHEA) with NIF G24856486 and address at Ibarra Zelaia Zelaigunea 2, 20560, Oñati, Gipuzkoa. Contact via email at Althea@alumni.mondragon.edu and registered in the Register of Associations under number AS/G/26681/2026. Who is the Controller for the processing of your data? This privacy policy applies to all personal data provided by the data subject to ALTHEA, as well as to any natural person interested in the activities and services that ALTHEA offers through its websites and any other means of communication. The objective of ALTHEA’s Privacy Policy is to provide transparency on how we process your personal data in compliance with current data protection regulations.
The data subject may contact ALTHEA through the information detailed in the identification of the controller. For what purpose and on what legal basis do we process your personal data? ALTHEA maintains a Record of Processing Activities detailing each of the following treatments carried out as a data controller:
GDPR PROCESSING
GDPR PURPOSE
LEGAL BASIS 
In the event, duly justified, that you require further details regarding the Record of Processing Activities, you may contact ALTHEA through any of the identified channels.
How long do we keep your personal data? ALTHEA will retain the data of those affected for the duration of their relationship with the organization and, subsequently, the data will be kept in accordance with the provisions of the archival and documentation regulations established by each applicable legislation. In the event that you request a right, your data will be deleted according to the right you have requested. Who has access to your personal data? ALTHEA may make assignments or communications of personal data to meet its obligations with Public Administrations in cases where this is required in accordance with the legislation in force at any time. What are the rights of those affected? We inform you that you may exercise the following rights:
Right of access to your personal data to know which ones are being processed;
Right to rectification of any inaccurate personal data;
Right to erasure of your personal data, when possible;
Right to request the limitation of the processing of your personal data when the accuracy, legality, or necessity of the data processing is doubtful, in which case we may keep the data for the exercise or defense of claims.
Right to object to the processing of your personal data, when the legal basis that enables us for its treatment is legitimate interest. ALTHEA will stop processing your data unless it has a compelling legitimate interest or for the formulation, exercise, or defense of claims.
Right to data portability, when the legal basis enabling its processing is your consent.
These rights may be exercised free of charge by the data subject, and where appropriate their representative, by written request addressed to althea@alumni.mondragon.edu In addition to the above rights, the data subject shall have the right to withdraw the consent granted at any time without such withdrawal affecting the lawfulness of the processing prior to the withdrawal. ALTHEA may continue to process the data subject’s data to the extent permitted by applicable law.
ALTHEA reminds the data subject that they have the right to file a claim with the competent Control Authority of the country in which they are located. Unsubscribing from commercial communications The data subject has the right to revoke at any time the consent given for the sending of commercial communications by simple notification to ALTHEA stating that they do not wish to continue receiving commercial communications. To do this, the data subject may click on the link included in each communication canceling the sending of electronic commercial communications or revoke their consent by emailing althea@alumni.mondragon.edu What security measures do we have implemented? ALTHEA is committed to fulfilling its obligation of secrecy regarding personal data and its duty to safeguard them, and will adopt the necessary measures to avoid their alteration, loss, unauthorized processing, or access, in accordance with the provisions of applicable regulations.
ALTHEA has implemented the technical and organizational security measures necessary to guarantee the security of your personal data and avoid its alteration, loss, and unauthorized processing and/or access, given the state of technology, the nature of the stored data, and the risks to which they are exposed, whether they come from human action or the physical or natural environment, in accordance with applicable regulations. Links ALTHEA’s website may include hyperlinks to other sites that are not operated or controlled by ALTHEA. Therefore, ALTHEA does not guarantee, nor is it responsible for the legality, reliability, utility, veracity, and timeliness of the contents of such websites or their privacy practices. Please, before providing your personal information to these websites outside ALTHEA, keep in mind that their compliance with data protection may differ from ours. Modification of the Privacy Policy ALTHEA may modify its Privacy Policy in accordance with the applicable legislation at any time. In any case, any modification of the Privacy Policy will be duly notified to the Affected party so that they remain informed of the changes made in the processing of their personal data and, in case the applicable regulations so require, the Affected party can grant their consent.