1. Privacy Policy
At the Salamanca City Council and its dependent entities, we are committed to protecting privacy and the proper use of personal data that we process and that you provide to us, both online on this website and, where applicable, any of its subdomains, microsites, and/or mobile applications, as well as offline.
Please read this policy carefully and ensure you understand and agree with it before providing us with your personal data. If you do not agree with it, do not use this website or its services, nor provide your data. Accessing this site, using any of its services, or providing us with your data, whether online or offline, will be understood as a clear affirmative action giving us your consent (where necessary) to process your data for the purposes indicated below.
The personal data requested will be strictly necessary to identify and respond to the request made by the owner of the data or to provide the requested services, and will not be further processed in a manner incompatible with these purposes.
The data collected from each individual will be appropriate, relevant, and not excessive in relation to the purposes for each case, and will be updated when necessary.
The data owner will be informed, prior to the collection of their data, of the general aspects regulated in this policy to provide express, precise, and unequivocal consent for their data processing.
2. Who is responsible for processing your data?
Salamanca City Council
Postal address: Plaza Mayor, 1 - 37002, Salamanca
Phone: 923 279100
DPO Contact: dpd@aytosalamanca.es
3. How did we obtain your data?
Directly from the individual: You may have provided it to us, either offline or online, when requesting our services to maintain a relationship with you.
If the data was provided through this website or any of its subdomains, microsites, and/or mobile applications, we collect information, for example, when you register as a user, fill out any form with personal data, or communicate with us directly via email.
When you provide your personal data, you guarantee that you are authorized to do so and that the information is true, accurate, and up-to-date, not confidential, does not violate any contractual restrictions or third-party rights, and that you commit to not impersonate other users by using their registration data for the various services and/or content on the website.
You are responsible for keeping your data and profile correct and updated. The Salamanca City Council disclaims any responsibility in case of failure to do so.
Automatically collected when visiting our website: When you visit our website, data is sent from your browser to our server to optimize our services and improve your user experience, for example, when accessing the page or logging into our services through third-party services such as social networks or Google. This data may be collected and stored automatically by us or third parties on our behalf. This data may include:
- User's IP address
- Date and time of visit
- URL of the referring website
- Pages visited on our website
- Information about the browser used (browser type and version, operating system, etc.).
We may process and record such uses, sessions, and related information, whether independently or with the help of third-party services, including the use of cookies and other tracking technologies like flash cookies and web analytics.
Provided by a third party: Pursuant to Article 28.2 of Law 39/2015 of October 1, on the Common Administrative Procedure of Public Administrations, the Salamanca City Council may consult or collect documents prepared by any administration whenever data processing is necessary for performing a task carried out in the public interest or in the exercise of public authority conferred on the City Council (Article 6.1(e) GDPR).
Besides the above, if the data is not provided by the individual but by a third party, your data may have been communicated to us by family members, entities, or public or private organizations with which we reach agreements to develop projects, collaborations, etc. The categories of data we process may include: identification data, personal characteristics, social circumstances, academic and professional information, economic, financial and insurance data; transactions of goods and services, employment details, and even specially protected data.
By accepting this policy, you authorize the Salamanca City Council to request additional data necessary to complete the information needed for the aforementioned purposes from third parties or public/private organizations with which agreements are reached.
Sensitive data provided is subject to special protection, and the legitimacy to process it lies in the explicit consent of the individual. Therefore, the third party that provides us with data (entities or public/private organizations with which we reach agreements) is responsible for having the prior and explicit consent of the individual to use and communicate their data and to inform them that their data will be processed by us.
4. Why do we process your data?
The data you provide us, as well as any other generated during the course of the relationship with the individual, may be processed for various purposes depending on the services being provided and, in any case, to maintain contact and communication with individuals and manage the provision of requested services.
In some cases, more explicit and specific purposes may be indicated in the informational clauses included in each data collection method (web forms, paper forms, notices, or posters) for specific cases.
5. How long will we retain your data?
In general, the personal data you provide will be retained to maintain a record of services provided and efficiently manage our services, as long as you remain a user and have not requested their deletion. Even if deletion is requested, they will remain blocked for as long as necessary, limiting their processing solely to comply with legal, administrative, or other obligations, or for the legal time limits established for any potential liabilities or to exercise or defend claims arising from the relationship with the individual.
In other cases, the data retention period will depend on what is specified for each personal data processing activity in the processing activities record.
If the data forms part of an administrative file and the retention period establishes that it is indefinite, it will be retained as part of that administrative file together with it.
6. What is the legal basis for processing your data?
The legal basis enabling us to process your data may vary: in some cases, it may be the consent of the individuals, in others compliance with a legal obligation, in others the City Council's performance of a task carried out in the public interest or the exercise of public powers, in others the protection of vital interests, and in others the execution of a contract.
The provision of the requested data is mandatory as it is essential to address your request and/or provide our services; if you do not provide it, we will not be able to do so.
When the processing is based on your consent, you grant it unequivocally by providing us with your data, with such provision being considered a clear affirmative action on your part indicating consent. You may withdraw this consent at any time by sending us an email to dpd@aytosalamanca.es.
7. Who may receive your data?
The data you provide may be shared with third parties for the proper provision of the service and/or for purposes directly related to the legitimate functions of the transferor and transferee, such as with entities or organizations to which there is a legal obligation to disclose data, as well as with public or private entities or organizations with which we establish agreements to develop projects or collaborations.
By accepting this data protection policy, you expressly and unequivocally authorize, if necessary, the communication of your data to companies, knowing that this may involve a national or international transfer of data to a country either within or outside the European Economic Area, and you give your unequivocal consent to such transfer.
8. What are your rights when you provide us with your data?
Right of access: You may ask us what personal data we are processing and even request a copy of it.
Right to rectification: You may request that we correct inaccurate personal data or complete incomplete data, including through an additional statement.
Right to erasure (right to be forgotten): You may request the deletion of your personal data when it is no longer needed for the purposes for which it was collected, when you withdraw your consent, when it has been unlawfully processed, or to comply with a legal obligation.
Right to restriction of processing: You may request the restriction of processing of your data, in which case we will only retain it to exercise or defend claims.
Right to data portability: You may request that we return your data (to you or to a third party you indicate) in a structured, commonly used, and machine-readable format.
Right to object: You may object to the processing of your data if it is based on the legitimate interest of the data controller or for advertising purposes.
The Public Administrations are required to verify the identity of the individuals in the administrative procedure through their name and surname or company name as listed on their National Identity Document or equivalent identification document.
In the absence of opposition from the individual, the Public Administrations must electronically collect documents through their corporate networks or by consulting data mediation platforms or other electronic systems enabled for this purpose.
To exercise these rights, you can contact us by submitting a completed and signed request to the postal or email address indicated in section 2 of this privacy policy. If your data changes, you must notify us at the same address. Once we receive any of the above requests, we will respond within the legally established time frames.
The request to exercise these rights does not imply their approval. You may file a complaint with the Spanish Data Protection Agency. If you want more information about your rights and to request sample forms for exercising them, you can visit the Spanish Data Protection Agency website at www.aepd.es.
These rights can also be exercised online through the electronic headquarters of the Salamanca City Council.
