Last updated: JUNE 1, 2022

1. Identity and contact details of the Person Responsible for the Treatment:

In accordance with the applicable data protection regulations and, in particular, Regulation (EU) 2016/679, of the European Parliament and of the Council, of April 27, 2016, relating to the protection of natural persons in what refers to the treatment of personal data and the free circulation of this data (hereinafter, the "RGPD"), and to Organic Law 3/2018, of December 5, on the Protection of Personal Data and the guarantee of digital rights ( hereinafter, the “LOPDGDD”), the Data Controller is:

-Responsible for Treatment: TURISME SANT BOI

-NIF: P0819900B

-Address: Plaça de l'Ajuntament, 1, Sant Boi de Llobregat (Barcelona)

-Telephone: 936548216

-Contact email: turisme@santboi.cat

-Data Protection Officer (DPD): dpd@santboi.cat

2. Protection of personal data in accordance with applicable regulations

TURISME SANT BOI has adapted the application to the RGPD and the LOPDGDD. Likewise, it has put into practice those policies, means and technical and organizational procedures to guarantee and protect the confidentiality, integrity and availability of your personal data.

3. Principles that we will apply to your personal information

In the treatment of your personal data, we will apply the following principles, which conform to the requirements of the RGPD:

-Principle of legality, loyalty and transparency: We will always require your consent for the processing of your personal data for one or more specific purposes that we will inform you of in advance with absolute transparency.

-Principle of data minimization: We will only request the strictly necessary data in relation to the purposes for which we require them.

-Principle of limitation of the conservation period: The data will be kept for no longer than necessary for the purposes of the treatment, depending on the purpose, we will inform you of the corresponding conservation period.

-Principle of integrity and confidentiality: Your data will be treated in a way that guarantees adequate security of personal data and its confidentiality. TURISME SANT BOI takes all the necessary precautions to avoid unauthorized access or improper use of user data by third parties.

4. Data collection and confidentiality

The data provided to TURISME SANT BOI by different means, contact forms or any other means used to collect your data, will be carried out in accordance with the current data protection regulations, and with the sole purpose of providing the service that I have informed you.

The transmission of data on the part of the user of the services of TURISME SANT BOI (hereinafter, the "User") through the application, is carried out voluntarily and being informed prior to the treatment of the use and of the purposes thereof.

TURISME SANT BOI informs the User that only that information is collected that is necessary to achieve the purpose of the treatment, and only the data that has been provided for the purpose(s) will be treated for the person(s) who informed it and, subsequently , authorization

TURISME SANT BOI, in its capacity as Responsible for the Treatment, guarantees confidentiality in the treatment of all the personal data of the User to which it has access. The Treatment Manager, like any other person who intervenes in any phase of the treatment, is subject to the strictest professional secrecy, with a special commitment to adopt the levels of protection and the necessary measures, both technical and organizational, to guarantee the safety of the personal data and avoid its alteration, misuse, loss, theft, treatment or unauthorized access.

All the information that the User provides to TURISME SANT BOI must be truthful, and he will be solely responsible for any false or inaccurate statements he makes and for any damage he causes to TURISME SANT BOI or third parties.

TURISME SANT BOI reserves the right to exclude from the services any User who has provided false data, without prejudice to other legal actions that may arise.

5. Data processing and treatment purposes

-Treatment: User registration and management.

-Purpose of the treatment: Registration of the User in our user database to carry out the route.

-Legitimation of the treatment: Consent of the interested party.

-Conservation of data: Until the revocation of the consent or the opposition to the treatment of the data of the interested parties.

-Treatment: Sending commercial and/or promotional communications

-Purpose of treatment: Sending commercial and/or promotional communications about activities, services, news, newsletters, and other information about the city of Sant Boi de Llobregat and the activities carried out by TOURISM SANT BOI.

-Legitimation of the treatment: Consent of the interested party

-Conservation of data: Until the revocation of the consent or the opposition to the treatment of the data of the interested parties.

6. Treatment of data by third parties and transfer

Depending on the purposes for which personal data is collected, the following people can access this information, indiscriminately:

- Authorized staff of TURISME SANT BOI or their representatives acting on their behalf, subject to the applicable data protection regulations.

- The Sant Boi de Llobregat Town Council for the purpose of collaboration for procedures and administrative management.

-Regulatory authorities or other third parties in accordance with applicable laws.

-TURISME SANT BOI will not divulge to third parties any information or personal data that it has provided to the application and that can identify it directly or indirectly, unless legally required.

7. Conservation of data

The personal data will be kept for the time strictly necessary until the purpose for which they were collected is reached, and as long as the cause that legitimized the processing of these personal data is maintained. After the cause that legitimized the treatment, the personal data will be kept properly blocked for the period of time that is appropriate in order to comply with the legal prescription periods to avoid possible infringements, as well as for archival or statistical purposes.

8. Security measures

TURISME SANT BOI adopts the security levels required by the RGPD appropriate to the nature of the data that is the object of treatment at each moment for its activity. In this sense, it uses encryption techniques that do not allow a third party to trace the identity of the User who interacts with our services. Likewise, you can also use secure techniques to anonymize the personal data you process to carry out your activity.

However, technical security in a medium such as the Internet is not impregnable and malicious actions by third parties may exist, although TURISME SANT BOI applies the means at its disposal to avoid these actions.

9. Rights of interested parties and their exercise.

In accordance with the RGPD and the LOPDGDG, Users can exercise the following rights:

-Right of access: The User may ask TURISME SANT BOI if it is processing their data and, if so, access them.

-Right of rectification: The User may request the rectification of the data if it is inaccurate, or complete the data that is incomplete.

-Right to request the deletion of your data.

-Right to request the limitation of your treatment: In this case we will only keep them for the exercise or the defense of claims.

-Right to object to treatment: TURISME SANT BOI will stop processing your personal data, with the proviso that they must continue to be processed for legitimate reasons or for the exercise or defense of possible claims.

-Right to data portability: In the event that the User wants their data to be processed by another controller, TURISME SANT BOI will facilitate the transfer of their data to the new controller.

-Right not to be subject to a decision based solely on the automated processing of your personal data.

At any time you can exercise your rights of access, rectification, deletion, limitation, portability or opposition to the processing of your data, by sending a written communication to the address of TOURISM SANT BOI, to the email address dpd@santboi.cat or in person at the Municipal People's Office of Sant Boi de Llobregat City Council.

You can use the models and forms on the rights referred to above by going to the official page of the Catalan Data Protection Authority.

Additionally, if you consider that TURISME SANT BOI is treating your personal data inappropriately, you can file a complaint with the Catalan Data Protection Authority (APDCAT).

10. Changes in the privacy policy

We will only use personal data as established in the Privacy Policy that is in force at the time these data are collected.

TURISME SANT BOI reserves the right to modify this Privacy Policy at any time, publishing the modifications in the application, so it is recommended to visit it every time you access it. If at any time we decide to use the personal data in a different way from what was declared at the time of its collection, the User will be notified by email, provided we have it. At that time, you will be given the option to authorize other uses or disclosures of the personal data that you had provided to us before the modification of our Privacy Policy.

In the event that any clause of this Privacy Policy is annulled or considered void, the rest of the conditions will not be affected, fully preserving their validity and validity, in accordance with the regulations in force at any given time.

11. Links to other applications or web portals

In this application, links can be used that allow a link or link with other applications or web portals. TURISME SANT BOI is not responsible for the content of these websites nor is it responsible for their privacy policies. It is recommended to take into account and read the privacy policies of all web portals or applications you visit. Remember that what is indicated in this Privacy Policy only governs the data collected by TURISME SANT BOI.

12. Applicable legislation

The privacy of all the information provided, both by the User Person through the different forms, and the information accessible through the application, is regulated by the current data protection regulations, especially by the RGPD and by the LOPDGDD.