In compliance with Article 13 of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, USERS of this website are informed of the uses to which the personal data collected are subjected, so that they may decide, freely and voluntarily, whether they wish to provide the requested information.
We reserve the right to modify this Policy to adapt it to new legislation, case law, industry practices, or the interests of the organization. Any changes will be announced in advance so that you are fully aware of their content.
1.- DATA CONTROLLER
The Data Controller is:
MÓSTOLES ECONOMIC DEVELOPMENT AND PROMOTION, SA
CIF: A78300001
Registered office: Calle Pintor Velázquez, 68, Móstoles 28935 (Madrid)
Telephone 91 685 30 90
Email address: hola@todoestaenmostoles.com
Data Protection Officer contact:
delegadoprotecciondatos@mostolesdesarrollo.es
2. PURPOSE OF THE PROCESSING
The personal data collected through the forms on the website “Todo está en Móstoles” will be processed for the following purposes:
2.1. User registration and account management
Process user registration, manage their identification and access to their account.
Manage the functionalities associated with the account
Address technical issues, queries, and support requests related to the account.
2.2. Management of participation and registration of businesses/establishments (form “Participa”)
Manage the establishment's application to participate in the platform.
Verify and validate the information provided for the creation or updating of the establishment's record.
Contact the designated contact person for operational communications related to the registration, maintenance, or updating of the record.
2.3. Publication and dissemination of the georeferenced directory
Publish the establishment's listing in the "Everything is in Móstoles" directory (web/app), including the information provided about the establishment and, where applicable, strictly necessary identification data when the owner is a natural person (self-employed). However, the listing will not include personal contact information (email, telephone), unless expressly authorized by the interested party.
To provide platform users with information on the commercial, hospitality and service offerings of the municipality.
2.4. Sending information and communications
To keep users (and, where applicable, contact persons of establishments) informed about services, actions, campaigns, initiatives, activities or events promoted by Móstoles Desarrollo in the business, commercial and entrepreneurial field, by electronic or non-electronic means, when appropriate and according to the user's preferences.
2.5. Image and audiovisual material (if applicable)
In this case, the use of the image of users or participants for the creation of audiovisual material and its publication in the press, corporate website and social networks of Móstoles Desarrollo, always based on the consent given for this specific purpose.
2.6. Using the camera to scan QR codes
Allow the use of the device's camera for scanning QR codes, exclusively for providing the requested service:
Camera access is used only in real time to identify the QR code.
No images or videos are captured, stored or processed, nor is any other content on the device accessed.
The permission is optional and can be revoked from the device settings.
2.7. Platform Security and Operation
To ensure the security of the platform, prevent misuse or fraudulent use, and maintain technical records (logs) of access and activity, when necessary for the integrity, availability, and security of the service.
3.- LEGITIMACY OF THE PROCESSING
The legal bases that allow the processing of data are:
3.1. Consent (Article 6.1.a GDPR)
When the user subscribes or agrees to receive informational communications that are not essential for the service.
When you consent to the use of your image for audiovisual material and dissemination on web/press/networks.
When you enable device permissions (your mobile device's camera) for QR scanning, under the terms indicated.
When the user accepts the use of analytics cookies (Google Analytics), where applicable.
3.2. Performance of a contract or application of pre-contractual measures (Article 6.1.b GDPR)
To manage the registration and use of the user account on the platform.
To process the application for participation/registration of the establishment and to operationally manage the relationship derived from said membership (creation, maintenance and updating of the record), to the extent necessary to provide the requested service.
3.3. Performance of a task carried out in the public interest / exercise of public powers (Article 6.1.e GDPR)
For the development of actions specific to Móstoles Desarrollo related to the promotion and revitalization of the municipality's business and commercial fabric, including the management of the directory and actions to boost local commerce:
Law 7/1985, of April 2, Regulating the Bases of the Local Regime
3.4. Legitimate interest (Article 6.1.f GDPR)
To ensure the security of the platform, prevent fraud, manage technical incidents and maintain continuity of service (e.g., access logs and anti-abuse measures), provided that the rights and freedoms of the data subjects do not prevail.
4.- STORAGE PERIODS
Personal data will be kept only for the time necessary to fulfill the purposes for which they were collected and, in any case, for the legally established periods and the time necessary for the formulation, exercise or defense of possible claims and liabilities.
In particular:
User account: while the account is active and, after deactivation, for the time necessary to manage the request and address possible liabilities (where applicable, with data blocking).
“Participa” form / establishment registration: while the establishment remains registered or is necessary to process and manage its participation; after deregistration, only the time necessary to prove the management and address possible claims (with blocking when appropriate).
Informative communications: until the user unsubscribes or revokes their consent/opposition, keeping minimal evidence of the unsubscribe process when necessary.
Technical records and security: for the time strictly necessary to ensure the safety and proper functioning of the platform.
Geolocation: only while the functionality is activated and for the time necessary to provide the requested service.
The user may withdraw consent at any time, without affecting the lawfulness of the processing prior to its withdrawal. Once the applicable retention periods have expired, the data will be deleted or, where appropriate, duly blocked in accordance with current regulations.
5.- RECIPIENTS OF COMMUNICATIONS
Personal data will not be transferred to third parties, except when necessary for the development of the purposes described or there is a legal obligation.
In particular, they may be communicated to the Móstoles City Council, exclusively when necessary for the management, coordination, supervision or evaluation of actions related to the "Everything is in Móstoles" platform and within the framework of municipal powers.
6. INTERNATIONAL DATA TRANSFERS
In order to obtain aggregate statistics on website usage (e.g., traffic volume and approximate origin at the area or district level), we use Google Analytics. This tool may involve the processing of online identifiers (such as device/browser identifiers and cookies) by Google LLC, which may involve international data transfers to the United States.
When such transfers occur, they will be carried out in accordance with the mechanisms provided for in data protection regulations and, in particular, under the Adequacy Decision of Article 45 of the GDPR (EU-US Data Privacy Framework), insofar as the receiving provider is certified/adhered to said framework.
In any case, the user can manage or withdraw their consent for the use of analytics cookies at any time through the cookie settings panel enabled on the website.
7.- RIGHTS OF INTERESTED PARTIES
The user may exercise, under the terms provided for in current regulations, the rights of access, rectification, erasure, opposition, limitation of processing and, where appropriate, portability of their data, as well as withdraw the consent given at any time (without this affecting the lawfulness of the processing prior to its withdrawal).
To exercise these rights, the user may submit a request:
By email to: delegadoprotecciondatos@mostolesdesarrollo.es
By mail to: MÓSTOLES DESARROLLO PROMOCIÓN ECONÓMICA, SA, Calle Pintor Velázquez, 68, 28935 Móstoles (Madrid),
Free exercise of rights
Exercising these rights will be free of charge. Only when requests are manifestly unfounded or excessive, especially due to their repetitive nature, may we:
a) charge a reasonable fee based on the administrative costs incurred in providing the information or communication or carrying out the requested action, or
b) refuse to act on the request.
In these cases, we will have the burden of proving that the request is manifestly unfounded or excessive.
Response time
We undertake to respond without undue delay and, in any event, within one month of receiving the request. This period may be extended by a further two months if necessary, taking into account the complexity and number of requests. In such cases, we will inform the applicant of any such extension within one month of receiving the request, stating the reasons for the delay.
If we do not act on your request, we will inform you without delay, and at the latest within one month of receiving the request, of the reasons for not acting and of the possibility of filing a complaint with a supervisory authority and taking legal action.
Complaint to the competent data protection authority
If you believe your right to personal data protection has been violated, you can contact or file a complaint with our Data Protection Officer or, where appropriate, with the competent data protection authority (www.aepd.es)
Using the camera
In accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), we inform you that our application/website may request access to your device's camera exclusively for the QR code scanning functionality.
Camera access is used only in real time to identify the QR code and provide the service requested by the user.
Under no circumstances are images or videos captured, stored or processed, nor is any other content on the device accessed.
Permission to use the camera is completely optional and can be managed or revoked at any time from your device settings.
You can exercise your data protection rights by contacting delegadoprotecciondatos@mostolesdesarrollo.es or the data controller at Calle Pintor Velázquez núm. 68, 28935, Móstoles (Madrid).
The user can expand the information on the protection of personal data by consulting the Privacy and Data Protection Policy of Móstoles Desarrollo, as well as through the contact means indicated above.