Santander City Council and its staff are committed to protecting privacy and ensuring the proper use and processing of personal data provided by citizens and/or Users, both online through our Portal and other City Council websites, and in person.
Accordingly, this Privacy Policy applies to information collected directly through the various services provided by Santander City Council, as well as through any websites that may be created
Data Controller
The data controller responsible for processing your personal data is Santander City Council, whose identification and contact details are as follows:
- Registered address: Plaza del Ayuntamiento, s/n, 39002 Santander, Spain
- Contact telephone: +34 942 200 600
- Data Protection Officer (DPO): protecciondedatos@santander.es
Purposes of Data Processing
For what purposes do we process your personal data?
Santander City Council, as data controller and in compliance with Regulation (EU) 2016/679 of 27 April and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, informs you that all data you provide will be treated confidentially for the following purposes:
- Managing and processing administrative procedures in which the applicant or a third party is involved.
- Providing municipal services offered to and requested by citizens.
- Processing requests submitted by citizens through the contact form.
Are automated decisions made?
This entity may make automated decisions on the legal basis provided by Article 41 of Law 40/2015 of 1 October on the Legal Regime of the Public Sector. These are acts or actions carried out entirely by electronic means within an administrative procedure, without direct human intervention.
How long will we retain your data?
Documentary collections produced, preserved or gathered in the exercise of the City Council’s functions constitute archives of public interest. Once the purposes for which the data were collected have been fulfilled, the relevant records will be closed and duly preserved, remaining available to other Public Administrations, Judges and Courts to address any potential liabilities arising from the processing of such data during the applicable limitation periods.
Once the period of administrative use has expired or the relevant limitation period has elapsed, the documents will be assessed and selected for retention or disposal, with those lacking administrative or historical value being removed.
Source of Personal Data
How have we obtained your personal data?
In general, the personal data we process are obtained directly from the data subject. However, in certain circumstances, data may be obtained from Santander City Council’s own sources, other Public Administrations, third parties or organisations.
In such cases, the categories of data processed mainly include:
- Identification and contact details
- Personal characteristics
- Social circumstances
- Academic and professional information
- Employment details
- Financial information
- Statistical data
- Data relating to offences
- Special categories of personal data
- Location data
Third-party Data Provided by the User
If the User provides Santander City Council with personal data relating to third parties, the User guarantees that the individuals concerned have been informed in advance of the matters set out in this Privacy Policy and that their consent has been obtained for the disclosure of their data.
The User shall be responsible for any damage or loss arising from failure to comply with these requirements.
Lawful Basis for Processing
What is the legal basis for Santander City Council to process your data?
Your personal data are processed on the following legal bases:
- Consent: Consent provided by you as the data subject by selecting the relevant checkboxes on forms or applications made available by the City Council or on our website, or by signing the applications you submit (Article 6(1)(a) GDPR).
- Legal obligations: Compliance with the professional and legal obligations applicable to the City Council at any given time, considering its public nature and scope of activity (Article 6(1)(c) GDPR).
- Vital interests: Protection of the vital interests of the data subject or another natural person (Article 6(1)(d) GDPR).
- Public interest and official authority: Performance of a task carried out in the public interest or in the exercise of official authority, in accordance with Law 39/2015 of 1 October on the Common Administrative Procedure of Public Administrations (Article 6(1)(e) GDPR).
What happens if you do not provide your data?
Data collected on paper:
Where the requested data are necessary to process applications, requests or services and are not provided by the data subject or, where applicable, their legal representative, we will be unable to provide the requested service.
Data collected through forms on our Portals:
All fields marked with an asterisk (*) on the forms available on the website must be completed in order for us to respond to your enquiry, request or application.
If the required information is not provided, we will be unable to process or properly register your request
To whom will your personal data be disclosed?
As a general rule, Santander City Council does not transfer or disclose personal data to third parties, except where legally required.
However, data may be disclosed to other Public Administrations or organisations when necessary to fulfil the purposes described above (Section 2), provided that such disclosure is supported by applicable legislation or, otherwise, has been authorised by the data subject.
Information regarding such disclosures will be provided through the privacy notices included in the various data collection methods and media.
Data may also be disclosed to companies acting as data processors under a data processing agreement entered into between the parties.
No international transfers of personal data are envisaged.
Data Subject Rights
What rights do you have regarding your personal data?
Everyone has the right to obtain confirmation as to whether Santander City Council is processing personal data concerning them.
They also have the right to request the rectification of inaccurate data or, where appropriate, the erasure of their data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
Data subjects may also exercise their rights to restriction of processing, data portability, cancellation and objection.
To exercise these rights, you must contact Santander City Council through one of the following channels:
- In person or by post: By contacting Santander City Council and providing your identification details (a photocopy of your Spanish National Identity Document (DNI), Foreigner Identity Number document (NIE), passport or equivalent identification document), together with the corresponding form available at the Registry Office specifying the right you wish to exercise, or by submitting a general application.
- Electronically: By emailing the Data Protection Officer at protecciondedatos@santander.es, providing your identification details (a photocopy of your DNI, NIE, passport or equivalent identification document) and specifying the right you wish to exercise, or through the City Council’s electronic office: https://sede.santander.es/.
In certain circumstances, and for reasons relating to their particular situation, data subjects may withdraw consent previously given for a specific purpose at any time by objecting to the processing of their personal data.
In such cases, Santander City Council will cease processing the data, except where necessary for the establishment, exercise or defence of legal claims.
You are also informed of your right to lodge a complaint with the relevant supervisory authority, the Spanish Data Protection Agency (Agencia Española de Protección de Datos), if you believe that personal data protection legislation has been breached in relation to the processing of your personal data.
Contact details:
Spanish Data Protection Agency (Agencia Española de Protección de Datos)
Telephone: 901 100 099 – 912 663 517
Postal address: C/ Jorge Juan, 6, 28001 Madrid, Spain
Electronic office: https://sedeagpd.gob.es/sede-electronica-web/
Website: www.agpd.es
Information Society Services and Electronic Commerce Act (LSSICE)
n accordance with Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSICE), we will only send you municipal information, advertising or promotional communications by electronic means if you expressly authorise us to do so by selecting the relevant checkboxes provided for that purpose.
You may withdraw your consent at any time through any of the channels described above.
Browsing Data
This website uses first-party and third-party cookies to improve the services provided to Users.
By continuing to browse, you are deemed to accept their use. Acceptance is also understood to occur when clicking any button, the initial checkbox or any link, or when downloading content.
You may allow, block or delete cookies installed on your device through your browser settings.
Blocking cookies does not prevent Users from accessing the website.
For further information, please consult the Cookie Policy published on our website.
Minors
Minors may not use the services available on this website without the prior authorisation of their parents, guardians or legal representatives.
Parents, guardians or legal representatives shall be solely responsible for all actions carried out through the website by minors under their care, including completing forms containing the minors’ personal data and, where applicable, selecting the accompanying checkboxes.
Security Measures
Santander City Council has adopted the necessary technical and organisational measures to ensure data security and prevent the loss, alteration, unauthorised processing of or access to personal data, in accordance with Article 32 of the GDPR.
These measures take particular account of the state of the art, implementation costs, and the nature, scope, context and purposes of the processing activities carried out at any given time.