PRIVACY POLICY

At Valencia City Council, we are committed to protecting privacy and ensuring the proper use of personal data.

 

The purpose of this Privacy Policy is to provide information about the processing of personal data carried out by València City Council on this website, its online portal, and any related subdomains, microsites or mobile applications.

 

An up-to-date list of the data processing activities carried out by Valencia City Council is available via the following link to the Register of Data Processing Activities.

 

The personal data collected will be strictly limited to that which is essential for identifying the data subject and responding to their request, or for providing the services requested, and will not be further processed in a manner incompatible with those purposes.

 

The data collected from each data subject shall be adequate, relevant and limited to what is necessary in relation to the purposes applicable in each case, and shall be updated whenever necessary. The data subject shall be informed, prior to the collection of their data, of the general provisions set out in this policy in accordance with the information set out below

Who is the data controller?

  • Identity: Valencia City Council.
  • Address: Plaça de l’Ajuntament, 1, 46002 València
  • Telephone: 963 52 54 78
  • Contact details for the Data Protection Officer (DPO): oficinadpd@valencia.es

Why do we process your personal data?

Valencia City Council processes your data for the purpose of developing operating and improving the Smart Destinations Platform (PID). This may include:

  • User registration and account management, including the creation, administration, modification and deletion of user accounts for tourists, residents, businesses and local authority staff.
  • Identity verification, authentication and access control, including the management of user roles and permissions.
  • Collection and analysis of mobility and location data to better understand mobility patterns, the use of public spaces and visitor flows within the destination.
  • The management of surveys, enquiries, complaints and suggestions submitted through the Platform.
  • User engagement and personalisation activities, including the analysis of interactions with the Platform, user preferences and usage patterns, in order to improve the user experience and provide relevant information, services and recommendations.
  • System operation, monitoring and security, including the management of logs, auditing activities and the maintenance of platform performance and integrity.
  • Tourism intelligence and data analytics, aimed at supporting evidence-based decision-making and improving destination management.
  • Communications and notifications, including the delivery of service updates, alerts and other communications relating to the Platform.
  • Advanced analytics and artificial intelligence tools, where personal data may be used to support predictive models, recommendation systems and automated processes for the purposes of personalisation, service improvement and operational optimisation, in accordance with applicable data protection legislation.

How long do we keep your data?

Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected, including the establishment, exercise or defence of any legal claims that may arise in connection with its processing, and for the periods required by applicable legislation.

 

Once those periods have expired, the data may be retained, where appropriate, for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes, in accordance with applicable data protection legislation.

 

Where processing is based on the data subject’s consent, personal data will be retained until that consent is withdrawn, unless a longer retention period is required by law.

What is the legal basis for processing your data?

The processing of your personal data is based on:

  • Article 6(1)(a) Regulation (EU) 2016/679 (GDPR), where processing is carried out on the basis of the data subject’s consent, including the provision of services requiring registration within applications, the creation of user profiles for the delivery of personalised information, the collection of images and voice recordings and their subsequent dissemination through social media and other communication channels, and the exchange of data between participating platforms and systems.
  • Article 6(1)(e) GDPR, where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in València City Council.

The processing activities carried out through the Smart Destination Platform (PID València) are also supported by the applicable legal and policy framework, including:

  • Law 7/1985 of 2 April, regulating the foundations of local government (Ley Reguladora de las Bases del Régimen Local).
  • Law 40/2015 of 1 October, on the Legal Regime of the Public Sector.
  • Law 39/2015 of 1 October, on the Common Administrative Procedure of Public Administrations.
  • The Spanish Strategy for Science, Technology and Innovation 2021–2027.
  • The National Smart Cities Plan (PNCI).
  • The EU Urban Agenda.
  • The European Digital Decade 2030 Strategy.
  • The Recovery, Transformation and Resilience Plan (PRTR).

Are there any other recipients of the data provided?

Personal data will not be disclosed to third parties except where required by law or where the data subject has provided their prior consent.

 

This includes, where applicable, the sharing of data between the participating platforms and systems associated with the project, including PID València, SEGITTUR, the VLCi City Platform and Visit València’s Tourism Information and Intelligence Systems, where such data sharing is based on the data subject’s informed consent.

 

No personal data will be transferred to countries outside the European Economic Area or to international organisations unless permitted by applicable data protection legislation and subject to the appropriate safeguards.

What are your rights when you provide us with your personal data?

You have the right to obtain confirmation as to whether or not Valencia City Council is processing personal data relating to you.

 

You have the right to access your personal data and to request the rectification of any inaccurate or incomplete data. You may also request the erasure of your personal data where, among other reasons, it is no longer necessary for the purposes for which it was collected.

 

In certain circumstances, you may request that the processing of your data be restricted. In such cases, the data will only be retained for the establishment, exercise or defence of legal claims, or as otherwise permitted by law.

 

In certain circumstances , and on grounds relating to your particular situation, you may object to the processing of your personal data. In such cases, Valencia City Council will cease processing your data, unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing is necessary for the establishment, exercise or defence of legal claims.

 

To exercise your rights, you may submit a request in person at any València City Council customer service office, through the Electronic Office, or by emailing oficinadpd(at)valencia.es.

 

You may also lodge a complaint to València City Council’s Data Protection Officer through any of the channels indicated above. In addition, you have the right to submit a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) if you consider that the processing of your personal data infringes applicable data protection legislation.

Scroll to Top