Privacy Policy

a) Identification data, such as name, civil identification number, NIF, date of birth;

b) Contacts, such as address, email address, telephone or mobile phone number;

c) Professional data, academic qualifications, certifications, curriculum;

d) Payment data, in the case of requesting a service or within the scope of the execution of a contract, data will be collected to proceed with the respective processing;

e) Reasons for contact, such as complaints, suggestions, and requests for information;

f) Validation data;

g) Data contained in incident reports;

h) History of invoices and method of payment for onboard transport tickets;

i) Data from comments, suggestions, and complaints (content);

j) Individual responses to surveys;

k) Geolocation data from the use of the WiFi service;

l) Browsing and usage data of STCP digital tools with login.

m) Video, in the case of visiting the facilities of STCP, E.I.M., S.A or traveling in one of its buses.

a) Right of access: the right to obtain from the controller confirmation that the personal data concerning you are or are not being processed and, if that is the case, the right to access your personal data and the way how they are treated;

b) Right of rectification: the right to obtain, without undue delay, from the controller, the rectification of incorrect and/or incomplete personal data concerning you;

c) Right to erasure of data ("right to be forgotten"): the right to obtain from the person responsible for the treatment, the erasure of your personal data, without undue delay, when:

• The data is no longer necessary for the purpose for which it was collected or processed;

• The holder has withdrawn his consent, unless there is another legal basis for the respective treatment;

• The holder opposes the treatment, except when there are prevailing legitimate interests that justify it;

• Personal data was processed unlawfully;

• By legal obligation, arising from Union law or from a Member State to which the controller is subject.

d) Right to limitation of treatment: the right to obtain from the person responsible for the treatment a limitation of treatment, if one of the following situations occurs:

• Challenge the accuracy of the personal data, for a period that allows the controller to verify its accuracy;

• The processing is unlawful and the data subject opposes the erasure of personal data and requests, on the other hand, the limitation of its use;

• The controller no longer needs the personal data for processing purposes, but these data are required by the holder for the purposes of declaring, exercising or defending a right in legal proceedings;

• If you have objected to the processing of the data, until it is verified that the legitimate reasons of the controller prevail over those of the data subject.

e) Right to data portability: the right to receive personal data concerning you and that you have provided to the controller, in a structured, commonly used and machine-readable format, and the right to transmit this data to another controller for the processing without the person responsible to whom the personal data were provided being able to prevent it, when:

• The treatment is based on consent or the performance of a contract; It is

• Processing is carried out by automated means.

f) Right of opposition: the right to object, at any time, to the processing of personal data concerning you, including profiling, except when compelling and legitimate reasons for such processing prevail over the interests, rights and freedoms of the data holder.

g) Automated individual decisions, including profiling: the right not to be subject to any decision taken exclusively on the basis of automated processing, including profiling, unless the decision:

• It is necessary for the conclusion or performance of a contract between the data subject and a controller;

• Is based on the consent of the data subject;

• Is authorized by Union or Member State law to which the controller is subject, and which also provides for adequate measures to safeguard the rights and freedoms and legitimate interests of the data subject;

h) Revocation of consent: the right to withdraw your consent at any time. The withdrawal of consent does not compromise the lawfulness of the processing carried out based on the previously given consent or on any other basis of lawfulness.