Política de Privacidad
Through this data protection page, the Palma City Council aims to provide quick and easy access to the privacy policy regarding the data processing it carries out, as well as inform about the rights of data subjects so they can effectively control their personal data.
What rights do I have over my data?
The regulations recognise the rights that allow individuals to exercise effective control over their data. These rights, which can only be exercised by the data subject or a duly accredited representative, are: Access, rectification, cancellation or erasure (right to be forgotten), restriction, portability, and objection.
Access
Allows confirmation of whether or not data processing exists. If so, the subject has the right to access the list of processed data, its typology, purpose, origin, transfers made and planned (if applicable), and expiry date. If requesting access to video camera images, a photograph of the affected person must be attached, specifying: camera location, date, and time. Model for the exercise of the right of access (Annex).
Rectification
Allows the correction of inaccurate data or the completion of incomplete data. Supporting documentation will be required. Model for the exercise of the right of rectification (Annex).
Cancellation/deletion (right to be forgotten)
Allows for the deletion of data affecting the data subject. If granted, the data will be blocked and later erased according to legal terms. Form for the exercise of the right of cancellation (Annex).
Restriction
Allows the use of data only for claims or protection of third-party rights while verifying accuracy or lawfulness. It must be justified according to GDPR. Model for the exercise of the right of restriction (Annex).
Objection
Allows you to request that the administration stops using certain data for specific processing. This must be justified unless processing is based solely on consent. Model for the exercise of the right of objection (Annex).
Portability
The data subject has the right to receive personal data in a structured and machine-readable format and transmit it to another controller if based on consent or contract. This includes the right to direct transmission between controllers if technically possible. Model for the exercise of the right to portability (Annex).
You can use the following ways to exercise your rights:
In person
You can submit the duly completed and signed form at any Citizen Service Office of the City Council with the necessary documentation.
Virtual extension
Through the virtual extension of the Electronic Office, in addition to telephone service and by email.
By mail
Download and fill out the rights protection claim form and send it to the General Registry of Palma City Council, along with a photocopy of your ID card/foreign resident ID card/passport and, where applicable, supporting documentation to the address indicated (if you are a representative, send authorization or power of attorney). The City Council will inform you of the actions taken in response to your request within one month. In the case of particularly complex requests, the deadline may be extended by a further two months, up to a maximum of three months. In this case, the interested party will receive prior notification of the reasons for the extension of the deadline. Otherwise, the request will be considered rejected. The interested party may file the corresponding claim for protection of rights with the Data Protection Officer of the Palma City Council via this email: delegat.protecciodedades@palma.es or through the AEPD. Translated with DeepL.com (free version)
Palma City Council guarantees that citizens' personal data will be:
Processed legally and transparently
All Council processing is legitimized by a legal basis or consent. Transparency is ensured by providing specific information for each process.
Adequate, relevant, and limited
Every piece of data collected contributes to the processing purposes (management, notifications, etc.) and only necessary data will be collected.
Estos datos personales se integran en el correspondiente Registro de actividades de tratamiento del Ayuntamiento y serán tratados para la finalidad específica de cada tratamiento, tal y como establece el Reglamento establecido por el Reglamento (UE) 2016/679 del Parlamento Europeo y del Consejo de Protección de Datos de Carácter Personal y la Ley O. 3/2018 de Protección de Datos de Carácter Personal y garantía de los derechos digitales.
Kept for no longer than necessary
The City Council only keeps personal data for as long as necessary to comply with legal obligations.
Collected for specified purposes
The Council does not process personal data for any purpose other than that of its collection, according to the information provided to the citizen.
Accurate and up to date
The Council provides means to rectify personal data, without prejudice to the rights recognized in data protection regulations.
Processed securely
The Council applies security measures required by law, especially the National Security Scheme, considering data type, context, and risks.
The City Council guarantees confidentiality in the processing of personal data and in the application of technical and organizational measures to ensure its security in accordance with Regulation (EU) 2016/679 of the European Parliament, Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, and other current regulations on data protection.
Who processes my personal data?
Palma City Council processes data of those interacting with the municipality. Different government areas and autonomous bodies process data according to current legislation.
How is this data collected?
In most cases, personal data are collected directly from citizens via forms when requesting information or services.
Estos datos también pueden obtenerse en el tratamiento de los procedimientos administrativos establecidos y mediante el intercambio de datos previstos en la Ley 39/2015, de 1 de octubre, de Procedimiento administrativo Común de las Administraciones Públicas, que también garantiza la protección y confidencialidad de los datos presentes en la AAPP.
Data may also be processed by third parties acting as data processors under established contracts or agreements.
What processing activities does the City Council carry out?
The Council is responsible for data processing in its public duties and services. Processing is legitimized by the following legal bases:
1.- Performance of a task carried out in the public interest or in the exercise of official authority.
2.- Compliance with a legal obligation. E.g., Administrative Procedure Law.
3.- Consentimiento del ciudadano/a.
Record of Processing Activities
The Council applies security measures and maintains an inventory of its data processing called the Record of Processing Activities.
Se publica el Registro de las actividades de tratamiento, y éste incluye toda la información recogida en el art. 30 del Reglamento (UE) 2016/679:
name and contact details of the controller
purposes of the processing
description of categories of subjects and data
categories of recipients
A record of all categories of processing activities must be kept. On July 28, 2021, the Palma City Council approved the Record of Processing Activities and the Record of contracts between controllers and processors.
To whom can I appeal if I am not satisfied with the response from Palma City Council?
You may at any time exercise your rights to control your personal data (access, rectification, erasure, objection, portability, and restriction) as provided by law.
If you feel your rights haven't been met, you can contact the Data Protection Officer via email at delegat.protecciodedades@palma.es or in person at Avda Gabriel Alomar i Villalonga, 18.