.cat 20 anys

Privacy policy

This is the privacy policy of Accent Obert. Your privacy is very important to us and, through this policy, we want to clarify which personal data we process about you, why, for how long we process it and how you can exercise your rights to manage it.
We invite you to read this privacy policy carefully in order to gain a good understanding of how we protect your personal data.

Accent Obert

Accent Obert is a non-profit entity registered with the Directorate General for Law and Legal Entities of the Generalitat de Catalunya with the following details:

Name: Accent Obert
Address: Plaça Nova, 5, 7a planta
08002 Barcelona
Identity number: G-63719025
email address (privacy matters): dpd@domini.cat

Does this privacy policy affect you?

This privacy policy affects you if you have come into contact with us, among others, in the following cases: if you have registered a .cat domain; because you are a contact associated with a .cat domain name; as an employee of an entity with which we have a contractual relationship; as a subscriber to our newsletter; as a visitor to our websites; as a participant in one of our training activities; or through any other channel by which you have contacted us (by email, telephone, events, etc.).
Your personal data may be collected through the following methods: through the domain name registration processes; through our network of accredited registrars; by email; by telephone; by fax; through your enrolment to take part in any of our training activities; by attendance at an event; through cookies or other technologies to track visitors to our websites; through communication from suppliers or partners; through a form on our websites; or by any other means that we may use to carry out our activities.

Which of your personal data do we process?

Personal data is any information relating to an identified or identifiable natural person (i) that you provide to us voluntarily (e.g. through the forms on our website), (ii) that your registrar has provided to us for the registration of your domain name, (iii) that we collect from your attendance at our events or visits to our website(s).

In the context of our commercial and training activities and in order to provide you with a good service and improve our services wherever possible, and depending on the information we need in order to be able to carry out the service for which you have come into contact with us, we may process the following personal data: your name, your email address, the organisation you work for, your job title, your home address, your language preference, your gender, your age, your unique identification alias in our system, your domain name, financial data, data relating to your bank account or credit card information, judicial data relating to domain names, your IP address, images and video files.

In order to carry out some of the training activities we may have to process your ID document (DNI) and your employment status. We will only request this data in cases where it is essential for two reasons: to check the suitability of candidates to take the course and to certify participation.

In the case of domain holders and associated contacts, since it is not possible to register a domain name directly with us, we collect your personal data through the company with which you have registered your domain. This company may be one of our accredited registrars or one of their resellers who collect your personal data on our behalf.

For what purpose do we process your personal data?

We process your personal data for different purposes:

  • In order to be able to offer the best possible services for your domain, we have to collect personal data in relation to your domain name. This also allows us to identify you and contact you directly in relation to the registration of your domain name, should this be necessary.
  • We use your personal data to maintain and build long-term relationships and to perform any contract we may have. We use your personal data to respond to your enquiries, to fulfil your requests and/or to send you administrative information.
  • Your personal data may be used to comply with applicable regulations. It may also be used to respond to requests or claims from public and governmental authorities, including public and governmental authorities outside your country of residence, or to protect our rights, privacy, safety or property and/or those of our entities.
  • We may use your personal data to send you promotional messages, marketing, information about the .cat community and other information that may be of interest to you.

Principles observed in the collection and processing of personal data

Accent Obert shall comply with the following principles governing the processing of personal data, which shall:

  • only be processed in a lawful, fair and transparent manner in relation to registered name holders and other data (“lawfulness, fairness and transparency”);
  • only be obtained for specified, explicit and legitimate purposes, and shall not be processed in any manner incompatible with that purpose (“purpose limitation”);
  • be adequate, relevant and not excessive in relation to the purposes for which they are processed (“data minimisation”);
  • be accurate and, where necessary, kept up to date, as appropriate to the purposes for which they are processed (“accuracy”);
  • not be kept in a form that permits the identification of the registered name holder and other data subjects for longer than is necessary for the permitted purposes (“storage limitation”); and
  • be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (“integrity and confidentiality”).

Who has access to your personal data?

Your personal data will only be accessible to the qualified staff of Accent Obert who need to process it, and, in cases essential for the provision of the service that connects you with us, to the staff of the entities that collaborate with Accent Obert in the provision of that service.

On what legal basis do we process your personal data?

We may process your personal data on the basis of different legal grounds:

  • The processing may be necessary to comply with our legal obligations as a registry or as a data controller.
  • The processing may be necessary for the performance of the service that you have contracted with us.
  • The processing is necessary for the protection of our legitimate interests and in particular: economic, commercial and financial interests, business continuity, the security and confidentiality of customers’ information and products, and the security of the digital and physical infrastructure.
  • The processing may be based on the consent you have provided in relation to the activities of Accent Obert.

With whom do we share your personal data?

We never sell your personal data to anyone. To the extent permitted by applicable law, and, among others, the fulfilment of the domain name registration agreement, your personal data may be disclosed to the following parties:

  • Technical support and storage providers: In order to ensure the registry operator activities that enable the registration of your domain name, we have to store and back up all registration data, including your personal data.
  • Third parties: Your personal data may be disclosed to third parties including governmental authorities for legitimate reasons.
  • ICANN: The Internet Corporation for Assigned Names and Numbers may be provided with your data in relation to your .cat domain name registration, as required under our Registry Agreement with ICANN.
  • Auditors: To ensure that our business operations are correctly assessed, auditors may have access to your personal data.

When we share your personal data, we endeavour to instruct the recipients, wherever possible, to process your personal data in accordance with our instructions.

What are your rights in relation to your personal data?

Unless your request is deemed excessive or unfounded, you may exercise the following rights in relation to your personal data:

  • You have the right to request information about your personal data.
  • You have the right to request a copy of all your data in a standard format.
  • You have the right to modify or correct your personal data if it is incorrect.
  • You have the right to request the restriction of certain processing activities in certain circumstances.
  • You have the right to object to certain processing activities.
  • You have the right to withdraw your consent.
  • You have the right to have your personal data erased in certain circumstances.
  • You can exercise any of your rights by completing and submitting our online form.

The exercise of some of these rights in relation to the registration of domain names may need to be carried out through the registrar of the domain name registration in question.

In addition, you have the right to lodge a complaint with the local supervisory authority when you consider that the processing of your personal data does not comply with applicable legislation.

Where and for how long do we keep your personal data?

Your personal data is stored both electronically and manually, internally and by third parties. We store your personal data in a form that permits identification for no longer than is necessary for the purposes for which your personal data is processed. This retention period varies according to the type of personal data processed, the purpose of the processing and other factors.

As the holder of a domain name, we keep the personal data for one (1) year after the domain name is deleted.

The personal data of individuals that we collect outside the scope of a contract in the context of our business activities is kept for up to one (1) year after it becomes irrelevant.

What security measures are taken to safeguard your personal data?

We are continuously implementing and updating our security measures to help protect your personal data and other data against unauthorised access, loss, destruction or alteration. We do everything possible to ensure that all information is stored securely and we ask our service providers to apply appropriate security measures.

Cookies and other tracking technologies

When you visit our websites, we may store certain information on your devices in the form of a cookie. We invite you to read our cookie policy carefully in order to gain a good understanding of how we request or use cookies.

Registration data for .cat domains

This Section informs you of the processing of your Registration Data in accordance with ICANN policies and the European Union’s General Data Protection Regulation (GDPR), as well as any other applicable regulations.

a. Controller

ICANN, the Registry, your Registrar and, where applicable, your reseller, are the joint Controllers (or Processors where applicable) of the processing of your Registration Data, as described in this Section. The main reasons for the processing include, among others, maintaining the operation of your Domain Name, Domain Name transfers, as well as the requirements of the Whois tool.

ICANN’s role, a non-profit entity based in California, United States, is to establish the policies affecting the processing and publication of your Data, as well as to regulate and ensure that the Domain Name system is secure and stable.

Here you can find more information about ICANN

ICANN contractually requires both Us and your Registrar to process your Personal Data and to apply the policies governing this, which are, in part, policies established by the ICANN community. ICANN also requires all contractually involved parties to provide regular information on compliance with these policies.

The role of the Registrar, or, where applicable, the reseller, is to offer Domain Name Holders the registration of names, as well as other related services. In accordance with the requirements established by ICANN, the Registration Data must be processed by the Registrar and subsequently transferred to the Registry.

The role of the Registry is to maintain the central repository of all .cat Domain Name registrations and to enable the resolution of these names in the Domain Name System (DNS). The Registry does not offer the registration of Domain Names directly.

You can contact us here:

Accent Obert
Plaça Nova, 5, 7a planta
08002 Barcelona (Catalonia)
Telephone: +34 936 750 354
Email: dpd@domini.cat

b. The data we process. Registration Data

As a community domain, we have specific provisions for your Registration Data. The Registration Data is the set of data contained in this Section, including the data of all contacts, as well as the intended use.

Registrars collect the following data to then transfer it to the Registry:

  • Domain Name
  • Name Servers
  • Holder’s Name
  • Organisation
  • Street
  • City
  • Postal Code
  • Province
  • State
  • Telephone
  • Telephone extension
  • Fax
  • Fax extension

The same elements that are collected from the Domain Holder are also collected from the Administrative and Technical contacts. Also from the Billing contact, although this last one is optional.

Intended use: In addition, you must provide the intended use for your Domain Name.

c. Legal basis for the collection

The legal basis for the collection of your Data is Art. 6.1.b) of the GDPR. For the Domain Holder and the intended use it is on the basis of the performance of the Domain Name Registration Policies in accordance with the specific eligibility requirements and for post-registration validation; for the Administrative contact it is in order to enable the management of the Domain Name, such as transfers, and for reasons of monitoring compliance with the regulations; for the Technical contact it is to enable contact for technical reasons.

When third-party data is collected, e.g. when the Holder, and the Administrative and/or Technical contacts are different from the person or persons who provide the Registrar with the data, the Registrar is responsible for informing those third parties regarding the elements of this Registration Policy, including its privacy provisions.

ICANN, the Registry, the Registrar, and, where applicable, the reseller, are the data Controllers.

d. Transfer of data to the Registry

We also require the Registrar to transfer the Data from the previous section. The legal basis for this is Article 6.1.f) of the GDPR since we have a legitimate interest in identifying and investigating patterns of conduct that may breach the regulations, providing information in relation to disputes over domain ownership, and in operating a central repository of holders’ data.

For this processing activity, ICANN and the Registry are the data controllers, and the Registrar is the processor.

e. Processing of data by third parties

We use the services of CORE Association (an entity based in Switzerland) as a provider of technical back-end services for the domain Registry, which is the processor of the processing of your Data.

The Registry is also the processor of the processing of your Data in order to transmit it to an Escrow Agent as required by ICANN (the data controller) and the data may be transferred to an Emergency Back-End Registry Operator (EBERO) designated by ICANN in the event of the suspension of the Registry’s activities.

f. Publication of the data

The Registry will not publish your Data on the whois or make it public except in the following cases:

The transfer of your data will only take place if there is a sufficient legal basis for this transfer, which will be assessed on a case-by-case basis. The legal basis may be Article 6.1.b) (in the case of UDRP or URS), Article 6.1.c) (in the case of requests from competent public authorities) or Article 6.1.f) (legal basis in the legitimate interest of a third party).
Until ICANN adopts an accreditation model to process requests, they will all be handled individually by the Registry.

g. Data retention period

The Registration Data will be erased from the moment the reason for its processing has ceased to have effect. The data processed by the Registry will be erased once the retention periods imposed by law expire. The Registry will comply with Articles 17 and 18 of the GDPR.

ICANN may impose some of these retention periods. The Registration Data may have to be kept for a period of one (1) year after the domain has been deleted.

h. Correction of your Data

You undertake to correct and update your Data immediately during the registration period of your Domain Name if at any time it ceases to be correct.

Rights

You may exercise the following rights:

  • Right of access of the data subject. Art. 15 GDPR;
  • Right to rectification. Art. 16 GDPR. Modifications may be requested from your Registrar, or, where applicable, from your reseller, since the Registry cannot carry out this rectification itself;
  • Right to erasure. Art. 17 GDPR. The erasure of the data may lead to the cancellation of your Domain;
  • Right to restriction of processing. Art. 18 GDPR;
  • Right to data portability. Art. 20 GDPR;
  • Right to object. Art. 21 GDPR.

You have the right to initiate a complaint process before the Data Protection Authority regarding the processing that we may carry out of your Data.

Processing of your Data

We will only process your Data in accordance with the applicable data protection regulations and we will adopt all technical and organisational measures to protect your Data from possible loss, misuse, unauthorised access, modification or publication and from its erasure. We will likewise adopt any security measure that is legally required.

Contact us

If you have any questions about this privacy policy or if you wish to exercise any of your rights mentioned above, please contact us at dpd@domini.cat.