Privacy and Data Security Policy of the Municipality of Seia
The General Data Protection Regulation (GDPR) gives personal data subjects greater control over the use of their data and determines obligations for those who process this information.
Within the framework of its legal powers, Seia Town Council carries out a range of activities aimed at serving the people of the municipality.
Seia City Council, as data controller, is committed to respecting the privacy of its residents and data subjects in general and to protecting and securing their personal data.
The purpose of this Privacy Policy is to inform citizens and data subjects who interact with Seia City Council about the way in which the Council collects, processes and protects the personal data provided to it.
This Privacy Policy has been deliberately drafted in a brief, clear and simple manner to facilitate understanding and enable data subjects to exercise their rights in a free and informed manner.
Information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (Article 4(1) of the GDPR).
The person responsible for collecting and processing data is Seia City Council, with the following contact details: Email: presidencia@cm-seia.pt, telephone: 238 310 238 or postal address Lg Doutor António Borges Pires, 6270-494 Seia.
The Data Protection Officer (EPD/DPO) can be contacted by e-mail at rgpd@cm-seia.pt, by cell phone at 966130357 or by letter at Lg Doutor António Borges Pires, 6270-494 Seia.
Seia City Council collects and processes data related to the promotion and safeguarding of the interests of the population of its municipality, in conjunction with the parishes, and in interaction with the respective municipal companies, within the limits and in compliance with its legal obligations in the exercise of public authority. Thus, the main basis of the data processing operations carried out by Seia City Council is compliance with its legal obligations, with the law being the fundamental guarantor of the purpose, basis of collection, minimization and retention of the personal data processed.
There may be situations in which data processing operations also result from the need to comply with the execution of contracts or pre-contractual procedures in which the Seia City Council is involved.
Seia City Council is also bound by obligations of transparency and the promotion of Citizenship, which translate into actions of communication and disclosure of its activities to the Community.
In the context of managing the contractual relationship, special categories of personal data may be processed, particularly in personnel contracts (entry exams which include medical aptitude and/or psychological tests) or in the context of occupational medicine which may include the data subject’s state of health. When special categories of data are involved, they will be processed within the strict limits of the law and, where there is no other basis, with the explicit consent of the data subject.
Data relating to health and psychological profile, and their treatment, are always carried out by professionals (doctors and psychologists), subject to a duty of confidentiality.
The data will be kept for the period necessary to fulfill the purposes for which it was collected. However, in certain cases we may keep the data for longer periods, particularly when the legislation in force so requires.
The data will be kept in accordance with the time limits laid down in the applicable legislation, depending on the nature of the request.
Whenever there is no legal requirement, data is only processed for the period deemed necessary to fulfill the purpose for which it was collected.
The data subject has the right to ask the municipality for access to personal data concerning him or her, as well as its rectification or erasure, to restriction of processing or to object to processing, and to data portability.
To exercise any of these rights, the holder must submit the relevant request to the municipality, using the attached form, sent or presented to one of the contacts listed.
It lets you know how much:
The data subject has the right to access the personal data processed by the City Council, and to know the conditions under which it is processed, and may request access to it or obtain a copy of the personal data;
If the holder submits their request by electronic means, the information may be provided by the same means, if the holder does not object;
The provision of other copies of the data requested may be subject to the payment of a fee to cover the administrative costs involved.
The right to rectify information if it is inaccurate or incomplete.
The data subject has the right to demand that the Municipality rectify outdated, inaccurate or incomplete data without undue delay.
In this case, and because the data controller is a Public Administration entity, this right is at the same time a duty on the part of the administrator to keep their data up to date.
You have the right to request the City Council to delete your data, which is obliged to delete it, within the limitations established by law, when one of the following reasons applies:
a) The data is unnecessary for the purpose for which it was collected or processed;
b) You have withdrawn your consent to the processing of data (in cases where processing is based on consent) and there is no other basis for said processing;
c) Opposes the processing and there are no overriding legitimate interests justifying it;
d) When personal data has been processed unlawfully.
You have the right to ask the City Council to limit the processing of your data if one of the following situations applies:
a) Challenge the accuracy of personal data for a period that allows the City Council to verify its accuracy;
b) The data processing is lawful and the data subject opposes the erasure of the personal data and requests, instead, the limitation of its use;
c) The City Council no longer needs the personal data for processing purposes, but such data is required by the data subject for the purposes of declaring, exercising or defending a right in legal proceedings;
d) Has objected to the processing, until it is established that the legitimate reasons of the data controller (Câmara Municipal de Seia) prevail over those of the data subject;
e) Where processing has been restricted, personal data may only be processed (except for storage) with the consent of the data subject or for the purposes of declaring, exercising or defending a right in legal proceedings, defending the rights of another person (natural or legal), or for reasons of overriding public interest;
f) The data subject is informed before the restriction of processing is lifted.
The data subject has the right to receive the data concerning him/her that he/she has provided to the controller in a structured, commonly used and machine-readable format and the right to transmit this data to another entity when:
a) The processing is based on the consent of the data subject;
b) The processing is carried out by automated means;
c) Where technically possible, the data subject may request that personal data be transmitted directly between the data controllers.
When the data subject has given their consent to the processing of personal data concerning them, they may withdraw that consent at any time by submitting their request to Seia City Council, using any of the contact methods indicated.
Withdrawal of consent does not compromise the lawfulness of the processing carried out in the meantime on the basis of the consent previously given.
The EPD’s main functions are:
In the event of a personal data breach, report it immediately to the Data Protection Officer so that measures can be taken to assess, control and mitigate the possible impacts. The Data Protection Officer must report data breaches without undue delay to the data subject and to the CNPD (National Data Protection Commission) within 72 hours of becoming aware of the situation.
The data subject may submit complaints about the way in which their personal data is processed to the following Entities:
– Data Protection Officer, by email: rgpd@cm-seia.pt, by cell phone 966130357, or by letter to the postal address Lg Doutor António Borges Pires, 6270-494 Seia.
Requests must be answered within a maximum of 30 days.
– To the National Data Protection Commission (CNPD), www,cnpd.pt, Av.ª D. Carlos I, 134 – 1.º, 1200-651 Lisboa.
We also respect the confidentiality of your information and undertake to keep your information confidential in accordance with this Privacy Policy and applicable legislation.
The Privacy Policy may be changed at any time and any changes will be posted and updated on the website.
For the 31st edition of the CINEECO festival
Subscribe to our newsletter
KEEP UP TO DATE WITH THE LATEST NEWS
