EN

PRIVACY POLICY

The Privacy Policy is part of the General Conditions that govern the present Web.

Who is the data controller?

CABILDO DE LANZAROTE

VAT NUMBER: P3500002E

Avenida Fred Olsen, s/n, 35500, Arrecife, Lanzarote

Phone: 928 810 100

Data Protection Delegate: dpd@cabildodelanzarote.com

You can contact us in any way you wish.

We reserve the right to modify or adapt this Privacy Policy at any time, we encourage you to review it.

Who can provide us with data?

User access to the website https://festivaldemusicavisualdelanzarote.com may involve the processing of personal data. By accessing our website, you declare that you are of legal age and that all the data you provide us with, whether they are mandatory to provide you with the service or information or additional data that complete your information and request, are true and correct. These data are provided voluntarily.

WEB OR E-MAIL CONTACTS:

What data do we collect through the Web?

We may treat your IP address, what operating system or browser you use, and even the duration of your visit, anonymously.

If you provide us with data in the contact form, you will be identified so that we can contact you if necessary.

For what purposes will we process your personal data?

  • Respond to your inquiries, requests or petitions.
  • Manage the requested service, answer your request, or process your request.
  • Information by electronic means, related to your request.

What is the legitimacy for the processing of your data?

Acceptance and consent of the interested party: In those cases where to make a request it is necessary to fill out a form and click on the send button, the completion of the same will necessarily imply that he/she has been informed and has expressly given his/her consent to the content of the clause attached to the form or acceptance of the privacy policy.

All our forms have the symbol * in the required fields. If you do not provide these fields, or do not check the checkbox to accept the privacy policy, the information will not be allowed to be sent. It usually has the following formula: “□ I have read and accept the Privacy Policy.”

CITIZENS:

For what purposes will we process your personal data?

  • Respond to your inquiries and requests
  • Information on the program of activities
  • Ticket sales. During the payment process via credit card, the following personal data will be collected by the bank that owns the Virtual POS: type of connection, date and time, IP address, device information, email address, cell phone, navigation data, transaction data and data required by 3D Secure security protocols, for the sole purpose of detecting and preventing unauthorized payment transactions.
  • Information on events by electronic means, provided there is express authorization.

What data do we collect?

When you contact us via email, we may ask you to provide us with a number of personal information and data such as:

  • Basic and identifying data: Your name, surname, DNI, NIE, Passport.
  • Contact information: e-mail, and telephone.
  • We may treat your IP address, what operating system or browser you use, and even the duration of your visit, anonymously.

What is the legitimacy for the processing of your data?

We will process your data in application of article 6.1.c) and article 6.1.e) of the RGPD, as necessary for compliance with a legal obligation applicable to the controller and for the performance of a task carried out in the public interest or in the exercise of public powers vested in the controller.

Legal obligation applicable to the data controller:

  • Law 8/2015, of April 1, 2015, on Island Councils.
  • Organic Regulations of the Island Council of Lanzarote (bop number 46, Friday, April 15, 2016).
  • Law 14/1990, of July 26, 1990, on the Legal Regime of the Public Administrations of the Canary Islands.
  • Law 7/1985, of April 2, 1985, regulating the Bases of the Local Regime.
  • Law 39/2015, of October 1, 2015, on the Common Administrative Procedure of Public Administrations.
  • Law 40/2015, of October 1, 2015, on the Legal Regime of the Public Sector.
  • Law 12/2014 of 26 December on transparency and access to public information.
  • Law 19/2013, of December 9, 2013, on transparency, access to public information and good governance.
  • Decree 36/2009, of March 31, 2009, which establishes the general system of subsidies of the Autonomous Community of the Canary Islands.

Also, certain processing of your data will be in accordance with the legitimate basis of your consent as set forth in article 6.1.a) of the RGPD. For this purpose, we will ask you to give us your consent through the activation of the specific validation boxes.

NEWSLETTER CONTACTS

What data do we collect through the newsletter?

On the Web, it is possible to subscribe to the Newsletter, if you provide us with an e-mail address, to which the Newsletter will be sent.

We will store only your email address in our database, and we will proceed to send you periodic emails, until you request unsubscription, or we stop sending emails.

You will always have the option to unsubscribe, in any communication.

For what purposes will we process your personal data?

Manage the requested service.

Information by electronic means, related to your request.

Cultural or event information by electronic means, as long as there is express authorization.

What is the legitimacy for the processing of your data?

Acceptance and consent of the interested party.

In those cases where you subscribe, it will be necessary to accept a checkbox and click on the send button. This will necessarily imply that you have been informed and have expressly given your consent to receive the newsletter.

If you do not check the checkbox to accept the privacy policy, the information will not be allowed to be sent. It usually has the following formula: “□ I am over 14 and I have read and agree to the Privacy Policy.”

How long will we keep personal data?

Until the revocation of the consent granted.

SUPPLIERS/SERVICE PROVIDERS

For what purposes will we process your personal data?

  • Information by electronic means, related to your request.
  • Manage the administrative, communications and logistics services performed by the Responsible.
  • Carry out the corresponding transactions.

What is the legitimacy for the processing of your data?

The legal basis is the acceptance of a contractual relationship, or otherwise your consent to contact us or offer us your products by any means.

Social Networking Contacts.

The personal data available in the RRSS profiles, as well as those that the user provides to the Responsible when contacting through this channel, will be processed for the purpose of:

  • Manage their participation in the different proposals
  • Respond to the request, or process a request.
  • Establish a user-responsible relationship, and create a community of followers.

What is the legitimacy for the processing of your data?

The bases that legitimize the treatment is the voluntary consent of the person concerned to contact and, where appropriate, the acceptance of a contractual relationship in the environment of the social network concerned. The processing of data within the Social Network will be carried out in accordance with its privacy policies.

How long will we keep personal data?

We can only consult or unsubscribe your data in a restricted way by having a specific profile. We will treat them during the time in which the user follows us, including “like”, “follow” or similar buttons.

Any rectification of your data or restriction of information or publications must be made through the configuration of your profile or user in the social network itself.

Do we include personal data of third parties?

No, as a general rule we only process the data provided to us by the owners. If you provide us with data of third parties, you must, in advance, inform and request their consent to such persons, otherwise we are exempt from any liability for failure to comply with this requirement.

Existence of automated decisions?

This Entity may make automated decisions based on the legal coverage granted by Article 41 of Law 40/2015, of October 1, on the Legal Regime of the Public Sector. It would be any act or action carried out entirely through electronic means in the framework of an administrative procedure and in which a person has not intervened directly.

Automated decision making shall be regulated in its own regulations, defining the specifications, programming, maintenance, supervision and quality control. These regulations will be available to citizens at the electronic headquarters of this Entity.

What security measures do we apply?

An optimal level of protection of Personal Data has been adopted, installing all the necessary technical means and measures according to the state of technology to prevent the loss, misuse, alteration, unauthorized access and theft of Personal Data.

You are informed that the CABILDO DE LANZAROTE applies the necessary measures to safeguard the confidentiality and protection of personal data, avoiding its loss, alteration or unauthorized access, all in accordance with Annex II
of Royal Decree 311/2022, of May 3, which regulates the National Security Scheme, the EU Regulation 679/2016, of April 27, General Data Protection and the
Organic Law 3/2018, of December 5, Protection of Personal Data and guarantee of digital rights.

To which recipients will your data be communicated?

The CABILDO DE LANZAROTE will treat the data with proactive responsibility complying with the principles established in article 5 of the RGPD:

Fairness, loyalty and transparency

Purpose limitation

Data minimization

Accuracy

Limitation of the conservation period

Integrity and confidentiality.

Likewise, you are expressly informed that the data will only be communicated to those agencies and entities of the Public Administration with competence in the matter in accordance with the legal regulations in force.

In case of purchase or payment of tickets, if you choose any application, web, platform, bank card, or any other online service, your data will be transferred to that platform or will be treated in their environment, always with maximum security. During the payment process by credit card, data will be collected by the bank that owns the Virtual POS.

Personal data may be communicated to data processors necessary for the provision of the service, who will have signed a data processor contract that obliges them to maintain the same level of privacy as that of the data controller.

The CABILDO DE LANZAROTE does not plan to carry out international data transfers, however, if necessary, they will only be carried out in strict compliance with the obligations established in the European Regulation, or when there is a legal authorization to carry out the international transfer.

Your Rights and Access to Information

In accordance with current regulations, EU Regulation 679/2016, of April 27, General Data Protection and with the Organic Law 3/2018, on Personal Data Protection and Guarantee of Digital Rights, you have the possibility of exercising the following personal rights, providing reliable proof of your identity, either through the Register of entry, the electronic office, or email.

Your rights are as follows:

  • Right to revoke your consent and ask us not to process your data.
  • Right of access to the information we have about you, specifying the purposes of the processing we carry out and the communications we have made to third administrations and companies, either because they are authorized by law or because they are necessary for the provision of the service you have requested, or because you have given your consent.
  • Right of rectification of your data, by which we will update and update the information and data we have according to the information you provide us.
  • The right to the deletion of your data, once the legal retention periods established by the applicable regulations have expired.
  • The right to object to our processing of your data by revoking your authorization/consent.
  • The right to limit the processing of your data, such as in case you file a complaint or want us to keep your data for a longer period of time, preventing its deletion.
  • The right to data portability, whereby we will provide you in a commonly readable file format with the data that you have provided to us at the time of your registration as a user.

In addition, we inform you that you can always go to the Spanish Data Protection Control Authority (Spanish Data Protection Agency, www.aepd.es) to request its protection or file a complaint in relation to the processing of personal data.

Privacy Officer

At any time, you may request, free of charge, either through the entry registry or electronic office, the exercise of your rights.

CABILDO DE LANZAROTE

VAT NUMBER: P3500002E

Avenida Fred Olsen, s/n, 35500, Arrecife, Lanzarote

Phone: 928 810 100

Data Protection Delegate: dpd@cabildodelanzarote.com

It can be addressed by c