Basic information on personal data protection. The data collected will be incorporated and processed in the processing activity of administrative management, which is the responsibility of the Excmo. Ayuntamiento (City Council) of San Cristobal de La Laguna, in order to process the relevant administrative procedure and before whom the affected persons may exercise their rights of access, rectification, cancellation and opposition and other rights regarding data protection by applying in person at the office of the Citizen Service, located at Calle San Agustin, 38- C.P. 38201, and in the mayor’s offices or electronically through the municipal electronic headquarters. The processing of data is legitimised by legal obligation as well as by the express consent of the person concerned by signing this document. The data will be communicated to the Services/ Administrative Units of the City Council competent in the matter related to the communication made and may not be transferred to third parties except in the cases provided for in current legislation on the protection of personal data. You can contact the Data Protection Delegate of the City Council at the following e-mail address: oae@aytolalaguna.es. Additional information on personal data protection is also available on the municipal website www.aytolalaguna.es.
The signature of this document constitutes proof of your explicit consent to the processing of your personal data.
| Introduction | This information has been developed taking into account the provisions of Organic Law 15/1999, of 13 December, on the Protection of Personal Data (LOPD), as well as Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the movement of such data (hereinafter, GDPR). The purpose of this Privacy Policy is to inform the owners of the personal data, in respect of which information is being collected, of the specific aspects relating to the processing of their data, including the purposes of the processing, the contact details for exercising their rights, the periods of conservation of the information and the security measures. This policy applies to information collected directly through the various services of the City of San Cristobal de La Laguna, as through its website www.aytolalaguna.es and other portals owned by the municipality. | ||||||||||||||||||
| Treatment | The personal data requested, where applicable, will consist only of those data that are strictly necessary to identify and deal with the request made by the owner of the data, hereinafter the interested party. Such information shall be processed fairly, lawfully and transparently in relation to the data subject. Moreover, personal data will be collected for specified, explicit and legitimate purposes and will not be further processed in a way incompatible with those purposes. The data collected from each data subject shall be adequate, relevant and not excessive in relation to the relevant purposes for each case, and shall be updated whenever necessar The data subject shall be informed, prior to the collection of his/her data, of the basic and supplementary information on data protection prescribed in Article 13 RGPD, so that he/she may give his/her express, precise and unequivocal consent to the processing of his/her data, in accordance with the following aspects. The City Council of San Cristobal de La Laguna, as Data Controller, ensures an adequate and consistent level of protection of privacy and confidentiality of individuals in all matters relating to their personal data, processed by the various municipal services of the City Council for the administrative management of local jurisdiction. The privacy of all information, both that provided by the user through the different forms for requesting personal data, as well as that accessible through the City Council’s website, is regulated by the RGPD. | ||||||||||||||||||
| Data controller | In terms of data protection the City Council of San Cristobal de La Laguna should be considered Data Controller, in relation to the files / processing registered in the Public Register of Files of the Spanish Agency for Data Protection. The following is the identification data of the owner of this website Responsible for the treatment: Ayuntamiento de San Cristóbal de La Laguna.postal address: Calle Obispo Rey Redondo, nº 1. 38201 San Cristóbal de La Laguna. | ||||||||||||||||||
| Consent | As a general rule, prior to the processing of personal data, the City Council of San Cristóbal de La Laguna obtains the express and unequivocal consent of the owner of the data by incorporating informed consent clauses in the different information collection systems. The signature of the request by the data subject who is the data subject constitutes proof of his or her explicit consent to the processing of his or her data. However, in the event that the consent of the data subject is not required, the legitimate basis for the processing on which the City Council of San Cristobal de La Laguna is protected is the existence of a law or specific regulation authorising or requiring the processing of the data subject’s data. The processing of personal data involves the consent of the data subject for one or more specific purposes. Processing shall also be lawful for compliance with a legal obligation applicable to the controller or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. The data subject’s consent shall be deemed to be any freely given, specific, informed and unambiguous indication of his or her free, specific and unambiguous consent to the processing of personal data relating to him or her, either by a statement or by a clear affirmative action. For the purposes of demonstrating consent, it shall be deemed to be proven with the signature by the interested party of the corresponding form, request, application or document. The data subject shall have the right to withdraw his or her consent at any time. Withdrawal of consent shall not affect the lawfulness of processing based on consent prior to its withdrawal. Before giving his or her consent, the data subject shall be informed of the fact that | ||||||||||||||||||
| Purpose | The City Council will use the data for the purposes of attention, management, control and resolution of enquiries and requests for formalities or services provided in administrative procedures of municipal competence. The data processed will be kept until the request and resolution of the query has been processed and, in any case, for the legally stipulated retention and prescription periods. The explicit purposes for which each of the processing operations are carried out are set out in the informative clauses included in each of the data collection methods (web forms, paper forms, announcements or posters and information notes). However, the personal data of the data subject will be processed for the sole purpose of providing them with an effective response and responding to the requests made by the user, specified next to the option, service, form or data collection system used by the owner. In general terms, the following are listed: General requests: The purpose of the processing of personal data relates to the registration, attention and management of the right of individuals to communicate with the municipality, including the right to petition. Incidents, complaints, suggestions and petitions: The purpose of the processing of personal data refers to the registration, attention and management of the right of individuals to communicate with the council, including the right to petition. Transparency. Access to information. The purpose of the processing of personal data refers to the registration, attention and management of requests for access by individuals to public information, as a subjective right that all individuals have to access public information. Communications: The purpose of the processing of personal data refers to the management and processing of communications from citizens with the City Council for the purpose of contacting the City Council so that they can be attended to by the various municipal services. Certificates. The purpose of the processing of personal data refers to the processing and issuing of certificates requested by the interested parties. Municipal Register of Inhabitants. The purpose of the processing of personal data relates to the management of the administrative register of residents of the municipality. In addition to the accreditation and determination of their domicile and habitual residence and the linking of a person of the municipality as an integral part of its population. Complaints La finalidad del tratamiento de datos personales se refiere al registro, la gestión y tramitación de denuncias en el ámbito de las competencias municipales. Municipal taxes. The purpose of the processing of personal data refers, in general, to the management of the taxpayer’s relationship with the City Council and to the attention and management of the rights of taxpayers. Specifically, the management, settlement and collection of municipal taxes. Social Welfare. The purpose of the processing of personal data relates to the management and processing of the provision of social assistance or treatment. Education. The purpose of the processing of personal data relates to the management and processing of the provision of social assistance or treatment. Culture. The purpose of the processing of personal data relates to the organisation and management of cultural and leisure activities in the municipality. Youth: The purpose of the processing of personal data refers to the promotion and actions in policies aimed at young people in the municipality. Registration of incoming and outgoing documents. The purpose of the processing of personal data relates to the internal and external assurance of documents submitted to the City Council and official documents sent to other bodies or individuals. Registration of stable partnerships. The purpose of the processing of personal data concerns the management of the register of stable partnerships. Census register of domestic animals. The purpose of the processing of personal data relates to the registration, management and control of the municipality’s pet identification codes. Registration of potentially dangerous animals. The purpose of the processing of personal data relates to the registration, management and control of the identification codes of dangerous animals and the suitability of the owners to comply with the requirements. Public road. The purpose of the processing of personal data relates to the processing and management of applications for authorisations and permits related to the use of public roads. Public Health. The purpose of the processing of personal data relates to the management of municipal public services in the field of public health. Public health surveillance and sanitary control. Municipal facilities: The purpose of the processing of personal data relates to the management of municipal facilities. Mobility. The purpose of the processing of personal data relates to the management and administrative processing of aspects relating to citizens’ mobility. Cemetery. The purpose of the processing of personal data relates to the management of the ownership of funeral rights over niches and burials and exhumations in the municipal cemetery. Economic promotion. The purpose of the processing of personal data refers to the management of the promotion and dynamisation of commercial activity and the provision of commercial services in the municipality and the management of the service for the promotion of business creation and entrepreneurship. Also in the management of the employment service for job seekers. Environment. The purpose of the processing of personal data relates to the development of environmental activities and projects. Citizen participation. The purpose of the processing of personal data concerns the management of actions to enable individuals and civil society to participate in public decision-making. Register of organisations. The purpose of the processing of personal data refers to the management of the Register of organisations in the municipality and the processing of notifications to the Town Council regarding organisations and associations. Personal selection. Processing and management of personnel selection processes and the provision of jobs. Economic and budgetary management. Management of the City Council’s expenditure files and budgetary control. Access control. The purpose of the processing of personal data relates to ensuring the security of facilities, premises and persons. Also in the registration and control of visits. Public safety. The purpose of the processing of personal data relates to the management of actions relating to the exercise of the functions of the Local Police. Tourism. The purpose of the processing of personal data relates to the promotion of tourism in the municipality. Attention to the rights of data subjects. The purpose of the processing of personal data relates to the registration, processing and management of requests for data protection rights granted to the persons concerned. Gender policy. The purpose of the data processing will be the dissemination of actions related to gender equality, as well as the provision of information services to women and specialised care for women in situations of gender violence. | ||||||||||||||||||
| Legitimation of processing | The legal basis for the processing of data depends on the intended purpose, in accordance with the General Data Protection Regulation 2016/679, and may be the express and unambiguous consent given by the user, for the performance of a contract, in compliance with a legal obligation, in fulfilment of a task carried out in the public interest or in the exercise of public authority. Generally speaking, they are: Article 6.1.a RGPD. The data subject consents to the processing of his or her personal data for one or more specific purposes. | ||||||||||||||||||
| Source of data | The personal data processed by the City Council in fulfilment of a mission carried out in the public interest, in the exercise of public powers or in fulfilment of a legal obligation come directly from the persons concerned, from their legal representatives or from other public administrations in accordance with the legal provisions. As a rule, personal data is always collected directly from the data subject. However, in certain exceptions, data may be collected through third parties, entities or services other than the data subject. In this regard, this will be communicated to the data subject through the informed consent clauses contained in the different information collection channels and within a reasonable period of time, once the data have been obtained, and at the latest within one month. | ||||||||||||||||||
| Data recipients | The personal data included in the corresponding forms, applications and requests will be communicated to the different Areas, Services and Administrative Units of the City Council competent in the matter in question. As a general rule, the City Council of San Cristobal de La Laguna does not proceed to the transfer or communication of data to third parties, except as required by law. However, if necessary, the data subject is informed of such transfers or communications of data by means of the informed consent clauses contained in the different ways in which personal data are collected. | ||||||||||||||||||
| Data transfer | Personal data may not be transferred to third parties outside the City Council except in the cases provided for in current legislation on the protection of personal data, without the consent of the affected party being required in the cases listed in Article 11.2 of Organic Law 15/1999, of 13 December, on the Protection of Personal Data. | ||||||||||||||||||
| International data transfer | It is not foreseen | ||||||||||||||||||
| Data categories | Identification data, data relating to personal characteristics: marital status, family, birth, place of birth, age, sex, nationality, academic and professional data or data relating to the job, special categories of data, and other data that may be provided by the user, depending on the administrative procedure or municipal action. | ||||||||||||||||||
| Data Protection Officer
| By Decree of the Councillor Delegate for the Presidency and Planning nº 838/2018, dated 23 May, it has been resolved to designate the functions of Data Protection Delegate to the Head of the Planning, Organisation, Quality and Inspection Service only in the scope of the City Council, not including public bodies (autonomous bodies and trading companies). Their contact e-mail address for this purpose is: oae@aytolalaguna.es Their postal address is Delegado de Protección de Datos. Area of Presidency and Planning of the Excmo. Ayuntamiento de San Cristóbal de La Laguna, Calle Obispo Rey Redondo, nº 1, postcode 38201. It exercises, at municipal level, the functions established in article 39.1 of the: (a) inform and advise the controller or processor and employees involved in the processing of their obligations under the DPO and other Union or Member State data protection provisions. (b) monitor compliance with the provisions of the DPO, other Union or Member State data protection provisions and the controller’s or processor’s policies on the protection of personal data, including the allocation of responsibilities, awareness-raising and training of staff involved in processing operations, and related audits. (c) provide advice on request on the data protection impact assessment and monitor its implementation in accordance with Article 35 DPO. (d) cooperate with the supervisory authority (e) act as a contact point for the supervisory authority for matters relating to processing, including the prior consultation referred to in Article 36 DPO, and consult, as appropriate, on any other matter The aforementioned resolution also provides for the appointment of a substitute Data Protection Delegate in the event of vacancy, absence or illness of the incumbent, appointing for this purpose the official assigned to the Head of the Personnel Management and Accidental Technical Secretary Section. | ||||||||||||||||||
| Rights | Any person has the right to obtain confirmation as to whether or not the City Council of San Cristobal de La Laguna are being treated personal data concerning them. Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, data subjects may request the limitation of the processing of their data, in which case the data will only be kept for the exercise or defence of claims. Also on grounds relating to their particular situation, data subjects may object to the processing of their data. The data controller shall cease to process the data, except for compelling legitimate reasons, or for the exercise or defence of possible claims. You also have the right to revoke the consent granted, in which case it will be effective from the moment you request it, without retroactive effect, and the right to complain to the Spanish Data Protection Agency. In this regard, in accordance with Article 13(2)(c), where processing is based on Article 6(1)(a) or Article 9(2)(a) GDPR, the data subject has the right to withdraw consent at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal. The exercise of all the rights listed above must be requested by the interested party by means of a written request presented in person at the offices of the SAC of this Council; or electronically through the municipal electronic office (https://sede.aytolalaguna.es/publico/procedimientos/ciudadano) in the category of personal data protection procedures. The catalogue of personal data protection procedures is available both on the website and at the municipal electronic office, where you will find an information sheet for each of them and the standard forms linked to each procedure: – Right of access: the right to obtain information about your own data being processed, the purpose of the processing being carried out, the categories of data being processed, the recipients or categories of recipients, the storage period and the origin of such data. – Right of cancellation: the right to obtain the cancellation of your own data processed. The cancellation will lead to the blocking of the data, which will only be kept at the disposal of the Public Administrations, Judges and Courts, for the attention of possible liabilities arising from the processing, during the period of prescription of the latter. On expiry of that period, it shall be deleted. – Right of rectification: the right to obtain the rectification of inaccurate or incomplete personal data. – Right of deletion: the right to obtain the deletion of data in the following cases:
– Right to objection: the right to object to a particular processing operation based on the data subject’s consent. – Right of restriction: the right to obtain the restriction of the processing of data when any of the following events occur: 1. Where the data subject contests the accuracy of the personal data, for a period of time which allows the undertaking to verify the accuracy of the personal data. 2. Where the processing is unlawful and the data subject objects to the erasure of the data. 3. When the company no longer needs the data for the purposes for which they were collected, but the data subject needs them for the formulation, exercise or defence of claims. 4. Where the data subject has objected to the processing while it is being verified whether the legitimate business grounds override those of the data subject. Right to portability: the right to obtain the data in a structured, commonly used and machine-readable format and to transfer them to another controller when: 1. The processing is based on consent 2. The processing is carried out by automated means – Right to lodge a complaint with the competent supervisory authority, the Spanish Data Protection Agency.. If you are not satisfied with the decision to protect your rights, you may lodge a complaint with the Spanish Data Protection Agency. More information on their web site: www.agpd.es. If the standard forms are not used, the application must contain the following information: name and surname(s) of the user, identity document number (ID card, passport or other document accrediting identity), address for notification purposes and specific content of the right exercised. If the application is made in person, a photocopy of the identity document must be enclosed with the application. The request must clearly state in the subject line: protection of GDPR rights. The competent authority for the resolution of procedures for the exercise of data protection rights is the Delegate Councillor for the Presidency and Planning. | ||||||||||||||||||
| Publication of personal data in electronic media | The resolutions and procedural acts derived from the administrative procedure to which the personal data of this application is incorporated and under the terms established in the call for applications, may be published on the Town Hall notice board, on the municipal website www.aytolalaguna.com or on the municipal intranet. The publication in the different municipal electronic media will be blocked or cancelled when the period of publicity of the corresponding administrative act has expired. | ||||||||||||||||||
| Data retention | The information collected from the data subject will be kept for as long as it is necessary to fulfil the purpose for which the personal data were collected, so that, once the purpose has been fulfilled, the data will be deleted. Said cancellation will give rise to the blocking of the data, which will only be kept at the disposal of the Public Administrations, Judges and Courts, in order to attend to any possible liabilities arising from the processing during the period of limitation of the latter. Upon expiry of this period, the information shall be destroyed. For information purposes, the legal deadlines for the conservation of information in relation to different matters are set out below:
| ||||||||||||||||||
| Safety measures | The security measures adopted by the City Council of San Cristobal de La Laguna are those required, in accordance with the provisions of Article 32 of the GDPR. In this sense, the City Council of San Cristobal de La Laguna, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing, as well as the risks of varying likelihood and severity to the rights and freedoms of natural persons, has established the appropriate technical and organisational measures to ensure the level of security appropriate to the risk. In any case, the City Council of San Cristóbal de La Laguna has implemented sufficient mechanisms to: 1. Ensure the continued confidentiality, integrity, availability and resilience of processing systems and services. 2. Restore availability and access to personal data quickly, in the event of a physical or technical incident. Regularly verify, evaluate and assess the effectiveness of the technical and organisational measures implemented to ensure the security of the processing. 4. Pseudonymising and encrypting personal data, where appropriate | ||||||||||||||||||
| Profiles | The processing of personal data of the data subject does not involve automated decisions, including profiling. | ||||||||||||||||||
| Browsing data | The website of the San Cristóbal de La Laguna Town Council uses its own and third-party cookies to improve the service provided to users. By continuing to browse the site, you are agreeing to our use of cookies. You are also deemed to accept their use if you click on any button, check box or link, download content or scroll the page. The City Council uses session and analytical cookies to facilitate the user’s browsing of the different sites and to collect non-personalised data on the use of the website (timetables, browsers, etc.). It is important to note that in no case do the cookies used provide or store personal data of the users and that they are not permanent: they are deleted when the browser is closed. You can allow, block or delete the cookies installed on your computer by configuring the options of the browser you use. Even if the installation of cookies is blocked, the effective use of the website by the user is not prevented. |
Data protection regulations grant a series of rights to data subjects or data subjects, users of the website or users of the profiles of the social networks of the City Council of San Cristóbal de La Laguna.
List of rights. The rights of the persons concerned are as follows:
- Right of access: the right to obtain information about your own data being processed, the purpose of the processing being carried out, the categories of data being processed, the recipients or categories of recipients, the storage period and the origin of such data.
- Right of cancellation: the right to obtain the cancellation of your own data processed. The cancellation will entail the blocking of the data, which will only be kept at the disposal of the Public Administrations, Judges and Courts, for the attention of possible liabilities arising from the processing, during the period of prescription of these. On expiry of that period, it shall be deleted.
- Right of rectification: the right to obtain the rectification of inaccurate or incomplete personal data.
- Right of deletion: the right to obtain the deletion of data in the following cases:
- When the data are no longer necessary for the purpose for which they were collected
- When the consent is withdrawn by the consent holder
- Where the data subject objects to the processing
- When they are to be deleted in compliance with a legal obligation
- Where the data have been obtained by virtue of an information society service on the basis of Art. 8 para. 1 of the European Data Protection Regulation.
- Right of objection: the right to object to a particular processing operation based on the data subject’s consent.
- Right of restriction: the right to obtain the restriction of the processing of data when any of the following events occur:
- Where the data subject contests the accuracy of the personal data, for a period of time that allows the company to verify the accuracy of the data.
- Where the processing is unlawful and the data subject objects to the erasure of the data.
- When the company no longer needs the data for the purposes for which they were collected, but the data subject needs them for the formulation, exercise or defence of claims.
- Where the data subject has objected to the processing while it is being verified whether the legitimate business grounds override those of the data subject.
- Right to portability: the right to obtain the data in a structured, commonly used and machine-readable format and to transfer it to another controller when:
- Processing is based on consent
- The processing is carried out by automated means
- Right to lodge a complaint with the competent supervisory authority, the Spanish Data Protection Agency..
Presentation. Interested parties may exercise the rights indicated, addressing the City Council of San Cristobal de La Laguna, by writing to the Citizen Service of the City of San Cristobal de La Laguna, providing proof of identity, sent to the Citizen Service of the City of San Cristobal de La Laguna. Calle San Agustín, nº 38, San Cristóbal de La Laguna, or Tenencias de Alcaldía ( Tenencia de Alcaldía de La Cuesta C/ Abreu y Valdés, 1; Tenencia de Alcaldía de Taco C/ Los Charcos, s/n Edificio Joy; Tenencia de Alcaldía de Tejina C/ Marina González González, 7; Tenencia de Alcaldía de Valle de Guerra C/ Calvario, 1 (Centro Ciudadano), or through the Electronic Register accessible through the Electronic Headquarters of the City Council of San Cristóbal de La Laguna.
In this sense the City Council of San Cristobal de La Laguna will respond to your request as soon as possible and taking into account the deadlines provided in the rules on data protection.
Moreover, it should be borne in mind that the data subject or data subject may at any time lodge a complaint with the competent supervisory authority, the Spanish Data Protection Agency (more information at www.agpd.es).
More information about on-site processing: http://www.aytolalaguna.com/tramites-y-gestiones.jsp
More information on e-processing: https://sede.aytolalaguna.es/publico/procedimientos/ciudadano