For the ANTEQUERA TOWN HALL, privacy is really important. We wish to keep an open and clear stance when processing your personal data.
Therefore, we have established a policy to process and protect your personal data.
I. Who is your data processing controller?
Data Processing Controller: ANTEQUERA TOWN HALL
Fiscal Identification Code (CIF): P-2901500-E
Registered Office: CALLE INFANTE DON FERNANDO Nº 70, ANTEQUERA, (MALAGA), C.P. 29200.
Data Protection Officer: contact email: firstname.lastname@example.org
II. What is the purpose of processing your personal data?
In accordance with that established by the (EU) 2016/679 Regulation of the European Parliament and of the Council (GDPR) and the Organic Law 3/2018, of 5th December, about Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), users are hereby informed that the data sent through the several forms included in the Town Hall Website, or in any of the Town Hall Departments, e-mail or by any other mean, will be processed by the Antequera Town Hall for the purposes which they were collected for and they will not be afterwards processed in a inconsistent way with such purposes. The provided data will be incorporated to the appropriate processing activity, being the Antequera Town Hall the holder, and they will be integrated into the Town Hall information systems.
The data collected from each data subject shall be appropriate, relevant and limited to the purposes for which they will be processed. Data shall be accurate and, if necessary, updated, and it will be taken all the reasonable steps so that those personal data which are inaccurate as regards the purposes for which they will be processed be removed or rectified without delay.
III. How long shall we keep your data?
Personal data shall not be kept for longer than necessary for the appropriate processing purpose, unless they must be kept for record purposes of public interest, scientific or historical investigations or statistics, and until the deadline for potential liabilities coming from the processing has passed by.
Thus, the period to maintain personal data shall depend on what has been specified for each personal data processing, besides on that established in the regulation about records and documentation.
IV. What is the legitimisation for your data processing?
The users’ data processing is carried out to observe the legal obligations concerning the Antequera Town Hall, to fulfil a mission carried out for public interest, to protect vital interests and to execute a contract. It can also be based on the consent of the data subjects, which shall be given through a clear affirmative action.
Whenever the processing is based on the consent by the data subject, the latter shall have the right to withdraw such consent at any time. The consent withdrawal shall not affect the lawfulness of the processing based on the consent previous to the withdrawal.
V. Which recipients will be informed about his/her data?
In general, data collected from third parties shall not be communicated to. They just can be transferred, if appropriate, after the consent given by the data subject or in accordance with that established by the current legislation.
VI. Data transfer to other countries.
No allowance has been made about data transfer to other countries.
Whenever the personal data are not collected directly from the data subject, the latter shall be provided with the appropriate information, within a reasonable period of time, about the processing carried out, once the personal data have been obtained.
VIII. Data accuracy and veracity.
Users shall ensure the veracity and genuineness of the provided information and data to be used for the several processing of personal data by keeping them always updated. Users will be responsible for any damage coming from the inaccuracy of such data.
With the purpose of keeping the provided information always updated and without errors, users shall commit themselves to inform, as soon as possible, about any changes in their personal data, as well as about any correction of inaccuracy data, if any.
IX. Security Measures
Bearing in mind the technology status, the nature of the stored data and the risks to which the data are exposed to, whether coming from human action or from the physical or natural means, the Antequera Town Hall, as the personal data processing controller, shall adopt the necessary technical and management measures to guarantee the safety of the personal data and to prevent their modification, loss or/and non-authorized processing or access.
The Antequera Town Hall ensures the confidentiality of the personal data provided through the control and security measures above mentioned.
X. Your rights on the provided data.
In the way laid down by the current legislation on the matter, the people whose data are processed by the Antequera Town Hall can exercise, before the Department of the Town Hall responsible for the processing, the rights of access, rectification and erasure of such data; plus the right to data limitation, and to object to the processing o decisions-making only based on automated processing, including the profiling and portability when appropriate.
If the user does not know the Town Hall Department responsible for the processing, the exercise of the rights shall be made by a request with the reference: “DATA PROTECTION” attaching a valid identification document. The request shall be addressed to the Antequera Town Hall and submitted to the Document General Registry; it can also be addressed to the Data Protection Officer of the Antequera Town Hall via email email@example.com.
If a user considers that his/her rights as regards personal data protection have been infringed, especially when the result of exercising his/her rights has not been satisfactory, she/he can lodge a complaint before the appropriate Data Protection Control Authority through the website: www.aepd.es
XI. Policies updating.
In view of all the foregoing, the WEBSITE OWNER recommends the regular reading of these policies to be aware of the changes which might take place on them.
XII. Obligation to inform
At the time of data collection, the data subject shall be informed about the processing activity for whose data have been collected, and about the processing conditions, by providing him/her with the data of the controller, co-controller if any, officer, purpose, legitimate basis, data recipients, existence of international transfers, period of storage, criteria used to establish that period, data subject rights and the way to exercise them. If the data had not been collected from the data subject, the latter will be informed about the category of the collected data and their source.
The record of processing activities, besides the additional information about each concrete processing, gathers all the information included in the obligation to inform of the Town Hall administration. The access to that record is through the following link: Record of Processing Activities.