Privacy Policy

Data Controller

The company responsible for the processing of your data under this Privacy Policy is:

Commercial name: UNITED CITIES AND LOCAL GOVERNMENTS (World Organization of United Cities and Local Governments)

Tax Identification Number (Código de Identificación Fiscal, CIF): G-63327696

Registered office: Carrer Avinyó, 15 (08002) Barcelona

Telephone No.: + 34 933 428 750

E-mail: [email protected]

At UNITED CITIES AND LOCAL GOVERNMENTS, we recognize the importance of protecting your personal information, and we are committed to processing it responsibly and in accordance with data protection laws.

This Privacy Policy aims to regulate all aspects relating to the processing of the data of the users who browse or provide their personal data through the different forms available on the website.

Personal data

Personal data is information that identifies you or makes you identifiable. Through the website, in the boxes provided for this purpose, we collect the personal data that the user communicates to us: Name(s), surname(s), e-mail address, telephone number, postal address, town/city, etc.

The user’s visit to the website does not imply that they have to provide any information about their personal data. However, if provided, the data will be processed lawfully, being subject at all times to the principles and rights set out in the General Data Protection Regulation (GDPR) 2016/679 of 27 April 2016 and the Spanish Organic Law on the Protection of Personal Data and the Guarantee of Digital Rights (Ley Orgánica de Protección de Datos Personales y Garantía de los Derechos Digitales, LOPDGDD) 3/2018 of 5 December.

Purpose, duration and legitimacy of processing

Data provided by the user will be processed for the following purposes:

Respond to requests made by the user through the contact form available on the website. We collect and process the user’s personal data in order to process and manage any requests, enquiries or questions submitted through this form. We will store this data for the time necessary to comply with your request, and the time period established by law, up to a maximum of three years.

The basis of legitimacy for processing the data will be the consent given by the user when ticking the box accepting our Privacy Policy before sending the request. The user has the right to withdraw their consent at any time, without affecting the lawfulness of processing based on the consent prior to its withdrawal.

Improve your web browsing experience. We will store this data for as long as the user does not withdraw their consent to its processing by deleting the cookies, and for the time period established by law, up to a maximum duration of three years.

The legitimate basis for improving your web browsing experience is the consent you give by accepting cookies. The user has the right to withdraw their consent at any time, without affecting the lawfulness of processing based on the consent prior to its withdrawal.

Manage our social networks and send you information about our activities and products. We will store this data for as long as the user does not withdraw their consent to its processing, and for the time period established by law, up to a maximum duration of three years.

The legitimate basis for managing our social networks and sending updates about our activities and news is the consent you give us to do so. The user has the right to withdraw their consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

Transfer or communication of personal data and international transfers

Your data will only be communicated to members of the UCLG network and host cities of events. Your data will not be communicated or transferred to third parties, except in cases where there is a legal obligation to do so, or to those providers linked to the Data Controller who act as Data Processors.

In the case that international transfers are made, you will be informed in order to obtain your consent.

Data maintenance

It is important that, in order to keep personal data up to date, the user informs us whenever there has been any changes to their data, otherwise we cannot assure, verify nor be held liable for the veracity of the data.

The user guarantees that the personal data provided is truthful, guaranteeing that all the information provided corresponds to the real situation, that it is up to date and accurate, being obliged to communicate any modifications to us.

Third party data

If the user provides data of third parties to UNITED CITIES AND LOCAL GOVERNMENTS for any purpose, they guarantee that they have obtained this data in a lawful manner, that they have previously informed those affected, obtaining their consent to communicate said data, and that the information provided is accurate and truthful.

Mandatory nature of information requested

All our forms include an asterisk (*) to indicate mandatory data. If the user does not provide data in these fields, or does not tick the box to accept the Privacy Policy, they will not be allowed to submit their information.

Rights of Data Subjects

The Data Subject has the right to access their data and to obtain confirmation as to its processing, as well as a copy of the personal data being processed. They have the right to update their data and to request the rectification of inaccurate personal data or to request deletion when the data is not necessary for the purposes for which it was collected. You may request the limitation of the processing of your data and object to the processing of your data by withdrawing your consent, as well as exercise your right to data portability. Similarly, you have the right not to be subject to decisions based solely on the automated processing of your personal data.  You can exercise your rights by contacting us at the following addresses: C/ Avinyó, 15, 08002 BARCELONA (Barcelona). E-mail: info@uclg.org

Should you feel that your rights have not been properly addressed, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Processing of minors’ data

Anyone who provides data through the forms on provided on this website and accepts its processing declares that they are over 14 years of age. Access to and use of the portal by minors under this age is prohibited. If at any time, the Data Controller detects that a child under 14 years of age has provided personal data, we will proceed to delete the data. In addition, parents or guardians may, in any case, contact UNITED CITIES AND LOCAL GOVERNMENTS to block the access account of minors in their care who have registered by misrepresenting their identity.

Processing of cookies

A cookie is a small file that is downloaded and stored on the user’s computer or device when the user accesses a website. Cookies allow the website to, among other things, store and retrieve information about the browsing habits of the user or their computer or device and, depending on the information they contain and how you use your computer or device, they may be used to recognize the user.

The user has the option to prevent the generation of cookies by selecting the corresponding option in their browser. You can find out more about cookies by reading our Cookie Policy.