Privacy Policy

1. Introduction

Mental Growth Network («MGN», «we», «our», «us») is a non-profit association registered in Catalonia, Spain, operating with a European scope.

We are committed to protecting your personal data and respecting your privacy in accordance with:

• Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR)
• Spanish Organic Law 3/2018 on Data Protection

This Privacy Policy explains how we collect, use, and safeguard personal data when you interact with our website and activities.

2. Data Controller

• Legal Name: Associació Mental Growth Network
• Registered Address: Carrer de Floridablanca 68, 08015 Barcelona, Spain
• Email: info@mentalgrowth.eu

MGN acts as the data controller for personal data processed through this website.

3. Data We May Collect

We may collect:

• Name and surname
• Email address
• Professional affiliation
• CV or professional profile (volunteer / expert applications)
• Event registration details
• Donation-related information (processed via secure third-party providers)
• Technical browsing data (IP address, device, browser type)

We do not knowingly collect sensitive health data through this website.

4. Purpose of Processing

We process personal data for the following purposes:

• Responding to contact inquiries
• Managing volunteer and expert applications
• Registering participants for events or activities
• Sending newsletters (with explicit consent)
• Managing institutional partnerships
• Fulfilling legal obligations
• Ensuring website security and performance

5. Legal Basis

Processing is based on:

• Consent (Article 6(1)(a) GDPR)
• Legitimate interest (Article 6(1)(f) GDPR)
• Legal obligation (Article 6(1)(c) GDPR)

You may withdraw consent at any time without affecting prior lawful processing.

6. Data Retention

We retain personal data only for as long as necessary to:

• Fulfil the purpose for which it was collected
• Comply with legal requirements
• Resolve disputes or enforce agreements

Data may be archived where required by law.

7. Data Sharing

We do not sell personal data.

Data may be shared with:

• Secure IT and hosting providers
• Newsletter platforms (if subscribed)
• Donation processing platforms
• Public authorities when legally required

All processors operate under GDPR-compliant agreements.

8. International Transfers

Where third-party services are located outside the EU, transfers are safeguarded under:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission

9. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure («right to be forgotten»)
• Restrict processing
• Object to processing
• Data portability
• Lodge a complaint with the Spanish Data Protection Authority (AEPD)

Requests can be sent to: info@mentalgrowth.eu

10. Security

We implement technical and organisational measures to ensure appropriate security of personal data.