The main purpose of the processing of the personal data of the interested party will be to execute the functions and obligations of the City Council within the scope of its powers , in accordance with the requirements indicated by current regulations.

We are therefore, and in general, faced with data processing necessary for the fulfillment of a mission carried out in the public interest or that is carried out in the exercise of public powers. protected by article 6.1.e of the General Data Protection Regulation, or treatments that must be carried out due to a legal obligation that applies to it (art. 6.1.c). Examples of these treatments are:

• The data of the interested person will be processed on the occasion of all requests or instances that generate the start of an administrative procedure, in accordance with current regulations (Law 39/2015, of October 1, of the Common Administrative Procedure of Public Administrations )
• The data necessary for the maintenance of public records managed by the City Council, such as the Municipal Register of Inhabitants, will be processed.
• The personal data of the interested parties will be processed on the occasion of the administrative procedures processed by the City Council, such as the request for authorizations and concessions, licenses, aid, subsidies, the processing of the appropriate disciplinary proceedings and any other administrative procedure entrusted to the City Council.
• Personal data will be processed with the aim of organizing the agenda of events and institutional acts of the City Council, including the management of the municipal media.
• Personal data necessary for actions of a technical nature, typical of the City Council's area of ​​competence, including management of municipal assets, issuance of reports, management of studies, etc., will be processed.

On the other hand, the City Council carries out data processing based on the consent of the interested party and which originates from the contact between citizens and the Administration, such as the reception of requests for information, claims, suggestions, etc.

For said treatments, the consent of the interested party will be required in accordance with the provisions of the General Data Protection Regulation, and must always be informed, free, specific and granted by the interested parties through a clear affirmative action. Among them we can find:

• Sending institutional information on the activities of the City Council, including sending it both by ordinary and electronic means.
• Sending health alerts, notices or any other related to the matters within the City Council's jurisdiction, including sending them through ordinary and electronic means.
• Treatment of personal data of the interested party in relation to queries, requests, suggestions and information requested through the conventional and electronic channels enabled by the City Council.
• Use of cookies to optimize the services provided to the interested party. You can access more information about the use of cookies in the City Council through the specific links on the municipal web portal.

On the other hand, the City Council may process the data of an interested party for the execution of a contract or in application of pre-contractual measures, in accordance with article 6.1 letter b, of the General Data Protection Regulation.

• The personal data of the interested parties, such as suppliers, successful bidders or personnel at the service of the City Council, will be processed in order to carry out municipal economic management.
• The data of public employees assigned to the City Council will be processed for the correct management of municipal human resources and compliance with current regulations on public functions and social security.

Finally, it is possible to carry out data processing in compliance with legal obligations contained in current regulations and applicable to the Burgos City Council, in accordance with article 6.1 letter c, of the General Data Protection Regulation.

• Communications of data to other administrations, as a consequence of information obligations.
• Data communications by virtue of requirements of other administrations or organizations.
• Compliance with obligations contained in current regulations.

Through the following link, you can consult the entire Registry of Processing Activities published by the City Council.

The personal information that the City Council collects about the interested parties and how it does so, may vary depending on the service or procedure affected. In any case, the personal data collected by the City Council are those exclusively necessary to be able to carry out the requested procedure and are pertinent to its purpose. Failure to provide them will prevent carrying out the procedures requested by the interested party.

Under no circumstances will the City Council use the personal data of the interested parties for purposes that are not legitimate or different from the purpose that originated its collection or compatible with it.

On the other hand, we inform you that the City Council does not collect personal data of the interested parties in order to adopt any type of automated decision, nor for the elaboration of profiles, market studies, etc.

To provide personal data to the City Council, the interested party must be over 14 years of age, and the provision of Personal Data of third parties is not allowed without their prior, unequivocal and express consent. In this sense, the person who breaches such obligations will be responsible for the damages and/or losses that may be caused by such breach.

The personal data provided by the interested parties to the City Council are kept for the time strictly necessary to fulfill the purpose for which they have been collected and to determine the possible responsibilities that could derive from the purpose of the treatment. Once the treatment activity is finished, they will be kept in accordance with the provisions in force regarding documentary archives of the Autonomous Community of Castilla y León, and in accordance with the legally established deadlines.

Once these periods have expired, the City Council will proceed to delete the Personal Data, and as long as no type of responsibility derived from a legal relationship or obligation or the execution of a contract, or the application of pre-contractual measures can be demanded. requested by the interested party.

The City Council does not provide third parties with the personal data of the interested party, except in those cases in which it incurs a legal obligation to do so, such as the case of communication with State Security Forces and Bodies, courts and tribunals and/or others. bodies and administrations or public entities with competence. Any communication of personal data not provided for in the regulations will require the consent of the interested party.

The City Council does not transmit Personal Data outside the European Economic Area.

In some cases, an International Transfer of Personal Data could be contemplated, which, in any case, would be covered by the Decisions of the European Commission or the adoption, through adequate guarantees, of the appropriate security measures, and would always be limited to the provision of services that our Suppliers would perform on behalf of the City Council.

The security measures that the City Council maintains in place to guarantee the security of personal data correspond to those provided for in Annex II (Security measures) of Royal Decree 3/2010, of January 8, which regulates the Scheme National Security in the field of Electronic Administration.

In addition to these measures, the City Council has adopted the necessary levels of protection based on the technique, the application costs, and the nature, scope, context and purposes of each treatment it carries out, as well as risks to the rights and freedoms of natural persons.

Any Interested Party has the right to obtain free information on the processing of their personal data carried out by the City Council, as well as to withdraw the consent given for the processing of their personal data, as long as said processing is not based on another kind of legitimacy.

The interested party may exercise their rights of access, rectification, deletion and portability of their data, of limitation and opposition to their treatment, as well as not being the subject of decisions based solely on the automated processing of their data, when appropriate, before the City Council through the postal address indicated above, or through the email address: dpd@aytoburgos.es

You may also submit your request to exercise your rights in person or through other means permitted by current legislation.

The City Council will respond to the exercise of rights of each interested party within a maximum period of one month. This period could be extended for another two additional months, taking into account the complexity and number of requests, although the City Council will inform the interested party of the aforementioned extension within one month of receiving the request, indicating the reasons. of procrastination.

Likewise, the interested party may submit any claim they deem appropriate to the Spanish Data Protection Agency, when they have not obtained satisfaction with regard to the exercise of their Rights, both in time and in form. For more information: www.agpd.es