Privacy Policy

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR“), and with current data protection legislation, the Spanish protection of personal data and guarantee of digital rights act, Law 3/2018 of 11th July 2018 (“LOPDGDD”), and the information society services and electronic commerce act, Law 34/2002 of 11th July 2002 (“LSSICE”), SOCIETAT CATALANA PER A LA MOBILITAT, S.A. declares that it is the proprietor of this website and informs uses of the following matters in the area of data protection:

1/ CONTROLLER: Who is responsible for the processing of your personal data?

Identity: SOCIETAT CATALANA PER A LA MOBILITAT, S.A. (“SOC”)
Postal address: Gran Via de les Corts Catalanes, 16-20, P 1, 08902 L’Hospitalet de Llobregat
Email address for exercising rights: rgpd@socmobilitat.cat 
Data protection officer (DPO) contact: dpo@socmobilitat.cat 

2/ PURPOSES: For what purposes do we process your personal data?

You are informed that SOC may process your data for the following purposes:

1.- Answering enquiries

To respond to any enquiry you send us using the contact forms provided on our website.

2.- Providing services related to the transport sector (T-mobilitat card)

If you are a T-mobilitat card user, SOC will process your data – on behalf of ATM – for the purposes inherent to the provision of these services (e.g. computer support and maintenance, answering enquiries, satisfaction surveys and so on). 

In this respect, SOC may pass your data to associated companies providing services as strictly necessary to provide the products or services contracted by you, including for example transport companies, other IT services, hosting, partners in the T-mobilitat project (FUJITSU, CAIXABANK, INDRA, MOVENTIA), etc.

Furthermore, in the event of any failure to meet your financial obligations resulting in a due, payable debt, and after a demand for payment, you are informed that we will proceed to pass on your identifying data and data about the debt to all the organisations involved in consultancy, managing and processing non-payment, in accordance with current legislation.

You can obtain further information about the processing of your data in connection with your use of the T-mobilitat card through the following link.

3/ PERIOD FOR WHICH THE DATA ARE STORED: How long will we keep your data?

The personal data supplied will be stored as long as necessary to provide the contractual services, to answer any enquiries or requests made and, in any case, while the contractual relationship between the parties lasts or for the years necessary to meet the obligations imposed by other applicable regulations. Specifically, by virtue of tax regulations your data will be kept for 5 years.

SOC will apply the protocol for deletion and erasure of data in accordance with the stipulations of the data protection regulations in force at any given time. In any case, if when the contractual relationship comes to an end there is outstanding litigation, the data may be kept until such time as this is finally settled.

4/ LEGITIMATE BASIS: What is the legitimate basis for processing your personal data?

The legal basis for processing your data is: 

• Explicit consent given by the user for dealing with and answering enquiries (art. 6.1.a GDPR).
• Performance of the contract for the provision of services and any transfer strictly necessary for activities related to T-mobilitat (art. 6.1.b GDPR).

5/ RECIPIENTS: To whom will your personal data be disclosed? 

Your personal data will not be disclosed to any third parties, except to organisations for administrative purposes or in compliance with the law (auditors, insurers, banks, public administrations, etc.), to those companies necessary to provide the contractual service or to demand payment, among them our service providers and agents (including their subcontractors) or third parties who process data on our behalf (Internet platforms and service providers, payment processing providers and those contracted to send communications, among others) for them to help us to provide you with the applications, products, services and information you have requested.

You are further informed that your personal data will not be transferred to organisations located outside the European Economic Area. 

6/ RIGHTS: What are your rights and how can you exercise them?

You are entitled at any time to access your personal data, and to receive a copy of the data being processed. 

Furthermore, you may request the correction of any inaccurate or incomplete data and, where appropriate, ask for them to be erased where, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances you may request the restriction of the processing of your data, in which case we will only keep them to make or defend ourselves against claims.

In certain circumstances you may object to the processing of your data. This objection will be aimed at a specific purpose. SOC will cease processing the data, except on compelling legitimate grounds or in the exercise of defence against possible claims.

Furthermore, you may exercise the right to portability of your data, as well as withdrawing, at any time, the consent given to process your data. SOC must be notified of any such withdrawal of consent on the terms of this policy, and under no circumstances can it be considered to have retroactive effects. 

If you wish to exercise any of your rights you may approach us by writing to the email address rgpd@socmobilitat.cat, specifically stating in the subject line which right you wish to exercise and duly identifying yourself. 

You can make any enquiries regarding the processing of your data with our data protection officer by sending an email to the address dpo@socmobilitat.com. Finally, you are informed that you can approach the Spanish Data Protection Agency and other competent public bodies with any complaints arising from the processing of your personal data.

7/ CHANGES TO THE PRIVACY POLICY

SOC reserves the right to alter this policy in order to adapt it to changes in legislation or jurisprudence, as well as industry practices. In such cases, SOC will announce any changes made on this page.