Website Privacy Policy

This privacy policy describes the ways in which we collect information, the purposes for which we use it, and how we manage it. Your privacy is important to us, and we place great value on it; that is why we wish to express our utmost commitment to the protection of our Users’ personal data. We have implemented the necessary technical and organizational measures to ensure the confidentiality of your data, in compliance with the General Data Protection Regulation approved by the European Union (GDPR) and Organic Law 3/2018 of December 5 (LOPDGDD).

Who is the data controller?

• Company Name: EXCMO. AYUNTAMIENTO DE GALERA (hereinafter, “THE CITY COUNCIL” or the “Controller”).
• CIF: P1808400D
• Address: PLAZA MAYOR, 8 – 18840 – GALERA – GRANADA
• Phone: 958739071
• Email for communications regarding Data Protection: dpd@ayuntamientogalera.es

Data Protection Officer

DSM CONSULTORÍA LEGAL Y SEGURIDAD, S.L., with Tax ID B05533500 and registered address at C/ Maestro Mora 10, entlo, 30510 – YECLA, MURCIA (SPAIN). The contact phone number is +34 629 324 397 and the email address is DPO@DSMCONSULTORIA.COM.

What are the purposes of the processing? What is the legal basis for the processing?

The personal data of data subjects will be processed by EXCMO. AYUNTAMIENTO DE GALERA in accordance with the following purposes, depending on when such information is provided:

1. In order to respond to your inquiries or send you information related to your request, it may be necessary for us to obtain information from you. In such case, we will ask you to provide it voluntarily and expressly. You should only send us data that you own, or data of third parties if you are their legal representative or have obtained their explicit consent. The legal basis for the processing corresponds to Article 6.1(a) of the GDPR (data subject’s consent).

2. For the processing of customer registrations, data updates, and the management of the commercial relationship that may exist. The data will be collected through the corresponding registration form initially, and through commercial transactions subsequently. Specifically, the following actions are included:

• Creation of the customer account through the website, using the different links provided by EXCMO. AYUNTAMIENTO DE GALERA for this purpose. This is based on the legal grounds established in Article 6.1(a) of the GDPR (data subject’s consent).
• Administration and management of the existing contractual relationship with the customer, in accordance with Article 6.1(b) of the GDPR.
• Customer analysis in order to carry out market studies and opinion surveys, justified by legitimate interest, in accordance with Article 6.1(f) of the GDPR.
• To fulfill our contractual obligations in the event that you have decided to acquire any of our products and/or services, as well as to carry out the administrative, tax, and accounting management derived from the work we have performed. This purpose is based on Article 6.1(c) of the GDPR: compliance with a legal obligation applicable to the city council.

3. To manage subscriptions for receiving commercial information about EXCMO. AYUNTAMIENTO DE GALERA, for which the data subject’s consent is obtained through our newsletter, using the mechanisms provided on the website. The processing is based on Article 6.1(a) of the GDPR (data subject’s consent), which may be withdrawn at any time without affecting the lawfulness of the processing prior to its withdrawal.
4. For analytical and/or statistical purposes, in the event that you accept the cookies used by the website for these purposes. The processing is based on the consent obtained from the user, in accordance with Article 6.1(a) of the GDPR and Article 22 of the LSSI. You can find more information in our Cookie Policy.
5. To participate in possible recruitment processes that we may carry out in the event that you send us your résumé. The legal basis for the processing lies in the data subject’s consent, in accordance with Article 6.1(a) of the GDPR.

What are the data retention criteria?

We will retain the data for the duration of the legal obligation limitation period, and as long as there remains an interest from both parties in maintaining the relationship. The data will be deleted once it is no longer necessary to fulfill the purposes that justified their processing.
In cases where consent is the legal basis for processing, the data will be processed until you withdraw your consent. To revoke it, please refer to the section WHERE CAN YOU EXERCISE YOUR RIGHTS?
However, afterward, the data will remain blocked for the duration of the limitation period of any liabilities that may arise from the processing and/or its purpose.

How should I update my personal data?

The User guarantees that the personal data provided through this website are truthful, accurate, up to date, and complete. The User must inform us of any modification or update to this data by sending a communication to the postal or email addresses indicated in the section “Where can you exercise your rights?”

Who are the recipients of the information?

We will not disclose information to third parties except when required by law, when necessary to provide the services, or in the event that you give your express and unequivocal consent.

Are there any international data transfers?

EXCMO. AYUNTAMIENTO DE GALERA has no intention of carrying out international transfers of your data. However, we may use service providers and data processors that work on behalf of EXCMO. AYUNTAMIENTO DE GALERA. AYUNTAMIENTO DE GALERA. These services may include system hosting and maintenance services, analytics services, email messaging services, etc. These third-party companies are obligated to ensure that the information is processed in accordance with current regulations. For our part, we will always make our best effort to ensure that all third parties we work with maintain the security of your personal data.

What rights do data subjects have?

Any individual has the right to obtain confirmation as to whether or not we are processing personal data concerning them. Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain them for the exercise or defense of legal claims. In certain circumstances, and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, we will stop processing the data, unless there are compelling legitimate grounds or for the exercise or defense of possible legal claims. They will also have the right to withdraw their consent to the processing of their data at any time when the legal basis for such processing is the data subject’s own consent.

They may file a complaint with the competent Data Protection Supervisory Authority, such as the Spanish Data Protection Agency, especially when they have not obtained satisfaction in the exercise of their rights or believe that the data processing does not comply with current legal regulations.

Where can you exercise your rights?

By written communication addressed to EXCMO. AYUNTAMIENTO DE GALERA. AYUNTAMIENTO DE GALERA, PLAZA MAYOR, 8, GALERA, 18840 (GRANADA) or, by sending an email to the address dpd@ayuntamientogalera.es, identifying yourself and specifying your request.
In commercial communications, including newsletters, you may revoke the consent given by sending an email to our address dpd@ayuntamientogalera.es indicating the phrase “Unsubscribe from the Communications Service” in the message, or by clicking on the unsubscribe link if indicated in the email message.

Security measures

In accordance with the provisions of the current regulations on personal data protection, the CONTROLLER is complying with all the provisions of the GENERAL DATA PROTECTION REGULATION (GDPR) regarding the processing of personal data under its responsibility, and expressly with the principles set out in Article 5, whereby data are processed lawfully, fairly, and transparently in relation to the data subject, and are adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed. The CONTROLLER guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR in order to protect the rights and freedoms of the Users and has provided them with the appropriate information to enable them to exercise those rights.

Acceptance and consent

The user declares that they have been informed about our data protection policy and consents to the processing of their data for the purposes described above. It is noted that some of the services provided on the Website may have specific conditions; in such cases, users will be duly informed.