Privacy Policy

Last updated: July 2026

1. Who we are

This website is operated by:

La Asociación para la Protección de Animales Vulnerables y Abandonados (APAVA)
Registered Association Number: 632650
NIF: G26672451
Registered Address: Calle Camelia, 69B, 29630, Benalmádena, Málaga, Spain
Website: https://www.APAVA.es
Email: info@APAVA.es

APAVA is the data controller responsible for your personal data under the General Data Protection Regulation (“GDPR”).

Legal framework

This Privacy Policy is governed by the General Data Protection Regulation and the Ley Orgánica 3/2018 de Protección de Datos Personales y garantía de los derechos digitales.

We collect personal data directly from users when they interact with our website.

2. What personal data we collect

We may collect and process the following personal data:

  • Contact forms: name, email address, message content
  • Newsletter sign-up: email address (and name if provided)
  • Donations (via Donorbox): name, surname, email address, donation details (payment processing is handled securely by third parties; we do not store full payment card details)
  • Volunteers and supporters: name, email address, and any information you choose to provide
  • Technical data: cookies and usage data as described in our cookie banner and cookie policy

We may also receive personal data from third-party service providers when you make donations or subscribe to our communications.

3. How we use your data

We use your personal data for the following purposes:

  • Processing and acknowledging donations (via Donorbox)
  • Sending newsletters and updates about APAVA's activities (via Mailchimp)
  • Responding to enquiries submitted via our website
  • Managing volunteers, supporters, and communications
  • Maintaining website functionality and improving user experience

4. Legal basis for processing

We process your data under the following legal bases:

  • Consent: for newsletters, cookies, and marketing communications
  • Contractual necessity: for processing donations and providing related services
  • Legitimate interest: for responding to enquiries and basic supporter communication
  • Legal obligation: for financial and accounting records

Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before its withdrawal.

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

5. Third-party service providers

We use trusted third-party providers to operate our services:

  • Donorbox – donation processing
  • Stripe and Paypal – payment processing
  • Mailchimp – email communications and newsletters
  • DotGo – website hosting and management

These providers may process personal data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place in accordance with GDPR, including Standard Contractual Clauses or equivalent protection mechanisms.

6. Data retention

We retain personal data only as long as necessary:

  • Donation records: up to 6 years
  • Newsletter subscribers: until you unsubscribe
  • Contact enquiries: up to 24 months after last interaction
  • Volunteer/supporter data: while active and for a reasonable period afterwards

7. Your data protection rights

Under GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data (“right to be forgotten”)
  • Restrict or object to processing
  • Request data portability

To exercise any of these rights, contact us at: info@APAVA.es

8. Cookies

Our website uses cookies to ensure proper functionality and improve user experience.

A cookie banner is displayed when you first visit our site, allowing you to manage your preferences.

Cookies are only used with the user's consent, except for those strictly necessary for the operation of the website. Users may withdraw or modify their consent at any time through the cookie banner settings.

Detailed information about cookies is provided in our Cookie Policy.

Our use of cookies

Necessary cookies

We use necessary cookies to make our site work and enable core functionality such as security, network management, and accessibility. You may disable these by changing your browser settings, but this may affect how the website functions.

Analytical cookies

We use analytical cookies to help us provide you with the best possible experience by collecting and reporting information on how the website is used. The cookies collect information in a way that does not directly identify anyone. If you prefer not to allow us to accept these cookies you can adjust permissions via the cookie settings panel.

Further details about cookies are available in our separate Cookie Policy.

9. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or disclosure. This includes using secure third-party platforms and access controls.

10. International data transfers

Some of our service providers (including Donorbox, Stripe, Paypal and Mailchimp) may process data outside the EEA.

Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved under GDPR, to ensure an adequate level of data protection.

11. Complaints

If you are concerned about how we handle your personal data, you have the right to lodge a complaint with the Spanish Data Protection Authority:

Agencia Española de Protección de Datos
https://www.aepd.es

12. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.