PRIVACY POLICY

With this notice, “Marina de Badalona SA” (hereafter “Marina de Badalona” informs users of the www.marinadebadalona.cat website about its personal data protection policy, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (General Data Protection Regulations) and the Spanish Data Protection Act 3/18, 5 December, guaranteeing digital rights, and other applicable regulations, so that they may expressly, freely and voluntarily provide Marina de Badalona with the personal data requested from them as a result of their own requests for information or because they have contracted the various service offered relating to the complete process of remodelling and urban and economic development of Badalona sea front, including the construction, running and management of the city’s marina and fishing port.

Unless specifically established otherwise, all the data required must be filled in on the form or similar sheet truthfully and accurately, and it must be fully up to date. Otherwise, depending on the circumstances, Marina de Badalona might not go ahead with registering the user or might refuse the specific service requested. All data provided by the user/interested party will be processed in accordance with the characteristics detailed below.

Personal data processing information

Identification of the controller: Marina de Badalona SA, with registered address at Av. d’Eduard Maristany, Edifici de Capitania Port Esportiu i Pesquer de Badalona, s/n, 08912 Badalona, Barcelona and with tax ID A-62288154, entered in the Barcelona Companies Register in Volume 42236 , Folio 62, Section 8, Sheet B 217561, I/A 1.

Identification of the data processor:: For all matters concerning personal data, such as queries, requests, suggestions, etc., contact the Data Protection Officer appointed by Marina de Badalona SA at the following e-mail address: port@marinabadalona.cat

Purpose of the processing:

All the details provided will be processed for the following purposes:

To answer requests made by the interested party.
To maintain any relationships that may be established.
To manage, administer, provide, improve and give information about any services the interested party decides to contract.
Commercial communication about our products and services.

The personal data provided will be kept for as long as the commercial relationship lasts or as long as it is necessary for the stated purposes of the processing, until or unless the interested party asks for it to be deleted. Data will not be destroyed when there is a legal provision requiring it to be kept. In such cases, the data will be blocked and kept only to be made available to the public authorities, judges and courts for as long as is necessary to attend to any liabilities resulting from the processing.

No automated decisions are currently made based on your personal data, and no profiles are drawn up. No such automated decisions will be made in future without your prior consent.

Legitimate reason for processing:

All processing of your personal data is carried out with your express prior consent. You will be informed in advance in all circumstances required by law so that you can give your informed consent.

You may revoke this consent at any time, as detailed below.

Children:

Children aged under 14 who wish to register as users will have to provide documentation showing the consent of their parents or legal guardians for data processing. This will be absolutely necessary for accessing our content. We expressly ask parents or guardians to take the appropriate measures to prevent children from registering, using parental control or similar systems, and to let us know if they are aware of any indication that a child has registered. Marina de Badalona reserves the right to ask users for documents proving their identity if there is any doubt about the truthfulness of their data, and it may refuse to provide services if a user ignores such a request.

Marina de Badalona has established reasonable control mechanisms to prevent children aged under 14 from using the services offered.

Data transfers and recipients:

Your data will not be transferred unless this is essential for the purposes already mentioned, or due to legal obligations.

Your data will not be transferred to countries outside the European Union unless this is essential for complying with the above-mentioned purposes and unless you first expressly authorise us to do so.

Rights of interested parties:

You may exercise the rights detailed below at any time by writing to Marina de Badalona, Av. d’Eduard Maristany, Edifici de Capitania Port Esportiu i Pesquer de Badalona, s/n, 08912 Badalona, Barcelona, or by e-mail to port@marinabadalona.cat. The request should contain the interested party’s first name, surnames and documents proving the identity of the interested party or their legal representative, as well as a document proving the latter’s right of representation; the request being made; an official address for notifications; the date and the signature of the person making the request; and documents accrediting the request formulated. If the request does not meet the specified requirements it will have to be amended.

The rights of interested parties are: access, rectification, restriction, portability, objection and erasure. These are defined as follows:

Right of access:

The interested party will have the right to obtain confirmation from the data processor of whether or not personal data concerning them is being processed and, if it is, their right of access to the personal data together with the following information:

a) the purposes of the processing
b) the categories of personal data processed
c) the recipient or categories of recipients to which personal data has been or will be transferred, particularly recipients in third countries or international organisations
d) where possible, the period for which the personal data is intended to be kept or, if this is not possible, the criteria used to determine this period
i) the existence of the right to ask the controller to rectify or erase personal data or to restrict the processing of personal data relating to the interested party or to object to such processing
f) the right to present a complaint to a monitoring authority
g) when personal data has not been obtained from the interested party, any information available about its origin
h) the existence of automated decisions, including drawing up profiles, as referred to in Article 22, sections 1 and 4, and, at least in these cases, any significant information about the logic applied, as well as the importance and the likely consequences of this processing for the interested party.

When personal data is transferred to a third country or international organisation, the interested party will have the right to be informed of the appropriate guarantees under Article 46 relating to the transfer. The data processor will provide one copy of the personal data subject to processing. The processor may make a reasonable charge, based on administration costs, for any other copy requested by the interested party. When the interested party presents its request by computerised means the information will be provided in a commonly used computerised format unless it has asked for it to be provided any other way.

Right of rectification:

The interested party will have the right to have the processor rectify inaccurate personal data concerning them without undue delay. Taking into account the purposes of the processing, the interested party will have the right to complete any personal data that is incomplete, in some cases with an additional declaration.

Right of erasure:

The interested party will have the right to have the processor erase personal data that concerns them without undue delay. The processor must delete personal data without undue delay in any of the following circumstances:

a) if the personal data is no longer necessary considering the purposes for which it was collected or processed
b) if the interested party withdraws the consent on which the processing is based in accordance with Article 6, section 1, letter a) or Article 9, section 2, letter a) and the processing has no other legal basis
c) if the interested party objects to the processing in accordance with Article 21, section 1 and there are no other legitimate reasons for the processing, or the interested party objects to the processing under Article 21, section 2
d) if the personal data has been illicitly processed
e) if the personal data has to be deleted in accordance with a legal obligation established in European Union law or the law of any of its member states applicable to the data processor
f) if the personal data has been obtained in relation to the offer of information society services mentioned in Article 8, section 1

When the data controller has published personal data in relation to which the interested party has exercised its right of erasure, the controller must, depending on the available technology and the cost of applying it, adopt reasonable measures to notify third parties that are processing the information of the request to erase the data, as well as any links to that data or any copy or replica of it.

This right will be limited by other rights such as the right to freedom of expression and information, or compliance with legal obligations, or when there are reasons of public interest.

Right to restrict processing:

The interested party will have the right to have the data processor restrict data processing when any of the following conditions are met:

a) the interested party challenges the accuracy of the personal data. In this case processing is restricted for a period allowing the controller to check its accuracy
b) the processing is illicit and the interested party opposes the erasure of the personal data, requesting restriction of its use instead
c) the controller no longer needs the personal data for the purposes of processing, but the interested party needs it for formulating, exercising or defending itself from complaints
d) the interested party has objected to the processing under Article 21, section 1. In this case, processing is restricted while it is determined whether the controller’s legitimate reasons take precedence over those of the interested party

When personal data processing has been limited under section 1, this data can only be processed, except for the purposes of preserving it, with the consent of the interested party or in order to formulate, exercise or defend against complaints, or with the intention of protecting the rights of another individual or organisation, or for reasons of important public interest in the European Union or a particular member State.
All interested parties that have had processing restricted in accordance with section 1 will be informed by the controller before the restriction is lifted.

Right of objection:

The interested party will have the right to object at any time to the processing of personal data concerning them based on the provisions of Article 6, section 1, letters i) or f), including drawing up profiles based on these provisions, for reasons related to their particular situation.

The data processor will cease to process the personal data unless overwhelming and legitimate reasons for processing can be proved that take precedence over the interests, rights and freedoms of the interested party, or in order to formulate, exercise or defend itself against complaints.

When the data is being processed for direct marketing, the interested party will have the right to object to the processing of personal data concerning them at any time, including drawing up profiles, in as far as it is related to such marketing.

When the interested party objects to processing for the purposes of direct marketing, the personal data will cease to be processed for this purpose.

When the personal data is processed for the purposes of scientific or historical research or statistical purposes in accordance with Article 89, section 1, the interested party will have the right to object to the processing of the personal data concerning them for reasons related to their particular situation unless this is necessary to achieve a purpose in the public interest.

Right to data portability:

The interested party will have the right to receive the personal data that affects them and which they have provided to a data processor in a commonly used and computer-read structured format and to transfer it to another data processor, without the data processor from which they have received it preventing them, when:

b) the processing is based on consent in accordance with Article 6, section 1, letter a) or Article 9, section 2, letter a) or on a contract in accordance with Article 6, section 1, letter b) and
b) the processing is carried out by automated means.
When exercising their right to data portability in accordance with section 1, the interested party will have the right, when technically possible, for the personal data to be transferred directly from data processor to data processor.

The exercise of the right mentioned in section 1 of this article will be understood without prejudice to Article 17. Such a right will not apply to processing necessary for achieving a purpose that is in the public interest or in exercise of public powers granted to the data processor.

The data processor will notify each of the recipients to which it has passed personal data of any rectification or erasure of personal data or restriction on the processing made in accordance with Article 16, Article 17, section 1 or Article 18, unless this is impossible or requires unreasonable effort. The processor will inform the interested party about these recipients on request.

Revoking consent: An interested party who has given consent for the processing of their personal data may also withdraw it just as easily. The withdrawal of consent will not render all processing already carried out illicit.

The interested party will have the right to present a complaint to the competent monitoring authority.
The data controller will inform the interested party when their personal data is going to be processed at another time for different purposes.

Security measures: The data processor states that it has adopted the technical and organisational measures necessary to ensure the security of the data and prevent it being altered, lost, processed or accessed in an unauthorised way, bearing in mind the state of the technology, the nature of the data stored and the risks it is exposed to, whether they are from human action or physical or natural means.

The www.marinabadalona.cat website contains links to other websites that may be of interest to users. Marina de Badalona accepts no responsibility for these links. It cannot guarantee compliance with appropriate privacy policies, so users access the content of these websites under the terms and conditions of use established on them and under their own exclusive responsibility.

Users with any queries, questions or recommendations concerning our Privacy Policy may send an e-mail to the following address: port@marinabadalona.cat.