Privacy Policy

In compliance with the provisions of Regulation (EU) 2016/679 General Data Protection Regulation (GDPR) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), this Privacy Policy aims to inform users, applicants, collaborators, and members of the Academy in a clear, transparent, and unified manner about the processing of their personal data.

Through this website https://academiadelesartsdigitals.cat and the entity's official forms, personal data necessary for the management, maintenance, and fulfillment of the Academy's foundational purposes are collected. All information will be managed with due confidentiality and under appropriate technical and organizational security measures.

1. Who is the Data Controller?

The data controller for your personal data is:

Associació de l'Acadèmia de les Arts Digitals (hereinafter, the Academy)
Registered office: Carrer dels Ferrers, 11, Sant Martí, 08019, Barcelona (Spain).
NIF: G26863167
Official contact email: hola@academiadelesartsdigitals.cat
Data Protection Officer (DPO): Please note that the Academy is not legally required to have a formally designated Data Protection Officer, in accordance with the provisions of Article 37 of the GDPR and Article 34 of the LOPDGDD.

For any questions or complaints, you can contact the aforementioned contact email directly.

2. What data do we collect?

The Academy exclusively collects and processes personal data that are necessary for the development of each of its activities and statutory purposes. The categories of data are broken down as follows:

Data for Association and Membership Management: Identification data (first name, last name, DNI/NIE number) and contact details (email address, telephone number, postal address). For the technical validation of Full Member status, academic and professional data will be processed (curriculum vitae, academic degrees, company certificates, contracts, or verifiable links to digital portfolios). For the collection of periodic membership fees, financial data will be processed (bank account code / IBAN).

Data for the Organization of Events and Corporate Acts: Identification data (first and last name) and contact details (email address, entity, company, or profession to which the attendee belongs). In institutional events with mandatory access control, the DNI/NIE number may be requested.
Data for the Management of Annual Awards: Identification data of the candidate, nominee, or applicant (first name, last name, DNI/NIE) and contact details, along with professional data and all artistic or intellectual content linked to the submitted work (technical specifications, portfolios, licenses, and images). In the case of internal voting, the vote cast will be processed confidentially."

Data for Inquiries and Sector Support: Identification data (name) and contact details (email address), as well as any data that the user voluntarily decides to include in the submitted inquiry regarding intellectual property or the use of licenses.

Data for Inquiries and Sector Support: Identification data (name) and contact details (email address), as well as any data that the user voluntarily decides to include in the submitted inquiry regarding intellectual property or the use of licenses.

Browsing and Cookie Data: IP address, device identifiers, connection metadata, and browsing data collected through the website to optimize usability and technical functionality.

3. For what purpose and on what legal basis do we process your data?

In accordance with the transparency principle of Article 13 of the GDPR, the purposes of each processing activity carried out by the Academy and their corresponding legal basis under Article 6 of the GDPR are detailed below:

Purpose of Processing	Description and Context of the Activity	Legal Basis (Lawful Basis)
Association and membership management	Comprehensive management of membership status and the internal operations of the entity, in accordance with the activities described in the Statutes and the RRI (Internal Regulations). This includes the processing of registrations, withdrawals, and verification of requirements; invoicing and collection of fees; sending mandatory official notifications and communications; the organization of association activities; and the organization of General Assemblies and corporate meetings, ensuring the coordination of attendance and the exercise of members' rights to speak and vote.	Performance of the contractual or associative relationship derived from the acceptance of the Statutes and the Internal Regulations by the member (Art. 6.1.b GDPR).
Organization of events and corporate acts" (o bé: "Organization of events and corporate functions	Management of attendee lists, capacity control, accreditation, and logistical organization of events such as the Annual Awards event or sector seminars.	Performance of the legal relationship of the data subject's registration request for the corresponding event or act (Art. 6.1.b GDPR).
Management of annual awards	Processing of candidacies submitted by creators or researchers and management of voting in accordance with the powers granted by the Statutes.	Express consent of the person who applies or accepts the nomination, and compliance with the participation rules (Art. 6.1.a GDPR).
Inquiries and sector support	Resolving inquiries submitted through the website or advising members on intellectual property and licensing matters in accordance with Article 15.f of the Statutes.	Legitimate interest of the Academy to optimally and effectively address the requests and support needs of the sector (Art. 6.1.f GDPR).
Informative and cultural communications	Sending news and updates from the Academy, information about open calls, digital heritage preservation projects, and the dissemination of Digital Arts.	Consent of the data subject obtained through a specific, optional, not pre-ticked checkbox on the form (Art. 6.1.a GDPR and Art. 21 LSSI).
Anàlisi i optimització web (Cookies)	Ensuring the technical functioning of the website, analyzing visitor traffic, measuring the level of satisfaction, and improving the structure and content of the page."	Consent of the data subject obtained through express acceptance via the website's cookie configuration banner (Art. 6.1.a GDPR).

Balancing Test of Legitimate Interest (Art. 13.1.d GDPR): In relation to inquiries and sector support, the Academy has conducted an internal balancing test determining that the processing is beneficial to the user themselves, insofar as it allows providing them with the requested advice without requesting excessive data and without affecting their fundamental rights.

4. How long will we retain your data?

Personal data will be retained exclusively for the period indispensable for the purpose for which they were collected:

Member data: They will be processed continuously as long as membership status in the association is maintained. Once membership is terminated (voluntarily, due to non-payment, or by sanction according to Article 29 of the Statutes), the data will be kept blocked for a period of 4 years for tax obligations (General Tax Law) and a maximum of 5 years for the statute of limitations on personal actions (Civil Code of Catalonia).

Data of attendees at acts and events: They will be retained until the completion and closure of the event and, subsequently, will be stored in a blocked form for the period required by public subsidy regulations (usually 4 years from the justification of the public grant linked to the event).

Award candidacy data: They will be retained during the course of the corresponding edition. Once finalized, and to comply with the purpose of 'promoting the archiving, documentation, and preservation of works in the sector' (Art. 3.9 of the Statutes), they will be permanently archived for historical and cultural research purposes, safeguarding privacy if the data subject requests their erasure.

Inquiry and support data: They will be retained until the complete resolution of the technical or legal inquiry submitted by the user, proceeding to their destruction 1 year after the last administrative contact.

Informative communications data (Newsletter): They will be processed indefinitely until the user revokes their consent or exercises their right to object through the unsubscription mechanism linked to each email.

Cookie and browsing data: They will be retained for the technical periods established and detailed in the Cookie Policy, or until the user revokes their consent by deleting or configuring them through their web browser.

5. With whom do we share your personal data?"

In accordance with data protection regulations, the recipients who may have access to the information are detailed below, distinguishing their legal nature:

A. Transfers or Communications of Data (Third-Party Controllers)

The personal data of data subjects will only be disclosed to independent third-party entities when there is a legal obligation, a contractual requirement, or a mandatory administrative need:

Public Grant Awarding Bodies: In the event that the Academy applies for public subsidy calls (Generalitat de Catalunya, Town Councils, etc.), the identification data of members, collaborators, or attendees may be disclosed to the corresponding Public Administration, if required, for the purpose of proceeding with the documentary justification of the entity's expenses.

Event hosting entities: For those events or institutional acts where third-party entities collaborating with the Academy, the Generalitat, or other Public Administrations act as the host institution, the identification data of registered attendees will be disclosed for purposes of protocol, physical access control to public facilities, and event security.

Banking Entities: The financial data (IBAN) of the members of the association will be disclosed to collaborating banking entities for administrative processing and the collection of periodic membership fee receipts.

Register of Associations: Mandatory communication by law of the identification data of the elected members of the Board of Directors (Presidency, Vice-Presidency, Secretariat, Treasury, Board Members) in compliance with Law 4/2008 of Catalonia.

B. Data Processors (Academy Providers under Art. 28 GDPR)

For the proper technical, tax, and financial management of the association, we count on the support of external providers who act following the direct instructions of the Academy and under a strict data processing agreement:

External Tax, Labor, and Accounting Advisors: Professionals or firms in charge of carrying out tax management, the official accounting of the association, the preparation of financial statements, the administrative control of membership fees, and the filing of corporate income tax or informative returns before the Tax Agency.

External Tax, Labor, and Accounting Advisors: Professionals or firms in charge of carrying out tax management, the official accounting of the association, the preparation of financial statements, the administrative control of membership fees, and the filing of corporate income tax or informative returns before the Tax Agency."

International Data Transfers (Art. 13.1.f GDPR): The Academy does not carry out international transfers of personal data outside the European Economic Area (EEA). In the event of using cloud technical service providers with servers in the US, it will be guaranteed that the entity adheres to the current privacy framework or has signed the Standard Contractual Clauses (SCC) approved by the European Commission.

6. Mandatory nature of the data and automated decisions

Legal and contractual requirement (Art. 13.2.e GDPR):

Users are informed that providing the personal data requested in membership registration forms or event registration forms is an essential contractual and associative requirement for the entity. The data subject is required to provide this data if they wish to acquire membership status or formalize their attendance at the event; in case of failure to provide it, the direct consequence will be the absolute impossibility for the Academy to approve their admission to the entity or to permit their entry and access control to the organized event.

Conversely, data intended for informative communications are completely voluntary, and failure to provide them does not entail any consequences in relation to the Academy's activities.

Automated decision-making and profiling (Art. 13.2.f GDPR):

The Academy explicitly informs that it does not make automated decisions in any of its personal data processing operations, nor does it carry out user profiling processes (profiling) under the premises described in Article 22 of the GDPR.

7. What are your data protection rights and how to exercise them?

As a data subject, you may exercise at any time and completely free of charge your rights of Access, Rectification, Erasure (Cancellation), Objection, Restriction of processing, and Portability, as well as revoke the consent granted without retroactive effect.

o exercise these rights, you must send a written request to the Associació de l'Acadèmia de les Arts Digitals, Carrer dels Ferrers, 11, Sant Martí, 08019, Barcelona, or by email to the address gestio@academiadelesartsdigitals.cat, clearly indicating your full name, the specific rights request you wish to exercise, and attaching a copy of your identity document (DNI/NIE) or equivalent document for the sole purpose of verifying your identity.

Right to lodge a complaint with a Supervisory Authority: Users are informed of their right to lodge a formal complaint with the competent Data Protection Authority if they consider that their rights have been infringed, and may address the Spanish Data Protection Agency (AEPD) or the Catalan Data Protection Authority (APDCAT).

8. Social Networks and Changes to the Privacy Policy

The Academy has institutional profiles on different social networks for the promotion of Digital Arts. The data processing carried out through these profiles will be conducted in accordance with the terms and use policies established by each social network, with the user being responsible for configuring their privacy settings on these platforms.

The entity reserves the right to modify this Privacy Policy at any time to adapt it to new instructions from the supervisory authorities, legislative developments, or changes in the internal organization of the association, with the current and updated version always being available in this same space.

Last modified: June 2026.