Privacy and data protection policy
Privacy and data protection policy
Data controller: RightNOW. Data protection contact: contact@right-now.es.
Purpose of processing: to collect participations in this collective petition, verify ownership of the email address, record consents and special representation authorizations, prepare the participant annex and filing package for the competent authority, and protect the integrity of the process and prevent abuse.
Legal basis: your consent and your express mandate of representation for this specific petition. The processing is structured, among other references, in light of Article 6.1(a), Articles 12, 13 and 15–22 GDPR and Articles 6 and 11 of Spanish Organic Law 3/2018.
Data processed: full name, email address, nationality, identity document data, chosen language, consent flags, timestamps, technical security logs, and evidence of verification and acceptance of the authorization.
Recipients: only authorized RightNOW administrators, technical processors within the RightNOW infrastructure, and the authority receiving this petition to the extent necessary for filing and handling it. Signer data is never made public.
Retention period: personal data is kept only for the preparation, filing, and follow-up of this petition and will be deleted or anonymized immediately after a response to this petition is received or on 30.06.2026, whichever occurs first. After that, only anonymized statistics and minimal technical logs may be retained where strictly necessary for security, evidence integrity, and compliance with mandatory legal obligations.
Your rights: you may request access, rectification, erasure, restriction of processing, portability where applicable, and you may withdraw your consent at any time. You may also withdraw your support, request deletion of your data, and terminate representation for this petition at any moment going forward. Withdrawal does not affect the lawfulness of processing carried out before it.
How to exercise them: write to contact@right-now.es specifying the campaign and the email used when joining. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe your rights have been infringed. General guidance on data subject rights: AEPD — data protection rights.
Legal references: GDPR / Regulation (EU) 2016/679; Spanish Organic Law 3/2018.
Separate notice: the petition text and aggregate supporter counter are public, but participants’ personal data, documents, email addresses, IPs, and individual records remain private.