FUNDACIÓ VISIT VALÈNCIA is responsible for processing your personal data and informs you that these data will be treated in accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016 (GDPR), on the protection of individuals with regard to the processing of personal data and the free movement of these data, and Organic Law 3/2018 of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), which provides you with the following information on the processing of personal data (LOPDGDD), for which reason it provides the following information on the processing of the digital rights (LOPDGDD):

IDENTIFICATION OF THE DATA CONTROLLER

• Holder: FUNDACIÓ VISIT VALENCIA DE LA COMUNITAT VALENCIANA
• Registered office: Avd. Cortes Valencianas, 41 bajo, 46015- Valencia.
• CIF: G46893467
• E-mail: visitvalencia@visitvalencia.com

IDENTIFICATION OF THE DATA PROTECTION DELEGATE (DPD)

• The PERSON IN CHARGE, in order to guarantee the security of your data, has appointed a Data Protection Delegate (DPD).
• E-mail: lopd@visitvalencia.com

PURPOSE OF THE PROCESSING OF YOUR DATA

FUNDACIÓ VISIT VALÈNCIA will process your data manually and/or automatically, for the following specific purposes:

- To respond to the questions that the interested party sends to the person in charge.

• Storage period: The data will be processed until the question raised by the interested party is resolved. After this, they will be kept for five (5) years for the possible formulation, exercise or defence of claims.
• Legal basis: consent of the interested party.

- Manage the interested party's subscription to our newsletters and/or blogs.

• Maximum Storage period: We will keep the data as long as there is interest on the part of the interested party and the interested party does not request the cancellation.
• Legal basis: consent of the data subject.

- Process orders, requests for products or services made by the user.

• Storage period: The data will be treated during the contractual relationship. After this, they will be kept during the legal period in force as regards fiscal and contractual matters.
• Legal basis: commercial relationship

- Send electronic communications about news and updates of products and/or services of the Person in Charge.

- Storage period: The data will be treated as long as you do not object to the treatment or withdraw your consent.

• Legal basis: legitimate interest of the Interested Party.

We inform you that you can withdraw your consent at any time, without affecting the legality of the treatment previously carried out by the Person in Charge.

Application for admission as a member of the “Valencia Convention Bureau”.

• Storage period: We will keep the data as long as the interested party does not revoke the consents granted.
• Legal basis: Consent of the interested party.

- Manage the subscription of the interested party to our private access to the website.

• Storage period: We will keep the data as long as the interested party does not revoke the consents granted.
• Legal basis: Consent of the interested party.
• Maximum storage period: one year from receipt.
• Legal basis: the consent of the interested party.

- Treatment of video-surveillance images in the facilities of FUNDACIÓ VISIT VALÈNCIA

• Maximum storage time: 30 days.
• Legal basis: legitimate interest.

RECIPIENTS OF YOUR DATA

FUNDACIÓ VISIT VALÈNCIA informs you that in the event that you purchase a product from FUNDACIÓ VISIT VALÈNCIA's online store, your data may be transferred to the operator or company providing the service whenever necessary for the correct provision of the service.

Likewise, on occasions, within the framework of current legislation or the existing contractual relationship, your data may be communicated to third parties:

• Public administrations with competence in our sectors of activity to process the contracted service or when so established by current regulations.
• The State Security Forces and Corps by virtue of what is established in the Law.
• Banks and financial institutions for the collection of the services offered.
• Other professionals in the legal, marketing and advertising fields, when such communication is legally necessary, or for the execution of the contracted services.

YOUR RIGHTS

We inform you that at any time you can exercise the following rights at any time and free of charge in relation to your data:

• Right of access
• Right of rectification or erasure
• Right to limitation of processing
• Right to portability
• Right to object
• Right to revoke your consent

You may exercise these rights by sending an email to lopd@visitvalencia.com clearly indicating which right you wish to exercise.

They may also be sent by mail to the registered address of the person in charge, which appears in point 1 of this Privacy Policy. You may withdraw your consent for the receipt of periodic commercial communications by clicking on the link that you will find in each of the commercial communications received with the legend (“Unsubscribe me”). If you would like more information about your rights, please contact the Data Protection Officer.

Additionally, we inform you about the possibility of submitting a complaint to the competent Control Authority, in this case, the Spanish Data Protection Agency, especially if you have not obtained satisfaction in the exercise of your rights. You can contact the Spanish Data Protection Agency by calling 901 100 099 and 912 663 517 or visiting them at their address C/ Jorge Juan, 6. 28001 - Madrid.

SECURITY MEASURES

In accordance with the provisions of current regulations on the protection of personal data, the PERSON IN CHARGE is complying with all the provisions of the GDPR regulations for the processing of personal data under his/her responsibility, and manifestly so with the principles described in article 5 of the GDPR, by means of which they are treated in a lawful, fair and transparent manner in relation to the interested party and are suitable, relevant and limited to what is necessary in relation to the purposes for which they are processed. The PERSON IN CHARGE guarantees that he has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR in order to protect the rights and freedoms of the Users and has communicated adequate information to the Users so that they can exercise them.

Last update: November 2019