Privacy Policy

FIRST. Additional Information on Data Protection

This City Council of El Castillo de las Guardas, in compliance with the duty to inform established in Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter LOPDGDD) in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free circulation of these data and by which repeals directive 95/46/CE (hereinafter RGPD) and other concordant regulations on the matter indicates:

Who is the Data Controller?

Identity	The City Council of El Castillo de las Guardas is the entity responsible for the processing of personal data.
Mailing Address	Plaza de Llano, C.P. 41890
Email	turismoydesarrollo@aytoelcastillo.es
Telephone	954 13 05 01

For what purpose will we treat your personal data?

The main purpose of the treatment to which the personal data is destined is the processing and management of administrative files, as well as the actions derived from them.

In addition to this main purpose, interested parties are informed that data processing involves the following additional purposes:

• Provide interested parties with information on the various municipal activities and services.
• Carry out statistical studies.

How long will we keep your data?

We store the data for the time necessary to be able to comply with the legal obligations entrusted by the administrative regulations, and always, complying with at least the minimum time of conservation of the information. In accordance with what is regulated in article 26 of the LOPDGDD, the treatment by this Entity of the data for archiving purposes in the public interest will be lawful. The provisions of the archives and documentation regulations will apply.

Existence of automated decisions?

This Entity can make automated decisions based on the legal coverage granted by article 41 of Law 40/2015, of October 1, on the Legal Regime of the Public Sector. It would be any act or action carried out entirely through electronic means within the framework of an administrative procedure and in which no person has directly intervened.

Automated decision-making must be regulated in its own regulations, defining in it the specifications, programming, maintenance, supervision and quality control. Said regulations will be available to citizens at the electronic headquarters of this Entity.

What is the legitimacy for the processing of your personal data?

The legal basis for the processing of your data is the fulfillment of a mission that is carried out in the public interest or in the exercise of public powers, all of them based on Law 7/1985, of April 2. Of Bases of Local Regime, Royal Legislative Decree 2/2004, of March 5, which approves the consolidated text of the Regulatory Law of Local Treasury and Law 39/2015, of October 1, of Administrative Procedure Common.

To which recipients will your data be communicated?

This City Council informs that the personal data of the interested parties will be communicated to Public Administrations, whenever it is necessary to comply with the purposes listed above and whenever there are legal regulations that protect it.

What are your rights regarding the data provided?

Anyone has the right to obtain information on whether or not personal data concerning them is being processed at this City Council.

Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate personal data that concerns them or, where appropriate, request deletion when the data is no longer necessary in relation to the purposes for which that were collected, withdraw their consent, notwithstanding that this administration may refuse to delete the data, among other reasons, for archiving purposes in the public interest.

Likewise, the interested parties have the right, in certain circumstances, to request the limitation of the processing of their data, in which case said data may only be processed, with the exception of its conservation, with the consent of the interested party or for the formulation, the exercise or to defend claims or with a view to protecting the rights of another natural or legal person or for reasons of public interest. (You can request the limitation of data processing in the circumstances indicated in article 18 of the RGPD).

The interested party has the right to oppose at any time, for reasons related to their particular situation, that the personal data that concerns them be subject to data processing. This City Council will stop processing the data, except for compelling legitimate reasons or the exercise or defense of possible claims.

In relation to the right to data portability, the interested party has the right to receive the personal data that concerns him or her to transmit it to another person in charge, in a structured format, for common use and mechanical reading, provided that this right is based on consent. or in the execution of a contract.

Those affected may exercise their rights by writing to this City Council, either electronically or in person. This City Council has made available to you a model application for the exercise of your rights, which you can access at the electronic headquarters of this City Council.

When can you exercise the right to claim before the Control Authority?

You may submit a claim to the competent Data Protection Control Authority, especially when you have not obtained satisfaction in the exercise of your rights, by writing to the Spanish Data Protection Agency, C/ Jorge Juan nº6, 28001 Madrid or either by accessing its electronic headquarters: https://sedeagpd.gob.es/sede-electronica-web/

How have we obtained your data?

The personal data that we process in this City Council come from the data collection document completed by the interested party, from other Public Administrations and from contractor companies of this City Council.

In order to offer the best service to users and in order to facilitate use, the number of pages visited, the number of visits, as well as the activity of visitors and their frequency of use are analyzed.

The categories of data that are processed are:

• Identification data: Name and surnames
• Identification code or keys: National Identity Document, electronic signature
• Postal or electronic addresses, telephone

Specially protected data is not processed

SECOND. Security measures.

The security measures adopted by the City Council of El Castillo de las Guardas, are those required in accordance with the provisions of article 32 of the RGPD, taking into account the state of the art, the costs of application, the nature, the scope, the context and purposes of the treatment, as well as the risks of varying probability and severity for the rights and freedoms of natural persons. This City Council has established the appropriate technical and organizational measures to guarantee a level of security appropriate to the risk.

In any case, the City Council of El Castillo de las Guardas has implemented sufficient mechanisms to:

• Pseudonymize and encrypt personal data.
• Guarantee the confidentiality, integrity, availability and permanent resilience of treatment systems and services.
• Restore the availability and access of personal data quickly in the event of a physical or technical incident,
• Verify, evaluate and assess, on a regular basis, the effectiveness of the technical and organizational measures to guarantee the safety of the treatment.

THIRD. Navigation Data and Cookies

The navigation data that can be processed through the electronic headquarters of the City Council of El Castillo de las Guardas, are collected in the cookie policy that can be accessed https://www.elcastillodelasguardas.es/es/mas- information/cookies/