Privacy Policy
1. Details of the website owner
Organization:
Organizer: The Island Council of El Hierro
CIF: P3800003J
Mailing Address: Calle Doctor Quintero 11. 38900 Valverde.
Contact information for the Data Protection Officer: Ricardo Martín Suárez - dpd@elhierro.es
2. Purposes of the processing
3. Data collection forms
The User expressly consents to the inclusion of the data provided in processing operations for which the entity that owns the website is the data controller and data processor, and the purpose of which is to respond to the User’s request. The User may exercise the rights indicated above at any time, provided that such a decision is not retroactive, by notifying the entity via the email address provided. All information provided by the User through the forms for the aforementioned purposes or any other purpose must be truthful. In any case, the User shall be solely responsible for any false or inaccurate statements made and for any damages caused to the entity or to third parties as a result of the information provided.
Legal Basis: User Consent
Data retention: As long as the user maintains their consent
4. How do we collect your data?
The entity responsible for the website obtains your data from the following sources:
Web Forms
Contacts
Specifically, the data we will process includes the following categories:
Identifying information.
Cookies.
5. How long will we retain your data?
We will process your personal data for as long as necessary to fulfill the purpose for which it was collected.
You will be able to:
Maintain consent for commercial activities, if requested and accepted by you: We will process your data for the commercial activities to which you have consented.
Withdraw consent for commercial activities: We will block your data.
As a result of this blocking, the Entity will not have access to your data and will only process it to make it available to the competent Public Authorities, Judges and Courts, or the Public Prosecutor’s Office, for the purpose of addressing any potential liabilities related to the processing of the data, particularly for the exercise and defence of claims before the Spanish Data Protection Agency. We will retain your data in blocked form for the periods established in the applicable provisions or, where applicable, in the contractual relationships maintained with the Entity, and will proceed to permanently delete your data once such periods have elapsed.
Recipients
Personal data is not disclosed to third parties, except where required by law. No international transfers of data to third countries are carried out either.
The Entity applies strict criteria when selecting service providers in order to comply with its data protection obligations and undertakes to enter into the corresponding data processing agreement with them, imposing, among others, the following obligations: to implement appropriate technical and organisational measures; to process personal data for the agreed purposes and solely in accordance with the documented instructions of the Entity; and to delete or return the data to the Entity once the provision of services has ended.
Source
Personal data is obtained directly from the data subjects and from our collaborators. The categories of personal data provided by our collaborators are as follows:
- Identification data.
- Postal or email addresses.
- No specially protected data is processed.
Rights
Right of Access, Rectification and Erasure: Data subjects have the right to obtain confirmation as to whether or not the Entity is processing personal data concerning them. Data subjects have the right to access their personal data and to request the rectification of inaccurate data or, where applicable, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
Right to Restriction and Objection: In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain it for the exercise or defence of claims. In certain circumstances and for reasons relating to their particular situation, data subjects may object to the processing of their data. The Entity will cease to process the data, except where there are compelling legitimate grounds or where necessary for the exercise or defence of potential claims. These rights may be exercised by any means of communication addressed to the Entity at the address indicated above, enclosing a photocopy of the data subject’s national identity card (DNI), or via the email address or contact details indicated above.
Updates and Amendments
The Entity reserves the right to modify and/or update the information on data protection whenever necessary to ensure proper compliance with the Data Protection Regulation. If any changes are made, the new text will be published on this page, where you will be able to access the current policy. In each case, the relationship with users will be governed by the rules in force at the exact time the website is accessed.
Communication and Support Channel
Data subjects may raise any questions regarding the processing of their personal data or the interpretation of our policy by contacting us via the email address or contact details indicated above.
Duration and Amendments
The Entity shall have the right to unilaterally modify the terms and conditions set forth herein, in whole or in part. Any changes will be published in the same manner as the information contained in this legal notice.
The term of validity of this legal notice shall therefore coincide with the period during which it is published, until such time as it is amended, in whole or in part, by the Entity.
The Entity may unilaterally terminate, suspend or interrupt the operation of this website, without the user being entitled to claim any compensation. Following such termination, the user must destroy any information concerning the Entity that they possess in any format and that they have obtained through the website or through communications made individually to the user by the Entity.
Applicable Law and Jurisdiction
6. Information on the Processing of Data Relating to Documents Registered as Incoming and Outgoing at the El Hierro Island Council Registry
Purpose of Processing
Management of the Entity’s Incoming and Outgoing Correspondence Registry
Description of the Categories of Data Subjects and the Categories of Personal Data:
Contacts:
Applicants
Categories of Personal Data:
Identification data: first name and surname, Tax Identification Number (NIF), postal address, telephone numbers, email address.
Any information that may be contained in the applicant’s request.
The categories of recipients to whom the personal data have been or will be disclosed:
No disclosures are generally envisaged, but they may occur where required by the application to other Public Authorities.
Where possible, the time limits established for the deletion of the different categories of data:
There is no specified time limit, as this is not a closed category of data.
Legal Basis for Processing:
GDPR: Article 6(1)(c) — Processing is necessary for compliance with a legal obligation to which the controller is subject.
7. Information on the Processing of Data Relating to Applications and Calls for Applications of the El Hierro Island Council
Purpose of Processing
Processing applications and calls for applications of the Entity.
Description of the Categories of Data Subjects and the Categories of Personal Data:
Applicants.
Categories of Personal Data:
First name and surname, NIF/DNI, address, telephone number and signature.
Data requested as part of the call for applications, as well as certificates where these are required as a condition of the call.
The categories of recipients to whom the personal data have been or will be disclosed:
The identity of the applicant may be verified with other public authorities related to the Controller, where the applicant has given authorization for this purpose.
Where possible, the time limits established for the deletion of the different categories of data:
The data will be retained for as long as necessary to fulfil the purpose for which they were collected and to determine any potential liabilities that may arise from that purpose and from the processing of the data. The provisions of the applicable regulations on archives and records shall apply.
GDPR: Article 6(1)(c) — Processing is necessary for compliance with a legal obligation to which the controller is subject.
Article 6(1)(a) — The data subject has given consent to the processing of their personal data for one or more specific purposes.
8. Information on Subscriptions to Newsletters
The user expressly consents to the incorporation of the data provided into processing activities for which the entity that owns and is responsible for the website is the data controller, and whose purpose is to send the user general information and newsletters published by the Entity. The user may exercise the rights indicated above at any time, without such decision having retroactive effect, by contacting us via the email address provided. Our communications will always include a direct means of managing consent and unsubscribing from our communications.
Legal Basis: User consent.
Data Retention: For as long as the user maintains their consent.
Purpose of Processing: To enable the Entity to send general information and/or newsletters to the applicant.
Time Limits or Criteria for Data Retention: The information will be retained for as long as the user’s consent remains in force.
Rights of Data Subjects: Data subjects have the right to access, rectification, erasure, data portability, restriction of processing and/or objection, upon request by email or in writing to the address indicated above, subject to proper identification.
9. Information on the Processing of Data Relating to User Registration
The user expressly consents to the incorporation of the data provided into processing activities for which the entity that owns and is responsible for the website is the data controller, and whose purpose is to manage the user’s registration on our platforms. The user may exercise the rights indicated above at any time, without such decision having retroactive effect, by contacting us via the email address provided. All information provided by the user through the forms for the aforementioned purposes or any other purposes must be truthful. In any event, the user shall be solely responsible for any false or inaccurate statements made and for any damage caused to the Entity or third parties as a result of the information provided. Any data provided that is not truthful may prevent the registration process from being completed or may cause it to be suspended at any stage.
The Entity will send the user information about the platform’s activities and events. The user may object to receiving such communications through the messages received.
Legal Basis: The data subject’s consent. Compliance with legal obligations, where applicable, in the relationship with registered users.
Data Retention: For the legally required period and/or for as long as consent remains in force.
10. Information on the Processing of Data Relating to Data Protection and Video Surveillance
Purpose of Processing: Security of property and the safety of individuals on the Entity’s premises.
Time Limits or Criteria for Data Retention: The information will be retained for a maximum period of 30 days.
Automated Decision-Making, Profiling and Applied Logic: No automated decision-making or profiling is carried out.
Details of the Legal Basis for Processing: Legitimate interest of the data controller.
Rights of Data Subjects: Data subjects have the right to access, rectification, erasure, data portability, restriction of processing and/or objection, upon request by email or in writing to the address indicated above, subject to proper identification. Rights may also be exercised before the Spanish Data Protection Agency at www.aepd.es.
Other Considerations: The images may be disclosed to the State Security Forces and Corps in the event of an incident.
11. Information on the Processing of Data Relating to Data Protection and General Applications
Purpose of Processing: Management and response to general applications submitted by applicants.
Time Limits or Criteria for Data Retention: The information will be retained for the legally required periods.
Automated Decision-Making, Profiling and Applied Logic: No automated decision-making or profiling is carried out.
Details of the Legal Basis for Processing: Exercise of public authority vested in the controller.
Rights of Data Subjects: Data subjects have the right to access, rectification, erasure, data portability, restriction of processing and/or objection, upon request by email or in writing to the address indicated above, subject to proper identification. Rights may also be exercised before the Spanish Data Protection Agency at www.aepd.es.
Other Considerations: The data may be disclosed to other Public Authorities where necessary to address the request.
12. Information on the Processing of Data Relating to Events and Activities
The user expressly consents to the incorporation of the data provided into processing activities for which the entity that owns and is responsible for the website is the data controller, and whose purpose is to enable the user to participate in activities and events organized by the Entity. In addition, where the user so indicates, they may authorize the Entity to publish their data on social media and websites owned by the Entity. Their data may also be used to send them communications relating to the event and/or activity in which they participate, as well as other similar activities organized by the Entity.
Purpose of Processing: Participation in an activity or event organized by the Entity. Given the nature of public events, in some cases users’ identifying data, images and messages may be used on the Entity’s social media and websites. Contact with users.
Time Limits or Criteria for Data Retention: The information will be retained for as long as the user’s consent remains in force.
Rights of Data Subjects: Data subjects have the right to access, rectification, erasure, data portability, restriction of processing and/or objection, upon request by email or in writing to the address indicated above, subject to proper identification. Rights may also be exercised before the Spanish Data Protection Agency at www.aepd.es.
13. Information on the Processing of Data Relating to the Taking of Images
Purpose of Processing: To capture the individual’s image and use it for promotional purposes through the Entity’s own media, such as its website, social media or printed materials. Where images are used on social media, the individual accepts the privacy terms and conditions of those social media platforms.
Time Limits or Criteria for Data Retention: The data will be retained for as long as consent remains in force.
Automated Decision-Making, Profiling and Applied Logic: No profiling analyses are carried out.
Details of the Legal Basis for Processing, Where Applicable to a Legal Obligation, Public Interest or Legitimate Interest: The individual’s consent or, in the case of participation in public events, the Entity’s legitimate interest.
Obligation to Provide Data and Consequences of Failure to Provide It: If consent is withdrawn, the images will be deleted.
Recipients of Disclosures or Transfers: No disclosures are envisaged.
Rights may be exercised by contacting the Entity via the contact email address or in writing at our address, providing proof of identity.
Right to Withdraw Consent: Consent may be withdrawn, with the consequences described above.
Right to Lodge a Complaint with the Supervisory Authority: The data subject may lodge a complaint with the Spanish Data Protection Agency.
14. Information on the Processing of Data Relating to the Recording of Calls at the El Hierro Island Operational Coordination Centre (CECOPIN)
Purpose of Processing: For security and emergency response purposes, calls received by CECOPIN will be recorded.
Time Limits or Criteria for Data Retention: The data will only be retained for as long as necessary to ensure the security and quality of the service.
Automated Decision-Making, Profiling and Applied Logic: No profiling analyses are carried out.
Details of the Legal Basis for Processing, Where Applicable to a Legal Obligation, Public Interest or Legitimate Interest: Exercise of the public powers vested in the data controller.
Obligation to Provide Data and Consequences of Failure to Provide It: Call recording is unavoidable in order to ensure the provision of the service.
Recipients of Disclosures or Transfers: No disclosures are envisaged, except where required by law or necessary for emergency response purposes.
Rights may be exercised by contacting the Entity via the contact email address or in writing at our address, providing proof of identity.
Right to Lodge a Complaint with the Supervisory Authority: The data subject may lodge a complaint with the Spanish Data Protection Agency.
15. Cookie Policy?
You may access the Entity’s Cookie Policy on its website: Cookie Policy