Privacy policy

Data controller

The data controller is Futuro en Proyecto, whose registered address is Calle Ejemplo 00, 28001 Madrid, España. The organisation acts under delegation from the public administration in running the 2027 funding round. For any question about your personal data, write to privacidad@futuroenproyecto.com.

What data we process

We process only the data needed for the purposes set out below. Depending on your relationship with the organisation, this may include:

• Identification and contact details: name, date of birth, identity document number, postal address, email address and telephone number.
• Project data: description, category, expected duration, amount requested, your own contribution, planned use of the funds and any other sources of funding.
• Bank details, if you choose to provide them: account holder, IBAN, BIC and bank. They are optional and used only to pay the amount out.
• The documents you attach to your application and, if the project is funded, the follow-up reports and receipts for the expenditure.
• The details of any review you choose to publish: name, email address, town, rating and text.
• The content of messages sent through the contact form.
• Technical browsing data: IP address, browser type and pages visited, processed in aggregate form.

Why we process it, and on what legal basis

Each processing operation serves a defined purpose and rests on its own legal basis:

• Assessing your application and communicating the decision. Basis: steps taken at your request prior to entering into a contract, and the performance of a task carried out in the public interest.
• Following up the funded project and checking how the amount awarded was used. Basis: a legal obligation arising from the rules governing public grants.
• Answering the messages you send us. Basis: your consent.
• Publishing reviews and verifying whether their author is a beneficiary. Basis: your consent.
• Preventing fraud and keeping the site and the applications secure. Basis: the organisation's legitimate interest.
• Measuring site audience in aggregate. Basis: your consent, collected through the cookie notice.

No automated decisions

No decision about your application is taken by automated means or through profiling. Every application is assessed by people, against the criteria published on this site, and every decision is given with its reasons.

Who has access to your data

Your application is accessible to the staff of the organisation handling it and to the members of the committee taking the decision, all of whom are bound by a duty of confidentiality. Providers acting as processors are also involved, strictly on our instructions: site hosting, the database and the document storage service. Beyond those cases, your data is disclosed to public authorities or supervisory bodies only where the law requires it. We do not sell or share your data for commercial purposes.

International transfers

Our providers process data within the European Economic Area. Should any operation involve a transfer outside that area, it would rely on an adequacy decision of the European Commission or on standard contractual clauses.

How long we keep it

We keep data for as long as the purpose that justified collecting it requires, and then in restricted form for the applicable limitation periods:

• Refused or withdrawn applications: 2 years from the decision.
• Funded applications: 4 years from the close of follow-up, under the rules governing public grants.
• Contact form messages: 1 year from the last exchange.
• Published reviews: for as long as they remain published. You can ask for a review to be taken down at any time.
• Technical audience data: 13 months at most.

How we protect your data

Connections to the site are encrypted. The documents you attach are stored in non-public mode and are reachable only through signed links that expire after a few minutes. Access to the management panel is restricted and its sessions expire automatically. We apply data minimisation: we ask for nothing that is not needed to assess your project.

Your rights

In relation to your personal data, you may exercise the following rights:

• Access the data we hold about you and obtain a copy of it.
• Have inaccurate or incomplete data corrected.
• Ask for your data to be erased once it is no longer needed for the purpose that justified it.
• Ask for processing to be restricted while a challenge is being verified.
• Object to processing based on our legitimate interest.
• Receive the data you provided to us in a structured, commonly used format.
• Withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.

How to exercise your rights

Write to privacidad@futuroenproyecto.com, stating which right you wish to exercise. We may ask you for proof of identity where there is reasonable doubt as to who is making the request. We will reply within one month, extendable to two months where the request is complex. If you believe your request has not been handled properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Minors

The procedure is open only to adults. We do not knowingly collect data relating to minors; where we find that such data has been provided, we delete it.

Cookies

This site uses technical cookies necessary for it to work and, only with your consent, audience measurement cookies. Each one is described in the cookie policy.

Cookie policy

Changes to this policy

We may update this policy to reflect changes in the law or in how we operate. The date of the last update appears at the top of this page. Where a change materially affects your rights, we will tell you by email.