PRIVACY POLICY

 

1. Data controller

The controller responsible for processing the personal data collected through the website visionsphotofest.com is:

ASSOCIACIÓ CULTURAL VISIONS FOTOGRAFIA CAMPRODON
Tax ID (NIF): G27605864
Registered office: Plaça Doctor Robert, 8, ground floor, door 3, 17867 Camprodon (Girona), Spain
Email: comunicacio@www.visionsphotofest.com

The Association is the organisation responsible for VISIONS – Camprodon International Photography Festival.

 

2. Personal data we process

Through the VISIONS newsletter subscription form, we may collect the following personal data:

  • Name.
  • Email address.

No special categories of personal data are requested through this form.

 

3. Purpose of processing

The data provided will be processed for the purpose of managing subscriptions to the VISIONS newsletter and sending communications relating to the festival, including information about its programme, exhibitions, artists, activities, open calls, news and other content relating to VISIONS and future editions of the festival.

Personal data will not be used for purposes incompatible with those for which it was collected.

 

4. Legal basis for processing

The legal basis for processing personal data is the user’s consent, given when they voluntarily subscribe to the newsletter.

Users may withdraw their consent at any time without affecting the lawfulness of any processing carried out before consent was withdrawn.

Each communication will include a simple, free-of-charge way to unsubscribe from the newsletter.

 

5. Data retention

Personal data will be retained for as long as the user remains subscribed to the newsletter and does not withdraw their consent.

When a user unsubscribes, their data will no longer be used to send communications. However, certain information may be retained, with access duly restricted, for as long as necessary to meet any potential legal obligations or liabilities.

 

6. Newsletter management and Mailchimp

ASSOCIACIÓ CULTURAL VISIONS FOTOGRAFIA CAMPRODON uses Mailchimp, a service provided by The Rocket Science Group LLC, an Intuit group company, to manage and distribute its newsletter.

Mailchimp acts as a service provider for managing subscriptions and sending electronic communications and, for these purposes, may process personal data provided by users.

Mailchimp is based in the United States and operates servers there, meaning that use of the service may involve the transfer and processing of personal data outside the European Economic Area. Mailchimp states that it participates in the EU-U.S. Data Privacy Framework and also provides for the Standard Contractual Clauses approved by the European Commission in its Data Processing Addendum as a safeguard where applicable.

Further information about Mailchimp’s processing of personal data and international data transfers is available in its privacy and data protection documentation:

Mailchimp – European data transfers

 

7. Disclosure of data to third parties

Personal data will not be sold or disclosed to third parties for their own commercial purposes.

Service providers may have access to personal data where this is necessary to provide services relating to the operation of the website, communications management or technology services, provided that such access is necessary for them to perform their functions and is at all times in accordance with applicable data protection legislation.

Personal data may also be disclosed to public authorities, government bodies or other organisations where required by law.

 

8. Users’ rights

Users may exercise their rights under applicable data protection legislation at any time, including in particular:

  • Access: to obtain information about the personal data we process.
  • Rectification: to request the correction of inaccurate or incomplete data.
  • Erasure: to request the deletion of their personal data where applicable.
  • Objection: to object to the processing of their personal data in the circumstances provided for by law.
  • Restriction of processing: to request that the processing of their personal data be restricted in certain circumstances.
  • Data portability: to receive their personal data in a structured, commonly used and machine-readable format where applicable.
  • Withdrawal of consent: to withdraw consent at any time.

To exercise these rights, users may contact:

comunicacio@www.visionsphotofest.com

The request must specify the right the user wishes to exercise and provide the information necessary to identify the applicant.

Users who believe that the processing of their personal data infringes applicable data protection legislation also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD).

Spanish Data Protection Agency

 

9. Data security

ASSOCIACIÓ CULTURAL VISIONS FOTOGRAFIA CAMPRODON will implement appropriate technical and organisational measures to protect personal data against loss, alteration, unauthorised access, disclosure or processing, taking into account the nature of the data processed and the risks associated with such processing.

 

10. Children’s data

The newsletter is not specifically intended for children or minors.

Minors who do not have sufficient legal capacity to consent to the processing of their personal data themselves must obtain authorisation from their parents or legal guardians in accordance with applicable legislation.

 

11. Changes to the Privacy Policy

ASSOCIACIÓ CULTURAL VISIONS FOTOGRAFIA CAMPRODON may amend this Privacy Policy where necessary to reflect legislative or technical changes or changes to the services provided through the website.

The version published on visionsphotofest.com at any given time will be the version currently in force.

Last updated: September 2026.