Make a Donation

Privacy policy

Last updated: 28 September 2026

1. Data controller

This policy explains how we process your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

2. What data we process, why, and on what legal basis

Contact form

Data: name, email address, phone number (optional) and the content of your message.
Purpose: to reply to your enquiry or proposal.
Legal basis: your consent when you submit the form (art. 6.1.a GDPR).
Retention: as long as needed to handle your request and, after that, a maximum of 2 years, unless the relationship continues.

Newsletter

Data: first name, last name and email address.
Purpose: to send you news about our projects and activities.
Legal basis: your consent (art. 6.1.a GDPR), which you can withdraw at any time by writing to us or using the unsubscribe link in each email.
Retention: until you unsubscribe.

Members, donors and volunteers

If you become a member, make a donation or sign up as a volunteer, we will process the data you provide (identification, contact and, where applicable, bank and tax details) to manage your relationship with the association, collect membership fees, issue donation certificates and meet our tax obligations.
Legal basis: your relationship with the association (art. 6.1.b GDPR) and compliance with legal obligations, such as the informative return on donations (art. 6.1.c GDPR).
Retention: for as long as the relationship lasts and, after that, for the periods required by tax and accounting regulations (generally 6 years).

Some of these procedures take place on third-party platforms linked from the website: membership registration is managed through Playoff Informática’s service, volunteering through Google forms, and online donations through iHelp, which has its own privacy policy.

Website usage statistics

Only if you accept it in the cookie notice, we collect aggregated browsing data with Google Analytics and Metricool to understand how the website is used and improve it. See the Cookie policy.

Spam protection

The forms use Google reCAPTCHA to distinguish people from automated programs. reCAPTCHA analyses technical data from the browser and from the interaction with the page. Legal basis: our legitimate interest in protecting the website against abuse (art. 6.1.f GDPR). Google’s privacy policy and terms apply.

3. Recipients

We do not sell or transfer your data to third parties, except where required by law (for example, to the tax authorities). To provide our services we rely on providers who act as data processors, under contract and with appropriate safeguards:

4. International transfers

Some providers, such as Google, may process data outside the European Economic Area, in particular in the United States. These transfers are covered by the EU-US Data Privacy Framework or by the standard contractual clauses approved by the European Commission.

5. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to contact@medicalopenworld.org or to our postal address. Please state which right you wish to exercise. If necessary to verify your identity, we will ask you for additional information.

If you believe we have not processed your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

6. Minors

This website is not aimed at children under 14. If you are under that age, do not send us personal data without the consent of your parents or guardians.

7. Security and changes

We apply appropriate technical and organizational measures to protect your data. We may update this policy to adapt it to legal or operational changes. The date of the last update appears at the top.