One of the priorities of the Provincial Council of Valencia is to guarantee the fundamental right to the protection of personal data, both of the users who deal with its Administration and of the public employees in its service.
In this respect, the Provincial Council of Valencia states that the processing of personal data that may be necessary for the exercise of its powers will strictly comply with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation), Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights, and any implementing or related regulations that may be applicable now or in the future.
Specifically, all personal data that may be provided by the data subjects will not be used for purposes other than those stated at the time it is supplied, according to the specific case in question, nor disclosed to third parties except in those legal cases in which such disclosure may take place or where the express consent of the data subject is available. For information on transfers and disclosures to third parties for a specific processing operation, please consult the Register of Processing Activities.
The legal basis that legitimises the processing of your personal data may be of various kinds. You can consult the specific legal basis for a given processing operation in our Register of Processing Activities
Likewise, this data will be processed confidentially. In any case, the Provincial Council of Valencia may use the data contained in its files for historical, statistical or scientific purposes.
The controller of the processing to which the personal data are subject is the Provincial Council of Valencia, with address at Plaza de Manises, no. 4, postcode 46003, Valencia. The contact address of the Data Protection Officer is as follows: pdp@dival.es.
The personal data processed for each of the purposes indicated to the data subject will be kept for the periods legally established or for the period during which a court or tribunal may require them, in accordance with the limitation period for legal actions. For more information on the retention periods for a specific processing operation, please consult the Register of Processing Activities
Regarding the rights of data subjects, any person has the right to obtain confirmation as to whether their data is being processed, to access their personal data, to request the rectification of data that is inaccurate or, where appropriate, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected or the data subject withdraws the consent given.
In certain cases, the data subject may request the restriction of the processing of their data, in which case we will only retain it in accordance with the regulations in force.
Where applicable, you may exercise your right to data portability, whereby the data will be provided in a structured, commonly used or machine-readable format either to you or to the new controller you designate.
Content of the rights recognised in articles 15 to 22 of Regulation (EU) 2016/679 as applied by the controller:
- Right of access: the data subject may request and obtain, free of charge, information on their personal data undergoing processing, the origin of such data and the disclosures made or intended to be made of it. The right of access may not be exercised at intervals of less than 6 months, except with justified cause.
- Right to rectification: personal data will be rectified when it is inaccurate or incomplete. If necessary, the data subject will attach the documentation supporting such rectification.
- Right to erasure: personal data will be erased if any of the following circumstances apply:
a) it is no longer necessary for the purposes for which it was collected
b) consent is withdrawn and this is the only legal basis for the processing
c) the right to object is exercised and there are no other legitimate grounds for the processing.
d) there is a legal obligation requiring the erasure of such data
- Right to restriction of processing: the processing of data may be restricted at the request of the data subject when:
a) the accuracy of the data is contested
b) the processing is unlawful and the data subject does not request erasure
c) the data subject needs it in the course of a claim.
d) the right to object has been exercised and it is being verified whether the controller’s legitimate grounds override those of the data subject.
- Right to portability: the data subject may receive the data they have provided and transmit it to another controller, provided that such processing has been carried out by automated means and that its lawfulness has been based solely on consent or on the necessity of such processing for the performance of a contract.
- Right to object: in cases where the consent of the affected person is not necessary for the processing of personal data or is not necessary for the performance of a contract, and provided that a law does not state otherwise, the data subject may object to its processing when there are well-founded and legitimate grounds relating to a specific personal situation.
The data subject has the right to withdraw consent at any time for any of the processing operations for which it has been given.
To exercise these rights before the Provincial Council of Valencia, a request must be submitted to its Registry of Entry, whose address is c/ Serranos no. 2, 46003 Valencia. To this end, and if the data subject so wishes, they may use the application form (click to download) made available to them, or use those drawn up by the Spanish Data Protection Agency. Likewise, this request may be processed through the Provincial Council’s electronic office if the data subject holds the appropriate digital certificates (https://www.sede.dival.es)
You have the right to lodge a complaint with the Spanish Data Protection Agency if you consider that the exercise of your rights has not been duly addressed. The maximum period for resolution is one month from receipt of your request, which may be extended by a further two months depending on the number of requests received or their complexity.
Likewise, in the event of a personal data security breach that may pose a high risk to the rights and freedoms of natural persons, the data subject will receive the corresponding information in accordance with article 38 of Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation),
Likewise, the Provincial Council of Valencia states that it has developed internal regulations, binding on all public employees who process personal data, which set out the procedures and guidelines to be observed in order to comply with the legal regulations on the protection of personal data. In particular, information rules and procedures for the processing of this type of data, and security rules (equipment, facilities, etc.) to ensure the integrity, confidentiality and availability of the information.
For any questions about the privacy policy set out above, you may contact the Data Protection Officer.