Privacy policy

The OBSERVATORI METROPOLITÀ DE L’HABITATGE DE BARCELONA processes personal data responsibly, fairly, and in accordance with the legal bases that ensure the lawfulness of processing, in compliance with the General Data Protection Regulation and Organic Law 3/2018 of 5 December on Personal Data Protection and the Guarantee of Digital Rights.

The OBSERVATORI METROPOLITÀ DE L’HABITATGE DE BARCELONA applies the principle of transparency in the processing of personal data, providing data subjects with the information required under the GDPR and the LOPDGDD in a concise, easily accessible, complete, and easy-to-understand manner. It also facilitates the exercise of data protection rights through forms made available to data subjects.

Furthermore, the owner of the OBSERVATORI METROPOLITÀ DE L’HABITATGE DE BARCELONA, INSTITUT METRÒPOLI, has appointed a Data Protection Officer in accordance with Article 37.1(a) of the General Data Protection Regulation (EU 2016/679) and Articles 34 and 36 of Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights. The contact email address of the Data Protection Officer is info@ohb.cat or info@institutmetropoli.cat.

Information about the Data Controller:

1. 1. Data Controller. INSTITUT METRÒPOLI Tax Identification Number (CIF): P0800013E

Postal address: Campus de Bellaterra, Plaça del Coneixement, MRA Building, Floor P2, 08193 Bellaterra, Spain. Telephone: +34 935 868 880 Email: info@ohb.cat

1. 2. Contact Details of the Data Protection Officer: info@ohb.cat or info@institutmetropoli.cat
3. Legal Basis and Purposes of Processing

The processing of personal data carried out by OBSERVATORI METROPOLITÀ DE L’HABITATGE DE BARCELONA in the exercise of its responsibilities and functions is generally based on the following legal grounds:

General Data Protection Regulation (EU) 2016/679

• Article 6.1(c): Processing is necessary for compliance with a legal obligation to which the controller is subject, including the performance of activities inherent to public administration.
• Article 6.1(e): Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, including activities inherent to public administration and the video surveillance of all facilities belonging to the entity.

Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights

• Article 8: Processing of personal data based on a legal obligation, public interest, or the exercise of public powers for the performance of activities inherent to public administration.
• Personal data processing may only be considered lawful on the basis of compliance with a legal obligation under Article 6.1(c) of Regulation (EU) 2016/679 when provided for by European Union law or by a legal provision with the force of law.
• Personal data processing may only be considered lawful on the basis of a task carried out in the public interest or in the exercise of public powers under Article 6.1(e) of Regulation (EU) 2016/679 when it derives from a competence attributed by a legal provision with the force of law.

4. Data Retention Period (Data Erasure)

Personal data will be retained for as long as necessary to fulfill the purposes that justify their processing, in accordance with the functions and responsibilities of OBSERVATORI METROPOLITÀ DE L’HABITATGE DE BARCELONA, and to determine any liabilities arising from such purposes.

Data erasure will also take into account specific situations, such as data processed through video surveillance systems, as well as sector-specific regulations requiring minimum retention periods. Subsequently, records will be managed in accordance with legislation governing public administration archives.

5. Data Protection Rights and How to Exercise Them

Individuals whose data are processed by INSTITUT METRÒPOLI through OBSERVATORI METROPOLITÀ DE L’HABITATGE DE BARCELONA are entitled to exercise the following rights:

• Right of access to their personal data.
• Right to rectification of inaccurate, erroneous, or incomplete data.
• Right to erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, data subjects may request the restriction of processing. In such cases, the data will only be retained for the establishment, exercise, or defence of legal claims.

For reasons related to their particular situation, data subjects may object to the processing of their personal data. In such cases, INSTITUT METRÒPOLI will cease processing the data unless compelling legitimate grounds exist or processing is necessary for the establishment, exercise, or defence of legal claims.

Data portability may also be exercised, provided that the processing is not based on compliance with a legal obligation, the performance of a task carried out in the public interest, or the exercise of official authority vested in the controller. The right to data portability applies only where processing is based on the data subject’s consent and carried out by automated means.

To exercise these rights, data subjects may contact OBSERVATORI METROPOLITÀ DE L’HABITATGE DE BARCELONA by email at info@ohb.cat or info@institutmetropoli.cat.

If a data subject is not satisfied with the response received regarding the exercise of their rights, or whenever considered appropriate, they may lodge a complaint with the Catalan Data Protection Authority through its electronic office at apdcat.gencat.cat.

6. Data Recipients

Personal data may be disclosed to other public administrations that are competent in the relevant matter when appropriate, provided that the disclosure is based on a lawful legal basis in accordance with Article 6 of the GDPR and Article 8 of the LOPDGDD.

7. International Data Transfers

In order to provide its services, OBSERVATORI METROPOLITÀ DE L’HABITATGE DE BARCELONA contracts resources that involve international transfers of personal data to third countries outside the European Union.

These countries benefit from an adequate level of data protection as recognized by the European Commission and/or from appropriate safeguards, including the bilateral EU-US agreement known as the Data Privacy Framework.

8. Source of Personal Data

Personal data processed by OBSERVATORI METROPOLITÀ DE L’HABITATGE DE BARCELONA, whether for the performance of tasks carried out in the public interest, the exercise of official authority vested in the controller, compliance with a legal obligation, or the execution of a contract, are obtained directly from the data subjects or their representatives.

Where personal data have not been obtained directly from the data subjects, for example when they originate from other public administrations, the requirements of Article 14 of the GDPR shall be fulfilled by providing the data subject with the additional information required, including information on the source of the data and the categories of personal data being processed.

Likewise, regarding citizens’ right not to provide documents already held by the acting administration or produced by another public administration, the provisions of Article 28.2 of the Administrative Procedure Act shall apply, in accordance with the Twelfth Final Provision of Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights.