Last updated: January 12, 2026 (v. PP_2026_01_12)
This English translation is provided for informational purposes only. In case of discrepancy, the Spanish version shall prevail.
This Privacy Policy governs the processing of personal data of the users who participate in the Archivo Canarias project, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR) and the Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD).
Accessing and using the participation form implies reading and express acceptance of this policy.
1. Identity of the data controller
Controller: Mariano Damián García Cruz – Archivo Canarias
Tax ID (NIF): 78511639N
Address: 35004 Las Palmas de Gran Canaria (Las Palmas, Spain)
Contact email: Man info into @my archivocanarias. Broadcom
Website: https://www.archivocanarias.com
The Controller guarantees compliance with the obligations arising from the GDPR and the LOPDGDD, as well as the confidentiality and security of the personal data processed.
The website holds an SSL certificate issued by Let’s Encrypt, ensuring encrypted transmission of information between the user and the server.
2. Data subject to processing
2.1. Data collected via the Tally form
The personal data provided through the participation form are as follows:
- Identifying data: first name and surname(s), pseudonym or artistic name.
- Biographical data: year and place of birth, brief background, disciplines, awards, projects and other voluntarily provided information.
- Contact data: email address (published only if expressly authorised).
- Approximate location data: municipality, island, country and postal code (the exact address will never be published).
- Audiovisual data: images, portraits and videos supplied by the participant.
- Classification data: thematic tags to describe the profile.
- Website usage data: aggregated and anonymized information about how the website is used (e.g. pages visited, device type or browser), collected through privacy-friendly analytics tools (Plausible Analytics), without using cookies or collecting personal data.
Furthermore, audiovisual materials submitted may be hosted on Digital Ocean servers located in Amsterdam (EU), distributed via an international CDN network, ensuring in all cases compliance with the Standard Contractual Clauses approved by the European Commission when data is transferred outside the European Economic Area.
The personal data collected via the forms are initially managed in Tally (platform hosted in the EU) and Notion (with international transfer guarantees to the US), and are subsequently integrated into the WordPress content management system of the website, under the direct control of the Controller.
For data-protection reasons, the use of tags or keywords that reveal sensitive personal information (for example, sexual orientation, religious beliefs, ideology or health status) is prohibited.
2.2. Data generated by web navigation
During navigation of the Archivo Canarias website, the following technical data are collected automatically or contingent upon the user’s configuration:
- Aggregated and anonymized information about the use of the website (for example, pages visited).
- Device type and browser used.
- Strictly necessary technical cookies required for the proper functioning of the website.
Archivo Canarias uses privacy-friendly web analytics tools (Plausible Analytics), which do not use cookies and do not collect personal data from users.
This data is used exclusively for statistical purposes and to improve the browsing experience, in accordance with the Cookie Policy and the preferences set by the user.
3. Purposes of processing
The data will be processed for the following purposes:
- To incorporate the information into the participant’s cultural profile, publicly visible on the website, and to manage and organise the profiles in the platform, through a search and tagging system.
- To represent the geographic distribution of profiles on a global map based on approximate location.
- To disseminate the images, portraits and videos submitted, exclusively within the scope of the project.
- To communicate with participants by email regarding management of the archive, updates or incidents.
- To generate aggregated and anonymized statistics on website usage, solely for statistical purposes and to improve the performance and functioning of the website, using privacy-friendly analytics tools that do not use cookies or collect users’ personal data.
- The Controller may use third-party artificial-intelligence (AI) tools exclusively for editorial support tasks (summary, correction or translation of biographies). This processing is always under human supervision and does not entail transfer of rights over the content, which remains the author’s property.
- In some cases, the Controller may request additional graphic materials via a second Tally form, limited to the uploading of images and videos, which will be governed by this same Privacy Policy and by the consent clause included in the main form.
4. Legal basis for processing
The processing is based on:
- The express consent of the participant (Art. 6.1(a) GDPR), given by completing the form and accepting the final clause.
- The legitimate interest of the Controller in guaranteeing the security, administration and improvement of the platform (Art. 6.1(f) GDPR), in relation to technical cookies and site maintenance.Consent may be withdrawn at any time, without retroactive effect, by contacting Man info into @my archivocanarias. Broadcom.
5. Licence over images, videos and texts
The participant declares that:
- They hold the intellectual-property and image rights over the materials supplied, or that they have the necessary permissions.
- They grant Archivo Canarias a free, non-exclusive, worldwide and revocable licence to reproduce, publicly communicate and disseminate the materials supplied (photographs, portraits, videos and texts), exclusively within the framework of the project and for cultural, non-commercial purposes.
- This licence does not entail any transfer of ownership; the participant retains all rights over their works.
- They may request the modification or removal of the supplied materials at any time.
6. Data retention
Data will be retained while the project is active, or until the participant requests its deletion.
In the event of withdrawal of consent, the Controller will delete the profile and materials within a reasonable period, unless a legal retention obligation exists.
Back-ups of the website and database are stored encrypted on Dinahosting servers (Spain), with restricted access to the Controller. These back-ups are deleted or overwritten periodically in accordance with a secure retention protocol.
7. Data-processors and third parties
For the correct functioning of the project, the Controller uses third-party service providers acting as processors:
- Dinahosting (Spain): website-hosting provider and encrypted back-up storage.
- Digital Ocean (Amsterdam, EU): image and video hosting, with international CDN network subject to Standard Contractual Clauses.
- Tally.so (EU): platform for management of participation forms.
- Notion (USA): internal database-management tool with appropriate transfer guarantees (SCC).
- Plausible Analytics (EU): a privacy-friendly web analytics tool that does not use cookies or collect personal data, and that provides aggregated and anonymous statistics about the use of the website.
- Google Maps: geolocation service with functional cookies.
All the providers listed process data in accordance with the Controller’s instructions and under confidentiality and security contracts.
8. International transfers
Use of Notion may entail international data transfers to the USA. Such transfers are legitimised by the Standard Contractual Clauses adopted by the European Commission and, where applicable, by additional safeguards applied by the providers.
9. Data-subject rights
Participants may exercise the following rights at any time:
- Access: confirm whether their data are being processed and obtain a copy.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion of their data and materials.
- Restriction of processing: temporarily limit use of their data.
- Objection: object to processing in specific circumstances.
- Data portability: receive their data in a structured format and transmit them to another controller.
The exercise of these rights may be carried out by sending an email to Man info into @my archivocanarias. Broadcom, evidencing the requester’s identity.
In case of disagreement, the data subject has the right to file a complaint with the Spanish Data Protection Agency (AEPD).
10. Security measures
The Controller has adopted appropriate technical and organisational measures to guarantee the confidentiality, integrity and availability of personal data processed, including:
- SSL certificate (Let’s Encrypt) across the domain.
- Application firewall (WAF) active on the server.
- Encrypted back-ups on Dinahosting servers (Spain).
- Restricted access control for authorised personnel.
- Encryption protocols and secure passwords for administrative access. In the event of project termination or data-erasure request, the Controller will ensure complete and secure deletion of back-up copies, preventing subsequent recovery.
The Controller will adopt the necessary technical and organisational measures to guarantee the integrity and confidentiality of the information processed within the Archivo Canarias project, in accordance with Art. 32 of Regulation (EU) 2016/679 (GDPR).
Such measures include encrypted back-ups of databases and hosted content, exclusively aimed at preventing accidental loss of information and assuring service continuity.
Back-ups will be stored locally or externally under the Controller’s direct control, protected by encryption systems and secure passwords, and will not be accessible to third parties.
They will be retained only while strictly necessary for technical-support purposes, and will be deleted or overwritten periodically following a secure retention schedule.
In case the project finishes or personal data is permanently deleted, the Controller will guarantee full and secure erasure of back-up copies, ensuring that recovery is not possible.
11. Authorised access to data by third parties
The Controller may permit access to personal data processed in the Archivo Canarias project by collaborating persons or professionals involved in technical maintenance, editorial management or content updating, always under its direct supervision and following the instructions issued.
Such persons will hold individual credentials and will access only the information necessary for their functions, in accordance with the data-minimisation principle (Art. 5.1(c) GDPR).
In the case of external collaboration or provision of professional services, such persons or entities shall be considered processors and must sign the corresponding confidentiality or processing-agreement contract, in accordance with Art. 28 GDPR.
The Controller will ensure that no third party accesses or processes personal data for unauthorised purposes or without proper legal authorisation.
12. Selection and access to the participation form
Access to the participation form in Archivo Canarias is selective, by individual invitation or direct contact with the Project Controller.
Submitting the form by un-invited persons does not entail any obligation of inclusion or publication of their profile. Profile acceptance is subject to editorial criteria and project coherence.
The Controller reserves the right to accept or reject any proposal or profile without obligation to provide justification, guaranteeing in all cases the confidentiality of personal data submitted by non-selected persons, which will be securely deleted and not used for any other purpose.
13. Updates to the policy
The Controller reserves the right to modify this policy in order to adapt to legislative developments or changes in the project’s operation.
The current version will always be available on the website https://www.archivocanarias.com
Archivo Canarias
Man info into @my archivocanarias. Broadcom
https://www.archivocanarias.com