Privacy and Personal Data Protection Policy

This Privacy Policy provides information on how personal data is processed by the Port Authority of the Balearic Islands (hereinafter, APB). Before providing your personal data, please read it carefully and make sure you understand it.

The APB has adapted its organisational structure and this website to the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation, GDPR) and Organic Law 3/2018, of 5 December, on Personal Data Protection and guarantee of digital rights (LOPDgdd).

For more detailed information about the processing of your personal data, we recommend that you consult our Register of Processing Activities, published at the following link: https://seu.portsdebalears.gob.es/seuapb/fitxa/28541/registro-de-actividades-de-tra?lang=es

We also provide you with the following information regarding the processing of personal data at APB

Data Controller

The entity responsible for the processing of your data is the Port Authority of the Balearic Islands, located at C/ Moll Vell, 3-5 7012 Palma, with C.I.F. No Q 0767004E.

Podeu contactar amb el nostre delegat de protecció de dades a l’adreça gdpr-dpo@portsdebalears.com

Data we process

If you make use of the public services provided by the APB, either through the website, e-Office or in person by means of the corresponding forms and instances, you are providing us with personal data to be processed by the APB. We will process only the data that is strictly necessary to fulfil the purpose of the data processing.

Processing Principles

At the APB, for all personal data processed, we respect all the processing principles required by the GDPR, such as lawfulness, fairness, transparency and data minimisation, and your rights will always be safeguarded throughout the entire processing cycle.

Purpose of processing

At the APB we collect and process your personal data to provide you with the public services and administrative procedures for which we are responsible as a Port Authority and in compliance with the different legal obligations in the course of our duties.

The specific purpose can be found in each processing activity listed in the Register of Processing Activities https://seu.portsdebalears.gob.es/seuapb/fitxa/28541/registro-de-actividades-de-tra?lang=es

Period for which your data will be kept

The personal data provided will be kept for the time necessary to fulfil the purpose for which they were collected and to determine any possible liabilities that may arise from this purpose and from the processing of such data. Furthermore, the APB, as part of the General State Administration, will keep the data in accordance with the legal obligations applicable to it and in compliance with the provisions of the applicable archives and documentation regulations.

Legitimacy for the processing of your data

As a Public Authority, the APB will process your personal data in the exercise of public powers and in favour of the public interest or in compliance with legal obligations applicable to the Port Authority.

Outside these cases, APB will require your consent, which must be given by means of a clear affirmative action.

Data recipients

The APB will only be able to communicate your data when it is necessary to comply with legal obligations or when a Law grants it the power to do so.

In other cases, the APB must request your consent for the transfer of your personal data to another organisation or company.

Rights of the Data Subject

You have the right to know whether the APB is currently processing your data.

In addition, you may exercise your rights which the GDPR confers on you as a data subject. Specifically: opposition, rectification, deletion, portability and limitation.

We provide you with the following form to facilitate the exercise of your rights: https://seu.portsdebalears.gob.es/seuapb/procediment/25771/ejercicio-de-derechos-en-mater

You may exercise these rights before the Port Authority of the Balearic Islands in the following ways:

Accuracy and veracity of the data

You will guarantee that the personal data provided through the different channels available are truthful, being obliged to communicate any modification of them by exercising the right of rectification.

In any case, you are solely responsible for the veracity and correctness of the data that you send to APB, exonerating the entity from any liability, damages or losses originated in this regard.

Privacy and Security

In the use and processing of personal data, the APB undertakes to respect their confidentiality and to use them in accordance with the purpose for which they were collected, as well as to comply with its obligation to store them and to adapt all measures to avoid their alteration, loss, unauthorised processing or access, in accordance with the provisions of current data protection legislation.

Changes to the privacy policy

The APB reserves the right to modify this policy to adapt it to new legislation or jurisprudence. In such cases, the APB will announce the changes made on this website within a reasonable period of time prior to them becoming effective.

This policy was updated on 29 November 2021. The updated version of this policy is the only valid one until there is another to replace it.