Privacy policy

Controller: Palafolls Town Council

Tax ID (NIF): P0815400G

Address: Plaça Major, 11 · 08389 Palafolls (Barcelona)

Telephone: 93 762 00 43

Data Protection Officer (DPO): dpd@palafolls.cat

Palafolls Town Council processes the personal data of users of www.castelldepalafolls.cat in accordance with the principles set out in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and in Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD):

• Lawfulness, fairness and transparency: data are processed lawfully and transparently in relation to the data subject.
• Purpose limitation: data are collected for specified, explicit and legitimate purposes and are not processed in a manner incompatible with those purposes.
• Data minimisation: the data processed are limited to what is necessary in relation to the purposes for which they are processed.
• Accuracy: data are kept accurate and up to date.
• Storage limitation: data are kept for as long as necessary for the purpose of the processing, or as required by applicable legislation.
• Integrity and confidentiality: data are processed in a manner that ensures appropriate security.

This website has no forms or user area. The personal data processing activities linked to the castle website are described below:

The website stores your cookie preference in your browser (localStorage). This preference is not sent to the Town Council or to third parties: see the Cookie policy.

Palafolls Town Council does not carry out automated individual decision-making or profiling that produces significant legal effects on users.

4.1 Ticket bookings

Tickets are booked on Ticket Tailor, outside this website. There you will provide the data requested by the platform’s booking form (usually your name and email address), which the Town Council uses to manage the visit and the waiting list and, if necessary, to notify you of changes. Ticket Tailor has its own privacy policy, which you can consult on the platform before booking.

4.2 Browsing data

With the user’s consent, Google Analytics collects technical browsing data in aggregated and anonymised form: pages visited, length of visit, device used and approximate geographical origin. None of these data allow the user to be personally identified. If you do not accept, no browsing data are collected.

To provide the services linked to the website, Palafolls Town Council uses the following external providers (data processors):

• Ticket Tailor: ticket booking platform. It processes booking data in accordance with its data processing terms.
• Google LLC: Google Analytics 4 (anonymised website statistics), only with consent. Transfer to the USA covered by the Standard Contractual Clauses (SCCs) approved by the European Commission.
• Website hosting provider: technical service for publishing the website and recording access.

YouTube and Vimeo videos do not load until you click on them; from that moment on, Google’s or Vimeo’s privacy policy applies. Data are not disclosed to third parties, except in the cases described or where there is a legal obligation to do so (for example, a request from a court or a competent authority).

Data subjects may exercise, at any time, the rights recognised in Articles 15 to 22 GDPR:

• Right of access: to obtain confirmation as to whether their data are being processed and to access them.
• Right to rectification: to request the correction of inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”): to request the deletion of the data when, among other reasons, they are no longer necessary for the purpose for which they were collected.
• Right to restriction of processing: to request the suspension of processing in certain circumstances.
• Right to object: to object to the processing of the data in certain cases.
• Right to data portability: to receive the data in a structured, machine-readable format, where processing is based on consent or on a contract.
• Right to withdraw consent: where processing is based on consent, to withdraw it at any time without retroactive effect.

To exercise any of these rights, data subjects may contact Palafolls Town Council’s Data Protection Officer:

Postal address: Plaça Major, 11 · 08389 Palafolls (Barcelona)

Email: dpd@palafolls.cat

Proof of identity by means of a DNI (Spanish identity card) or equivalent document is required. A response will be given within a maximum of one month, which may be extended to two months in complex cases.

Furthermore, if you consider that the processing of your data does not comply with current legislation, you have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD, the Spanish Data Protection Agency), the competent supervisory authority: www.aepd.es ↗

Where processing is based on the data subject’s consent (analytics cookies), that consent is obtained in advance and is freely given, specific, informed and unambiguous.

You can withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand, using the “Manage cookies” link in the footer of every page.

Palafolls Town Council has adopted appropriate technical and organisational measures to guarantee the security of personal data and prevent their alteration, loss or unauthorised processing or access, taking into account the state of the art, the nature of the data stored and the risks to which they are exposed, in accordance with Article 32 GDPR.

All communications between the user’s browser and the website are encrypted.

The website does not knowingly collect personal data from children under 14. If it is found that a minor’s data have been provided without the consent of their parents or guardians, they will be deleted immediately. If you become aware of such a case, you can report it to the DPO.

Palafolls Town Council reserves the right to modify this privacy policy to adapt it to legislative, case-law or technical changes. Significant changes will be communicated to affected users and the date of the update will be published at the top of the document.

We recommend that you review this policy periodically. The version published on the website is always the version in force.