Data protection

Data protection policy for customers and users of the services of the Empresa Municipal Mixta d’Aigües de Tarragona, SA (EMATSA)

WHAT IS THE PURPOSE OF THIS PERSONAL DATA PROTECTION POLICY?

This Privacy Policy aims to make known the way in which we obtain, process and protect the personal data of our clients and of the people who contact the company in relation to them, and in this sense, this Policy is applicable to:

People who want to contract or who maintain a contract or policy in force with the Empresa Municipal Mixta d’Aigües de Tarragona, SA for the provision of a service. Customer or subscriber of the service.
Third parties who are authorized or whose data has been provided for contract management (e.g. holders of contact data for notifications, tenants, holders of collection accounts).
Third parties who contact to report service incidents, make inquiries, make complaints or claims of any kind without maintaining a contractual relationship with the water company. (e.g. for inquiries about general conditions of service, report leaks on public roads, report breakdowns, report fraud, etc.).

As a general rule, all procedures and actions that involve the processing of personal data will be carried out by a person in their own name and in this case they will only provide personal data of which they are the owner. However, procedures carried out by:

Person authorized by the owner
Duly registered Property Administrators acting on behalf of homeowners’ associations and other clients.
In any case, they guarantee that: (i) they have obtained the data lawfully; (ii) they have informed the affected party, when appropriate, of the procedure or consultation that they will carry out, and (iii) they have a legitimate interest in carrying out the management that they initiate.

WHO IS RESPONSIBLE FOR THE DATA YOU PROVIDE?

The data controller is the Empresa Municipal Mixta d’Aigües de Tarragona, SA (hereinafter, “EMATSA” or the “Company”), with NIF number A43049956 and address at Muntanyeta de Sant Pere i Sant Pau, s/n in Tarragona (43007), a company dedicated to providing services related to the management of the integral water cycle.

WHAT TYPE OF DATA DOES EMATSA PROCESS?

EMATSA will process the following categories of personal data:

Identification data: name and surname, and ID number; contact data: telephone number and/or email, contact postal address.
Financial: bank account number, if you choose this method of payment.
Information about the property for which you are requesting the contract: address of the supply point, cadastral reference, those included in the documents you provide to prove your relationship with the property (rental, ownership, etc.).
Representation details: powers of attorney, notarial protocols; company and professional contact details (if acting on behalf of a company).
Consumption data: consumption readings, incidents and consumption alerts; technical data of the contracted service: meter number, type of consumption of the supply point; economic and billing data: amount of invoices, payments and defaults.
Data associated with a debt claim file for non-payment or fraud: claims, criminal offenses.
Other data other than the above voluntarily provided by you when contacting us for any reason (in complaints, claims, inquiries); data from third parties that you voluntarily provide and that will be integrated into the contract file: contact data from a third party for notifications, data from third parties that are authorized by the client to carry out various procedures on their behalf in relation to their contract.
Signature: digital signature data; handwritten signature.
Image and/or voice: recorded during telephone calls, in video conferences, in conversations through virtual environments.
Other information to access social rates provided by the City Council: status of vulnerable group.
Data from publicly accessible sources: cadastral data when necessary to verify the location of a supply point and its connection.
Browsing data, activity on the Website, (cookies), if you access the EMATSA website. If you access the Virtual Office, your access and connection data will also be collected (credentials, IP address, type and ID of the device, type and language of the browser, domain through which you access. All this information is indicated in detail in the Cookies Policy available at the Cookies Policy link . The website has its own Web Privacy Policy that you can consult at the following link Web Privacy Policy link .

Remember that, in the event that you provide data from third parties to EMATSA, you are solely responsible towards them and guarantee that you have obtained the authorization of these people to provide their data and have informed them of the purpose of the processing. Likewise, you guarantee that the data you have provided is accurate and up-to-date, being responsible for any damage or harm, direct or indirect, that may occur as a result of the breach of such obligation.

WHAT DO WE USE YOUR PERSONAL DATA FOR AND WHAT IS THE BASIS OF LEGITIMATION?

Your data will be processed for some of the purposes and with the legitimizing basis indicated below:

To provide the contracted service as the main purpose and for this: process registrations, cancellations or changes of ownership; assign the rates, or discounts that correspond to what you have requested and apply them to you; carry out periodic readings; issue invoices; communicate with you through any of the means of contact that you have provided us, including electronic ones, to attend to or inform you about any incident related to the service (scheduled outages, possible leakage in your facilities, next receipt or repeated non-payments, etc.); carry out procedures for collection including the claim for non-payments; other administrative procedures, including those necessary to maintain the accuracy of the data and to attend to questions that you raise with this service in relation to your contract or the contracted service. To allow traceability of the procedures carried out by telephone or in virtual environments, if this service is activated, the recording of the calls will be saved. These treatments are necessary for the execution of the contract. In the case of special category data processing to assign a social tariff, the legitimizing basis will be the consent granted when making the request. The personal data of representatives, contact persons and Property Administrators will be processed based on legitimate interest (art. 19 of Organic Law 3/2018), with the sole purpose of managing the request made on behalf of a third party.
To address incidents and service queries not related to a supply contract, made by any interested party. The data of the person who contacts will be processed based on the consent granted when contacting the company.
To calculate the performance of the network allowing the detection of water leaks and fraud with the aim of guaranteeing an adequate flow in the supply network. Aggregated data of the consumption of the entire population will be used and fraud in water consumption will be reported if applicable and the amount defrauded will be claimed. The processing of this data is based on the legitimate interest of the company in guaranteeing the supply to the needs of the population. You. can oppose this processing. However, you will not be able to oppose the processing that the company must carry out to report and/or claim the detected fraud.
To carry out quality or satisfaction surveys on the service provided by EMATSA and statistical studies related to the contracted service. This processing is based on the legitimate interest in knowing your level of satisfaction and detecting aspects of improvement in relation to the services provided. You can object to this processing.
To send you perception surveys about EMATSA or the business group to which it belongs. These surveys are not directly related to the provision of the contracted service, so they will only be carried out if you give your express consent, which you may revoke at any time.
To send you promotional communications about the products and services and events organized by EMATSA and/or the business group to which it belongs. These communications may also be made by electronic means. This activity requires your express consent, which you may revoke at any time.
To offer you personalized promotions and services related to the water sector based on a customer profile drawn up from your consumption data, billing data and technical data of the contracted service. This activity requires your express consent which you may revoke at any time.
To define debt collection and recovery actions based on a customer profile drawn up from the number of unpaid invoices, amount of debt and age of the debt of a contract. This processing is based on the legitimate interest of the company in making debt collection more efficient by adjusting to the individual payment and non-payment characteristics of each customer. You can object to this processing.
EMATSA may use all the information it has about you to defend its legitimate interests in any administrative or claim proceedings. This processing is based on legitimate interest.

For the above treatments based on legitimate interest, EMATSA has prepared the corresponding report weighing the interests pursued by the Controller and the fundamental rights and freedoms of the interested parties.

If you have any questions about them, you can send your query to the EMATSA Data Protection Delegate.

WHO CAN ACCESS YOUR PERSONAL DATA?

EMATSA has service providers to carry out some tasks inherent to the contract (support in customer service, legal advice, printing envelopes and sending invoices, technological services, storage and destruction of physical files, among others). These providers may need to access your personal data to carry out these tasks. EMATSA guarantees that these providers have signed a processing contract and will only process your personal data under express instructions and will in no case use them for their own purposes or purposes other than those detailed in this Policy.

Some of our suppliers are located in countries outside the European Economic Area (EEA) or, if they are located in the EEA, they share information with other entities located outside this territory. In any case, EMATSA guarantees that:

Transfers are made to countries that the European Commission has declared to provide a level of protection comparable to that in Europe.
In the absence of this declaration of adequacy, the Standard Contractual Clauses approved by the Commission have been signed. You can consult this information on the AEPD website: https://www.aepd.es/es/derechos-y-deberes/cumple-tus-deberes/medidas-de-cumplimiento/transferencias-internacionales

For more information on this matter, contact the Data Protection Officer.

WHO DO WE COMMUNICATE YOUR DATA TO?

EMATSA may communicate your personal data to third parties.

EMATSA has a legitimate interest in transmitting personal data of its customers within the business group to which it belongs for purely administrative purposes whose objective is the efficient coordination of resources. If you wish to consult more information on this matter, you can send your query to the Data Protection Officer.

EMATSA is obliged to communicate your data to the following entities and for the purposes and reasons indicated below:

HOW LONG DO WE KEEP YOUR DATA?

The data will be kept for the time strictly necessary to fulfill the purposes described in the previous sections. Once this period has elapsed, the data will be kept blocked for an additional period in order to meet possible legal responsibilities derived from it. They will then be permanently deleted.

WHAT ARE YOUR DATA PROTECTION RIGHTS AND HOW CAN YOU EXERCISE THEM?

The Law recognizes the following rights in matters of data protection:

To exercise the above rights, or revoke the consent given for any of the purposes indicated, it will be sufficient for you to send your request by any of the following means, indicating in the subject “Data Protection”:

Email: dpd@ematsa.cat
Postal address: Muntanyeta de Sant Pere i Sant Pau, s/n Tarragona (43007). For the attention of the Data Protection Officer.

You can also register your request at the service offices.

The applicant must be sufficiently identified in the application. When the controller has reasonable doubts regarding the identity of the applicant, he may require him to provide the additional information necessary to confirm his identity. In the event of acting through legal representation, the DNI and a document accrediting the representative’s representation must also be provided.

The exercise of rights is free of charge, however, EMATSA reserves the right to charge a fee when requests are manifestly unfounded or excessive, especially due to their repetitive nature. In this case, EMATSA may directly choose not to respond to the request received.

In any case, as an affected or interested party, you can file the complaints you consider appropriate with the Catalan Data Protection Authority (APDCAT) by any of the means indicated on the APDCAT website accessible through the following link: www.apdcat.cat

DATA PROTECTION OFFICER

EMATSA has appointed a Data Protection Officer who you can contact if you have any questions or complaints regarding data protection. Your complaint will be investigated confidentially. You can contact our Data Protection Officer by any of the following means:

Email: dpd@ematsa.cat
Postal address: Muntanyeta de Sant Pere i Sant Pau, s/n Tarragona (43007). For the attention of the Data Protection Officer.

Information regarding the processing of personal data. Video surveillance and access control of the Empresa Municipal Mixta d’Aigües de Tarragona, SA (EMATSA)

Below is information regarding the processing of your personal data collected through video surveillance cameras (and access control to facilities).

Responsible for the processing:

Empresa Municipal Mixta d’Aigües de Tarragona, SA, with registered office at Muntanyeta de Sant Pere i Sant Pau, s/n, Tarragona (43007) and NIF No. A43049956.

Types of personal data collected:

Image captured by security cameras. All cameras are marked.
Voice , only if the incident alert button is activated. If this system exists, the sign will specify it.
Identification and contact details for access control of visits to offices and facilities.
Data generated by the use of access card devices or readers (input/output data).

Purpose:

Preserve the safety of people, property and facilities and integrate emergency and evacuation procedures in dangerous situations in the facilities.

Legitimacy of the treatment:

Legitimate interest (article 6.1 f) of the General Data Protection Regulation and art. 22 of Organic Law 3/2018 on data protection and guarantee of digital rights

Who has access to your data:

– Authorized company personnel .
– Service providers: security and equipment maintenance companies in the exercise of their functions. The corresponding data processor contracts have been signed.
– Security forces and Courts and Tribunals in the event of a security incident or evidence of a crime.

Shelf life:

The data will be deleted within a maximum period of one month from its collection, except when it must be kept to prove the commission of acts against the integrity of people, property or facilities. In these cases, it will be made available to the competent authority within 72 hours of becoming aware of the existence of the incident.

Your rights:

Law	What does it consist of?
Right of access	Check what personal data we have about you.
Right of rectification	Modify the personal data we have when it is inaccurate or incomplete.
Right of opposition	Request that we not process personal data for certain specific purposes.
Right of deletion	Request that we delete personal data.
Right of limitation	Request that we limit the processing of personal data.
Right to portability	Request that we provide you with this information in computer format.
Right to complain to the competent authority	As an affected or interested party, you can file any complaints you deem appropriate with the Catalan Data Protection Agency ( www.apdcat.cat ).

You can exercise these rights by contacting the Data Protection Officer. Please note that,

– Although you can exercise any of the above rights, the special characteristics of the processing will not allow us to respond positively to your request in all cases.
– You may be required to identify yourself with a recent image so that you can be recognized in the recording.

Data Protection Officer:
You can contact the DPO to resolve your doubts or make your inquiries regarding the processing of your data or to exercise your rights by sending an email to dpd@ematsa.cat .

Opt-out complete; your visits to this website will not be recorded by the Web Analytics tool. Note that if you clear your cookies, delete the opt-out cookie, or if you change computers or Web browsers, you will need to perform the opt-out procedure again.

You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.


        
        
        You are not opted out. Uncheck this box to opt-out.
		You are currently opted out. Check this box to opt-in.
        The tracking opt-out feature requires cookies to be enabled.