Data Protection Policy

1. Introduction

The Department of Tourism of Santa Susanna, committed to the privacy and security of the personal data of its users, guarantees compliance with current regulations on data protection, in particular:

• Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation - GDPR).
• Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

Through this policy, we inform you about how the personal data provided to us by users of our website is collected, processed and protected.

2. Data Controller

• Incumbent: Santa Susanna City Council – Department of Tourism
• NIF: [TIN number]
• Address [Postal address]
• Contact Email: [Contact Email]

3. Purpose of Data Processing

The personal data we collect through the website will be used for the following purposes:

Attention to queries and requests for information about the tourist destination.  

Management of registrations for events, activities and newsletters.

Sending tourist and promotional information, always with the prior consent of the user.

Improvement of the user experience and management of web services.

Compliance with legal obligations arising from our activity.

Personal data will not be used for purposes other than those indicated without a new explicit consent from the user.

4. Legal Basis for Data Processing

The processing of personal data is carried out on the basis of:

• User consent, in the case of subscriptions to newsletters, registrations to activities or requests for information.
• Compliance with a legal obligation, when necessary by applicable regulations.
• Legitimate interest, in those cases in which the processing is necessary for the improvement of the services offered.

5. Data Retention

Personal data will only be kept for as long as necessary to comply with the purpose for which they were collected or to satisfy legal obligations.

• Contact details: They will be kept for as long as the relationship with the user is maintained or until the user requests their deletion.
• Data for promotional actions: They will be kept as long as the user does not revoke their consent.
• Invoicing or administrative transaction data: They will be kept for the period established by tax and accounting legislation.

6. Users' Rights

Users may exercise the following rights over their personal data at any time:

• Right of access: Request information about the personal data being processed.
• Right of rectification: Modifying inaccurate or incomplete data.
• Right to erasure ('right to be forgotten'): Request the deletion of data when it is no longer needed.
• Right of opposition: Oppose the processing of data in certain circumstances.
• Right to restriction of processing: Request that the data only be used for certain purposes.
• Right to portability: Receive the data in a structured and transmissible format.

To exercise any of these rights, the user can send a request to [contact email], indicating in the subject 'Data Protection' and attaching a copy of their identity document to verify their identity.

Likewise, if the user considers that their rights have not been adequately attended, they can file a complaint with the Spanish Data Protection Agency (AEPD) through www.aepd.es.

7. Recipients of the Data

The data collected will not be transferred to third parties, except in the following cases:

• Due to legal obligation (public administrations, security forces, etc.).
• In the case of services managed by third parties (for example, sending newsletters, event management or technological services), always with contracts that guarantee data protection.

8. Security Measures

Santa Susanna City Council implements technical and organisational measures to guarantee the security and confidentiality of personal data, preventing unauthorised access, loss or manipulation.

9. Changes to the Data Protection Policy

This data protection policy may be updated based on new legislation or improvements in our procedures. We recommend that users periodically review this section to be informed of possible modifications.

10. Contact

If you have any questions about this policy, you can contact us at:

• Email [contact email]
• Postal address [full address]