Privacy Policy

PRIVACY POLICY

In accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016 (RGPD) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights, you are informed of the identity of the Data Controller, the purpose of the processing, the legitimacy for the processing of your data, the categories of recipients of transfers of your data (if any), the origin of your data processed if this is different from your voluntary submission and the rights that you have as a data subject.

DATA CONTROLLER

Name of Person Responsible: AJUNTAMENT D ́INCA
TAX ID NUMBER: P0702700F
Full address: Plaza de España, 1 - 07300 Inca (Balearic Islands)
E-mail address: protecciodedades@ajinca.net

PURPOSE AND LEGITIMACY OF THE PROCESSING

The operations envisaged to carry out the processing are:

• In the legitimate interest of the Controller:
  • Economic and accounting management, fiscal management, administrative management, invoicing management, customer and supplier management, management of collections, payments and related services, history of commercial relations, management of the necessary relations between citizens and the City Council and its dependent bodies.
• By express, unambiguous and informed consent of the data subject:
  • Sending commercial advertising communications by email, fax, SMS, MMS, social communities or any other electronic or physical means, present or future, that enable commercial communications. These communications will be carried out by the RESPONSIBLE and related to its products and services, or those of its collaborators or suppliers with whom it has reached a promotional agreement. In this case, third parties will never have access to personal data.
  • Conduct statistical studies.
  • To process orders, requests or any type of request made by the user through any of the forms of contact made available to them.
  • Send out the website newsletter.
• In the public interest or in the exercise of public authority:
  • The legal basis for processing your data is the fulfilment of a mission that is carried out in the public interest or in the exercise of public powers, in accordance with Law 39/2015, of 1 October, on Common Administrative Procedure.
• Data retention criteria:
  • The data will be kept for the duration of the relationship between the parties. Once this relationship has ended, the data will be blocked in order to prevent the possibility of access, being unblocked only in the event that such data were required to the Data Controller by any legal authority (tax, commercial, labour or judicial) and this only until the expiry date or legal prescription. The data will subsequently be destroyed appropriately and with the appropriate guarantees to make their recovery impossible.

TRANSFER OR COMMUNICATION OF DATA

The personal data may be transferred for the maintenance of the commercial relationship and/or for the execution of operations, to Tax, Accounting and Commercial Consultants, Banks, Savings Banks and Financial Entities, Tax Bodies and other competent Public Bodies. The data will not be communicated to other third parties, unless legally obliged to do so.

No data are transferred to third countries outside the European Economic Area or to International Organisations.

RIGHTS OF THE DATA SUBJECT AND HOW TO EXERCISE THEM

• Rights of the User and how to exercise them:
  • The data subject has the right to: Access to their data, to have their data rectified, to have their data deleted, to data portability, to limit the processing of their data, to object to the processing of their data, to withdraw the consent given, to lodge a complaint with the Supervisory Authority, to lodge a judicial appeal.
  • You may exercise these rights by sending a reasoned letter to the Data Controller or his representative, specifying the right you wish to exercise, accompanied by a photocopy of your identification document. You may also request in advance that the Data Controller provide you with a standard form for the right you wish to exercise.
  • The exercise of rights shall not entail any administration costs for the interested party, except for the cost of postage if he/she chooses to send it by post.
• You may exercise your rights:
  • In person at the premises of the Data Controller, identifying yourself with your ID card or equivalent document.
  • By sending an e-mail to the address given in the section on the identification of the Data Controller and enclosing a photocopy of your ID card or equivalent document.
  • By post (preferably registered) to the address given in the section on the identification of the Data Controller and enclosing a photocopy of your ID card or equivalent document.

Contact details for exercising your rights: Consultancy X3 S.L., dpo@grupox3.es

MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

Users, by ticking the corresponding boxes and entering data in the fields below, will be able to fields, marked with an asterisk (*) in the contact form or presented in download forms, expressly and freely and unequivocally accept that their data are necessary to meet their request, by the provider, being voluntary the inclusion of data in the remaining fields. The User guarantees that the personal data provided to the RESPONSIBLE are truthful and is responsible for communicating any changes to them.

The RESPONSIBLE expressly informs and guarantees users that their personal data will not be transferred under any circumstances to third parties, and that whenever any type of transfer of personal data is carried out, the express, informed and unequivocal consent of the Users will be requested beforehand. All the data requested through the website are obligatory, as they are necessary for the provision of an optimum service to the User. In the event that all the data is not provided, there is no guarantee that the information and services provided will be completely tailored to your needs.

SECURITY MEASURES

That in accordance with the provisions of the regulations in force on personal data protection, the RESPONSIBLE is complying with all the provisions of the GDPR regulations for the processing of personal data under its responsibility, and manifestly with the principles described in Article 5 of the GDPR, whereby they are processed lawfully, fairly and transparently in relation to the data subject and in a manner that is adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

The RESPONSIBLE guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by the GDPR in order to protect the rights and freedoms of the Users and has communicated the appropriate information to them so that they can exercise them.