Política de Privacidad

PRIVACY POLICY

1. INFORMATION FOR USERS

Who is responsible for processing your personal data?

The Holy Week Board of Burgos is the Data Controller and informs users that their personal data will be processed in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD).

What principles do we apply when processing your data?

The Controller applies the following principles in accordance with the GDPR:

  • Lawfulness, Fairness, and Transparency: Personal data will be processed with the user’s consent and for specific purposes clearly explained in advance.

  • Data Minimization: Only strictly necessary data will be requested.

  • Storage Limitation: Data will be kept only for as long as necessary for the stated purposes.

  • Integrity and Confidentiality: Appropriate security measures are applied to ensure confidentiality and protection.

For what purposes do we process your data?

To maintain a relationship with the user. Processing activities may include:

  • Handling inquiries, requests, or communications submitted via website contact methods.

  • Conducting market research and statistical analysis.

  • Interaction through social networks linked to the website.

  • Processing data related to cookie use requiring user consent.

On what legal basis do we process your data?

Processing is based on Article 6 of the GDPR:

  • User consent: For communications, cookie usage, and social media interaction.

  • Legitimate interest: For statistical analysis and responding to requests initiated by the user.

How long do we retain your data?

Data will be retained:

  • Until the user withdraws consent, or

  • For no longer than necessary to fulfill the processing purpose, or

  • As required by applicable law.

Data related to service management, administration, or billing will be kept while the relationship remains active and, where applicable, during legally required retention periods.

Statistical reports may be kept indefinitely, provided they do not contain personal data.

Inquiry-related data will be retained for the time necessary to respond, with a maximum period of one year, and then securely anonymized or deleted.

To whom do we disclose your data?

Personal data will not be shared with third parties unless required for service provision (e.g., technical platform providers), under confidentiality agreements compliant with data protection regulations.

If the user consents to analytics or advertising cookies, data may be shared with Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.
More information: https://analytics.google.com

What are your rights?

Users have the right to:

  • Withdraw consent at any time

  • Access, rectify, transfer, or erase their data

  • Restrict or object to processing

  • Lodge a complaint with the Spanish Data Protection Authority (www.aepd.es)

Contact for exercising rights:
Holy Week Board of Burgos
C/ Zaragoza nº 6 Bajo – 09001 Burgos, Spain
Email: secretaria@semanasantaburgos.com

2. SECURITY MEASURES

In compliance with GDPR and LOPDGDD, the Holy Week Board of Burgos applies appropriate technical and organizational measures to ensure lawful, fair, and transparent processing of personal data, limiting it to what is necessary for the stated purposes.

The Board guarantees that appropriate security policies have been implemented to protect users’ rights and freedoms and to provide them with adequate information to exercise those rights.