Privacy policy

Last updated: 30 July 2026

This is a courtesy translation. In the event of any discrepancy between versions, the Spanish text prevails, as it is the only one reviewed by a lawyer. View the Spanish version

Anyone browsing the website greencanaleseticos.com (hereinafter, “the website”) shall be considered a user. Merely browsing the website implies acceptance of this Privacy Policy and of the Terms of Use of the website. Users must therefore read those legal texts carefully before continuing to browse and, if they do not agree with them, stop browsing.

The controller reserves the right to amend this Privacy Policy and the Terms of Use at any time in order to bring them into line with the legislation in force, and users are therefore advised to review these texts periodically.

What this website is and what it is not

This website is solely the informational gateway to the service: it explains what a whistleblowing channel is and how to reach the one belonging to each organisation. No reports are submitted on this website.

Each organisation's whistleblowing channel lives at its own web address and runs on GlobaLeaks. Before the form, that channel displays its own privacy information, which the whistleblower must accept, and in that processing the controller is the organisation that owns the channel, not the owner of this website. This privacy policy therefore does not cover reports or their content.

What personal data is collected on this website

This website has no forms, no user registration, no subscriptions and no analytics or advertising tools, and it does not use cookies. Consequently, no identifying data is collected from those who visit it.

The only data handled is:

• The technical logs the server generates when serving each page (IP address, date and time, page requested and browser type), which are essential in order to keep the service running and to detect attacks.
• The preferences the user chooses on the page —the language and the light or dark theme— stored in their browser (local storage). They are not sent to any server and the user can delete them from their browser at any time.

The technical and organisational measures necessary to maintain the security of that data have been adopted, in order to prevent its alteration, loss, or unauthorised processing or access.

For what purpose and on what legal basis

The server's technical logs are processed for the purpose of ensuring the security, availability and proper functioning of the website. The legal basis is the legitimate interest of the controller (Article 6(1)(f) of Regulation (EU) 2016/679), which in a service of this nature includes protection against improper access.

No automated decisions are taken and no profiling is carried out using browsing data.

How long the data is kept

The technical logs are kept for the time strictly necessary for the purposes indicated. Once their use is no longer necessary, they will remain blocked and at the disposal of the competent authorities for the purpose of addressing any legal liabilities; once that period has elapsed, they will be deleted.

To which recipients the data is disclosed

The data is not disclosed to third parties, other than disclosures that are mandatory in order to comply with legal obligations.

The provider hosting the servers acts as a processor, under the contract required by Article 28 of Regulation (EU) 2016/679. The servers are located in the European Union and no transfer of personal data to third countries or to international organisations is envisaged.

What your rights are

As a general rule, any data subject may exercise their rights of:

• Access, in order for the controller to confirm whether it is processing their personal data.
• Rectification of inaccurate personal data.
• Erasure of their data in certain circumstances, for example when it is no longer necessary for the purposes for which it was collected.
• Restriction of processing in certain cases, for example when the data subject contests the accuracy of their data.
• Portability of the data where the processing is based on consent or on a contract and is carried out by automated means.
• Objection to the processing on grounds relating to their particular situation.
• Withdrawal of the consent given, where the processing is based on it.

The exercise of these rights is strictly personal. Data subjects may exercise them by email to ps@greenaudit.net or at the address indicated at the top of this page, by means of a signed communication enclosing a copy of their identity document.

Data subjects may also lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos, if they consider that the controller has not properly dealt with their rights.

If your request concerns a report

If what you wish to do is exercise your rights in relation to a report that has already been submitted, or request information about it, you must not do so by this route: the controller for that processing is the organisation that owns the channel, and requests are dealt with through the channel itself, which is the only confidential means. Writing to this website's contact address to discuss a specific report may compromise the confidentiality of the person who submitted it.