Legal notice and privacy policy

PERSONAL DATA PROTECTION

This is the personal data protection policy of Blanes City Council. It refers to the personal data of natural persons with whom the council interacts in the exercise of its competencies and functions. Given the functions of the Tourism Area of Blanes City Council, some of the data processing arrangements are the result of the provision of services to other public authorities that have delegated functions to the council. The processing is carried out in compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and with the corresponding national regulations.

WHO IS RESPONSIBLE FOR THE PROCESSING OF PERSONAL DATA?

The data controller is Blanes City Council (hereinafter the City Council), with Tax ID number P1702600F, address at Passeig de Dintre, 29, Blanes (CP 17300), telephone 972379300, email ajuntament@blanes.cat and website www.blanes.cat.

WHAT ARE OUR PERSONAL DATA PROCESSING CRITERIA?

We fully subscribe to the principles enshrined in General Data Protection Regulation 2016/679.

a) We process the data subject’s data in a lawful manner; that is, only when we have a legal basis for the said processing, which we carry out in a transparent manner.

b) We use the data for the specific, explicit and lawful purposes listed at the time of obtaining it. We will not subsequently process the data in any way that is incompatible with the aforementioned stipulated purposes.

c) We only process data that is proper, relevant and limited to the needs of each case and purpose.

d) We strive to ensure that the data is kept up to date.

e) We retain the data for the necessary period, in compliance with the regulations on the holding of public information.

f) We apply the proper technical or organisational measures to prevent the loss, destruction, accidental damage and unauthorised or unlawful processing of your data.

WHO IS THE DATA PROTECTION DELEGATE?

The Data Protection Delegate (DPD) is the person who supervises compliance with the data protection policy of Blanes City Council, ensuring that personal data is properly processed and that data subjects’ rights are protected. Their functions include dealing with the queries, suggestions, complaints or claims of data subjects. The Data Protection Delegate can be contacted in writing by post at Passeig de Dintre, 29, Blanes (CP 17300) or by email at proteccio.dades@blanes.cat.

WHY DO WE PROCESS YOUR DATA AND WHO IS IT TRANSFERRED TO?

The City Council processes personal data in the exercise of its competencies and functions. The services of the City Council are described on its website and its e-headquarters site. A full description of data processing activities and purposes is provided in the Processing Activities Register.

We handle the queries of persons who use the contact forms on our website. The data is used exclusively for this purpose and is not disclosed to other persons.

Sending of information

With the explicit authorisation of each data subject, we use the contact details they have provided in order to inform them of our initiatives, services or activities. We do so through different channels according to the specific authorisations granted by each data subject. We do not transfer the data to any third parties without the consent of the data subject.

WHAT IS THE LEGAL BASIS FOR THE PROCESSING OF YOUR DATA?

The legal basis of the data processing that we carry out varies according to the nature of each processing activity.

Compliance with legal obligations.

The processing of data in the context of administrative procedures is carried out in accordance with the regulations of each procedure. The data is processed in compliance with legal obligations.

Fulfilment of our public interest mission.

The data processing we carry out as a result of providing our services is justified on the basis of our commitment to public interest. Furthermore, the footage we obtain from video surveillance cameras is processed in order to safeguard public interest.

Fulfilment of the requirements of a contractual or pre-contractual relationship.

We process our suppliers’ data in accordance with public sector contracting regulations, to the extent necessary in order to fulfil the requirements of the contractual relationship. Furthermore, and also within the framework of contractual or pre-contractual relations, we process the data of candidates in selection processes, along with that of staff who join our organisation.

On the basis of consent.

When we send out information about our initiatives, services or activities, we process the contact details of the recipients with their explicit authorisation or consent.

HOW LONG DO WE RETAIN YOUR DATA?

The length of time for which your data is retained is determined by different factors, the main one being whether its continued retention is necessary in order to fulfil the purposes for which it has been gathered in each case. Secondly, it is retained in order to meet responsibilities regarding the processing of data by the City Council, and in order to meet any requests made by other public authorities or legal bodies.

As such, the data must be retained for however long is necessary in order to preserve its legal or informational value, or in order to accredit compliance with legal obligations, but not for any longer than the period necessary in order to meet the purposes of the processing.

In certain cases, such as when the data is included in accounting and invoicing documentation, the fiscal regulations stipulate that it must be retained for as long as the corresponding fiscal responsibilities remain in force.

In the case of data that is processed exclusively on the basis of the consent of the data subject, it is retained until the data subject revokes their consent.

Finally, in the case of footage obtained through video surveillance cameras, the data is kept for up to a month, except when incidents occur that justify a longer retention period in order to facilitate the work of security forces or legal bodies.

The criteria we follow for the retention or deletion of data are based on the rules governing the preservation of public documentation and the reports of the CNAATD (National Commission for Document Access, Evaluation and Selection).

WHAT RIGHTS DO DATA SUBJECTS HAVE IN RELATION TO THE DATA WE PROCESS?

As set forth in the General Regulations on Data Protection, you enjoy the following rights as a data subject:

To know that your data is being processed. All data subjects are entitled to know that their data is being processed, regardless of whether a prior relationship has existed between the data subject and the data controller.

To be duly informed when your data is collected. When personal data is obtained from the data subject, at the time of providing the data, the data subject must have clear information about the purposes for which the data will be used, about who the data controller is and about the main aspects related to this processing.

To have access to the data. A very broad right that includes knowing precisely which personal data is subject to processing, the purpose of the processing, the third parties with whom it may be shared (if applicable) or the right to obtain a copy of the data or to know the expected data retention period.

To demand the rectification of your data. This is the right to rectify any inaccurate data that we may process.

To demand the erasure of your data. Under certain circumstances, data subjects may exercise the right to request the erasure of data when, among other reasons, it is no longer necessary for the purposes for which it was collected and which justified the processing.

To demand the restriction of the processing of your data. Under certain circumstances, data subjects may exercise the right to request the restriction of data processing. In this case, the data will no longer be processed and will only be retained for the exercise or defence of claims, in accordance with the General Data Protection Regulation.

To demand the portability of your data. In the cases provided for by law, data subjects may exercise the right to obtain personal data in a structured, commonly used and machine-readable format, as well as to transfer the data in question to another controller should the data subject so wish.

To object to the processing of your data. The data subject has the right to object to the processing of their data on grounds relating to their particular situation. In such cases, the controller must cease to process the subject’s data to the extent or degree that it may be detrimental to them, except when there are compelling legitimate grounds, or for the exercise or defence of claims.

To cease to receive information. We immediately agree to requests to stop sending information to data subjects about our activities and services, when the sending of such information was based solely on the recipient’s consent.

HOW CAN YOU EXERCISE OR DEFEND YOUR RIGHTS?

The rights listed above can be exercised by sending a request to the City Council at its postal address or through the other contact channels indicated at the top of this document.

If you do not a receive a satisfactory response in the exercise of your rights, you are entitled to lodge a complaint with the Catalan Data Protection Authority by filling in the corresponding forms, or through other channels available on its website (www.apd.cat).

In all cases, whether you wish to lodge a complaint, make an enquiry or offer a suggestion, you can send an email to the Data Protection Delegate at proteccio.dades@blanes.cat

AVINGUDA DE L’ESTACIÓ 43 (next to ITV – Technical Vehicle Inspection facility) 17300 – BLANES (Girona)

Tel.: 972.358.260 Bus lines 2, 4 and 6