Legal warning

Data Protection

Through this data protection page, the Palma City Council wants to provide quick and flexible access to the privacy policy regarding the data processing that it carries out, as well as inform about the rights of interested parties, in order to who can effectively control your personal data.

What rights do I have over my data?
The regulation recognizes the rights that allow people to exercise effective control over their data. These rights, which can only be exercised by the interested party or by a duly accredited representative, are the following: Access, rectification, cancellation or deletion (right to be forgotten), limitation, portability and opposition.

Access
It allows obtaining confirmation of whether or not there is data processing. If so, the interested party has the right to access the list of data processed, its type, purpose, origin, transfers made and planned (if applicable) and expiration date.
If you request access to video camera images, you must attach a photograph or image of the affected person and specify the following: address of the video cameras, date and time (fraction of half an hour).
Model for the exercise of the right of access (Annex)

Rectification
Allows inaccurate data correction or incomplete data completion
It will be necessary to provide the documentation that justifies the rectification of the requested data.
Model for the exercise of the right of rectification (Annex)

Cancellation/deletion (right to be forgotten)
It allows obtaining the elimination of data that affects the interested party.
In the event of an estimate, the data would be blocked (only available for possible claims) and deleted when the legal prescription periods had expired.
Form for the exercise of the right of cancellation (Annex)

Limitation
Allows the use of data only for claims or protection of the rights of third parties, while verifying the accuracy of the data or the legality of its use.
It will be necessary to motivate it, in accordance with the provisions of the European General Data Protection Regulation.
Model for the exercise of the right of limitation (Annex)

Opposition
It allows you to ask the administration to stop using certain data for a specific treatment.
This exercise of right must be adequately motivated, unless the legal authorization of the treatment is exclusively the consent of the citizen.
Model for the exercise of the right of opposition (Annex)

Portability
The interested party has the right to receive the personal data provided to a controller in a structured, commonly used and machine-readable format, and to transmit it to another controller, if the following requirements are met: the processing is based on consent or in a contract and the treatment is carried out by automated means.
The interested party requests it with respect to the data provided to the person responsible for the treatment and that affects them, including those derived from the activity of the interested party.
Mode of exercise: includes the right to have the data transmitted directly from person in charge to person in charge, if technically possible.
Limitations: this right cannot be exercised when the treatment is based on the fulfillment of a mission of public interest or inherent to the exercise of public power.
Model for the exercise of the right to portability (Annex)

You can use the following ways to exercise your rights:
Face-to-face
You can submit the duly completed and signed form to any City Council Citizen Service Office with the necessary documentation.

Virtual extension
Through the virtual extension of the Electronic Office, in addition to the telephone service, and by email

By mail
Download and fill in the claim form for guardianship of rights and send it to the General Registry of Palma City Council, together with a photocopy of the DNI/NIE/passport and, if applicable, supporting documentation to the address indicated (if you are a representative, send authorization or power).
The City Council will inform you about the actions derived from your request within a month.
In the case of particularly complex requests, the deadline can be extended by another two months and up to a maximum of three months. In this case, the interested party will receive prior notification with the reasons for the extension of the term. Otherwise, the request will be deemed rejected.

The interested party may present the corresponding claim for the protection of rights before the Data Protection Delegate of Palma City Council through this email: delegate.protecciodedades@palma.cat or through the AEPD.

Palma City Council guarantees that the personal data of citizens will be:
Treated legally and transparently

All City Hall processing is legitimized: by a legal basis, in compliance with an obligation or also by the consent of the interested party. Offering specific information on each treatment and disseminating this general privacy policy complies with the principle of transparency.

Adequate, relevant and limited

Each personal data collected by the City Council contributes to the fulfillment of the purposes of the treatment (manage the procedure, send notifications, etc.) and only those that are necessary for the fulfillment of this purpose will be collected.

These personal data are included in the corresponding Registry of treatment activities of the City Council and will be processed for the specific purpose of each treatment, as established by the Regulation established by Regulation (EU) 2016/679 of the European Parliament and of the Protection Council. of Personal Data and Law O. 3/2018 on the Protection of Personal Data and guarantee of digital rights.

It is maintained for a period not exceeding the necessary

The City Council only keeps personal data for as long as it is necessary to comply with legal obligations.

Collected for specific purposes
The City Council does not process personal data for any other purpose than the one for which it is collected, and always in accordance with the information previously provided to the citizen.
 

Accurate and up to date

The City Council makes available to the public means that allow you to rectify your personal data without prejudice to the right to rectification recognized in the data protection regulations.

Safely treated
The City Council applies to the processing of personal data the security measures required by legal regulations, especially by the National Security Scheme, taking into account the type of data, the context and foreseeable risks.

The City Council guarantees confidentiality in the processing of personal data as well as in the application of technical and organizational measures that guarantee their security in accordance with Regulation (EU) 2016/679 of the European Parliament, Organic Law 3/2018 of Protection of Personal Data and guarantee of digital rights and other current regulations on data protection.

Who processes my personal data?
Palma City Council processes the personal data of all those who establish a relationship with the municipal organization or use its services.
The City Council is organized into municipal government Areas, delegated Councilors, and other bodies with their own legal personality such as autonomous bodies, which will process the data following current legislation.

How is this data collected?
In most cases, personal data is collected directly from the citizens themselves (interested persons) through instances or forms that they fill out when they request information, a service or start a procedure with the City Council.

These data can also be obtained in the treatment of established administrative procedures and through the exchange of data provided for in Law 39/2015, of October 1, on Common Administrative Procedure of Public Administrations, which also guarantees the protection and confidentiality of the data present in the AAPP.

The data may also be processed by third parties who enjoy the status of data processors, through contracts or agreements established for this purpose.

What processing activities does the City Council carry out?
The City Council is responsible for all the processing of personal data carried out in the exercise of its functions, powers and public powers conferred by legal provisions, in the provision of services to citizens and, in general, in all areas of the management of the city.

The processing of personal data carried out by the City Council is legitimized on the following legal bases:

1.- Fulfillment of a mission carried out in the public interest or in the exercise of public powers.
2.- Compliance with a legal obligation. Example: Administrative Procedure Law, LRBRL, EBEP.
3.- Consent of the citizen.

Registration of treatment activities
The City Council applies to the processing of personal data the security measures required by the regulations and has an inventory in the document, called the Record of Treatment Activities, the data processing that it carries out.

The Registry of processing activities is published, and it includes all the information contained in art. 30 of Regulation (EU) 2016/679:

the name and contact details of the person responsible
the purposes of the treatment
a description of the categories of data subjects and the categories of data
recipient categories
A record must be kept of all the categories of treatment activities carried out on behalf of a person in charge, which must contain, among other things, the name and contact details of the person in charge and the categories of treatments carried out on behalf of each person in charge.

In this sense, the Governing Board of the Palma City Council in a session on July 28, 2021 agreed to approve the Register of Personal Data Processing Activities carried out within the scope of municipal powers and also approved the Register of contracts between those responsible and treatment managers.

Who can I turn to if I am not satisfied with the response from Palma City Council?
You can exercise at any time the rights that guarantee control of your personal data: rights of access, rectification, deletion, opposition, portability and limitation of treatment, provided for in current regulations.

If you consider that your rights have not been adequately addressed, you can submit a documented request to the Data Protection Delegate of Palma City Council by email: delegat.protecciodedades@palma.cat - or in person at Avda Gabriel Alomar i Villalonga, 18, planta baja -07006-Palma.