You are in:
Personal data protection
Personal data protection policy
Processing activities register (PAR)
Exercise of rights (GDPR)
Information for the interested parties to exercise your data protection rights
What is personal data?
Personal data is any information about an identified or identifiable natural person, both relating to their identity (name and surname, address, social security details, a photograph or video, etc.) and to their existence and occupations (education, work, illnesses, etc.) For example: postal addresses, e-mail accounts, ID card, sick leave documents, financial and tax information or union membership.
Data relating to legal persons (address, company name, corporate tax number (CIF), etc.) are not considered personal data and are therefore not subject to data protection regulations.
What are your data protection rights?
The regulations establish the following rights to allow citizens to update and control their data. Both employees and suppliers as well as customers and users may exercise these rights before TMB, free of charge, providing them with control over their personal data.
The following rights are granted by the regulations:
- Right of access
- Right of rectification
- Right of suppression (right to forget)
- Right to object
- Right to the limitation of processing
- Right to data portability
- The right to not be subject to automated individual decisions
| Rights | Scope of the right |
|---|---|
| Right of access | The right to request and obtain information about your personal data stored by TMB and about how they are processed, for what purpose and for what specific uses. |
| Right to rectification | The right to obtain the rectification of your personal data when they are inaccurate or incomplete. |
| Right to erasure (right to be forgotten) | The right you have to request that your personal data be erased when they are inappropriate, excessive or unnecessary, when they are kept for longer than is required or contravene the Regulation. |
| Right to object | The right you have to request that no processing of your personal data be carried out. |
| Right to restriction of processing | The right to have the personal data stored by TMB marked in order that its future processing be restricted. |
| Right to data portability | The right to receive the personal data you have provided to TMB, in a structured, commonly used and machine-readable format and to transmit those data to another controller, if the processing is based on consent or on a contract or is carried out by automated means. |
| Right not to be subject to automated individual decision-making | The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. |
Who can exercise these data protection rights?
These rights are highly personal, so they must be exercised by the data subjects themselves or, where appropriate, by a representative on their behalf (in the case of children under 14, the disabled, people over 14 if required by law, or where the person concerned voluntarily appoints someone to represent him or her).
In the case of a deceased person, the right of deletion may be exercised by the relatives with the organizations responsible for the files containing the person's data.
How can you exercise your data protection rights?
If you want to exercise your rights on any of this personal data, you can do so by following the steps below:
- Fill in the form to request the exercise of the rights you will find below, indicating in a clear and detailed way what is requested.
- In the case of the right of access to video surveillance, together with a recent photo, you will need to provide a photocopy of your ID card or an equivalent document that accredits identity and is considered valid in law.
- If acting through legal representation, you must provide the ID card and a document proving the representative's representation.
If you want to send this documents, send an e-mail to the address: dpd@tmb.cat clearly indicating on the subject line "Exercise GDPR Rights". You should attach the completed form and include a copy of the documentation indicated in point 2, if applicable.
You can also exercise your rights by mail at the following address: Carrer 60, number 21-23, sector A, Zona Franca, 08040 Barcelona clearly indicating on the envelope "Exercise GDPR rights". The completed and signed form should be included inside the envelope, as well as a photocopy of the documentation indicated in point 2, if applicable.
We inform you that TMB will use your personal data in order to manage the exercise of your data protection rights, in compliance with the legal obligation.
