Back to top

Privacy policy

Privacy Policy

 

1. DATA CONTROLLERS

Names of the entities: SOCIEDAD MIXTA PARA LA PROMOCIÓN DEL TURISMO DE VALLADOLID S.L. (hereinafter, TURISMO VALLADOLID) and the CITY COUNCIL OF VALLADOLID, depending on the data processing.

Address: Plaza Mayor, 1, 47001, Valladolid.

Phone: 983426245

Email: smptvdatos@ava.es

2. DATA PROCESSING COLLECTED THROUGH THE WEBSITE

The data that TURISMO VALLADOLID and the CITY COUNCIL OF VALLADOLID may collect through the use or browsing of the website, our forms, email, or due to the contractual relationship with TURISMO VALLADOLID are personal data. When completing each of the forms on our website, there will be mandatory fields marked with an asterisk (*). If these fields are not filled in, the purposes described for each form cannot be fulfilled.

We also inform you that by merely using and browsing our website, TURISMO VALLADOLID and the CITY COUNCIL OF VALLADOLID will store data relating to:

  • IP address
  • Browser version
  • Operating system
  • Duration of the visit or website browsing

Such information may be stored through Google Analytics, so we refer you to Google’s Privacy Policy as it collects and processes such information.

TURISMO VALLADOLID reserves the right to modify or adapt this Privacy Policy at any time. We therefore recommend that you review it each time you access the website. If you have registered and access your account or profile, you will be informed in the event of substantial changes to the processing of your personal data.

1. Contact Forms

  • Purpose: Respond to your information request submitted through the contact forms.
  • Legal basis: Your consent given when you send the form.
  • Recipients: Data will not be shared with third parties, except where legally permitted under data protection laws.

2. Information provided through the email addresses available on the website

  • Purpose: Respond to your information request.
  • Legal basis: Your consent given when you send the email request.
  • Recipients: Data will not be shared with third parties, except where legally permitted under data protection laws.

3. Unsolicited job applications

  • Purpose: Include you in recruitment processes carried out by TURISMO VALLADOLID.
  • Legal basis: Execution of a contract in which the data subject is a party, or to take pre-contractual steps at the request of the data subject.
  • Recipients: Data will not be shared with third parties, except where legally permitted under data protection laws.

4. Newsletter/Newsletter Subscription

  • Purpose: Manage the sending of TURISMO VALLADOLID’s newsletter to subscribers.
  • Legal basis: Consent of the subscribers when ticking the relevant box.
  • Recipients: Data will not be shared with third parties, except where legally permitted under data protection laws.

5. Exercise of GDPR rights

  • Purpose: Address requests from data subjects in data protection matters.
  • Legal basis: Processing necessary to comply with a legal obligation under the General Data Protection Regulation.
  • Recipients: Data will not be shared with third parties, except where legally permitted under data protection laws.

6. Security breach management

  • Purpose: Manage and resolve data protection security breaches, including possible notification to affected parties.
  • Legal basis: Processing necessary to comply with a legal obligation under the General Data Protection Regulation.
  • Recipients: Data will not be shared with third parties, except where legally permitted under data protection laws.

3. OTHER DATA PROCESSING

1. Exclusively for professional contacts

  • Purpose: Maintain the professional relationship between both parties.
  • Legal basis: Legitimate interest pursued by the data controller to maintain relationships of any kind with the legal entity in which the data subject works, provided such interest does not override the rights and freedoms of the data subject.
  • Recipients: Data will not be shared with third parties, except where legally permitted under data protection laws.

2. Exclusively for contacts through social networks

  • Purpose:
    • Respond to queries, requests, or applications.
    • Manage the requested service or process a request.
    • Establish a user–controller relationship and create a community of followers.
  • Legal basis: Legitimate interest of the controller and acceptance of a contractual relationship in the relevant social network environment.
  • Recipients: Data will not be shared with third parties, except where legally permitted. Note that social networks, being US-based, may transfer data to the United States. We recommend reviewing the privacy policies of the main social networks we use.

3. Exclusively for customers (invoices and delivery notes)

  • Purpose: Manage services derived from the contractual relationship, as well as commitments under the contract.
  • Legal basis: Execution of a service provision contract and compliance with applicable legal obligations:
    • Data retention periods post-contract based on the Spanish Commercial Code.
    • Communication of data to the Tax Agency as required under Law 58/2003, General Tax Law.
  • Recipients:
    • Spanish Tax Agency, as required for legal compliance.
    • Relevant banking entities for payment management.
    • Labour Inspectorate if requested.

4. Guided tours

  • Purpose: Manage access to our tourism promotion services.
  • Legal basis: Consent of the data subject.
  • Recipients: Data will not be shared with third parties, except where legally permitted. For certain visits (e.g., to military facilities), data may be shared with those organizations.

5. Exclusively for congresses/activities

  • Purpose: Manage and process your registration for the relevant activity and send you information (including electronic means) about our congresses/activities if you have given consent.
  • Legal basis: Execution of a service provision contract and the data subject’s consent.
  • Recipients: Data will not be shared with third parties, except where legally permitted under data protection laws.

6. Host families for foreign students in Valladolid

  • Purpose: Manage language promotion services provided by the Sociedad Mixta para la Promoción del Turismo SL.
  • Legal basis: Data subject’s consent and performance of a task carried out in the public interest or in the exercise of official authority.
  • Recipients: Your data will be shared with interested foreign students and educational centres offering Spanish courses.

7. Exclusively for video surveillance images

  • Purpose: Our facilities are equipped with permanent video surveillance systems for security reasons.
  • Legal basis: TURISMO VALLADOLID’s legitimate interest in securing its facilities, provided this does not override the rights and freedoms of data subjects; and the public interest in ensuring sufficient security guarantees for people and property.
  • Recipients: Data will not be shared with third parties, except where legally permitted under data protection laws.

4. DATA RETENTION PERIODS

  • Professional contacts: Until our professional relationship ends or you request cancellation or object to processing.
  • Social network contacts: For as long as necessary to fulfil the purpose for which they were collected.
  • Customers: Personal data will be processed until the contractual relationship ends. Afterwards, data will be retained for 6 years (Commercial Code) for business purposes and 4 years (General Tax Law) for tax purposes.
  • Congress/activity participants: Personal data will be kept while your relationship with TURISMO VALLADOLID continues. Data used for sending information will be kept until you withdraw your consent. Images published on social networks or the website will be kept unless deletion is requested.
  • Website contact forms: Data will be processed for the time strictly necessary to address your request.
  • Information via website email addresses: Data will be retained as long as necessary to fulfil the purpose and any resulting responsibilities.
  • Unsolicited job applications: Kept for a maximum of ONE YEAR from CV receipt.
  • Newsletter subscriptions: Data will be retained until you cancel your subscription.
  • Exercise of GDPR rights: Data will be retained as needed to resolve the request, then securely blocked and minimised to meet legal obligations.
  • Security breach management: Data will be retained as needed to manage and resolve the breach, then securely blocked and minimised to meet legal obligations.
  • VAFC Department:
    • Website contact form: Retained only as long as needed to address your request.
    • VAFC forms: For as long as the service is provided.
  • Guided tours: Retained for the duration of the tour.
  • Video surveillance systems: Recordings will be retained for a maximum of one month from capture as per Article 22 of Spain’s Organic Law 3/2018.

5. INTERNATIONAL DATA TRANSFERS

TURISMO VALLADOLID does not plan to carry out international data transfers. If necessary, they will only be made to entities covered by the US-EU Data Privacy Framework (Adequacy decision EU-US Data Privacy Framework), to entities demonstrating compliance with the required protection level and guarantees under applicable data protection laws such as the European Regulation, or when legally authorised (e.g., with the data subject’s consent). In all cases, relevant information will be provided to the data subject.

6. WHAT ARE YOUR RIGHTS REGARDING DATA PROCESSING?

As the data subject, you have the right to obtain confirmation of whether your data is being processed, to access your personal data, to request rectification of inaccurate data, or, where appropriate, to request erasure when the data is no longer needed for the purposes for which it was collected or if you withdraw your consent.

TURISMO VALLADOLID will process and retain your data in accordance with applicable regulations, but you may also request restriction of processing. In certain circumstances, you can exercise your right to data portability, receiving your data in a structured, commonly used, machine-readable format for transfer to another controller.

You have the right to withdraw your consent at any time for any processing based on your consent.

To exercise your rights, contact us at smptvdatos@ava.es. We have forms available for exercising these rights, but you can also use those provided by the Spanish Data Protection Agency. You have the right to file a complaint with the Spanish Data Protection Agency if you consider that your rights have not been adequately addressed. The maximum response time is one month from receipt of your request.

If your data changes, please notify us in writing to keep your information up to date.

You may also be interested

Events