Register of processing operations

 

Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals regarding the processing of personal data. Also, on the free movement of such data (RGPD) and the Organic Law 3/2018 of 5 December on the protection of personal data and guarantee of digital rights (LOPD).

.

 

Register of processing activities (art. 30 RGPD).

Data controller:
JULIO MUÑOZ RAMONET FOUNDATION
TAX ID NUMBER: G61645149
Registered Office: Plaza de Sant Jaume, s/n, 08002 Barcelona
Contact email: fundaciojmr@bcn.cat

 

NEWSLETTERS

Treatment Code
2001

Purpose of processing
Regular management of informative communications on the Foundation’s news.

Transfer of data (in addition to judges and courts)
Those compulsorily established by the legislation in force (courts and tribunals and security forces).

Persons affected by the processing
Persons who register for the newsletter to receive news relating to the foundation.

Enabling legal rule or basis
Specific and explicit informed consent.

International transfer
No.

Type of data
Specific data.

Origin
From the data subject.

Deadlines for deletion
Your data will be deleted as soon as you unsubscribe from the newsletter.

Security
LThe security measures implemented correspond to those set out in the Annex II of Royal Decree 311/2022, of 3 May, which regulates the National Security Scheme (ENS) to guarantee the security of the information systems that support the various data processing operations carried out by Barcelona City Council and its affiliates.

ADMINISTRATION

Processing Code
2002

Purpose of processing
Management of suppliers, agreements and contracts, rental of spaces, economic and accounting management.

Transfer of data (in addition to judges and courts)
Those compulsorily established in current legislation (courts and tribunals and security forces) and other Public Administrations in compliance with legal obligations.

Persons affected by the processing
Suppliers, entities or companies that maintain commercial or collaborative relations with the Foundation.

Enabling law or legal basis
Contract between the FJMR and the data subject. Law 9/2017 of the 8th of November on public sector contracts.

International transfer
No.

Type of data
Identification data, financial data.

Origin
From the data subject.

Expected time limits for deletion
Your data will be deleted after five years from the end of the contract.

Security
The security measures implemented correspond to those set out in the Annex II of the Royal Decree 311/2022, of 3 May, which regulates the National Security Scheme (ENS) to guarantee the security of the information systems that support the various data processing operations carried out by Barcelona City Council and its affiliated bodies.

SELECTION PROCESSES

Processing Code
2003

Purpose of Processing
Management of selection processes.

Transfer of data (in addition to judges and courts)
Those compulsorily established in the legislation in force (courts and tribunals and security forces).

Persons affected by the processing
Persons who participate in the Foundation’s selection processes.

Enabling legal norm or basis
Contract between the FJMR and the data subject. Royal Legislative Decree 2/2015, of 23 October, approving the revised text of the Workers’ Statute Law.

International transfer
No.

Type of data
Identification data, personal data, academic and professional data, employment data.

Origin
From the data subject.

Expected time periods for deletion
Your data will be deleted after 5 years from the end of the selection process.

Security
The security measures implemented correspond to those set out in Annex II of Royal Decree 311/2022, of 3 May, which regulates the National Security Scheme (ENS) to guarantee the security of the information systems that support the various data processing operations carried out by Barcelona City Council and its affiliated bodies.

PERSONAL MANAGEMENT

Treatment code
2004

Purpose of processing
Personnel management, recruitment, payroll management, SS registrations and cancellations, administrative management, PRL management.

Transfer of data (in addition to judges and courts)
Communication of data to banks, mutual insurance companies, occupational risk prevention companies and those required by current legislation (courts and tribunals and security forces) and the General Treasury of the Social Security.

Persons affected by the processing
Employees of the foundation.

Enabling legal norm or basis
Contract between the FJMR and the data subject. Royal Legislative Decree 2/2015, of 23 October, approving the revised text of the Workers’ Statute Law, Law 31/1995, of 8 November, on the prevention of occupational risks.

International transfer
No.

Type of data
Identification data, personal data, employment data, economic data, health data and trade union membership data.

Origin
From the data subject.

Expected time limits for deletion
Your data will be deleted after 5 years from the end of your employment relationship.

Security
The security measures implemented correspond to those set out in Annex II of Royal Decree 311/2022, of 3 May, which regulates the National Security Scheme (ENS) to guarantee the security of the information systems that support the various data processing operations carried out by Barcelona City Council and its affiliated bodies.

VIDEO SURVEILLANCE

Treatment code
2005

Purpose of processing
Management of the security of visitors, employees and the foundation’s facilities through closed-circuit video surveillance.

Transfer of data (in addition to judges and courts)
Those compulsorily established by the legislation in force (courts and tribunals and security forces).

Persons affected by the processing
Persons accessing the facilities.

Enabling law or legal basis
Legal obligation of the Data Controller, Law 5/2014 on Private Security.

International transfer
No.

Type of data
Identifying data, (images).

Origin
Video image capture system.

Time periods foreseen for deletion
Your data will be deleted within one month of their capture, except when they have to be kept to prove the commission of acts that threaten the integrity of persons, goods or facilities. In this case, the images will be made available to the competent authority within 72 hours of knowledge of the existence of the recording.

Security
The security measures implemented comply with those set out in Annex II of Royal Decree 311/2002, of 3 May, which regulates the National Security Scheme (ENS) to guarantee the security of the information systems that support the different data processing operations carried out by Barcelona City Council and its affiliated bodies.

VISITOR MANAGEMENT AND ACCESS CONTROL

Treatment code
2006

Purpose of processing
Management of the security of visitors, employees and the foundation’s premises through the registration of entrances and exits.

Transfer of data (in addition to judges and courts)
Those compulsorily established in current legislation (courts and law enforcement agencies).

Persons affected by the processing
Persons accessing the Foundation’s facilities to carry out work, an assignment, visit or meeting.

Legal rule or legal basis
OLegal obligation of the Controller, Law 5/2014 on Private Security.

International transfer
No.

Type of data
Identifying data.

Origin
From the data subject.

Periods foreseen for deletion
Your data will be deleted after 5 years from its collection.

Security
The security measures implemented comply with those set out in Annex II of Royal Decree 311/2002, of 3 May, which regulates the National Security Scheme (ENS) to guarantee the security of the information systems that support the different data processing operations carried out by Barcelona City Council and its affiliated bodies.

TRUSTEES AND MEMBERS

Treatment code
2007

Purpose of processing
Management of the foundation’s governing body.

Transfer of data (in addition to judges and courts)
Those mandatorily established by current legislation (courts and tribunals and security forces) and other public administrations in compliance with legal obligations.

Persons affected by the processing
Members of the Board of Trustees and the secretary.

Enabling legal rule or basis
Book three of the Civil Code of Catalonia, relating to legal persons./p>

International transfer
No.

Type of data
Identification data, employment data.

Origin
From the data subject.

Periods foreseen for deletion
Your data will be deleted after a period of 5 years from the date you cease to be a member of the Board of Trustees.

Security
The security measures implemented correspond to those set out in Annex II of Royal Decree 311/2002, of 3 May, which regulates the National Security Scheme (ENS) to guarantee the security of the information systems that support the different data processing operations carried out by Barcelona City Council and its affiliated bodies.