INFORMATION CLAUSE – TICKET PURCHASE AND IMAGE AUTHORISATION, PEÑÍSCOLA CASTLE

In accordance with data protection legislation (GDPR and the Spanish Organic Law on Data Protection and Guarantee of Digital Rights, LOPDGDD), the personal data provided on the form and, where applicable, in any accompanying documentation will be processed by the PROVINCIAL COUNCIL OF CASTELLÓN (Excma. Diputación de Castellón, hereinafter "the Diputación de Castellón"), acting as Data Controller, for the purpose of managing your ticket purchase and, where you have consented to this, sending you information of interest about events held at Peñíscola Castle.

Data protection officer: dpd@dipcas.es

The legal basis on which we rely to process your personal data is: (i) performance of a contract (Art. 6.1.b GDPR) as regards the purchase of your tickets, and (ii) your express consent (Art. 6.1.a GDPR) as regards the sending of informational communications. This consent may be withdrawn at any time.

Personal data will be retained in order to keep a record of the service provided and to manage our services efficiently, and for as long as the data subject does not request its erasure. Even where erasure has been requested, the data will be kept blocked for as long as necessary, with processing restricted, solely for any of the following purposes: to comply with legal and/or contractual obligations of any kind to which we are subject; and/or for the statutory limitation periods applicable to any liability on our part; and/or for the exercise or defence of claims arising from the relationship with the citizen/data subject.

The data will not be disclosed to third parties, other than to the public or private bodies to which such disclosure is necessary or mandatory in order to process your request, and in the cases provided for by law.

You may exercise your rights of access, rectification, erasure, restriction, portability and objection or, where applicable, withdraw the consent you have given. To do so, you may submit a written request in person at the Diputación's Registry: Plaza de las Aulas, 7, 12001 Castellón de la Plana, or through the Electronic Office https://dipcas.sedelectronica.es

Your request must specify which of these rights you wish to exercise and, if submitted in person, you must present your NIF (Spanish tax identification number) or equivalent identity document. If you act through a legal or voluntary representative, you must also provide a document evidencing that representation together with the representative's identity document.

Likewise, if you consider that your right to the protection of personal data has been infringed, you may lodge a complaint with the Data Protection Officer dpd@dipcas.es or, where applicable, with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) (www.aepd.es).