Privacy an data protection policy
BARCELONA CHILDHOOD AND ADOLESCENCE INSTITUTE is a project of the INSTITUT METRÒPOLI . The INSTITUT METRÒPOLI , as the controller of personal data, guarantees an adequate and consistent level of protection of individuals with respect to their personal data, which is processed for the development of its competences, in accordance with the requirements of the General Data Protection Regulation (2016/679) and Organic Law 3/2018, of December 5, on data protection and guarantee of digital rights.
THE BARCELONA INSTITUTE OF CHILDHOOD AND ADOLESCENCE processes personal data with full responsibility and loyalty, and in accordance with the legal bases that allow the legality of the processing, in compliance with the General Data Protection Regulation and Organic Law 3/2018, of December 5, on data protection and guarantee of digital rights.
THE BARCELONA INSTITUTE OF CHILDHOOD AND ADOLESCENCE applies the principle of transparency in the processing of personal data, providing interested parties with the information on the processing required by the RGPD and the LOPDGDD, in a concise, easily accessible, complete and easy-to-understand language; at the same time, it facilitates the exercise of rights through forms available to interested parties. TO CLICK AND OPEN LINK
On the other hand, the owner of the BARCELONA INSTITUTE OF CHILDHOOD AND ADOLESCENCE , the INSTITUT METRÒPOLI has appointed a Data Protection Officer, in accordance with the provisions of article 37.1.a) of the General Data Protection Regulation (2016/679) and articles 34 and 36 of Organic Law 3/2018 on the protection of personal data and the guarantee of digital rights. The contact email address of the Data Protection Officer is info@ohb.cat or info@institutmetropoli.cat.
Information about the Data Controller:
- Responsible for the processing. INSTITUT METRÒPOLI CIF. P0800013E. Postal address: Bellaterra Campus, Knowledge Square, MRA Building, P2, 08193 Bellaterra. Telephone: 935 868 880; email: info@ohb.cat.
- Contact details of the Data Protection Officer : info@institutmetropoli.cat.
- Legal bases and purposes of the processing .
The processing of the personal data of interested persons, derived from the powers and functions of the BARCELONA INSTITUTE OF CHILDHOOD AND ADOLESCENCE, is based, in general, on the following legal bases:
General Data Protection Regulation 2016/679.
- Article 6.1.c. The processing is necessary for compliance with a legal obligation to which the controller is subject. Carrying out the administration’s own activities.
- Article 6.1.e. The processing is necessary for the performance of a task carried out in the public interest or in the exercise of public powers conferred on the controller. Carrying out the administration’s own activities. Also the video surveillance activity of all the facilities belonging to the Entity.
Organic Law 3/2018 on the protection of personal data and guarantee of digital rights.
- Article 8. Data processing due to legal obligation, public interest or exercise of public powers. Carrying out the administration’s own activities.
- The processing of personal data may only be considered based on compliance with a legal obligation required of the controller, in the terms provided for in article 6.1.c) of Regulation (EU) 2016/679, when so provided by a rule of European Union law or a rule with the rank of law.
- The processing of personal data may only be considered to be based on the performance of a task carried out in the public interest or in the exercise of public powers conferred on the controller, in the terms provided for in article 6.1 e) of Regulation (EU) 2016/679, when it derives from a power attributed by a rule with the rank of law.
- Data retention period (data deletion)
The personal data of the interested parties will be kept for the time necessary to fulfill the purposes that justify the processing, in accordance with the exercise of the powers and functions of the BARCELONA INSTITUTE OF CHILDHOOD AND ADOLESCENCE , and to determine the possible responsibilities derived from these purposes. The deletion of the data will also take into account specific cases such as the processing of data by the video surveillance camera system, and sectoral regulations that require minimum retention periods; and subsequently in application of the legislation on public administration archives.
- Data protection rights and how to exercise them
Interested parties, holders of the data processed by the INSTITUT METRÒPOLI through the BARCELONA INSTITUTE OF CHILDHOOD AND ADOLESCENCE, are entitled to exercise their data protection rights: access to their data, rectification of erroneous, inaccurate or incomplete data, and deletion when, among other reasons, the data is no longer necessary for the purposes that justified the processing.
In certain circumstances, interested parties may request the limitation of the processing of their data, in which case they will only be kept for the exercise or defense of claims.
For reasons related to their particular situation, interested parties may object to the processing of their data. In this case, the INSTITUT METRÒPOLI will cease processing such data except for legitimate reasons or for the exercise or defense of possible claims.
The portability of the personal data of interested parties may also be carried out, provided that they are about data collected whose purpose is not based on the fulfillment of a legal obligation, a mission of public interest or the exercise of public powers conferred on the Controller ( the exercise of the right to portability may only be responded to if the processing is based on the consent of the interested party and this processing is carried out by automated means).
To exercise these rights, the interested party may contact the BARCELONA INSTITUTE OF CHILDHOOD AND ADOLESCENCE , by email to info@institutinfancia.cat or info@institutmetropoli.cat.
Likewise, if you are not satisfied with the response to the request to exercise your rights, and in any case, whenever you consider it appropriate, you may file a claim with the Catalan Data Protection Authority through its electronic office apdcat.gencat.cat.
- Recipients of the data :
Other public administrations competent in the matter may be recipients of personal data, when appropriate, provided that the transfer has been based on a legitimate legal basis, in accordance with article 6 of the GDPR and article 8 of the LOPDGDD.
- International data transfers.
In order to offer you our services, the BARCELONA INSTITUTE OF CHILDHOOD AND ADOLESCENCE contracts resources that carry out international data transfers to third countries located outside the European Union. These countries have an adequate level of data protection declared by the European Commission and also the provision of adequate guarantees such as the bilateral agreement between the EU and the USA called DATA PRIVACY FRAMEWORK.
- Origin of personal data
The personal data processed by the BARCELONA INSTITUTE OF CHILDHOOD AND ADOLESCENCE , in fulfillment of a mission carried out in the public interest, in the exercise of public powers conferred on the data controller, in fulfillment of a legal obligation or in execution of a contract, come directly from the interested parties or their representatives.
In the event that the data does not come directly from the interested parties, for example if they come from other public administrations, Article 14 of the GDPR will be complied with, providing the interested party with the additional information required when the personal data have not been obtained from the interested party, which specifically includes the obligation to inform about the origin of the data and about the categories of personal data being processed.
Likewise, with respect to the right of citizens not to provide documents that are already in the possession of the acting administration or have been prepared by any other administration, the provisions of the current wording of article 28.2 of the Administrative Procedure Law will apply, in accordance with the twelfth final provision of Organic Law 3/2018, on the protection of personal data and guarantee of digital rights.
