Data Protection Policy
This is the data protection policy of the Institute for Economic Promotion of Palafrugell. Refers to the data of individuals associated with those in the exercise of its powers and functions. Given the functions of the the Institute for Economic Promotion of Palafrugell some treatments are the result of the provision of services to other government functions delegated to it. The treatment is carried out in compliance with the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, and the state regulations on this matter.
Who is responsible for the processing of personal data?
The controller of personal data is the Institute for Economic Promotion of Palafrugell (hereinafter the IPEP), with CIF P1700054H domiciled on the street Major, 1 de Palafrugell (CP 17200), telephone 972 61 18 20 and firstname.lastname@example.org, www.ipep.cat
What criteria we treat personal
In the data processing fully accept the principles of the General Data Protection Regulation.
- The treated lawfully (only when we have a legal basis permitting and transparency before the party).
- The end devote to specific, explicit and legitimate explain when to get them. Then do not try way incompatible with those purposes.
- We take data only adequate, relevant and limited to what is necessary in every case and for every purpose.
- We strive so that the data are updated.
- The preserve during the time, complying with the rules governing the preservation of public information.
- We apply appropriate organizational and technical measures to prevent unauthorized or unlawful, or the loss, destruction or accidental damage.
Who is the Data Protection Officer
The Data Protection Officer (DPD) is the person who oversees compliance with the data protection policy of the IPEP, ensuring that personal data are treated properly and protect the rights of individuals. Its duties include the care of any questions, suggestions, complaints or claims of people who are treated data. You can contact the Data Protection Officer in writing addressing the street Major, 1 de Palafrugell (CP 17200), telephone 972 61 18 20 and email@example.com,
For what purpose and who try to communicate data
The IPEP processes data to perform their functions and duties. The IPEP services described on its website and in its electronic. A complete description of the treatments and the purposes for which the data are used to figure Registration treatment activities of the City.
Administrative procedures and formalities
Based on the applications of the persons concerned, we use the data to track the processing of each procedure. The catalog of procedures and the procedure continues to be available on the electronic . According to the procedure data can be communicated to other competent authorities in the matter. In some cases should be published in accordance with the principle of transparency.
For the services treat data provided by the beneficiaries or those we have obtained from other administrations. Providing these services often involves making a new track and get data from people who are users. The service catalog can be consulted on the electronic . As a general rule do not communicate the information to others without the explicit consent of the service user.
In the organization of cultural, recreational, educational or sporting receive data from people they unroll, in order to organize the activity. As a general rule do not communicate the information to others without the explicit consent of the person involved in the activity.
We answer inquiries from people who use contact forms on our website. The data used for this purpose only and do not communicate to others.
With the explicit authorization of each person use the contact details provided to us to inform our initiatives, services or activities. We do this through different channels depending on how it has authorized each person. Do not communicate to other people without their consent.
Data management of our suppliers
Recording and processing data providers who obtain goods or services. Data can be act as self-employed persons and representatives of legal entities data. We obtain the data necessary to maintain the business relationship and intended solely for this purpose. In compliance with legal obligations (tax law) communicate data to the tax authorities.
Access to our facilities reported, when applicable, the existence of surveillance cameras by the approved label. The cameras recorded images of the only points on which it is justified to ensure the safety of goods and people. The images are used only for this purpose. Also recorded images of public roads to support actions in the field of traffic and for reasons of public safety and ensuring compliance with regulations. The location of these cameras can be found in the appendix at the end of this page. The images are used solely for these purposes. In justified cases the data to inform law enforcement bodies and judicial bodies or authorities.
What is the legal legitimacy for the treatment of data
Data processing that we perform has different legal bases, depending on the nature of each treatment.
Compliance with legal obligations
The treatment of the data in the context of administrative procedures performed in accordance with the regulations of each procedure. It takes place in compliance with legal requirements.
Fulfill public interest mission
Treatments resulting from our services have its justification in the public interest satisfy. Also obtain images with video surveillance cameras are treated to protect the public interest.
Fulfilment of a contract or pre-contract
We treat our data providers following the rules of recruitment in the public sector itself, the extent and scope necessary for the development of the relationship. In another sense, but also in the context of contractual relations or pre, people treat data involved in selection processes or joining our institution.
Based on consent
When we do our shipping information initiatives, services or activities treat contact receivers with permission or explicit consent.
How long retain data
The data retention time is determined by several factors, mainly the fact that the data continue to be required to meet the purposes for which they were collected in each case. Secondly preserved to address potential liabilities for data processing by the IPEP, to meet any requirement and other public authorities or judicial bodies.
Consequently the data to be kept for the time necessary to preserve its legal value or information or prove compliance with legal obligations, but not for a period than is necessary according to the aims of treatment.
In certain cases, such as data contained in the records and billing, tax law requires keep them until they prescribe responsibilities in this matter.
If the data are treated exclusively based on the consent of the person concerned are kept until this person revokes consent.
Finally, in the case of images taken by surveillance cameras is kept for a month at most, although in the case of incidents that are kept justify the time necessary to facilitate the activities of bodies and security forces or judicial organs.
The regulations governing the preservation of public documents and the reports of the National Commission of Access, Evaluation and Selection of Documents concerning the criteria are still in the conservation or removal of data.
What rights do people in relation to the data deal
As provided for in the General Data Protection Regulation, persons who deal data have the following rights:
To know if untreated. Any person has, first, whether the right to treat their data, regardless of whether there has been a prior relationship.
To be informed on the collection. When the data obtained from the person concerned, at the time of providing the information must be clear at the end that will be used, who will be responsible for processing and the main issues arising from this treatment.
To access it. Law includes very broad know exactly what personal data are processed, what is the purpose for what it is, communications in others it will (if applicable) or the right to obtain- a copy or know the deadline conservation.
To ask for rectification. Is the right to rectify inaccurate data to be processed by us.
To ask for the deletion. In certain circumstances there is a right to request the deletion of data when, among other reasons, are no longer necessary for the purposes for which they were collected and justified treatment.
To apply for limited treatment. In certain circumstances also recognizes the right to request the limitation of data processing. In this case no longer be processed and kept only for the exercise or defence of claims, according to the General Data Protection Regulation.
A portability. In the cases provided for in the legislation recognizes the right to own personal data in a structured format commonly used machine-readable, and to transmit it to another data controller if so decided by the person concerned.
To refuse the treatment. A person can adduce reasons related to their particular situation, the reasons that lead them to stop treating the data on the degree or measure which could lead to damage, except for legitimate reasons or exercise or defence against claims.
Unless receive information. Serve immediately requests not to continue receiving information on our activities and services, when these shipments were based solely on the consent of the person who is receiving.
How can exercise or defend law
The rights can be exercised just list by sending a request to the IPEP at the address or other contact information listed in the header.
If no satisfactory response has been obtained in the exercise of rights may lodge a complaint with the Catalan Data Protection Authority, through the forms or other channels accessible from its website ( www.apdcat.cat ).
In all cases, whether to submit complaints, request clarifications or send suggestions, you may contact the Data Protection Officer by e-mail to firstname.lastname@example.org .
Annex. Location of surveillance cameras
- Local Police Building
- Can Mario Square
- municipal waste
- Building Can Bech
- Citizen Advice Bureau (OAC)
- Municipal pool
- Light Llofriu
- Tourist Office Palafrugell
- Access street Chopitea Calella
- Access Street Charity
- Access Street Concord
- Access walk Cipselo Llafranc
- Lighthouse of San Sebastian