INTRODUCTION
Your privacy is important to us, so, through this document, we explain which data we collect from users, how we use it and for what purpose, among other indications.
For your information, we will never request more information than we actually need for the requested services; we will never share it with third parties, except by legal obligation or with your prior authorisation; and we will never use your data for any purpose not previously indicated.
As users, you must read this Privacy Policy carefully on a regular basis, and whenever you enter your personal data, as this document may be subject to modifications, given that the provider may modify any type of information that may appear on the website in order to comply with the regulations or update the policy, and without any obligation to give prior notice or inform users of such obligations, the publication on the provider's website being sufficient.
DATA CONTROLLER
- Identity: Cabildo de Gran Canaria (also the provider)
- Tax ID (CIF): P3500001G
- Postal address: C/ Bravo Murillo, 23 — 35003 Las Palmas de Gran Canaria
- DPO contact: dpd@grancanaria.com
The Cabildo de Gran Canaria, as the party responsible for the website, in accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and other current regulations on the protection of personal data, and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSICE), informs you that it has implemented the necessary security measures, of a technical and organisational nature, to guarantee and protect the confidentiality, integrity and availability of the data entered.
METHOD OF OBTAINING DATA, WHAT DATA WE COLLECT AND ITS PURPOSE
The data we collect, the way we obtain it and the purpose of the processing is as follows:
1. User registration:
- Required data: name, surname, email, telephone.
- Purpose: to create a user account and be able to purchase tickets and have a record of and access to them.
- Legitimacy: user's consent.
2. If you purchase tickets:
- Required data: name and surname, email, telephone and information about a credit or debit card.
- Purpose: purchase of tickets to our events.
- Legitimacy: user's consent.
3. Carrying out the contractual relationship and the analogous administrative, tax and accounting procedures that are necessary under current legislation:
- Required data: name and surname, telephone, email.
- Purpose: carrying out internal commercial, tax and administrative management.
- Legitimacy: consent of the interested party and contractual relationship.
You may revoke your consent at any time by sending a letter with the subject "Unsubscribe" to the email indicated.
In accordance with the LSSICE, the Cabildo de Gran Canaria does not carry out SPAM practices; therefore, it does not send commercial emails that have not been previously requested or authorised by the User. Consequently, in all communications you receive from the provider, the user has the option of cancelling their express consent to receive our communications.
We will not process your personal data for any purpose other than those described, except by legal obligation or judicial requirement.
You will not be subject to decisions based on automated processing that produce effects on your data.
DATA RETENTION PERIOD
Your data will be retained for as long as the commercial relationship with us lasts or until you exercise your right of cancellation, objection or restriction of processing. However, we will retain your data for the periods legally established in the applicable provisions.
RECIPIENTS OF TRANSFERS OR DISCLOSURES
The Cabildo de Gran Canaria does not carry out any transfer or disclosure of data either inside or outside the EU. The provider will only provide information to the security forces and bodies under a court order or by obligation of a legal regulation, without prejudice to being able to block or cancel your account if there may be evidence of the commission of any offence by the user. The information provided will only be that which the provider has at that time.
The information you provide to us through this website will be hosted on the Yesweticket platform, owned by SERVEIS D'INTERNET JAVAJAN, S.L., which is the data processor and which provides this Yesweticket software management service to the Cabildo de Gran Canaria. The processing of the entity's data is regulated by a data processor agreement between the provider and that company.
RIGHTS OF INTERESTED PARTIES
As a user-interested party, you may request the exercise of the following rights before the Cabildo de Gran Canaria by submitting a letter to the postal address in the heading or by sending an email to dpd@grancanaria.com, indicating as Subject: "DATA PROTECTION: RIGHTS OF AFFECTED PARTIES".
Rights:
- Right of access: allows the interested party to know and obtain information about their personal data being processed.
- Right of rectification or erasure: allows errors to be corrected and data that turns out to be inaccurate or incomplete to be modified.
- Right of cancellation: allows data that is inadequate or excessive to be deleted.
- Right of objection: the interested party's right that the processing of their personal data not be carried out or that it cease.
- Restriction of processing: entails the marking of the personal data retained, in order to limit its future processing, for the exercise or defence of claims.
- Data portability: provision of the data subject to processing to the interested party, so that they can transmit it to another controller, without hindrance.
- Right not to be subject to automated individual decisions (including profiling): the right not to be subject to a decision based on automated processing that produces effects on or significantly affects them.
As a user, you have the right to withdraw the consent given at any time. The withdrawal of consent will not affect the lawfulness of the processing carried out before the withdrawal of consent.
You also have the right to file a complaint with the supervisory authority if you consider that your rights in relation to the protection of your data may have been infringed (Spanish Data Protection Agency, www.aepd.es).
ADDITIONAL INFORMATION
SECURITY MEASURES
The data you provide to us will be treated confidentially. The provider has adopted all the technical and organisational measures and all the levels of protection necessary to guarantee security in the processing of the data and to prevent its alteration, loss, theft, unauthorised processing or access, in accordance with the state of technology and the nature of the data stored. Likewise, it is also guaranteed that the processing and recording in files, programs, systems or equipment, premises and centres comply with the requirements and conditions of integrity and security established in the current regulations.
LANGUAGE
The language applicable to this privacy policy is Spanish. Therefore, in the event of any contradiction in any of the versions provided in other languages, the Spanish version shall prevail.
CHANGES TO THIS PRIVACY POLICY
The Cabildo de Gran Canaria reserves the right to modify this policy in order to adapt it to legislative or jurisprudential developments.
REVOCABILITY
The consent given, both for the processing and for the disclosure of the data of the interested parties, is revocable at any time by notifying the Cabildo de Gran Canaria under the terms established in this Policy for the exercise of rights. This revocation will in no case be retroactive.
LEGISLATION
In general, the relationships between the Cabildo de Gran Canaria and the Users of its telematic services, present on this website, are subject to Spanish legislation and jurisdiction, to which the parties expressly submit, the Courts and Tribunals of Las Palmas de Gran Canaria being competent for the resolution of all conflicts arising from or related to its use.