Data protection

The purpose of this policy is to regulate the processing of data carried out by the Fundació Turisme i Fires de Manresa with regard to the data it may collect on its website.

Legal framework

The management of data protection by the Fundació Turisme i Fires de Manresa is based on the following legal framework:

  • Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
  • Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights.

Identity of the data controller

The data controller for the personal data collected on the corporate websites of www.manresaturisme.cat is:

 

FUNDACIÓ TURISME I FIRES DE MANRESA

Pol. Industrial Els Dolors C

Carrer Castelladral, 5-7 Palau Firal Ap. 559

08243 Manresa

G-61185815

turisme@manresaturisme.cat

93 877 63

Purpose of data processing

The data provided to the Fundació Turisme i Fires de Manresa by different means, contact forms, surveys or procedures used during collection are carried out in accordance with current legislation on data protection and for the sole purpose of providing the service requested.

Each of these means provides detailed information on the purpose of the data processing, which is only carried out if such processing has been authorised.

Below is detailed information on the different purposes for which we may collect your data:

  • Provision of municipal services and procedures: the information will be processed for the management of the procedure or service requested. The data may be transferred to third parties if the service requires it and in order to comply with the powers of the City Council.
  • Subscriptions: information about the services and activities of the Fundació Turisme i Fires de Manresa will be sent. The data will not be transferred to third parties.
  • Activities: we will process the data for the management of activities, courses, workshops, etc. organised by the Fundació Turisme i Fires de Manresa. The data will not be transferred to third parties.
  • Citizen participation: we will process the data for the management of the citizen participation process and to respond to any proposals and questions that may arise. The data will not be transferred to third parties.
  • Contact, complaints or suggestions: we will process the data to respond to the various requests, questions or queries raised. The data will not be transferred to third parties.

The data retention period is determined by the risk analysis of each of the processing operations in relation to the Document Classification Table approved by the Manresa Tourism and Fires Foundation. In any case, the retention period will be limited by the service requested and may be retained as part of the administrative procedure as established by law, within the scope of municipal obligations and powers.

Only the data you have provided for the stated and authorised purpose will be processed. No processing will be carried out by third parties nor will data be transferred to third parties unless expressly authorised or legally required.

The legal basis for the processing of your data is the exercise of the powers of the Fundació Turisme i Fires de Manresa and the provision of the services requested.

Under no circumstances will automated decisions be made based on your data.

Users provide their data voluntarily at all times and are informed of how it will be used and processed. All information provided by users must be truthful. Users are solely responsible for any false or inaccurate statements they make and for any damage caused to the Fundació Turisme i Fires de Manresa or to third parties. The Fundació Turisme i Fires de Manresa reserves the right to exclude from its services any user who has provided false data, without prejudice to any other actions that may be applicable under the law.

Rights of data subjects

At any time, you may request and obtain information about how and why the Fundació Turisme i Fires de Manresa is processing your data:

  • Access the data: request what data the Fundació Turisme i Fires de Manresa holds and how it is used, and exercise the right to portability, if applicable.
  • Rectify the data: request the modification or correction of inaccurate data.
  • Delete the data: request that the data be deleted and not processed, except as required by law.
  • Restrict processing: request restricted use of your data in accordance with your requirements.
  • Object to processing: request that your data not be used for a specific purpose, except as required by law.

To do so, you can send a letter indicating which right you wish to exercise (access, rectification, deletion, opposition or portability of data), either electronically or in person at the Palau Firal de Manresa (C/ Castelladral 5-7, Manresa).

Submission of complaints

The Catalan Data Protection Authority (www.apdcat.cat) is the supervisory body that ensures compliance with data protection legislation in the Catalan Public Administration. If you consider that the Fundació Turisme i Fires de Manresa has breached any of the provisions set out in this policy, you may lodge a complaint with this body.

Record of Processing Activities

The Fundació Turisme i Fires de Manresa applies the security measures required by the regulations to the processing of personal data and has an inventory of the data processing it carries out in a single document, called the Register of Processing Activities.

The processing operations detailed below have an information structure that meets the requirements of Article 30 of the General Data Protection Regulation (GDPR). This structure is as follows:

  • Structured set of data
  • Description of the processing activity
  • Legal basis for processing
  • Purpose of processing
  • Categories of data subjects
  • Categories of personal data subject to processing
  • Categories of recipients
  • Data retention (periods/criteria)
  • Security measures
  • International data transfers