1. Data Controller
The data controller for personal data processing carried out through the website https://rausenbach.org/ is:
Controller: Casa ducal de Rausenbach Foundation
Abbreviated name: Rausenbach Foundation
Tax ID: G73827644
Registered office: Diseminado de Esparragal, number 58, 30890 Puerto Lumbreras, Murcia, Spain
Postal address: P.O. Box A-29, 30890 Puerto Lumbreras, Murcia, Spain
Email for privacy matters: privacidad@rausenbach.org
Website: https://rausenbach.org/
The Rausenbach Foundation is responsible for the processing carried out through this website, unless expressly stated otherwise regarding a specific processing.
The Foundation has not appointed a data protection officer. Queries related to personal data protection can be addressed to privacidad@rausenbach.org.
2. Applicable Regulations and Principles
The Rausenbach Foundation processes personal data in accordance with:
Regulation (EU) 2016/679 of 27 April 2016, General Data Protection Regulation —hereinafter, GDPR—;
Organic Law 3/2018 of 5 December, on the Protection of Personal Data and guarantee of digital rights; and
other applicable provisions.
The data will be processed in a lawful, fair, and transparent manner; for specific, explicit, and legitimate purposes; and limited to those that are adequate, relevant, and necessary for each purpose.
3. Processing carried out through the website
The Rausenbach Foundation may carry out the following personal data processing:
3.1. Inquiries and communications
Data processed: nombre, apellidos, dirección de correo electrónico, asunto, contenido del mensaje y cualquier otro dato que el usuario facilite voluntariamente.
Finalidad: recibir, tramitar y responder las consultas, solicitudes o comunicaciones enviadas mediante el formulario de contacto o por correo electrónico.
Base jurídica: el interés legítimo de la Fundación en atender las comunicaciones recibidas, conforme al artículo 6.1.f del RGPD. Cuando la consulta se refiera al establecimiento de una relación con el interesado, la base jurídica será la aplicación de medidas precontractuales solicitadas por este, conforme al artículo 6.1.b del RGPD.
Conservación: los datos se conservarán durante el tiempo necesario para tramitar y responder la consulta. Posteriormente, podrán permanecer debidamente bloqueados durante los plazos legales aplicables para atender posibles responsabilidades.
3.2. Funcionamiento y seguridad del sitio web
Data processed: dirección IP, fecha y hora de acceso, página solicitada, tipo de navegador y dispositivo, sistema operativo, datos técnicos de conexión y registros de seguridad.
Finalidad: garantizar el funcionamiento, la estabilidad y la seguridad del sitio web; prevenir accesos no autorizados, ataques informáticos y usos fraudulentos; y diagnosticar posibles incidencias técnicas.
Base jurídica: the legitimate interest of the Foundation in protecting its website, its systems, and the information they contain, in accordance with Article 6.1.f of the GDPR.
Conservación: the data will be retained for the strictly necessary time to ensure security and analyze possible incidents, according to the technical timelines applied by the hosting provider. They may be retained for a longer period when necessary to investigate an incident or comply with a legal obligation.
3.3. Management of cookie preferences
Data processed: consent identifiers, selected preferences, and technical data related to the management of cookies.
Finalidad: remember the user's preferences and record, when applicable, the consent given, rejected, or withdrawn.
Base jurídica: compliance with applicable legal obligations and the legitimate interest regarding strictly necessary cookies. For the use of other cookies, the legal basis will be the user's consent.
Conservación: data will be retained for the periods indicated in the Cookie Policy or until the user withdraws their consent, as applicable.
3.4. Form protection against abusive uses
The contact form uses Google reCAPTCHA to prevent automated message submissions and protect the website against spam and other malicious uses.
Data processed: IP address, technical characteristics of the browser and device, visited page, data about the interaction with the site, and result of the security check.
Finalidad: to verify that the form is used by a person and to prevent automated or fraudulent submissions.
Base jurídica: the legitimate interest of the Foundation in protecting the form and ensuring the security of the website, in accordance with Article 6.1.f of the GDPR.
Conservación: these data will be processed for the time necessary to carry out the security check and according to the retention criteria applied by the service provider.
3.5. Loading of external resources
El sitio web puede solicitar directamente a servidores externos determinados tipos de letra, iconos u otros recursos gráficos proporcionados, entre otros, por Google Fonts y Font Awesome.
Data processed: dirección IP e información técnica del navegador necesaria para solicitar y mostrar el recurso.
Finalidad: presentar correctamente los tipos de letra, iconos y demás elementos gráficos del sitio web.
Base jurídica: el interés legítimo de la Fundación en mantener la presentación y el funcionamiento técnico del sitio web, conforme al artículo 6.1.f del RGPD.
Conservación: los proveedores externos tratarán los datos durante los plazos establecidos en sus respectivas políticas de privacidad.
The fields marked as mandatory in the contact form are necessary in order to process and respond to the inquiry. If the user does not provide this information, the Foundation will not be able to attend to it properly.
The user should not include in the message field any particularly sensitive data or information that is not necessary to submit their inquiry.
4. Source of the data
The personal data processed by the Foundation comes from:
directly from the data subject, when they use the contact form, send an email, or communicate through another means;
automatically, when they access and browse the website; or
from third parties, when a person legitimately provides data of another person for a specific purpose.
The Foundation does not deliberately obtain personal data from publicly accessible sources for profiling purposes nor does it acquire third-party databases to carry out commercial communications.
5. Recipients and service providers
The Rausenbach Foundation does not sell, rent, or trade users' personal data.
The data may be processed, on behalf of the Foundation, by providers that offer services necessary for the operation of the website, including:
web hosting, infrastructure, and content delivery network providers;
email and communications providers;
maintenance, support, and IT security providers;
proveedores de formularios y sistemas de prevención de spam; y
proveedores de recursos gráficos o tipográficos externos.
Estos proveedores actuarán como encargados del tratamiento cuando corresponda y estarán sujetos a las obligaciones contractuales exigidas por la normativa de protección de datos.
Asimismo, los datos podrán comunicarse a administraciones públicas, juzgados, tribunales, Fuerzas y Cuerpos de Seguridad u otras autoridades cuando exista una obligación legal o resulte necesario para formular, ejercer o defender reclamaciones.
6. Servicios externos y transferencias internacionales
Google reCAPTCHA
The contact form uses Google reCAPTCHA to verify that its use is being performed by a person and to prevent automated message submissions.
This service may communicate information to Google such as the IP address, browser and device characteristics, the visited page, and certain data about the user's interaction with the website.
Google Fonts and Font Awesome
The website may directly request from external servers certain fonts and icons provided by Google Fonts and Font Awesome. When requesting these resources, the IP address and certain technical information about the browser may be communicated to the corresponding provider.
Some of these providers may process data outside the European Economic Area. When an international data transfer occurs, it must be covered by one of the mechanisms provided for in Articles 45 and 46 of the GDPR, such as an adequacy decision, valid adherence to the EU–US Privacy Shield, or the use of standard contractual clauses approved by the European Commission.
Additional information about the cookies and external services used can be obtained in the Cookies Policy.
7. Rights of Data Subjects
The data subject can exercise the following rights:
Access: to know whether the Foundation processes their personal data and to obtain a copy of them.
Rectification: request the correction of inaccurate or incomplete data.
Deletion: request the deletion of your data when, among other reasons, they are no longer necessary for the purposes for which they were collected.
Limitation of processing: request that processing be restricted in the cases provided for by law.
Objection: object to processing based on legitimate interest for reasons related to your particular situation.
Portability: receive the data provided in a structured, commonly used, and machine-readable format and, when technically possible, request its transmission to another controller, provided that the legal requirements are met.
Withdrawal of consent: withdraw at any time the consent given for a specific treatment, without this affecting the lawfulness of the processing carried out before its withdrawal.
To exercise these rights, the data subject may send a request to:
Email: privacidad@rausenbach.org
Postal address: Fundación Casa ducal de Rausenbach, Apartado de Correos A-29, 30890 Puerto Lumbreras, Murcia, Spain.
The request must indicate the right that is to be exercised and contain the information necessary to identify the applicant. When there are reasonable doubts about their identity, the Foundation may request additional information solely for the purpose of verifying it.
The exercise of these rights is free of charge, except in cases of requests that are manifestly unfounded or excessive as provided for in the GDPR.
8. Complaints to the supervisory authority
If the data subject considers that the processing of their personal data infringes the applicable regulations, they may submit a complaint to the Spanish Data Protection Agency:
Spanish Data Protection Agency
Calle Jorge Juan, 6
28001 Madrid
https://www.aepd.es/
Before submitting a complaint, the data subject may contact privacidad@rausenbach.org so that the Foundation can examine their request.
9. Minors
This website is not specifically aimed at minors nor is it intended to collect their personal data.
Minors under fourteen years of age should not provide data through the website without the authorization of the holder of parental authority or guardianship.
When a treatment is based on consent, those over fourteen years of age may give it themselves, except in cases where the law requires the intervention of the holders of parental authority or guardianship.
If the Foundation becomes aware that it has received data from a minor in violation of these requirements, it will take reasonable measures to delete it.
10. Third-party data and accuracy of information
When the user provides personal data of another person, they must have sufficient authorization to do so and have previously informed them of the essential aspects of this policy.
The user guarantees that the data provided is truthful, accurate, complete, and up to date. They must inform the Foundation of any necessary modifications to keep it correct.
The Foundation shall not be responsible for the consequences arising from false, inaccurate, or outdated data when it could not have reasonably known of such circumstances.
11. Security and confidentiality
The Rausenbach Foundation adopts appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, or alteration, as well as against unauthorized access, use, or disclosure.
These measures are determined taking into account the state of the art, the implementation costs, the nature and scope of the processing, and the risks to the rights and freedoms of individuals.
Personnel and providers who may have access to personal data are subject to confidentiality duties and may only process them following the corresponding instructions.
However, no system connected to the Internet can guarantee absolute security. If a personal data security breach were to occur, the Foundation will act in accordance with the obligations established in the applicable regulations.
12. Automated decisions and profiling
La Fundación Rausenbach no adopta decisiones basadas únicamente en tratamientos automatizados que produzcan efectos jurídicos sobre el usuario o le afecten significativamente de modo similar.
Tampoco elabora perfiles personales con fines comerciales a partir de los datos obtenidos mediante el sitio web.
13. Cookies
Este sitio web utiliza cookies y tecnologías similares. Las cookies no necesarias únicamente deberán activarse cuando el usuario haya prestado su consentimiento.
El usuario puede aceptar, rechazar o configurar las cookies no necesarias y retirar posteriormente su consentimiento con la misma facilidad con la que lo otorgó.
La información detallada sobre las cookies utilizadas, sus proveedores, finalidades y duración se encuentra en la Cookies Policy.
14. Modification of the Privacy Policy
The Rausenbach Foundation may modify this policy to adapt it to regulatory, technical, or treatment-related changes.
When the changes are significant, they will be communicated through the website or by other appropriate means. The applicable version will be the one published at the time the treatment takes place.
Última actualización: 16 de septiembre de 2026.