Privacy Policy

Last updated: 2 September 2026

1. Data Controller

For the purposes of Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), the controller responsible for the processing of any data that may be collected through this website is:

Controller: Action Group For Organised Local Response and, on its behalf, Asamblea de Cooperación por la Paz.

Legal status and registration details: Action Group for Organised Local Response is an international consortium without its own legal personality, currently composed of the Spanish NGO Asamblea de Cooperación por la Paz and the Palestinian NGOs PHG, PARC and PSCCW, all duly registered in their respective national registers. ACPP is a non-profit association registered in the Spanish National Register of Associations, Group 1, Section 1, National Registration Number 99159.

Tax Identification Number (NIF/CIF): G80176845

Address: Calle Campomanes, 8, 2ºD, 28013 Madrid, Spain

Website: palestineactiongroup.org

Contact email addresses:
middleeast@acppasamblea.org
orientemedio@acppasamblea.org
protecciondedatos@acppasamblea.org
socios@acppasamblea.org

Data Protection Officer (DPO):
protecciondedatos@acppasamblea.org

2. Purpose and General Information

The purpose of this Privacy Policy is to inform users of the website palestineactiongroup.org, in a transparent manner and in accordance with the principle of transparency (Article 5(1)(a) GDPR), about any processing of personal data that may take place through this website.

This website has been designed in accordance with the principle of data minimisation (Article 5(1)(c) GDPR), meaning that the processing of personal data is reduced to the minimum strictly necessary. Users are encouraged to read this policy carefully before using the website.

3. Personal Data Processed

As a general rule, this website does not actively request, collect or process users’ personal data. In particular, the website:

 

    • Does not provide a contact form.
    • Does not offer user registration or a private user area.
    • Does not manage newsletter subscriptions.
    • Does not collect identification data, contact details or user profiles.
    • Does not disclose or transfer personal data to third parties for commercial purposes.

The website uses Google Analytics to obtain aggregated statistical information about how users interact with the website. Google Analytics may process technical and browsing information, such as device and browser information, approximate location and interaction data. Analytics cookies and related technologies will only be activated in accordance with the user’s consent preferences.

Users are informed that personal data may be processed in connection with: (i) technical browsing data necessary for the operation and security of the website (section 4); (ii) data voluntarily provided by users when communicating by email (section 5); and (iii) website usage and analytics data, subject to the user’s consent where required.

4. Browsing and Technical Data

Simple browsing of this website does not involve the deliberate collection of personal data by the controller.

However, certain technical data may be automatically recorded by the systems that enable the operation of the Internet and the hosting service, such as IP address, date and time of access, browser used, or technical incidents. Some of this information—particularly the IP address—may constitute personal data.

These records are managed by the website hosting provider, which acts as a data processor pursuant to Article 28 GDPR, and are used exclusively to ensure the security, stability and proper functioning of the service.

The legal basis for this processing is the controller’s legitimate interest (Article 6(1)(f) GDPR) in maintaining the security and availability of the website.

5. Email Communications

If a user contacts the controller through any of the email addresses provided in this policy, the controller will process the data voluntarily supplied (such as name, email address and the content of the message) solely for the purpose of handling and responding to the enquiry or request.

The legal basis for this processing is the data subject’s consent when voluntarily contacting the controller (Article 6(1)(a) GDPR), as well as the legitimate interest in managing and responding to communications received (Article 6(1)(f) GDPR).

Such data will be retained for the time necessary to manage the enquiry and, where applicable, for the legally required retention periods, after which it will be deleted.

6. Purposes, Legal Basis and Retention Periods

By way of summary, the processing activities that may occur through this website are as follows:

Processing Activity

Purpose

Legal Basis (GDPR)

Retention Period

Technical browsing data (IP address, date/time, browser, incidents)

To ensure the security, stability and operation of the website

Legitimate interest (Art. 6(1)(f))

The period established by the hosting provider, limited to security and maintenance purposes

Contact data provided by email (name, email address and message)

To handle and respond to enquiries or requests

Consent (Art. 6(1)(a)) and legitimate interest in responding (Art. 6(1)(f))

The time necessary to manage the enquiry and any applicable legal retention periods

Website analytics data

 

To obtain statistics about website use and improve its content, performance and user experience

 

Consent (Art. 6(1)(a) GDPR), where required

 

According to the retention settings configured in Google Analytics

 

7. Recipients, Data Processors and International Transfers

Data are not disclosed or transferred to third parties except where required by law or by a competent authority.

For website hosting purposes, the controller engages a service provider acting as a data processor, with whom a data processing agreement has been (or will be) entered into in accordance with Article 28 GDPR:

Nextpyme Servicios Informáticos
C/ Cromo 51, 41007 Seville, Spain

If any provider (hosting, email or other services) is located outside the European Economic Area, any international data transfers will be subject to one of the safeguards provided for in Chapter V GDPR (Articles 44 et seq.), such as a European Commission adequacy decision or the execution of Standard Contractual Clauses.

8. Cookies

This website may use strictly necessary technical cookies required for its proper operation, as well as analytics cookies associated with Google Analytics.

Analytics technologies are used to obtain statistical information about how visitors use the website, helping us understand website performance and improve its content and user experience.

Where consent is legally required, analytics cookies and related technologies will only be activated in accordance with the user’s consent preferences. Users can accept or reject non-essential cookies and modify their preferences at any time through the cookie management system available on the website.

Further information about the cookies and technologies used, their purposes, providers and retention periods is available in the Cookie Policy.

9. Links to Third-Party Websites

This website may contain links to external websites. The controller does not control and is not responsible for the privacy practices or content of such websites. Users are therefore encouraged to consult their respective privacy policies.

9.1 Social Media

This website includes links to the controller’s profiles on third-party social media platforms, including Facebook and LinkedIn. These are simple links and do not involve the integration of plugins that enable tracking of browsing activity.

By clicking on such links, users will leave the palestineactiongroup.org website and interact directly with the relevant platform.

Any processing of personal data carried out by such platforms will be governed by their own privacy policies and terms of use, over which the controller has no control. Users are advised to consult those policies before interacting with such platforms or providing any personal information.

10. Information Security

The controller, and where applicable its data processors, adopt appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 GDPR, in order to protect information against unauthorised access, alteration, loss or destruction.

11. Minors

This website is not specifically directed at minors and does not knowingly collect their data.

Pursuant to Article 7 of the LOPDGDD, a minor’s consent to the processing of their personal data is only valid from the age of 14. Below that age, the consent of the holders of parental responsibility or guardianship is required.

Should any processing of a minor’s data be detected without the necessary authorisation, such data will be deleted.

12. Data Subject Rights

Data subjects may exercise the following rights recognised under Articles 15 to 22 GDPR in relation to any personal data that may be processed:

 

    • Right of access to personal data.
    • Right to rectification of inaccurate data.
    • Right to erasure (“right to be forgotten”).
    • Right to object to processing.
    • Right to restriction of processing.
    • Right to data portability.
    • Right to withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise these rights, data subjects may contact the controller via the email address indicated in section 1, providing adequate identification and specifying the right they wish to exercise.

Since, as a general rule, this website does not maintain databases of users, it is possible that the controller may not hold any data in relation to which such rights may be exercised, except in relation to communications received by email.

Data subjects also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD – www.aepd.es) if they consider that their rights have not been properly respected.

13. Amendments to the Privacy Policy

The controller reserves the right to amend this Privacy Policy in order to adapt it to legal, technical or functional changes affecting the website.

Any amendments will be published on this page, indicating the date of the latest update in the heading.

 

 

 

LEGAL NOTICE

Last updated: 2 September 2026

1. Identification Details of the Website Owner

In compliance with the information obligation established in Article 10 of Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE), the following details of the website owner are provided:

Owner: Action Group For Organised Local Response and, on its behalf, Asamblea de Cooperación por la Paz

Legal form: Non-Profit Association

Tax Identification Number (NIF/CIF): G80176845

Address: Calle Campomanes, 8, 2ºD, 28013, Madrid, Spain

Contact email addresses:
middleeast@acppasamblea.org
orientemedio@acppasamblea.org
protecciondedatos@acppasamblea.org / socios@acppasamblea.org

Telephone: –

Registration details: Registered in the Spanish National Register of Associations, Group 1, Section 1, National Registration Number 99159

Website: palestineactiongroup.org

Authorisations or regulated profession: –

2. Purpose

This Legal Notice governs access to, browsing of and use of the website palestineactiongroup.org (hereinafter, the “Website”), without prejudice to the fact that the owner may establish specific conditions for particular services or content.

Use of the Website confers the status of user and implies full acceptance of all the clauses contained in this Legal Notice in the version published at the time of access.

3. Conditions of Access and Use

Access to the Website is free of charge and, in general, does not require prior subscription or registration.

Users undertake to make diligent, proper and lawful use of the Website and its contents, in accordance with applicable legislation, morality, public order and this Legal Notice, and shall refrain from: 

    1. Using the Website for unlawful purposes or effects, in a manner harmful to the rights and interests of third parties, or that may damage, disable, deteriorate or impair the normal use of the Website.
    2. Introducing or disseminating computer viruses or any other systems capable of causing damage to the systems of the owner or third parties.
    3. Attempting to access, use or manipulate the data of the owner, third-party providers or other users.
    4. Reproducing, copying, distributing, transforming or modifying the contents without the authorisation of the owner or without legal entitlement to do so.

4. Intellectual and Industrial Property

All contents of the Website (including, but not limited to, texts, photographs, graphics, images, icons, logos, trademarks, design elements and source code) are owned by the Website owner or by third parties who have authorised their use, and are protected by intellectual and industrial property legislation.

Any reproduction, distribution, public communication, transformation or any other form of exploitation is prohibited without the express authorisation of the owner, except in cases expressly permitted by law.

5. Liability and Disclaimer of Liability

The owner endeavours to ensure that the information on the Website is accurate and kept up to date, but does not guarantee the absence of errors or the uninterrupted availability of the Website.

To the extent permitted by law, the owner shall not be liable for:

    1. Damages arising from interruptions, viruses, technical failures or the unavailability of the Website beyond its control.
    2. The use made by users of the contents of the Website.
    3. The contents and information hosted on third-party websites accessible through links.

6. Links (Hyperlinks)

The Website may contain links to third-party websites.

The owner assumes no responsibility whatsoever for the contents, products, services or privacy practices of such websites, and their inclusion does not imply any relationship, recommendation or supervision.

Users are advised to review the legal notices and policies of linked websites.

The inclusion of links to the Website from third-party websites does not authorise any suggestion of association with the owner, nor the use of its distinctive signs without prior authorisation.

7. Personal Data Protection

The processing of personal data that may, where applicable, be carried out through the Website is governed by the Privacy Policy, which forms an integral part of this Legal Notice and may be consulted at:

Privacy Policy

8. Cookies

The Website uses, where applicable, cookies under the terms described in the Cookie Policy, available at:

Cookie Policy

9. Applicable Law and Jurisdiction

This Legal Notice shall be governed by Spanish law.

For the resolution of any dispute arising from access to or use of the Website, the parties submit to the courts and tribunals having jurisdiction in accordance with the applicable regulations.

Where the user acts as a consumer, the mandatory jurisdictional rules established by consumer protection legislation in their favour shall prevail.

10. Amendments

The owner reserves the right to amend this Legal Notice in order to adapt it to legislative, case-law or technical developments, as well as to changes affecting the Website.

Any amendments shall be published on this same page and shall become applicable from the date of their publication.

 

COOKIE POLICY

Last updated: 2 September 2026

1. What are cookies?

Cookies are small text files that websites place on a user’s device (computer, tablet or mobile phone) while browsing, and which allow, among other things, the storage and retrieval of information about browsing activity.

The term “cookies” also includes other technologies with similar functionality (pixels, web beacons, browser local storage, etc.).

The use of cookies is governed by Article 22.2 of Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE) and, with regard to any personal data that may be processed, by the GDPR and the LOPDGDD.

2. Types of cookies

According to the entity that manages them:

    • First-party cookies: managed by the website owner.
    • Third-party cookies: managed by entities other than the website owner.
    •  

According to their purpose:

    • Technical or necessary cookies: essential for the operation of the website and the provision of the requested service.
    • Preference or personalisation cookies: remember user preferences (language, region, etc.).
    • Analytics or measurement cookies: enable the quantification and analysis of website usage.
    • Advertising or behavioural advertising cookies: manage advertising spaces or behavioural profiles.

According to their duration:

    • Session cookies: deleted when the browser is closed.
    • Persistent cookies: remain on the device for a specified period.

3. Cookies used on this website

This website uses strictly necessary technical cookies required for its proper functioning and may use analytics or measurement cookies associated with Google Analytics.

Google Analytics is used to obtain statistical information about how visitors interact with the website, such as information about visits, pages viewed, interactions, devices and browsers. This information helps us understand website usage and improve its content, performance and user experience.

Analytics cookies and related technologies will only be activated in accordance with the user’s consent preferences, where consent is required.

The website does not use advertising or behavioural advertising cookies for the purpose of creating advertising profiles.

4. Consent

Strictly necessary technical cookies do not require consent.

Where required, analytics or other non-essential cookies will only be activated in accordance with the user’s prior consent preferences.

When accessing the website, users will be provided with a cookie management system that allows them to accept, reject or configure non-essential cookies. Rejecting cookies shall be as easy as accepting them.

Users may withdraw or modify their consent at any time through the cookie management system available on the website.

Continued browsing shall not be considered a valid means of providing consent.

5. How to configure, enable or disable cookies

Users may allow, block or delete cookies installed on their devices by configuring their browser settings.

The usual navigation paths are as follows (which may vary depending on the version):

    • Google Chrome: Settings → Privacy and Security → Cookies and Other Site Data.
    • Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data.
    • Microsoft Edge: Settings → Cookies and Site Permissions.
    • Safari: Settings/Preferences → Privacy → Manage Website Data / Block All Cookies.

For updated instructions, users may consult the help centre of each browser.

6. Cookies and social media links

The website includes links to the owner’s profiles on third-party social media platforms (such as Facebook and LinkedIn).

When accessing these platforms, they may install their own cookies, which are outside the owner’s control and governed by their respective policies.

Users are advised to consult those policies.

7. International transfers

The use of third-party services, such as Google Analytics, may involve the processing of information by providers located outside the European Economic Area or in countries whose data protection framework may differ from that of the European Union.

Where international transfers of personal data take place, they shall be carried out in accordance with Chapter V of the GDPR (Articles 44 et seq.) and subject to the applicable safeguards and transfer mechanisms.

8. Updates to the Cookie Policy

The owner may modify this Cookie Policy in response to legislative developments, technical changes or changes to the services used.

Users are encouraged to review it periodically.

The date of the latest update is indicated in the heading of this policy.