PRIVACY POLICY

I. Who is responsible for processing the data provided?

The entity responsible for processing your personal data is AIGÜES DE BARCELONA, EMPRESA METROPOLITANA DE GESTIÓ DEL CICLE INTEGRAL DE L’AIGUA, S.A. (hereinafter, “AIGÜES DE BARCELONA”), with Tax Identification Code A66098435 and registered office at Carrer General Batet, 1-7, Barcelona (08028).

To ensure your data remains up to date, it is important that you notify us of any changes. For this purpose, we kindly ask you to write to the following address: abdatachallenge@aiguesdebarcelona.cat

If you have any doubts regarding the processing of your personal information, you may contact AIGÜES DE BARCELONA’s Data Protection Officer using the following contact details:

• Email: dpo@aigüesdebarcelona.cat
• Postal address: Carrer General Batet, 1-7, 08028 Barcelona

II. What your personal data is used for. What is the legal basis for processing personal data? 

When you enter and, if applicable, when you take part in the AB Data Challenge, if you are chosen, AIGÜES DE BARCELONA will use your personal data with the following purposes:

• To manage your registration for the AB Data Challenge. In order to participate in the AB Data Challenge, you must complete a registration form and accept the Participation Terms, so that your application may be submitted to the organiser. By registering, you agree that we may send you, via the email address provided in the form, a confirmation of your registration, access credentials to the competition website, and confirmation of whether you have been selected or not. The legal basis for processing your data for this purpose is the existence of a contractual relationship, established by your acceptance of the legal terms governing participation.

• If you are selected to participate in the AB Data Challenge, to manage your participation as well as all events and activities taking place during the AB Data Challenge: throughout the course of the AB Data Challenge, the kick-off event, project development, project evaluation by the jury, and the sending of emails related to your participation will all take place online. These activities are necessary to ensure the successful execution of your participation. The legal basis for processing your data for this purpose is the existence of a contractual relationship, established by your acceptance of the legal terms governing participation.

Please note that during the online activities of the AB Data Challenge, the use of your camera is voluntary. If you do activate it, it is recommended that you use a virtual or neutral background to protect your privacy. Additionally, sessions will not be recorded; should an exception arise where recording is necessary, participants will be informed in advance, allowing you to disable your camera or use a background if you wish to maintain your privacy.

In accordance with the legal Participation Terms of the AB Data Challenge, the initial presentation of the projects must be submitted in video format, which participants must upload upon completing their registration. Please note that this video must not contain more metadata than strictly necessary for participation. This includes the video title, author, and creation date. You must avoid including unnecessary metadata such as location data, GPS, Wi-Fi details, MAC address, signal strength, or similar information.

• If you are selected to participate and have provided your social media information, to manage the publication of your user profile on the public AB Data Challenge listing: should you provide your social media links, they will be published on the AB Data Challenge website along with your photograph. The legal basis for processing your data for this purpose is the existence of a contractual relationship, established by your acceptance of the legal terms governing participation.

• If you are selected to participate, to manage access to and use of the AB Data Challenge platform: you will have access to a platform where you may communicate via a dedicated forum with the organisers, who will address any queries. The legal basis for processing your data for this purpose is the existence of a contractual relationship, established by your acceptance of the legal terms governing participation.

• If you are selected to participate, to manage image rights authorisations and the distribution of your image, as set out in the relevant document: AIGÜES DE BARCELONA may disseminate your image in accordance with the authorisation form you have signed. This data processing is based on your consent to the image rights authorisation.

If the personal data provided relates to a third party, the person providing the data confirms that they have informed the third party of this privacy policy and obtained their authorisation to provide their data to AIGÜES DE BARCELONA for the aforementioned purposes. The provider also guarantees that the information submitted is accurate and up to date and accepts liability for any direct or indirect harm that may arise from failure to meet this obligation.

III. For how long will we retain your data?

If you register and, where applicable, participate in the AB Data Challenge and are selected, AIGÜES DE BARCELONA will retain your data until the competition concludes. Once the AB Data Challenge is over, your data will be properly blocked for an additional period in which liabilities related to the execution of the AB Data Challenge may arise. Once this period has expired, your personal data will be permanently deleted.

IV. What security measures have been implemented to protect your personal data?

AIGÜES DE BARCELONA will treat your personal data in the strictest confidence. Furthermore, it has implemented appropriate technical and organisational measures to ensure the security of your data and to prevent destruction, loss, unauthorised access, or unlawful alteration. When determining such measures, factors such as the scope, context, and purpose of processing, the state of the art, and any existing risks have been considered.

V. Are there other entities that may access your personal data to assist AIGÜES DE BARCELONA with processing purposes? Are there international data transfers?

AIGÜES DE BARCELONA contracts service providers to assist with tasks related to the processing of your personal data, such as data storage. AIGÜES DE BARCELONA ensures that all such entities comply with data protection regulations applicable to them as data processors.

AIGÜES DE BARCELONA relies on certain service providers located in countries outside the European Union (EU) or, although located within the EU, which share information with entities based outside the EU.

In all cases, AIGÜES DE BARCELONA ensures that:

• Transfers are made to countries for which the European Commission has declared an adequate level of protection equivalent to that of the EU.
• In the absence of such adequacy decisions, Standard Contractual Clauses approved by the European Commission have been signed. You may consult this information on the AEPD website: https://www.aepd.es/es/derechos-y-deberes/cumple-tus-deberes/medidas-de-cumplimiento/transferencias-internacionales.

VI. Does AIGÜES DE BARCELONA share personal data with third parties?

AIGÜES DE BARCELONA will disclose personal data to third parties if this is necessary to comply with legal obligations.

VI. What are your rights regarding data protection, and how can you exercise them?

You have the following rights with regard to data protection:

In order to exercise these rights, all you have to do is send a notice to AIGÜES DE BARCELONA, EMPRESA METROPOLITANA DE GESTIÓ DEL CICLE INTEGRAL DE L’AIGUA, S.A., either by email to the address abdatachallenge@aiguesdebarcelona.cat, or by post to Carrer General Batet, núm. 1-7 (08028) Barcelona, with the reference “Data Protection”. Your request must include the minimum content required by the applicable regulations and you must provide proof of your identity. If your request does not meet the specified requirements, AIGÜES DE BARCELONA may ask you to correct it. The exercise of these rights is free of charge, although a fee may be charged if the requests are unfounded, excessive or repetitive.