Granollers City Council, as the Data Controller, guarantees a suitable and coherent level of protection for natural persons with respect to their personal data subject to processing by the various municipal services of the city council, in accordance with the General Data Protection Regulation (2016/679).
Granollers City Council takes full responsibility for the processing of personal data and only uses them faithfully and in accordance with the legal bases that enable the lawfulness of their processing in accordance with the General Data Protection Regulation.
With the aim of complying with the General Data Protection Regulation, Granollers City Council has prepared a Record of Processing Activities and has adopted security measures suitable for and appropriate to the risks objectively assessed and identified in relation to the data subjects’ rights and freedoms, to which the processing undertaken by the city council could give rise.
Granollers City Council applies the principle of transparency in the processing of personal data, issuing to the data subjects’ information that is concise, easily accessible, complete and in language that is easy to understand and, simultaneously, facilitating the exercise of rights by providing forms.
Similarly, Granollers City Council has designated a Data Protection Officer in accordance with the provisions of Article 37.1.a. of the General Data Protection Regulation (2016/679). The Data Protection Officer can be contacted by email at firstname.lastname@example.org.
Further information about the specific processing activities carried out by Granollers City Council is provided below.
FURTHER INFORMATION ABOUT DATA PROTECTION
1. Data Controller
Identity: Granollers City Council
Postal address: Plaça de la Porxada 6, 08401 Granollers (Barcelona)
Telephone number: +34938 426 610
Email address: email@example.com
2. Data Protection Officer
3. Storage Period
The personal data of the data subjects are retained for the period necessary to comply with the purposes for which they were obtained, in the exercise of the competencies and duties of the city council, and to determine possible responsibilities arising from these purposes.
4. Legal Base of the Processing
The legal bases that legitimise the processing of the personal data of the data subjects, based on the responsibilities and duties of the council, are as follows:
4.1. General Purposes
General Data Protection Regulation 2016/679
Article 6.1.c. Processing is necessary for compliance with a legal obligation to which the controller is subject.
Article 6.1.e. Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
4.2. Specific Legislation
Transparency. Access to information:
Law 19/2014, of 29 December, on transparency, access to public information and good governance.
5. Purposes of the Processing
5.1. General Purposes
The purpose of processing your personal data is to facilitate the council’s communication with citizens in the exercise of its various municipal responsibilities in accordance with the legal bases that legitimise the processing of personal data by the council.
5.2. Specific Purposes
General requests: the purpose of processing personal data refers to the recording, processing and management of the public’s right to communicate with the council, including the right to petition.
Incidents, complaints, suggestions and petitions: the purpose of processing personal data refers to the recording, processing and management of the public’s right to communicate with the council, including the right to petition.
Transparency. Access to information: the purpose of processing personal data refers to the registration, processing and management of people’s petitions to access public information, as a subjective right that all people have to access public information.
Communications: the purpose of processing personal data refers to the management and processing of communications issued by citizens to the city council in order to contact the city council, which may be processed by various municipal services.
Culture services: the purpose of processing personal data refers to the organisation and management of the city’s cultural and leisure activities.
Economic promotion: the purpose of processing personal data refers to the management of the promotion and stimulation of commercial activity and the provision of commercial services to the city, in addition to the management of the enterprise creation and entrepreneurship promotion service. It also refers to the management of the employment service for citizens seeking work.
Access control: the purpose of processing personal data refers to guaranteeing the security of facilities, premises and people. It also refers to the registration and control of visitors.
Citizen security (Local Police): the purpose of processing personal data refers to the management of actions related to the exercise of the duties of the Local Police.
Tourism: the purpose of processing personal data refers to the promotion of the city as a tourist destination.
Processing of the rights of data subjects: the purpose of processing personal data refers to the registration, processing and management of requests concerning the recognised data protection rights of data subjects.
6. What Are Your Rights?
The people who own the data that is processed by Granollers City Council have the recognised right to at all times exercise their rights to access their data, rectify erroneous or inaccurate data, have their data erased when, among other reasons, the data are no longer necessary for the purposes for which they were collected, and to data portability.
In certain circumstances, data subjects can request the restriction of the processing of their data, in which case they will only be stored for the exercise or defence of legal claims.
Also, for reasons related to their specific situation, data subjects may oppose the processing of their data. Granollers City Council will then stop processing the data, except for legitimate reasons or for the exercise or defence of possible legal claims.
To exercise these rights, you can contact Granollers City Council by submitting the corresponding form to the email address firstname.lastname@example.org or to the postal address of the council at Plaça de la Porxada, 6, 08401 Granollers (Barcelona).
Moreover, if you are not satisfied with the response to the exercise of your rights, and whenever you consider it suitable, you can submit a legal claim to the Catalan Data Protection Authority by email at www.apd.cat.
7. Data Recipients
Other public administrations with competency in the subject, where applicable.
8. Personal Data Source
The personal data subject to processing by Granollers City Council for the performance of a task carried out in the public interest, in the exercise of official authority or in compliance with a legal obligation are provided directly by the data subjects or their representatives, or by other public administrations in accordance with the legal provisions.
9. Categories of Data Subject to Processing
Identifying data, data related to personal characteristics: marital status, family, date of birth, place of birth, age, sex, nationality, academic, professional or employment data, and special data categories, and other data that may be provided by the citizen, depending on the administrative process or municipal action in question.