Policy on
Privacy

PRIVACY POLICY

1.- Who is responsible for the processing of your data?

Name of the person responsible: Excma. Diputación Provincial de Cuenca.

Address: Calle Aguirre número 1, CP 16002

Telephone: 969 177 177

E-mail: cmuelas@dipucuenca.es

2.- For what purposes will we process your personal data?

The data provided to us, as well as any other data generated during the development of the relationship with the citizen/interested party, may be processed for different purposes depending on the services provided and, in any case, to maintain contact and communication with the latter and to manage the provision of the services requested or provided by this Provincial Council.

Where appropriate, more explicit and specific purposes may be indicated in the information clauses incorporated in each of the data collection channels (web forms, paper forms, voiceovers or posters and information notes) for specific cases.

3.- What is the legitimacy for the processing of your data?

The legal basis for the processing of personal data for which consent has not been requested shall be the performance of the legal obligation or the exercise of public functions or powers mentioned in the basic information of the processing to be carried out.

In cases where this has been requested, the basis of legitimacy is the consent of the data subject.

4.- How long will we keep personal data for?

The information shall be kept until the file is completed and thereafter for the periods legally provided for in the regulations and for as long as a judge or court may request it.

The information will be kept for as long as you do not revoke your consent.

Likewise, any information processed for historical purposes that becomes part of the Historical Archive will be preserved in accordance with the provisions of the regional law 19/2002, of 24 October, on Public Archives of Castilla la Mancha.

5.- To which recipients will your data be communicated?

Personal data may be communicated to:

  • Banks for the direct debiting of taxes, fees and public prices.
  • Banks for the payment of public subsidies or aid.
  • Public registers for background and title checks.
  • In enforcement proceedings, banks, financial institutions and land registries.
  • Court of Auditors for the exercise of audit activities.
  • Courts and tribunals for the defence of the rights of the Cuenca Provincial Council.
  • Public administrations with competence in the matter that request, by means of an appropriate administrative act, the transmission of certain information.

International data transfers are only envisaged for processing relating to the use of social networks. The recipients of these international transfers will be Facebook Inc. Twitter and Google. They are all parties to the "Privacy Shield" agreement. https://www.privacyshield.gov/welcome

6.- What are your rights in relation to data processing?

Any person has the right to obtain confirmation of the existence of the processing of their data, to access their personal data, to request the rectification of data that is inaccurate or, where appropriate, to request its deletion, when, among other reasons, the data is no longer necessary for the purposes for which it was collected or the data subject withdraws the consent given.

In certain cases, the data subject may request that we limit the processing of his or her data, in which case we will only retain the data in accordance with the regulations in force.

In certain cases, you may exercise your right to data portability, which will be provided in a structured, commonly used or machine-readable format to you or the new data controller you designate.

You have the right to withdraw your consent at any time for any of the processing operations for which you have given your consent.

The Cuenca Provincial Council has forms available for the exercise of rights or to use those drawn up by the Spanish Data Protection Agency.       

These forms must be signed electronically or be accompanied by a photocopy of the DNI. If acting through a representative in the same way, they must be accompanied by a copy of their DNI or with an electronic signature.

The forms must be submitted in person at the General Registry, by means of the electronic administration system or sent by post or e-mail to the addresses that appear in the "Responsible party" section.

You have the right to lodge a complaint with the Spanish Data Protection Agency in the event that you consider that the exercise of your rights has not been adequately addressed.

The maximum time limit for a decision is one month from the receipt of your request, which may be extended for a further two months depending on the volume of claims submitted or the complexity of the claim.

In the event of any changes to your data, please inform us in writing so that we can keep your data up to date".

 

The completion of personal data is not obligatory. Users who provide their personal data are solely responsible for the veracity and accuracy of the data included, and the Diputación de Cuenca is exonerated from any liability in this regard.

The personal data that the user of the website may provide will become part of an automated file owned by Excma. Diputación de Cuenca, which will be processed in accordance with Organic Law 15/1999 of 13 December on Personal Data Protection.

By providing their data, users authorise the automated processing of their data for the purposes indicated by the website. Users may at any time exercise their right of access, rectification, cancellation and opposition of their data by using the contact details at the bottom of the page.

DATA PROTECTION

Who is the controller of your personal data?
The controller is the public body whose identity, postal address, telephone number, e-mail address and contact details of the Data Protection Officer (DPO) are set out in the basic data protection information.

For what purposes do we process your personal data?
The information provided by the interested party will be processed in order to manage the request expressed in the general request. Specifically, all the administrative management tasks and procedures necessary to comply with the interested party's request will be carried out and, where appropriate, to initiate the corresponding procedure. As well as facilitating the completion of future requests and receiving communications in cases in which the interested party may be affected.

No automated decisions will be made on the information provided.

How long will my personal data be kept?
The general request and, where appropriate, the file to which it gave rise, will be kept by the Data Controller for the time necessary to fulfil the purpose for which they are collected and to determine any possible liabilities that may arise from the purpose, in addition to the periods established in the regulations on archives and documentation.

What is the legitimacy for the processing of your data?
The legal basis for the processing of your data is the consent of the data subject, if the data subject is over 14 years of age, or , where applicable, the consent of the holder of parental authority or guardianship if the data subject is a minor, as set out in Articles 6(1)(a) and 8(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council.

To which recipients will your data be communicated?
Data will not be communicated to third parties without the consent of the data subject, or when the processing is necessary for compliance with Law 39/2015 on the Common Administrative Procedure for Public Administrations, of
Law 40/2015 on the Legal Regime of the Public Sector or other applicable regulations depending on the specific case.

What rights can you exercise with regard to your personal data?
The data subject shall have the right to access his/her personal data, as well as the right to request the rectification of inaccurate data.
You may also request deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, the data subject may request the restriction of the processing of his or her data, in which case
We will only keep them for the exercise or defence of claims.

In certain circumstances and on grounds relating to their particular situation, data subjects may object to the processing of their data. The controller will stop processing the data, except for compelling legitimate reasons, or the exercise or defence of possible claims.
In accordance with Article 20 of the GDPR, the data subject has the right to data portability.

The data subject may withdraw consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal. He or she may also lodge a prior complaint with the Data Protection Delegate, and ultimately with the Spanish Data Protection Agency.

RESPONSIBLE 

Identity:

PARQUE ARQUEOLÓGICO DE SEGÓBRIGA - CIF: 000000, Postal address: Ctra. Carrascosa de Campo a Villamayor de Santiago, s/n, E-16430 Saelices (Cuenca). E-mail: segobriga@dipucuenca.es

Data protection officer contact details

segobriga@dipucuenca.es

PURPOSES

Extended description of the purpose(s) of the processing:

We will process your data for the purpose of ticketing and access control, administrative, accounting, fiscal and statistical management.

CONSERVATION

Data retention periods or criteria:

The personal data provided shall be kept for as long as the relationship with the entity is maintained and its deletion is not requested by the interested party, and shall be kept in accordance with the legal periods established for tax and accounting matters of 5 (five) years, taking as a reference the last communication.

DECISIONS

Automated decisions, profiling and applied logic:

The entity will NOT make automated decisions, profiling or logic applied to your data.

LEGITIMACY

Legitimation by execution of a contract:

As the processing is necessary for the performance of a commercial contract to which you are a party, it is noted that the type of contract in question is the aforementioned commercial contract for the sale of tickets.

As the communication of personal data is a legal or contractual requirement and a necessary prerequisite for entering into the aforementioned contract, the interested party is informed that he/she is obliged to provide the personal data, and that the consequences of not doing so may result in the non-provision of the requested service.

TARGET

For the duration of the processing, PARQUE ARQUEOLÓGICO DE SEGÓBRIGA will not make any transfer, unless legally obliged to do so, nor will it make any international transfer.

RIGHTS

The data subject may exercise the following rights:

* Right to request access to your personal data.

* The right to request its rectification or erasure.

* The right to request the restriction of processing.

* Right to object to processing.

* Right to data portability.

* Right to withdraw consent.

Any person has the right to obtain confirmation as to whether or not the Entity is processing personal data concerning them. Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, data subjects may request that we restrict the processing of their data, in which case we will only retain the data for the purpose of exercising or defending claims. In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, the entity will stop processing the data, except for compelling legitimate reasons, or the exercise or defence of possible claims.

If you give your consent for a specific purpose, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on your consent prior to its withdrawal.

To do so, you may use the forms provided by the entity, or write to PARQUE ARQUEOLÓGICO DE SEGÓBRIGA with NIF/CIF 000000H, and registered office at Ctra. Carrascosa de Campo a Villamayor de Santiago, s/n, E-16430 Saelices (Cuenca). E-mail: segobriga@dipucuenca.es

In case you feel that your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the competent Data Protection Supervisory Authority, the Council for Transparency and Data Protection of Andalusia, through its website https://www.ctpdandalucia.es/.

ORIGIN OF THE DATA

The personal data that we process at the PARQUE ARQUEOLÓGICO DE SEGÓBRIGA comes directly from you:

The categories of data processed are:

- Identification data

- Postal or e-mail addresses

- Economic data 

Ctra. Carrascosa de Campo a Villamayor de Santiago, s/n, E-16430 Saelices (Cuenca).
Telephone Interpretation Centre: 629 75 22 57
Mail: segobriga@dipucuenca.es

Credits:

Design and implementation: Tragsa Group. Contents: Rosario Cebrián Fernández (Lecturer in Archaeology at the UCM) with the collaboration of the Tragsa Group.

All content and images on this website are protected by copyright. Use without consent is prohibited.