Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR)

Data protection policy

Last update: 28/05/2018

Municipal Libraries Network

Both privacy of data and confidentiality of information are important concerns for BARCELONA PROVINCIAL COUNCIL. For this reason, as established in the general data protection regulation, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, users are hereby informed of the policy implemented with regard to the processing and protection of their personal data in the context of the Municipal Libraries Network.

This data protection policy may vary over time due to possible changes in the law or its interpretation or in the criteria followed by the Catalan Data Protection Authority and/or other competent authorities at any given time. For this reason, the organisation reserves the right to modify the present policy to adapt it to new laws or interpretations in force when accessing the website.

Who is the data controller for your data?

Your personal data will be processed by BARCELONA PROVINCIAL COUNCIL, whose tax identification code (CIF) is P0800000B and whose address is Rambla de Catalunya, 126, 08008, Barcelona.

You can contact the data protection officer at: dpd@diba.cat

With what purposes do we process your data?

The Municipal Libraries Network processes your personal data for the following purposes:

1. SERVICES FOR USERS WITH A LIBRARY CARD:

Issuing membership cards involves processing your data for the following purposes:

1.1. Managing your registration application and issuing the card.

1.2. Managing the library services associated with the card, to systematise operation common to all libraries working in the network in the Barcelona region and thus guarantee balance and equality in the provision of services among all members of the public. You can view the services at: https://bibliotecavirtual.diba.cat/serveis.

1.3. Responding to your requests and enquiries.

1.4. Managing information communications on Municipal Libraries Network activities and services through e-newsletters.

1.5. Carrying out surveys on opinions, use, quality and characteristics of the public library services.

1.6. Producing statistics on the services.

2. SERVICES OPEN TO EVERYONE

2.1. SUGGESTION BOX, through which we manage your suggestions.

2.2. MINIALADÍ, through which we manage notifications on search widget version changes.

2.3. SUGGEST A PURCHASE.

2.4. Producing statistics on the services.

What is the lawful basis for processing your data?

The lawful basis for processing your data is to guarantee the territorial balance and quality of library services and access to information, knowledge and culture for the entire public. The public mission of the provincial councils based on the Law of the Basis for Local Regimes 7/85.

Some of the services offered by the Municipal Libraries Network, such as use of the Wi-Fi network and access to the Internet i +, require your consent, which you must grant on accessing them.

Newsletters are sent only if you have activated your subscription in your Personal Space in the Aladí Catalogue.

Who do we communicate your data to?

BARCELONA PROVINCIAL COUNCIL will transfer your data to third parties in the following situations:

1. LOCAL COUNCILS IN THE BARCELONA REGION

Providing municipal multimedia services requires us to disclose certain data to local councils with which BARCELONA PROVINCIAL COUNCIL has signed agreements. These data are: sex, type of user based on age, municipality and district of residence, and country of birth. The purpose of this transfer is to enable them to produce statistics on service use. This disclosure is carried out applying the terms of minimisation of data and guaranteeing pseudonymisation.

2. BARCELONA LIBRARY CONSORTIUM

Sending the Més Biblioteques newsletter and information on the activities and services of Barcelona Libraries and cultural initiatives in the city requires disclosure to the BARCELONA LIBRARY CONSORTIUM, the organisation responsible for providing these communications, of the contact details of those library users in the city of Barcelona who check the box stating they would like to receive the newsletters. Data from these users will be given to the latter and processed in line with its data protection policy, which can be viewed at: http://ajuntament.barcelona.cat/biblioteques/ca/canal/proteccio-de-dades.

How long do we keep your data for?

The data you provide to BARCELONA PROVINCIAL COUNCIL as a library service user will be kept until you ask us to delete it.

However, if we detect that you have not used your card for ten years, you will be definitively deleted.

The data collected when using the Wi-Fi service will be kept for a maximum of two years.

No international data transfers are planned.

Information on data quality:

Your data will be processed lawfully, fairly and in a transparent manner.

Your data are collected for specified, explicit and legitimate purposes as stated in this policy and will not be further processed in a manner that is incompatible with those purposes.

The data we process are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

We will ensure they are accurate and kept up to date.

To comply with these principles, we provide users with the PERSONAL SPACE, in which you can:

Change your personal PIN or password
Change your personal information
Subscribe to new services and newsletters
Access your information, such as favourite searches, loan history, assessments, our comments or your lists

What are your rights regarding data protection and how can you exercise them?

The rights of access, rectification and erasure: you have the right to access your personal data and to request the rectification of inaccurate data or, if appropriate, to request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
Restriction of processing: in certain circumstances you can ask us to restrict the processing of your data. In this case, only data for lodging or defending against claims will be kept.
Right to object: in certain circumstances and on grounds relating to your personal situation, you may object to the processing of your personal data. The organisation will no longer process them, unless there are compelling legitimate grounds or for the exercise or defence of possible claims.
Right to data portability: the user shall have the right to receive the personal data concerning him or her in a structured, commonly used and machine-readable format when: a) processing is based on consent or a contract, and b) when processing is carried out by automated means.

The following means are available for exercising the aforementioned rights:

a) in person at any of the libraries in the Municipal Libraries Network, proving your identity by presenting your library card and any of the following official documents: national ID card or foreigner identification number (DNI/NIE), passport, driving licence or residence permit.

b) by digitally signed email to any of the libraries in the Municipal Libraries Network, including in it the library membership card number.

c) accessing the Personal Space of the Municipal Libraries Network Collective Catalogue, using your user code and PIN, for changes to your telephone number and email address and any other future changes.

For all enquiries or complaints regarding the processing of your personal data, BARCELONA PROVINCIAL COUNCIL provides the dpd@diba.cat email address, for you to contact the data protection officer.

Although we believe that any issues relating to your privacy should be resolved in this way, if you consider it appropriate, you my lodge a complaint on the website of the Catalan Data Protection Authority (APDCAT): http://apdcat.gencat.cat/ca/drets_i_obligacions/reclamar_i_denunciar/.

Processing security

Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk for the rights and freedoms of natural persons, BARCELONA PROVINCIAL COUNCIL shall implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, which prevent the accidental or unlawful destruction, loss or alteration, unauthorised disclosure of, or access to personal data transmitted, stored or otherwise processed.