TERMS AND CONDITIONS, LEGAL NOTICE, PRIVACY POLICY AND ACTIVITY REGISTER


CONTENT

I.- RESPONSABILITY

I.1.- RESPONSIBLE PARTY / OWNERSHIP

I.2.- PURPOSE

I.3.- AUTHORISED USE

I.4.- MODIFICATION OF THE GENERAL TERMS AND CONDITIONS

I.5.- PRIVACY AND DATA PROTECTION POLICY

II.- TERMS OF USE AND PARTICIPATION

II.1.- REGISTRATION CONDITIONS

II.2.- SERVICES

II.2.1.- Rules on Content and Services

II.3.- SOCIAL MEDIA

III.- TERMINATION OF THE RELATIONSHIP

IV.- APPLICABLE LAW AND JURISDICTION

V.- INFORMATION ABOUT YOUR RIGHTS

VI.- ISAK’S RECORD OF PROCESSING ACTIVITIES ISAK

VII.- COOKIE POLICY 

VIII.-ACTIVITY REGISTER

IX. CONTRACTUAL TERMS AND CONDITIONS


Date: 27 February 2025

I.- LEGAL NOTICE AND PRIVACY POLICY

Please read these terms and conditions carefully before using the services provided by the ISAK.global website and the ISAK Metry Software of the International Society for the Advancement of Kinanthropometry – ISAK, hereinafter referred to as ISAK, which comprises it. By using the services, you agree to be bound by these terms and conditions.

ISAK is committed to and takes responsibility for fully respecting the fundamental right to data protection, privacy and reputation, in accordance with applicable legislation.

These terms and conditions govern access, browsing, downloading and use of the ISAK.global website and ISAK Metry Software by its Users. Access to the ISAK.global website and ISAK Metry Software implies that the User has read and accepts in full these Terms and Conditions and undertakes to comply with them in full.

ISAK may modify these Terms at any time, so we recommend that you review them regularly.The date at the top of these Terms indicates the most recent revision, which shall apply from the date of publication.

Some of the Services may be subject to specific conditions or instructions by ISAK or the third parties providing them, which will supplement or, if contrary to the provisions herein, replace the content of these Terms and Conditions, and which must be accepted by the User before the provision of the corresponding Service begins.

The Privacy Policy shall apply to the collection and use of personal data.

Browsing the ISAK.global website without accessing the private user area does not imply the processing of personal data, without prejudice to the provisions of the ‘Cookie Policy’ and the possible technical processing of IP addresses.

If you provide personal data, please note the following, in accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC: General Data Protection Regulation (OJEU L 119, 4-5-2016), and Article 11 of Organic Law 3/2018, of 5 December, on data protection and guarantee of digital rights (BOE of 6-12-2018).

I.1.- RESPONSIBLE PARTY/ OWNERSHIP

GENERAL WEBSITE AND SOFTWARE:  The ISAK.global website and the ISAK Metry Software are owned by the International Society for the Advancement of Kinanthropometry (ISAK), VAT No. G75578401, with registered office at Avda. Jerónimos, S/N, Cátedra Cineantropometría UCAM, Guadalupe De Maciascoque, 30107 Murcia (Spain). Email: info@isak.global.”

I.2.- PURPOSE 

The purpose of these general terms and conditions is to regulate the relationship between users registered at www.isak.global and in the ISAK Metry Software, and those persons who browse said website.

The website www.isak.global aims to provide information about the International Society for the Advancement of Kinanthropometry (ISAK), including details about its training programmes, its members, the courses offered, news related to the Society, the ISAK Newsletter, and the scientific journal International Journal of Kinanthropometry (IJK).

Through ISAK.global, users can access all the information previously mentioned, contact ISAK for any queries related to its services and kinanthropometry, access their private member area, manage their courses, download their certificates, and access the ISAK Metry Software.

The ISAK Metry Software is a free tool with current accreditation from ISAK. It enables users, through an online system, to create subject profiles, carry out measurements using different protocols depending on the desired level of analytical depth, and automatically generate anthropometric reports. It also includes other functionalities integrated with ISAK.global. 

I.3.- AUTHORISED USE

The user is authorised to use the Services only if they are a natural person and in accordance with these Terms and Conditions. The user agrees to use the Services in good faith and solely for the purpose of anthropometric training. Use of the Services for any purpose other than for anthropometric training is not authorised.

The user undertakes not to use the Services negligently, for fraudulent purposes, or with the intent of violating the law. Likewise, the user agrees not to engage in any conduct that could harm the image, interests, or rights of ISAK or of third parties.

The user shall refrain from interfering with the operation of the ISAK.global website, the ISAK Metry Software, or the Services, and in particular, from impersonating another user or any third party. The user agrees not to perform any action that may damage, disable, overburden, impair, or hinder the normal use of the ISAK.global website, the ISAK Metry Software, or the Services, compromise their security, or otherwise obstruct or interfere with their functioning.

Access via any device, software, mobile application, or tool intended to access, copy, or monitor any part of the ISAK.global website, the ISAK Metry Software, or the Services — or any other access or use of these platforms that is contrary to their intended personal use or unjustifiably harms ISAK’s interests — is strictly prohibited without prior express authorisation.

Similarly, it is forbidden to obtain or attempt to obtain content from the ISAK.global website or the ISAK Metry Software using methods or techniques other than those normally employed or expressly authorised by ISAK.

In any case, the use of the Services via the ISAK.global website or the ISAK Metry Software shall be deemed unauthorised if ISAK considers that the user is failing to comply with ISAK’s established regulations and requirements. In such instances, ISAK reserves the right to block access to users who engage in unauthorised use.

The ability to block malicious users is the only way to ensure that we can provide a reliable service to all legitimate users.

It is the user's responsibility to ensure, prior to use, that the Services are suitable for their needs.

I.4.- AMENDMENT OF THE GENERAL TERMS AND CONDITIONS

ISAK reserves the right to make changes to its website, policies, and terms and conditions, including these Conditions, at any time. You will be subject to the Conditions in force at the time you access the ISAK.global website and the ISAK Metry Software or contract a service, unless a change to these Conditions is required by law or by public authorities (in which case, such changes may apply to any orders you have placed previously).

If any of these conditions are declared invalid, void, or ineffective for any reason, such condition shall be deemed excluded, without such declaration affecting the validity or enforceability of the remaining conditions.

Due to the changes that these Conditions may undergo, please review the terms when you access the ISAK.global website and the ISAK Metry Software again, or contract a new service; the latest version of the terms will always apply. Unless the user chooses to unsubscribe, it will be understood that they accept the new terms, and they will not be able to claim against ISAK for any reason due to the change in these terms; in any case, the user will always be free to unsubscribe at any time they wish.

The user's registration on the ISAK.global website and the ISAK Metry Software implies acceptance of the Terms and the Privacy Policy of the ISAK.global website and the ISAK Metry Software, thereby becoming a registered user.

I.5.-PRIVACY AND DATA PROTECTION POLICY

In accordance with the current legislation on the Protection of Personal Data, we inform the users of this website about the Privacy and Data Protection Policy that will apply to the processing of personal data that the user voluntarily provides when accessing it.

By providing their personal data to ISAK through the electronic forms and contact sections, the user expressly, freely, and unequivocally consents that their data are necessary to address their request for services/consultation, etc., by ISAK, and that such data may be processed solely for the purpose of managing the requested services/consultations, etc.

As users of the website portal, and as previously stated, it is not necessary to provide any personal data for browsing the site (except for the use of cookies and IP registration). However, when requesting certain services/consultations, registration, or any other service, only those data that are appropriate, relevant, and not excessive in relation to the specific scope and legitimate purposes for which they were provided and obtained will be collected. These data will be cancelled when they are no longer necessary or relevant for that purpose, or when requested by the data subject in the exercise of their right to cancellation. It is noted that some data may be retained solely for the purpose of responding to legal and administrative requirements and responsibilities.

Information on the protection of personal data that may be collected through the ISAK.global website or the ISAK Metry Software.

International Society for the Advancement of Kinanthropometry – ISAK


Basic Information

Additional Information

Data controller

International Society for the Advancement of Kinanthropometry - ISAK


C.I.F.: G75578401

Registered office: Avda. Jerónimos, S/N. Cátedra Cineantropometría UCAM, Guadalupe De Maciascoque. 30107 Murcia - (Murcia)

E-mail: info@isak.global

Data types


Simple browsing: IP, determined by the acceptance of cookies.

-Information request/queries: Name, email, and phone number.

-Registration request: first name, last name, date of birth, identification number, profession, highest academic degree, phone number, country, city, email, password, Facebook, Twitter, and LinkedIn.

-Use of ISAK Metry: patient registration and their anthropometric data (personal data, characteristics, body mass history, relevant data).

Purposes

Response to inquiries

Handle the inquiries of users who contact us through the Contact sections.

Provide the requested service.

-Processing your registration as a user of the website in order to provide you with the services offered through the website and ISAK Metry.

-Processing of services requested from ISAK.

Legitimacy and retention

Legal basis for processing. GDPR. Art. 6.

-The basis for data processing is the consent given by the user when browsing the platform. If you do not provide the necessary data for the required purposes, we will not be able to provide you with our services.

-ISAK's operational basis is to establish an international system for the evaluation of anthropometry to provide training and assessment in accreditation courses for anthropometrists, all based on its own Statutes and internal regulation.

-Your data will be retained and processed for as long as the established relationship lasts, and thereafter for the necessary period required by law to respond to any legal or administrative responsibilities.

Recipients of transfers

The following data transfers have been planned

•No data transfers are planned for the data collected through the web forms or the ISAK Metry Software.

• In the development of its activities and corporate purpose, ISAK may transfer, communicate, and/or share data with partners, executives, and other natural or legal persons related to its activity, all based on and in compliance with the applicable data protection regulations, as well as in the mutual interest of both ISAK and the users in its activities.

• It is specifically noted that participation in various activities may inherently involve the capture of images and their public dissemination through various media such as social networks, etc., aspects which may be beyond ISAK's responsibility and control.

• The processing of minors' data will be given special consideration in terms of management and security. However, it is the direct responsibility of the users to provide verifiable legal representation for the consent of such processing. ISAK will, to the extent of its capabilities, ensure the proper representation required.

Rights of the data subjects

Exercise of rights

Data subjects can exercise the rights provided by the legislation by contacting the International Society for the Advancement of Kinanthropometry - ISAK at Avda. Jerónimos, S/N. Cátedra Cineantropometría UCAM, Guadalupe De Maciascoque, 30107 Murcia (Murcia); Email: info@isak.global.

Data subjects have the right to lodge a complaint with the Supervisory Authority (Spanish Data Protection Agency www.agpd.es). 

Security


We manage our server environment appropriately, with a strictly compliant firewall infrastructure. We use current technologies to ensure that the confidentiality and privacy of the information is not compromised.

To this end, technical and organisational measures are adopted to ensure the security of the personal data contained within and to prevent their alteration, loss, processing, or unauthorised access, taking into account the state of technology, the nature of the data, and the risks to which they are exposed.

The Spanish Data Protection Agency (AEPD) and, in some cases, the data subjects will be notified of any security breach affecting personal data.


The user will be solely responsible for the accuracy of the data provided to ISAK.

The fields marked with an asterisk (*) in the forms on the page are mandatory. If any of these fields are left blank, you will not be able to proceed with your submission, as they are essential for processing your request.

Any changes made to the Privacy Policy and information management practices will be reflected in a timely manner, and ISAK may add to, modify, or remove this Privacy Policy whenever deemed necessary.

In any case, we will not modify our policies or practices in a way that makes them less effective in protecting the personal data of our users previously stored, without the prior consent of the data subjects.

At any time, users wishing to exercise the rights granted by law may contact ISAK in a verifiable and properly identified manner, and their request will be addressed without undue delay. We remind you that you may seek protection from the Supervisory Authority, the Spanish Data Protection Agency.

II.- RULES OF USE AND PARTICIPATION

The ISAK.global website and the ISAK Metry Software are primarily intended for the dissemination of information and training in kinanthropometry. All users must respect the site's purpose and dynamics, making appropriate use of its services and content. 

II.1.- REGISTRATION CONDITIONS

Natural persons with legal capacity who have an interest in the development of ISAK's aims may register and become members of the ISAK Association, as well as unemancipated minors over the age of fourteen with the documented consent of those who must act on their behalf. They must have read and accepted the Terms of Use, the Cookie Policy, and the Privacy Policy, and completed all the mandatory fields in the registration form, namely the fields relating to personal data.

"As a result of the registration process, the user will be provided with an access password, and agrees to use it diligently and keep it strictly confidential. The user is solely responsible for the proper custody and strict confidentiality of any passwords, access data, or other elements provided, and undertakes not to share their use with third parties, either temporarily or permanently. The user will be held responsible for any unauthorised use of the services by illegitimate third parties who use a password provided to the user for such purpose. Furthermore, identification and authentication through a user email and password will confer full and sole responsibility on the user for any actions carried out using that access to the services. It is the user’s unconditional obligation to notify ISAK immediately of any event that may allow or lead to the misuse of passwords, including (but not limited to) theft, loss, or similar circumstances. Until such incidents are reported, ISAK shall be exempt from any liability arising from the improper, fraudulent, misleading, or malicious use of such passwords.

II.2.- SERVICES

The ISAK.global website allows users to:

. Kinanthropometry, what ISAK is, and its history.

. ISAK training and its accreditation scheme.

. The members that make up ISAK.

. The various courses offered by ISAK.

. News related to ISAK.

. View the ISAK informative newsletter.

.  Direct access to the scientific journal of the International Journal of    Kinanthropometry.

II.2.1.- Rules regarding content and services.

Through the Services, users can:

Unregistered user: They will be able to access all external information on the ISAK.global website.

Registered user: In addition to being able to access all external information on the ISAK.global website, they have Free access to the ISAK Metry Software with valid ISAK accreditation, which allows the user to create subjects in an online system, measure them using different profiles depending on the level of depth sought in the interpretation, and generate anthropometric reports automatically. As well as other features integrated with ISAK.global. 

Access to the user's private area, where depending on the level of kinanthropometrist (level 1, 2, 3, or 4) the user will be able to access specific information. This will be where all the user's identification data is registered, including a photograph. The ISAK certificate can be downloaded, if available, and the courses taught can be managed, if the user is an instructor. Additionally, access to the ISAK manual will be available, along with a link to ISAK Metry, and access to information through documents and videos that assist in navigating the website and managing the courses, as well as the Handbook (ISAK regulations manual).

Each time a course is completed, the user must complete a satisfaction survey where they can express opinions and comments about the course and the instructor. This survey is anonymous, and the responses can only be viewed by the course instructor and the ISAK Secretariat.

Only those courses that wish to be advertised will be published on the ISAK.global website, where the country, city, date, and level of the course will be displayed, as well as the name, surname, and email of the responsible instructor. Additionally, the details of ISAK members (name, surname, country, city, ISAK level, email, and photograph) will also be published. The user agrees to comply with the following rules:

The user's content must be relevant, always respect the rights of third parties, not be contrary to laws, morals, and public order, and comply with these Conditions. 

If the user's content includes the image or name of any person or any confidential or private information related to them, that person must have authorised the publication of such content.

The user's content must not include advertising or promotional material, nor be used to spread advertisements or for personal profit or gain.

The user's content must not include viruses, worms, or any type of destructive code.

The user's content must comply with the technical conditions and requirements established by ISAK at any given time.

In particular, the user undertakes to ensure that their content complies with ISAK’s Principles and Best Practices, especially with regard to respecting property, the rights and interests of third parties or the general public.

ISAK merely hosts the user’s content. Consequently, ISAK does not edit, select, review, monitor, guarantee, approve, or identify with the user’s content. In particular, and without limitation, ISAK does not guarantee that the user’s content is accurate, up to date, lawful, suitable for any specific purpose or user, or that it does not constitute a breach of any applicable regulations or an infringement of third-party rights. It is the user’s responsibility to ensure that its use does not pose a risk or involve any unlawful activity.

If you wish to make an enquiry regarding user content, or believe that it infringes any rights, does not comply with these Terms, or is inappropriate, you may do so in the following manner:

By contacting ISAK at the following email address: info@isak.global

Notwithstanding that ISAK is not obliged to carry out general monitoring of user content, ISAK may modify or remove, in whole or in part and at any time, any user content which, in its opinion, breaches these Terms or may be offensive, unlawful, or infringe the rights of third parties.

II.3.- SOCIAL MEDIA

ISAK may provide users with access to various social media platforms; however, this does not imply the existence of any relationship between ISAK and the owners of such platforms, nor the acceptance or approval of their content and services by ISAK. Under no circumstances does ISAK share any private user information with Facebook, Twitter, LinkedIn, YouTube, or any other social network that may be incorporated in the future. The sole purpose of these links is as outlined in this Legal Notice and the Website’s Privacy Policy. In this regard, both access to such applications and any decision by the user to provide information on these platforms is done at their own risk and subject to the terms and conditions of the respective platforms, which are entirely independent of ISAK.

Nevertheless, it is recommended to: Carefully read the terms of use and privacy policies of such platforms and exercise extreme caution, acting with prudence, common sense, and sound judgement when using their social media profile. Users should thoroughly assess the accuracy, relevance, completeness, and timeliness of the information they publish through these platforms for their intended purposes. Any user who decides to share content should be aware that their posts will be accessible to and therefore known by others, and will be solely responsible for them, as well as for any implications this may have for their privacy.

Any publication on ISAK’s social media profiles that is offensive or likely to offend against morality, ethics, good taste or decency, and/or that infringes, violates or breaches intellectual or industrial property rights, image rights, privacy or applicable regulations, is strictly prohibited. This also applies to any publication that contravenes ISAK’s own regulations.

Similarly, ISAK reserves the right not to respond individually to comments and messages received through its profile, as well as not to follow all users who begin following its social media profile.

III.- TERMINATION OF THE RELATIONSHIP

The relationship with the user of the ISAK.global website and the ISAK Metry Software may be terminated, in addition to the causes legally provided for under current legislation, for the following reasons:

The cessation, for any reason, of the ISAK.global website or the ISAK Metry Software in continuing its main line of activity, its winding-up or orderly closure.

Any event of force majeure that prevents the fulfilment of all or a substantial part of ISAK’s obligations in relation to such service.

Repeated breach by either party of any term or condition set out in these terms and conditions.

For breach of ISAK regulations by the user.

For failure to renew membership/accreditation, which prevents the user from accessing the ISAK Metry Software.

By the unilateral will of the user, who may unsubscribe from the services at any time.

To terminate the relationship on the part of the user on the ISAK.global website or within the ISAK Metry Software, the user may contact ISAK through: info@isak.global.

The data may continue to be processed for the purpose of sending communications, be cancelled but retained for the management of possible legal or administrative liabilities, or be deleted, as determined by the user. 

IV.- GOVERNING LAW JURISDICTION

The applicable law in case of any dispute or conflict of interpretation shall be Spanish legislation. For the resolution of any conflict, ISAK and the user agree to submit to the competent Courts and Tribunals of their respective domicile.

V.- INFORMATION ABOUT YOUR RIGHTS. 

1.-Introduction.
Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter referred to as the GDPR) and the Organic Law on the Protection of Personal Data and the Guarantee of Digital Rights 3/2018 (hereinafter referred to as the LOPD-GDD), establish the obligations and responsibilities that data controllers and processors must implement in order to ensure the rights of individuals in the field of personal data processing.

2.-Common provisions regarding rights

Transparency of information, communication, and modalities for exercising the rights of the data subject (Art. 12). 

In general, the controllers must facilitate the exercise of the data subjects' rights, and the procedures and methods for doing so must be visible, accessible, and simple. The information may be provided in writing or by other means, including electronic means, especially when the processing is carried out by such means. 

The exercise of rights shall be free of charge for the data subject, except in cases where requests are manifestly unfounded or excessive, particularly due to their repetitive nature, in which case the data controller may charge a fee to cover the administrative costs of responding to the request or refuse to act (the fee shall not involve any additional income for the data controller, but shall correspond to the actual cost of processing the request).

When the interested party submits the request electronically, the information will be provided electronically where possible, unless the interested party requests that it be provided in another way.

2.1.- Deadlines: The responsible party must inform the interested party of the actions taken as a result of their request within one month (this may be extended by two additional months if the request is particularly complex, and this extension must be notified within the first month).

 If the controller decides not to comply with a request, they must inform the data subject, providing reasons for the refusal, within one month of the request being made.

2.2.- Proof of identity or representation 

Under the GDPR, data controllers must take measures to verify the identity of individuals exercising their rights. 

The accreditation of the identity of the data subject can be done by presenting an ID card or another valid document, or by submitting a photocopy attached to the request. It is also possible to verify identity through electronic signature when the rights exercise procedure is carried out electronically.

In the case of representation, whether legal or voluntary, the document accrediting the representation must be provided, along with a photocopy of the represented person.

Exercise of rights before the data processor: The controller may seek the assistance of data processors to facilitate the exercise of rights by the data subjects, and this collaboration may be included in the data processing agreement.

2.3.-Requirements of the request:

Request addressed to the Entity, responsible for the processing, through any means that guarantees the identification of the data subject (ID card, electronic signature, or other equivalent means) and, where applicable, the identification of the person representing them, along with the document proving such representation and the identity of the representative.

Unless in cases of particular complexity, the data subject is entitled to refer in their request to both specific data or to all the data processed by the Data Controller. Notwithstanding the foregoing, if any of the entities to which the data subject's request is addressed processes a large amount of information about a data subject, they may request the data subject to specify the information their access request refers to.

The request specifying the application must also include the address for notification purposes, the date and signature of the applicant, a copy of the ID card or equivalent document, as well as the authorization of the represented person and the ID card or equivalent document of the representative.

3.- What should the Data Controller do? 

Upon receiving a request to exercise rights, the Data Controller will respond within a maximum of one month from the receipt of the request. In this regard, the person within the entity who receives the request must first note the date the request arrived and indicate this on the request, as well as the remaining time until the deadline, promptly informing the Data Controller of the entity. The response, including any refusal or impossibility, must also be communicated for follow-up purposes. This is without prejudice to proceeding with the processing of the request. 

The request must be processed by the department responsible for the data processing, for completion and response, with the advice of the DPO, within a one-month period. 

The Data Controller must respond to any request made, regardless of whether the data processing of the data subject is carried out. They must use any reliable means that allows the content of the response and the date of its receipt by the recipient to be verified. In the event that the request does not meet the previously described requirements, the Data Controller must ask the data subject to correct the deficiencies.

 Furthermore, the information that the Data Controller must provide will include:

a. The data or categories of data concerning the data subject, as well as any resulting data from their processing or any derived processes.

b. The source of the data,

c. The communications made or anticipated to be made (including the recipients or categories of recipients),

d. The specification of the purposes for which the data will be stored,

e. If possible, the expected retention period of the data or the criteria used to determine this period,

f. The right to lodge a complaint with a supervisory authority,

g. The existence of automated decisions, including profiling, and meaningful information about the logic applied, as well as the significance and consequences for the data subject.

h.Adequate safeguards regarding international transfers that may occur. The information will be provided in a perfectly understandable manner, without the use of codes or keys requiring specific mechanical devices. In the case of excessive, repetitive, or unreasonable requests, the company may set a fee to process the response, as management costs.


4.- The Rights.

4.3.- Right of Access. Definition (Art. 15): 

The right of access refers to the right to know whether the controller is processing the data subject’s personal data. If so, the data subject must be informed about the types of data being processed, the purpose, recipients, retention period, source, and any international data transfers..

4.4- Right to Rectificationn.

The right to rectification refers to the right to have inaccurate or incomplete personal data amended (Art. 16).

A request for rectification must indicate which data it refers to, as well as the correction to be made, and must be accompanied by supporting documentation.

The data controller must notify each of the recipients to whom the personal data has been disclosed of any rectification.

4.5.-Right to Erasure («Right to be Forgotten»).

The right to be forgotten is based on the right to the deletion of personal data.

The data controller who has made the personal data public is under the obligation to inform other controllers processing the data of the requirement to erase any links to, copies of, or replications of the personal data.

The data controller shall take reasonable measures, taking into account the available technology and the resources at their disposal, including technical measures, to inform the controllers who are processing the data of the data subject’s request.

The controller must notify each of the recipients to whom the personal data has been disclosed of any erasure (Art. 17).

The GDPR establishes that data subjects have the right to have their personal data erased and no longer processed if the data is no longer necessary for the purposes for which it was collected or otherwise processed, if the data subjects have withdrawn their consent to the processing, or if they object to the processing of their personal data, or if the processing otherwise infringes the Regulation.

There is an obligation to erase and delete personal data in the following cases:

1.Data that is no longer necessary in relation to the purpose for which it was collected.

2. The data subject withdraws consent for processing on the grounds that such consent was given voluntarily, by means of explicit consent, and now has the same right to withdraw it.

3. Objection to the processing of personal data.

4.The personal data has been unlawfully processed.

5. Data erased in compliance with a legal obligation under European Union law or the law of the Member State to which the controller is subject.

6.The data of a child under the age of 16 collected with parental authorisation.

7.The right to be forgotten shall not apply where the personal data are necessary for any of the following circumstances:

8. The exercise of the right to freedom of expression and information, particularly with regard to news relating to public figures or matters of public interest.

9. When the purpose is to comply with a legal obligation under European Union law or the law of a Member State that requires the processing of personal data for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

10. For reasons of public interest in the area of public health.

11. For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes.

13. For the formulation, exercise, or defence of claims.

4.6.- Right to Restriction of Processing.

Restriction of processing means that, at the request of the data subject, the data will not be subject to the applicable processing operations (Art. 18)

The GDPR establishes several scenarios in which this right may be exercised:

• When consent for processing is not required due to the presence of a legitimate and well-founded reason that justifies it.

• "When the files are intended for advertising and commercial prospecting activities, regardless of who created them.

• "When the purpose of the processing is to make a decision based on the automated processing of the data subject’s personal data.

4.7.-Right to Data Portability

"The data subject has the right to transmit their data to another controller without hindrance from the controller to whom the data was originally provided, when:

• The processing is based on consent.

• The processing is carried out by automated means.

In exercising their right to data portability, the data subject has the right to have the data transmitted directly from one controller to another, where technically feasible (Art. 20).

This right is not applicable:

• To third-party data that a data subject has provided to a controller.

• In cases where the data subject has requested the portability of data concerning them, but which were provided to the controller by third parties.

4.8.-Right to Object and Automated Individual Decision-Making.

The data subject shall have the right to object, at any time, on grounds relating to their particular situation, to the processing of their personal data.

"The controller shall cease processing the personal data, unless they can demonstrate overriding legitimate grounds for the processing which prevail over the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defence of legal claims (Art. 21).

The data subject may seek the intervention of the Spanish Data Protection Agency, under the provisions of Article 57 of the GDPR, if they believe that the controller has not adequately addressed their rights.

VI.- ISAK'S RECORD OF PROCESSING ACTIVITIES.

A) SCOPE OF ACTION AND CONTROL.

I.- GENERAL SCOPE
I.1.- ENTITY.

INTERNATIONAL SOCIETY FOR THE ADVANCEMENT OF KINANTHROPOMETRY – ISAK, C.I.F.: G75578401, Avda. Jerónimos, S/N. Cátedra Cineantropometría UCAM, Guadalupe De Maciascoque.30107 Murcia -(Murcia) España. Email: info@isak.global

I.2.- CORPORATE PURPOSE AND FUNCTIONS:

The International Society For The Advancement Of Kinanthropometry - ISAK, hereinafter referred to as ISAK, is an Association under the provisions of Organic Law 1/2002, of 22 March, governing the Right of Association, and complementary regulations, with legal personality and full capacity to act, and is not profit-driven. It is governed by its own Statutes and General Regulations, as well as any other internal rules it may establish in the exercise of its competencies. Its scope of action extends internationally.

Consequently, ISAK, its governing and representative body members, its members, and generally all other individuals or legal entities that form part of it, commit and undertake to comply with the provisions of its Statutes, the technical regulations issued by ISAK, and any other relevant regulations and legislation, as well as those that are mandatory within the scope of its activities.

Specifically characterised by the following activities:

  1. To promote, disseminate, organise, and conduct programmes, courses, conferences, congresses, seminars, and any type of event at local, regional, national, or international levels related to kinanthropometry. Specifically, and generally, on anthropometry and related disciplines, as well as attendance at these activities organised by other institutions or organisations.

  2. To promote and disseminate anthropometry through written, digital, or virtual media, creating magazines, websites, forums, etc., or any other medium.

  3. To provide the ISAK Association with the necessary infrastructure for the practice, promotion, and dissemination of anthropometry and related disciplines.

  4. To request financial aid and grants from various national and international public and private administrations and institutions for the achievement of the purposes and activities of the ISAK Association.

  5. Any other activity that helps to achieve the purposes of the Association.

II.- INFORMATION PROCESSING

I.- TRAINING ACTIVITIES

a) Legal basis

GDPR: 6.1 a) The data subject has given consent to the processing of their personal data for one or more specific purposes. 6.1 b) Processing is necessary for the performance of a contract/service request in which the data subject is a party or for the application of pre-contractual measures.

c) Purposes of the processing.

Management and control of the training courses organised by ISAK.

c) Group

Users and applicants.

d) Categories of Data.

First name, surname, date of birth, identification number, profession, highest academic degree, phone number, country, city, email, password, photograph, Facebook, Twitter, and LinkedIn.

Anthropometric data using ISAK Metry.

Economic-financial data: bank details related to invoice generation. 

THE INCLUSION OF DATA CONCERNING MINORS IS HIGHLIGHTED

e) Category of recipients

Only those courses that wish to be advertised will be published on the ISAK.global website, where the country, city, date, and level of the course will appear, along with the name, surname, and email of the responsible instructor. Additionally, the data of ISAK members (name, surname, country, city, ISAK level, email, and photograph) will also be published, and can be accessed by any individual.

The rest of the data will only be accessible to those ISAK members who require it, solely for the purpose of activities related to the management of kinanthropometry training.

With regard to the remaining data recorded in the user's profile, access will be granted only to the user themselves.

With regard to the anthropometric data recorded in ISAK Metry, access will be granted only to the user within their private area.

f) International Transfer.

"The data listed under the category of recipients refer to users, natural persons, and members at an international level.

g) Retention period

"The data will be retained for the time necessary to fulfil the purpose for which they were collected and to determine any possible liabilities that may arise from that purpose and from the processing of the data. The provisions established in the regulations on archiving and documentation shall apply.

h) Security measures.

"The security measures implemented are in accordance with those set out in European Regulation 2016/679 and the Spanish LOPDGDD 3/2018. These include access and authorisation control, physical security of infrastructures and buildings, logical security of systems, network security, and confidentiality undertakings by staff.


II.- HUMAN RESOURCES MANAGEMENT.

a) Legal basis

GDPR: 6.1.b) Processing necessary for the performance of a contract to which the data subject is a party or for the application, at their request, of pre-contractual measures. 

6.1.c) Processing necessary for compliance with a legal obligation to which the data controller is subject. 

Law 20/2007, of 11 July, on the Statute of the Self-Employed Worker. Royal Legislative Decree 8/2015, of 30 October, approving the consolidated text of the General Social Security Law.

c) Purposes of the processing

Processing for the purpose of staff management. 

Management of the personnel file and training records. 

c) Group concerned

Employed personnel. Applicants

d) Categories of Data.

Name and surname, ID/NIF/identification document, address, signature, email, telephone number."

Academic and professional data: qualifications, training, and professional experience. 

Economic and financial data: bank details.

e) Category of recipients

Financial institutions.


f) International Transfer.

International data transfers are not foreseen.

g) Data retention period

They will be retained for as long as necessary to fulfil the purpose for which they were collected and to determine any potential liabilities that may arise from that purpose and the processing of the data. The provisions of the regulations on archives and documentation will apply.

h) Security measures

The security measures implemented are in line with those outlined in the European Regulation 2016/679 on the protection of personal data. Access and authorisation control. Physical security of infrastructures and buildings. Logical security of systems. Network security. Confidentiality commitment by staff.


III.-CURRICULUM MANAGEMENT

a) Base jurídica

GDPR: 6.1 a) The data subject has given their consent to the processing of their personal data for one or more specific purposes.

b) Processing necessary for the performance of a contract to which the data subject is a party, or for the application, at their request, of pre-contractual measures. 

c) Purposes of the processing

Recruitment management.

c) Group

Job applicants.

d) Categories of Data

Full name, ID number/Identification document 

Contact details: address, email, and phone number. 

Personal characteristics data: marital status, nationality, date and place of birth. 

Academic and professional data: qualifications, training, and professional experience.

e)Category of recipients

No transfers foreseen

f)International Data Transfer

International data transfers are not foreseen.

g) Data retention period

They will be retained for as long as necessary to fulfil the purpose for which they were collected and to determine any potential liabilities that may arise from that purpose and the processing of the data. 

h)Security measures

The security measures implemented are in line with those outlined in the European Regulation 2016/679 on the protection of personal data, the Spanish Organic Law 3/2018 on the Protection of Personal Data and Digital Rights, and the National Security Scheme (ENS).

Access control and authorisations. Physical security, infrastructure, and buildings. Logical security of systems. Network security.

Firm commitment to confidentiality by the staff.


IV.- BUDGETARY AND FINANCIAL MANAGEMENT

a) Legal basis

GDPR: 6.1(c) Processing necessary for compliance with a legal obligation to which the data controller is subject.

Law 58/2003, of 17 December, General Tax Law.

c) Purposes of the processing

Accounting management and tax and fiscal obligations arising from the Association's activities.

c) Group

Suppliers and partners.

d) Categories of Data

Full name, ID/Tax Identification Number (NIF), address, signature, and phone number.

Economic, financial, insurance, and banking data.

e) Categories of recipients

Financial institutions.

State Tax Administration Agency.

f) International Transfer.

International data transfers are not foreseen.

g) Retention period

They will be retained for as long as necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from that purpose and the processing of the data, in accordance with Law 58/2003, of 17 December, the General Tax Law, as well as the periods established in the archival and documentation regulations.

h) Security measures.

The security measures implemented are in line with those outlined in the European Regulation 2016/679 on the protection of personal data. Access control and authorisations. Physical security, infrastructure, and buildings. Logical security of systems. Network security. Confidentiality commitment from the staff.


V.- LOG OF ENTRIES AND EXITS

a) Legal basis

GDPR: 6.1 a) the data subject has given their consent to the processing of their personal data for one or more specific purposes. 6.1 c) Processing is necessary for compliance with a legal obligation to which the data controller is subject.

Organic Law 1/2002, of 22 March, regulating the Right of Association. Article 28. Registrable acts and document deposit. 1. The registration of associations must include the records and their modifications relating to: (...) e) The identity of the holders of the governing and representative bodies.

c) Purposes of the processing

Management of the association's document entry and exit log.

To know the identity of the holders of the governing and representative bodies.

c) Group

Natural persons, including representatives of legal entities, who contact the association or receive communications from it. 

d) Categories of Data

First name and surname, ID number/National Identification Number/identification document, address, telephone number, and signature.

Representation data, where applicable. 

Data related to the submitted document.

e) Categories of recipients

No planned transfers, they will be communicated to the different departments of the association to which, where applicable, the various requests or communications are directed.

f) International Transfers

No international transfers of data are planned.

g) Retention period

They will be retained for the time necessary to fulfil the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the applicable regulations on archives and documentation shall apply.

h) Security measures

The security measures implemented are in accordance with those set out in European Regulation 2016/679 on the protection of personal data (GDPR) and in Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights. These measures include access and authorisation controls, physical security of infrastructures and buildings, system-level logical security, network security, and confidentiality undertakings by staff.


VI.- PROVEEDORES

a) Legal basis

GDPR: Article 6(1)(b): Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

6.1.c) Processing is necessary for compliance with a legal obligation to which the controller is subject.

c) Purposes of the processing

Procurement management.

c) Colectivo

"Suppliers of services or products.

d) Categories of data

Full name, trade name, ID number/tax identification number (NIF), address, telephone number, and signature.

Bank details: bank account.

Negotiable data: services or products provided.

e)Categories of recipients

No transfers are foreseen, only those related to the commercial relationship between the parties.

f) International Transfer

No international data transfers are foreseen.

g) Retention period

They will be retained for as long as necessary to fulfil the purpose for which they were collected and to determine any potential liabilities arising from that purpose and the processing of the data. The provisions of the applicable regulations on records and documentation shall apply.

h) Security measures

The security measures implemented are in line with those outlined in European Regulation 2016/679 on the protection of personal data (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights. These measures include access controls and authorisations, physical security of infrastructures and buildings, logical security of systems, network security, and confidentiality commitments by staff.


The personal data registered on the ISAK.global website of the members are used for the purposes of the association and are not shared with third parties.

Regarding the data registered in the ISAK Metry tool, ISAK members who access ISAK Metry are responsible for ensuring that the data subject, whose data is entered into the software, has given consent for their data and the measurements taken to be stored in the online repository in ISAK Metry, for the exclusive use of the member. ISAK is not responsible for the improper use of the tool and the data entered.

VII.-COOKIES POLICY 

"We inform you that, in compliance with current data protection regulations, specifically Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter, GDPR), and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter, LOPDGDD), ISAK informs the Users of the Website that this site uses its own cookies.

Consent

The cookies on this website are used to personalise content and ads, provide social media features, and analyse traffic. In addition, we share information about your use of the website with our social media, advertising, and web analytics partners, who may combine it with other information you have provided to them or that they have collected from your use of their services.

By entering the website, cookies are used to ensure a seamless browsing experience and provide the most comfortable user experience. The tracking of these cookies can be disabled on your device/computer.

Without your explicit consent – through the activation of cookies in your browser – the DATA CONTROLLER will not link the data stored in the cookies with your personal data provided at the time of registration or service request.


About cookies 


Cookies are small text files that websites can use to make the user experience more efficient.

The law states that we can store cookies on your device if they are strictly necessary for the operation of this page. For all other types of cookies, we need your consent.

This page uses different types of cookies. Some cookies are placed by third-party services that appear on our pages.

You can change or withdraw your consent at any time from the Cookie Declaration on our website.

Learn more about who we are, how you can contact us, and how we process personal data in our Privacy Policy.

What types of cookies may this website use?

Necessary (15): Necessary cookies help make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

Preferences: Preference cookies allow the website to remember information that changes the way the site behaves or looks, such as your preferred language or the region you are in.

Statistics (1): Statistic cookies help website owners understand how visitors interact with web pages by gathering and providing information anonymously.

Marketing: Marketing cookies are used to track visitors across websites. The intention is to display relevant and engaging ads for the individual user, and therefore, more valuable for publishers and third-party advertisers.

Unclassified: Unclassified cookies are cookies that we are still in the process of classifying, along with individual cookie providers.


How can I change my cookie settings?

If you do not agree with the cookie settings, you can proceed to modify them by configuring the cookies in your browser. You can also allow, block, or delete cookies installed on your device by adjusting the settings of the browser installed on your computer. Please carefully read your browser’s help section to learn more about how to activate 'private mode' or unblock certain cookies:

a) If you use Microsoft Internet Explorer, in the Tools menu option > Internet Options > Privacy > Settings. To learn more, visit https://windows.microsoft.com/eses/windowsvista/blockorallowcookies

b) If you use Firefox, in the Tools menu option > Options > Privacy > Cookies. To learn more, visit https://support.mozilla.org/es/products/firefox/privacyandsecurity

c) If you use Chrome, in the Options section > Advanced settings > Privacy. To learn more https://support.google.com/chrome/bin/answer.py?hl=es&answer=95647

d) If you use Opera, in the Security and Privacy option, you can configure the browser. To learn more, visit https://www.opera.com/help/tutorials/security/cookies/

For more information, you can visit the website of the Spanish Data Protection Agency: https://www.agpd.es/portalwebAGPD/canaldocumentacion/publicaciones/common/Guias/Guia_Cookies.pdf

ISAK is not responsible for the content and accuracy of the privacy policies of third parties included in this cookie policy. If you have any questions about this cookie policy, you can contact us at info@isak.global.

Updates and changes to the Cookie Policy

The website owner accepts no responsibility for legal or technical issues caused by the USER's failure to comply with the recommendations included, nor is it responsible for the content and accuracy of third-party privacy policies.

This Cookie Policy may be modified in accordance with legislative or regulatory requirements, or in order to adapt the policy to the guidelines issued by the Spanish Data Protection Agency. Therefore, users are advised to visit it periodically.

VIII.-ACTIVITY LOG

You can find the form to exercise rights just below.

FORM FOR THE EXERCISE OF RIGHTS

 

In…………………., on the…. day of ………… 20…

 

DATA CONTROLLER DETAILS

The International Society for the Advancement of Kinanthropometry (ISAK) 

CIF G75578401

Avda. Jerónimos, S/N. Cátedra Cineantropometría UCAM, Guadalupe De Maciascoque. 30107 Murcia - (Murcia)

 info@isak.global


APPLICANT'S DETAILS (1)

D./D. ª                                                                       ID.                                  

Address:                                                                             nº                          

City:                             CP                            County                          

Tlf.:                                    Email:                                              

LEGAL REPRESENTATIVE'S DETAILS (if applicable)

D./D. ª                                                                       ID.                                  

Dirección:                                                                             nº                          

City:                             CP                            County:                          

Tlf.:                                       Email:                                              

NOTIFICATION DETAILS:

Please specify how you would like us to respond to your request:

 By electronic means (email).

 Postal mail (to the address provided in the contact details).

By means of this document, and in accordance with the current legislation, you express your wish to EXERCISE YOUR RIGHT (please indicate the right you wish to exercise, overleaf or below this form you will find a brief description of the rights)

ADITIONAL INFORMATION (In this space, you may write any information you wish regarding the exercise of your right).





ACCOMPANYING DOCUMENTATION

 

Signed by Applicant:                                                  Signed by Representative

 

 

(1)   In the case of minors under 14 years of age, it must be signed by the person holding their legal representation (such as the father or mother)


EXPLICATION OF RIGHTS:

RIGHT OF ACCESS: By exercising this right, it is requested that access to the Personal Data Processing be provided free of charge within a maximum period of one month from the receipt of this request, and that all the information related to Article 15 of the GDPR be sent to the email address above, in a legible and intelligible manner, within the indicated time frame.

RIGHT TO RECTIFICATION: By exercising this right, it is requested that the right to rectification be provided free of charge, in accordance with the provisions of Article 16 of the GDPR. It will be necessary to provide the corresponding supporting documents.

RIGHT TO ERASURE: By exercising this right, it is requested that the right to erasure, or the right to be forgotten, be provided free of charge, in accordance with the provisions of Article 17 of the GDPR. It will be necessary to provide the corresponding supporting documents.

RIGHT TO RESTRICTION OF PROCESSING: By exercising this right, it is requested that the right to restriction of processing, as indicated, be provided free of charge, in accordance with the provisions of Articles 18 and 19 of the GDPR. It will be necessary to provide the corresponding supporting documents.

RIGHT TO DATA PORTABILITY: By exercising this right, it is requested that the indicated restriction of processing be provided free of charge, in accordance with the provisions of Article 20 of the GDPR.

RIGHT TO OBJECT: By exercising this right, it is requested that the indicated restriction of processing be provided free of charge, in accordance with the provisions of Articles 21 and 22 of the GDPR. It will be necessary to provide the corresponding supporting documents.

By exercising any of these rights, it is requested that, in the event it is decided within one month that the exercised right cannot be fully or partially fulfilled, a reasoned response be provided in order to, if applicable, request the oversight of the Spanish Data Protection Agency, under the provisions of Article 57 of the GDPR. 


IX. TERMS AND CONDITIONS OF CONTRACT

This document sets out the general terms and conditions governing the payment for accreditation and membership to the Society via the website portal. By accessing and using the services offered, the user expressly agrees to these terms, so it is recommended to read them carefully before proceeding with any invoice payment. The payment process is carried out electronically through the website via a virtual POS terminal or bank transfer. If the payment is made through the virtual POS platform, it guarantees the confidentiality of data and transactions. Once the payment has been received, an email will be sent confirming the payment. After the purchase is confirmed, no refunds will be accepted. The user agrees to provide truthful and up-to-date information at all times for invoice generation, and is responsible for any errors resulting from incorrect data. Invoices include applicable taxes and are stated in euros. Access to the documentation provided on the ISAK platform is personal and non-transferable. Reproduction, distribution, or commercialisation of content without the express permission of ISAK is prohibited. In the event of non-compliance, appropriate legal action will be taken. For any inquiries or complaints, the user may contact info@isak.global o through the contact methods provided on the website.