Air Safety Foundation
LinkedInInstagramX

Privacy Policy

Who We Are

Identity: FUNDACIÓN A20 DE SEGURIDAD AÉREA (Air Safety Foundation) 
Address: C/ Pedro Medrano, 6, 28029 Madrid, Spain
Email: info@fasa20.org
Registration Details: Registered with the Spanish National Register of Foundations under registration number 2767.
Tax Identification Number (CIF): G-13.929.971
Telephone: +34 91 314 22 22

Our website addresses are:

  • https://volarseguro.org
  • http://volarseguro.es
  • http://volarseguro.com
  • http://fasa20.org
  • http://fasa20.es
  • http://fundacionseguridadaerea.es
  • http://fundacionseguridadaerea.org

Air Safety Foundation (“FaSA20”) is committed to complying with applicable European and Spanish data protection legislation, including Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights.

FaSA20 undertakes to process personal data in a lawful, fair and transparent manner and to ensure that personal information remains protected and is not misused.

By providing your personal data and/or using our websites, you acknowledge that you have read and understood the information contained in this Privacy Policy regarding the processing of personal data.

You may contact FaSA20 at info@fasa20.org regarding any matter relating to the processing of your personal data.

Information Provided Our Through Website Forms.

All fields marked as mandatory in our website forms must be completed. Failure to provide the requested information may prevent us from providing the requested service or responding to your enquiry.

The information provided must be accurate, truthful, up to date and free from errors. You agree to notify FaSA20 as soon as possible of any changes or corrections to your personal data by sending an email to info@fasa20.org.

By clicking the “Accept” button (or any equivalent confirmation mechanism) included in our forms, you declare that the information and personal data provided are accurate and truthful.

Description of the Information Contained in This Privacy Policy.

This Privacy Policy includes a table identifying, for each category of personal data processing carried out by FaSA20, the following information::

  • The categories of personal data being processed.
  • The purposes for which personal data is processed.
  • The legal basis for processing personal data for each specified purpose.
  • The recipients of personal data disclosures or transfers.
  • The retention period applicable to each category of personal data.

With regard to the disclosure of personal data to third parties, FaSA20 may grant access to personal data under its responsibility to service providers acting as Data Processors on its behalf. Such providers will only have access to the personal data strictly necessary to perform the contracted services and will be required to maintain the confidentiality of all personal information entrusted to them. They may not use such information for any purpose other than the provision of the contracted services.

In addition, for statistical and analytical purposes, FaSA20 may provide anonymised or aggregated information about website users to third parties, including its sponsors, partners, or advertisers.

International Data Transfers

FaSA20 informs users that certain services may involve the use of cloud-based infrastructure provided by third-party providers, including Dropbox and Microsoft 365 (Office 365).

Where personal data is transferred outside the European Economic Area (EEA), such transfers will be carried out in accordance with applicable data protection legislation and subject to the safeguards required by law to ensure an adequate level of protection for personal data.

Comments

When visitors leave comments on the website, we collect the information displayed in the comment form, as well as the visitor’s IP address and browser user-agent string to help detect and prevent spam.

An anonymised string generated from your email address (also known as a hash) may be provided to the Gravatar service to determine whether you are using it. The Gravatar Privacy Policy is available at: 

Privacy Policy

Once your comment has been approved, your profile picture may be publicly visible alongside your comment.

Media

If you upload images to this website, you should avoid uploading images that contain embedded location data (GPS EXIF data). Visitors to the website may be able to download and extract location data from images available on the website.

Cookies

If you leave a comment on our website, you may choose to save your name, email address, and website in cookies. These cookies are provided for your convenience so that you do not have to re-enter this information when leaving future comments. These cookies will remain active for one year.

If you have an account and log in to this website, a temporary cookie will be created to determine whether your browser accepts cookies. This cookie contains no personal data and is deleted when you close your browser.

When you log in, several cookies will also be created to save your login information and screen display preferences. Login cookies remain active for two days, while screen preference cookies remain active for one year. If you select “Remember Me”, your login will remain active for two weeks. Logging out of your account will remove the login cookies.

If you edit or publish an article, an additional cookie will be stored in your browser. This cookie contains no personal data and simply indicates the ID of the article that has just been edited. It expires after one day.

Embedded Content from Other Websites

Articles published on this website may include embedded content (for example, videos, images, articles, presentations, or other materials).

Embedded content from third-party websites behaves in exactly the same way as if the visitor had accessed the third-party website directly.

These third-party websites may collect information about you, use cookies, incorporate additional third-party tracking technologies, and monitor your interaction with the embedded content. This may include tracking your interaction with embedded content if you have an account with, and are logged in to, the relevant third-party website.

Información detallada de los tratamientos de datos realizados por FaSA20.

Subscriber Data

Purpose of Processing
  • Maintaining, managing, and developing the relationship with subscribers.
  • Sending subscribers information and/or invitations relating to FaSA20 services, activities, courses, and events via email, SMS, and/or instant messaging services such as WhatsApp.
  • Providing periodic updates on FaSA20’s activities and the impact of its work.
Legal Basis

Data subject’s consent. Article 6(1)(a) GDPR.

Recipients

Personal data will not be disclosed to third parties except where required by law.

Retention Period

Personal data will be retained for as long as necessary to fulfil the purposes for which it was collected and to determine any potential liabilities arising from its processing.

Website Contact and Enquiry Data

Purpose of Processing
  • Administrative management.
  • Provision of information regarding FaSA20 services, activities, courses, and events.
  • Processing of enquiries submitted through FaSA20 website contact forms, including requests related to advisory services, documentation, training, publications, and representation activities.
Legal Basis

Data subject’s consent. Article 6(1)(a) GDPR.

Recipients

Personal data will not be disclosed to third parties except where required by law.

Retention Period

Personal data will be retained for as long as necessary to fulfil the purposes for which it was collected and to determine any potential liabilities arising from its processing.

Event and Activity Attendee Data

Purpose of Processing
  • Maintaining, developing, and managin the relationship between FaSA20 and event participants.
  • Providing information regarding FaSA20 services, activities, courses, and events via email, SMS, and/or instant messaging services such as WhatsApp or Telegram.
Legal Basis
  • Data subject’s consent. Article 6(1)(a) GDPR.
  • Processing necessary for the performance of a contract or for the implementation of pre-contractual measures at the request of the data subject. Article 6(1)(b) GDPR.
Recipients

Personal data will not be disclosed to third parties except:

  • Speakers, lecturers, or trainers involved in the relevant activities.
  • Public or private partner organisations collaborating in FaSA20 activities.
  • Where disclosure is required by law.
Retention Period
  • Personal data will be retained for as long as necessary to fulfil the purposes for which it was collected and to determine any potential liabilities arising from its processing.
  • Thereafter, data may be retained for up to five (5) years where required for employment or social security compliance and for up to ten (10) years where required under anti-money laundering legislation.

Donor Data

Purpose of Processing
  • Administrative and tax management, including the collection of donations, donor registration, donor records management, and the issuance of donation receipts and tax certificates.
  • Maintaining, developing, managing, and overseing the relationship between FaSA20 and its donors.
  • Complying with legal obligations.
  • Providing information regarding FaSA20 services, activities, and events.
Legal Basis
  • Data subject’s consent. Article 6(1)(a) GDPR.
  • Processing necessary for the performance of a contract or for the implementation of pre-contractual measures at the request of the data subject. Article 6(1)(b) GDPR.
Recipients

Personal data will not be disclosed to third parties except:

  • Speakers, lecturers, or trainers involved in FaSA20 activities.
  • Public or private partner organisations collaborating in FaSA20 activities.
  • Where disclosure is required by law.
Retention Period
  • Personal data will be retained for as long as necessary to fulfil the purposes for which it was collected and to determine any potential liabilities arising from its processing.
  • Thereafter, data may be retained for up to five (5) years where required for employment or social security compliance and for up to ten (10) years where required under anti-money laundering legislation.

Speakers and Collaborators Data

Purpose of Processing
  • Maintaining, developing, and managing the relationship between FaSA20 and its speakers and collaborators.
  • Complying with legal obligations.
  • Providing information regarding FaSA20 services, activities, courses, and events.
Legal Basis
  • Data subject’s consent. Article 6(1)(a) GDPR.
  • Processing necessary for the performance of a contract or for the implementation of pre-contractual measures at the request of the data subject. Article 6(1)(b) GDPR.
Recipients

Personal data will not be disclosed to third parties except where required by law.

Retention Period
  • Personal data will be retained for as long as necessary to fulfil the purposes for which it was collected and to determine any potential liabilities arising from its processing.
  • Thereafter, data may be retained for up to five (5) years where required for employment or social security compliance and for up to ten (10) years where required under anti-money laundering legislation.

Image and Voice Recordings

Purpose of Processing
  • Use in FaSA20 publications, websites, and social media channels, as well as in the communication channels of partner organisations.
  • Preparation of audiovisual materials, photographs, and videos intended to inform the public about FaSA20’s services, projects, and activities.
Legal Basis
  • Data subject’s consent. Article 6(1)(a) GDPR.
  • Images and recordings may be obtained through photographs and/or recordings taken during FaSA20 events, activities, and meetings.
Recipients

Personal data may be shared with individuals and organisations collaborating with FaSA20 in the organisation of activities and events.

Retention Period
  • Personal data will be retained for as long as necessary to fulfil the purposes for which it was collected and to determine any potential liabilities arising from its processing.
  • In all cases, the rights of objection and withdrawal of consent available to data subjects will be respected.

Exercise of Your Rights

We would like to inform you that you may exercise the following rights with regard to your personal data:

  • Right of Access: the right to obtain confirmation as to whether your personal data is being processed and to access information regarding such processing activities.
  • Right to Rectification: the right to request the correction of any inaccurate or incomplete personal data.
  • Right to Erasure (“Right to be Forgotten”): the right to request the deletion of your personal data where applicable and permitted by law.
  • Right to Restriction of Processing: the right to request that the processing of your personal data be restricted where the accuracy, lawfulness, or necessity of the processing is disputed. In such cases, we may retain the data only for the establishment, exercise, or defence of legal claims.
  • Right to Data Portability: the right to receive your personal data in a structured, commonly used, and machine-readable format, or to have it transferred to another controller, where the legal basis for processing is your consent or a contractual relationship.
  • Right to Object: the right to object to the processing of your personal data where the legal basis for processing is our legitimate interest. In such cases, we will cease processing your data unless we can demonstrate compelling legitimate grounds for continuing the processing or where the processing is necessary for the establishment, exercise, or defence of legal claims.
  • Right to Withdraw Consent: the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before such withdrawal;

You may exercise any of these rights at any time and free of charge by contacting us at info@fasa20.org. Please specify the right or rights you wish to exercise, provide sufficient information to identify yourself, and include a copy of an official identity document where necessary to verify your identity.

If you believe that your personal data has not been processed appropriately, or that applicable data protection legislation has been violated in relation to the processing of your personal data, you have the right to lodge a complaint with the competent data protection supervisory authority.

Cookies.

FaSA20 collects and stores limited personal information, as well as anonymous aggregated statistical data, relating to visitors to its websites through the use of cookies and similar technologies. For further information about the cookies we use, their purposes, and how you can manage your preferences, please consult the FaSA20 Cookie Policy.

Security Measures

FaSA20 implements the security measures required by the General Data Protection Regulation (GDPR), taking into account the nature, scope, context, and purposes of the processing activities carried out at any given time.

Accordingly, FaSA20 has adopted the appropriate technical and organisational measures necessary to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access.

In particular, FaSA20 has established access controls to personal data, restricts access to authorised personnel through secure authentication mechanisms, including user credentials and passwords, performs regular data backups, and implements additional safeguards designed to ensure the confidentiality, integrity, and availability of personal information.

However, no method of transmission or storage over the Internet can be guaranteed to be completely secure. While FaSA20 makes every reasonable effort to protect personal data and prevent unauthorised access, misuse, or disclosure, it cannot guarantee absolute security against malicious actions carried out by third parties.

Minors

The services offered through FaSA20’s websites are not intended for minors without the prior consent of a parent or legal guardian. Parents, guardians, or legal representatives are solely responsible for supervising the use of the website by minors under their care, including the submission of personal data and the granting of any required consents.

Social Media

FaSA20 maintains official profiles on various social media platforms, including X (formerly Twitter), Instagram, YouTube, and LinkedIn, for the purpose of sharing information about its activities, services, projects, and events that may be of interest to the public.

If you follow, subscribe to, or interact with any of FaSA20’s social media profiles, you acknowledge that the information you have made publicly available on your profile may be accessible to FaSA20 in accordance with the privacy settings and terms of the relevant social media platform.

Such information may be processed for the purpose of managing our online community, responding to enquiries, communicating with users, and providing information about FaSA20’s activities, services, and events through the communication tools made available by the relevant social media platform.

Please note that your relationship with each social media platform is governed by the terms, conditions, and privacy policies of the respective provider. FaSA20 recommends that users review these policies before interacting with its social media profiles.

Modifications to This Privacy Policy

FaSA20 reserves the right to amend or update this Privacy Policy at any time in order to comply with applicable legislation, regulatory requirements, or changes in its data processing activities.

Any modification to this Privacy Policy will be published on FaSA20’s websites and will become effective upon publication, unless otherwise stated.

Users are encouraged to review this Privacy Policy periodically to stay informed about how FaSA20 protects and processes personal data.

Last updated: 21 October 2026
Toggle Dark Mode