In accordance with Regulation (EU) 2016/679, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights, the Patronat Municipal de Turisme de Tarragona hereby make its Data Protection Policy available to users.

1.- Identity of the Data Controller

The Data Controller of the personal data collected on the corporate website www.tarragonaturisme.cat is:

2.- Purpose of data processing and retention times

The data that you provide by different means, such as contact forms, surveys or procedures at the time of data collection, conforms to current legislation on data protection and is undertaken with the sole purpose of providing the service you request of us.

In each case, detailed information is provided on the purpose of processing your data and the fact that it will only be processed with your authorisation.

Detailed below is information on the different forms of data processing performed by the Patronat Municipal de Turisme de Tarragona:

For further information, please refer to the Data Processing Registry of the Patronat Municipal de Turisme de Tarragona.

The legal basis for processing your data is to enable the public administration to exercise its powers in providing the services requested and to seek the consent of the interested party.

Under no circumstances will automated decisions be made based on your data.

Your personal data will not be transferred outside the European Economic Area or to countries that do not have a level of compliance required by law or without your express prior authorisation.

All information provided by users must be true. The user will be held solely responsible for any false or inaccurate statements and for any damage caused to the Patronat or to third parties. The Patronat Municipal de Turisme de Tarragona reserves the right to exclude from its services any user who has provided false data, without prejudice to any other actions it may be entitled to by law.

3.- Transfer or notification of data to third parties

In order to provide the service correctly, your data may be transferred to entities that provide us with certain services (apps, web hosts, service referrals, etc.) and these entities will treat the data as if they were the Data Controller.

This management of your data is undertaken purely to ensure the execution, security and availability of the services we provide, with the guarantee that these entities will apply the appropriate technical, legal and organisational measures and best practices in data security. This thus prevents the unauthorised alteration, loss, access and processing of the data, and complies with other obligations in this respect as required by law at any time.

Beyond this particular situation, none of your personal data is transferred to third parties unless required by the competent public authorities and/or other entities in accordance with the legal and regulatory provisions in force at any given time.

4.- Your rights when you provide your personal data

You may at any time request and obtain information on how and why we process your data, exercising the following rights:

• Access to your data: asking what data we hold and how we use it.
• Rectification of your data: requesting the modification or rectification of inaccurate data.
• Erasure of your data: requesting that your data be deleted and not processed, other than what we are required to retain by law.
• Limitation of processing: requesting that data are only retained for legal purposes.
• Opposition of data processing: requesting that a specific use of your data is not made.
• Data portability: requesting that we send you the data in a compatible format for delivery to a third party who must provide you with a service.

To exercise these rights, you can send a letter indicating which right you wish to exercise (access, rectification, deletion, limitation, opposition or portability of the data) and attaching a copy of your ID document in person or by ordinary mail to: Oficina Municipal d'Atenció Ciutadana located at Plaça de la Font, 1, 43003 Tarragona, or through the specific procedure at the Electronic Office, “Exercise of the rights of Access, Rectification, Suppression and Opposition to the processing of personal data”.

5.- Additional information regarding personal data processing

If you need additional information on the processing of your personal data by the Patronat Municipal de Turisme de Tarragona, please contact the Data Protection Officer:

6.- Submitting complaints

The Catalan Data Protection Authority (www.apdcat.cat) is the Supervisory Body that oversees compliance with data protection legislation in the Catalan Public Administration. If you feel that the Patronat Municipal de Turisme de Tarragona has breached any of the precepts of this legislation, you can lodge a complaint with this body.