Legal Notice

THE SANTA MARÍA CATHEDRAL FOUNDATION (hereinafter F.C.S.M.K.F), in compliance with current legislation on personal data protection (European Regulation 679/16 and other implementing regulations) as well as the existing regulation on information society and electronic commerce services (Law 34/2002, of 11 July), informs you of the general terms of use that apply to all operations carried out through the website: 

1. Legal information

THE SANTA MARÍA CATHEDRAL FOUNDATION, calle Cuchillería 93, C.P. 01001 Vitoria-Gasteiz (Álava) with Tax Identification Number (CIF): P-0100364I.

Tel: 945 122160


2. Intellectual property

The intellectual property rights of the website, as well as all its contents are owned by F.C.S.M.K.F.

Changes to this site are strictly forbidden. F.C.S.M.K.F does not assume any liability that may arise from unauthorized manipulation or alterations. F.C.S.M.K.F does not grant any license or authorization of use of any kind of its industrial and intellectual property rights or of any other property or right related to the website, services or contents. 

The total or partial reproduction of the contents of this website without citing its origin or without requesting express authorization is strictly prohibited. The unauthorized use of the information contained in this website, as well as the damages caused to the intellectual and industrial property rights of F.C.S.M.K.F, will result in corresponding legal actions and, where appropriate, liabilities deriving from said actions.

3. Terms of use

This website has been created by F.C.S.M.K.F for information purposes for personal and free use. 

a) Legal use 

The user of this website and its services is obliged to use it in accordance with the laws and course of dealing, and refrain from using the website and its services for illegal purposes or effects which may be harmful to the rights and interests of third parties, or that in any way may damage, disable, overload, deteriorate or prevent the normal use or enjoyment of the website and services. Those who fail to comply with said obligation shall be liable, with regard to F.C.S.M.K.F and to third parties, for any damages that may be caused as a result of breach of said obligation.

b) Error guarantee 

F.C.S.M.K.F does not guarantee the absence of errors in accessing the website, or in its content; in the event that official publications are cited or reproduced, said reproduction will be for information purposes only and the valid publication will be the one originally published in the relevant gazette or official source.

c) Availability of the service

F.C.S.M.K.F reserves the right to make modifications and updates to the information contained on its website or its configuration or display, at any time and without prior notice.

F.C.S.M.K.F does not guarantee the availability and continuity of the functioning of the website and its services. Whenever possible, and within reason, interruptions in the functioning of the website and services will be previously notified. 

F.C.S.M.K.F will not be liable for damages of any nature that may result from a lack of availability or continuity of the functioning of the website and services, disappointment in the use that users may attribute to the website and to the services, fallibility of the website and of the services, and in particular, although limited to, failure to access the different web pages or those from which the services are provided.

4. Liability for the use of the information contained

The user is aware and voluntarily accepts that the use of the website, services and contents is, in all cases, under their sole and exclusive responsibility. Both access to the website and the use that may be made of the information contained in it are the exclusive responsibility of the user. F.C.S.M.K.F will not be liable for any consequence, damage or harm that may arise from such access or use of information or from the application of said information to support any opinion or personal or business decision. F.C.S.M.K.F does not assume any liability deriving from the connection or content of third party links on the website.

5. Personal Data Protection

F.C.S.M.K.F. respects the privacy of users and the confidentiality and safeguarding of personal data, in accordance with the provisions set out in the applicable legislation related to data protection, more specifically, Regulation 2016/679 of the European Parliament and of the Council of 27th April 2016, and its implementing provisions, having adopted the necessary technical and organisational measures so as to avoid the loss, improper use, alteration, unauthorised access or theft of the personal data provided, bearing in mind the state of technology, nature of the data and risks to which they are exposed.

Purpose and Legal Grounds for Processing 

Should it be necessary to provide personal data in order to access any of the services offered by F.C.S.M.K.F or for the development of the activity of F.C.S.M.K.F., the processing of this data shall be based on the different legal grounds set out in Article 6.1 of Regulation (EU) 2016/679:




Clients and suppliers

Administrative, accounting and tax management of the client and supplier relationship

Exercising a contract. Fulfilment of a legal obligation

Contractors and sub-contractors

Administrative, operational management and fulfilment of legal obligations in the contractor and sub-contractor relationship

Exercising a contract. Fulfilment of a legal obligation

Human Resource management

Labour relations, recruitment, payroll and social security, occupational risk prevention, training

Exercising a contract. Fulfilment of a legal obligation

Members and sponsors

Administrative management and handling of legal obligations related to members and sponsors of the Foundation

Fulfilment of a legal obligation

POS payments

Card payments

Exercising a contract. Fulfilment of a legal obligation

Handling of hostel reservations and accommodation

Handling of hostel reservations and accommodation

Exercising a contract. Fulfilment of a legal obligation

Handling of cathedral bookings- visits

Management and monitoring of guided visits of the Cathedral

Exercising a contract. Fulfilment of a legal obligation

Handling of the Foundation's activities

Handling and monitoring of bookings for the activities developed by the entity: courses, workshops, conferences and other events.

Exercising a contract. Fulfilment of a legal obligation

Dissemination activities

Internal and external advertising for the Foundation’s activities

Consent of the data subject 

Handling of contacts 

Relations with third-parties

Legitimate Interest

Access control and video- surveillance

Safety of the entity’s facilities

Public interest

Other Recipients 

Personal data shall only be processed in the fulfilment of the relationship that binds the data subject to our entity and shall only be transferred to a third-party in order to fulfil said purpose (including ancillary services to the main activity of F.C.S.M.K.F. provided by suppliers, such as consultancy and IT services, website hosting, etc.), and for the fulfilment of any legal obligations associated with the relationship that binds the data subject to F.C.S.M.K.F.

How long do we keep your data for?

Personal data shall be kept for the duration of the contractual relationship that binds the data subject to F.C.S.M.K.F.

Data processing based on consent shall remain valid until consent is expressly withdrawn or upon termination of contractual or business relations with us. 

Upon withdrawal of consent or termination of contractual or business relations, we shall implement the technical and organisational measures to ensure that your data is only used in order to comply with prevailing legal obligations.

The Entity shall proceed to the destruction of your data in accordance with the time frames established by law and which regulate F.C.S.M.K.F. activity, bearing in mind the periods required for administrative or legal proceedings.

Video surveillance recordings shall be kept for a maximum period of 1 month, unless the competent legal authorities or Security Corps and Forces stipulate otherwise. 

International Transfers of Data 

F.C.S.M.K.F. shall not make any transfers of data to companies that are located or whose servers are located outside the European Economic Space. However, in exceptional circumstances in which such transfers occur, F.C.S.M.K.F. shall adopt the necessary measures to ensure that they are sent to a country or organisation that offers sufficient guarantees or that they are based on legitimate principles set out by law.

Exercising Rights 

The F.C.S.M.K.F. Privacy Policy guarantees data subjects the possibility to exercise their rights:  

Right to access personal data in order to know which data is being processed and the processing operations being carried out;

Right to rectification of any inaccurate personal data;

Right to request data erasure, whenever this is possible;

Right to request the limitation of personal data processing when the accuracy, lawfulness or necessity for data processing is questionable, whereby data shall only be preserved for the exercise or defence of legal claims. 

Right to object to the processing of personal data, when the legal grounds for processing is legitimate interest. F.C.S.M.K.F. shall cease to process the data unless it has a compelling legitimate interest or for the establishment, exercise or defence of legal claims. 

Right to data portability, when the legal grounds for processing is the existence of a contractual relationship or consent.

Right to withdraw the consent granted to F.C.S.M.K.F.

These rights may be exercised: 

- in writing by ordinary post, addressed to F.C.S.M.K.F. Cuchillería 93, 01001 Vitoria-Gasteiz or via e-mail:

- before the data protection officer:

Should you consider that your rights have not been addressed appropriately, claims may also be presented before the Spanish Data Protection Agency (www. 

Should any personal data be provided, on accepting this Legal Notice and Privacy Policy, the data subject consents to it being used under the terms established herein.

6. Applicable law and jurisdiction

The use of this website is governed by Spanish and European Union law. Any dispute that may arise in the interpretation of these conditions will be resolved in the courts of the user’s place of residence.

7. Cookies policy

What are cookies?

A cookie is a small text file that is stored in your browser when you visit almost any website. Its function is to enable the website to remember your visit when you return to browse that page. Cookies usually store information of a technical nature, personal preferences, customized content, usage statistics, links to social media, user accounts logins, etc. The purpose of the cookie is to adapt the content of the website to your profile and needs. Without cookies, the services offered by any website would be significantly impaired.

Cookies used on this website

Necessary cookies:

These are cookies that are mandatory for the website to function and do not collect any personal data or any other data that affects privacy.

Cookies preferences

These cookies aim to remember the preferences and settings chosen by the user to improve their experience on the site. They are intended to adapt the website itself according to the user's individual choices.

Marketing Cookies:

They are specifically designed to collect information about the user's online browsing behavior. They are mainly used by third parties, such as advertising networks or social media platforms.

Below, we detail the link to the privacy policy of our Social Networks and other common social networks:






Analytical cookies:

Google Analytics: Stores cookies to be able to compile statistics on traffic and number of visits to this website. By using this website you are consenting to Google processing information about you. As a result, the exercise of any right in this regard must be directed to Google.

Google agrees not to share them with third parties, except in cases where it is necessary for the functioning of the system or when required by law. If you want more information about Google's use of cookies we attach this link:

Deactivation or deletion of cookies

At any time you can exercise your right to deactivate or delete cookies from this website. These actions are performed differently depending on the browser you are using.

Here is information on how to do it in main browsers:

Delete cookies in Chrome:

Delete cookies in Firefox:

Delete cookies in Internet Explorer:

Delete cookies in Safari:

Delete cookies in Opera:

For more information about the use of "cookies", you can review the documentation published in The guides of the Spanish Data Protection Agency:

The guides of the Spanish Data Protection Agency.

For any questions or queries about this cookies policy, do not hesitate to contact us via the contact section.