Detailed and additional information on data protection pursuant to the General Data Protection Regulations 2016/679 | bizkaiko garraio partzuergoa

Data Controller	Identity: Consorcio de Transportes de Bizkaia (CTB) Address: Ugasko, 5 bis-1º dcha. – 48014 – Bilbao Phone: 94 476 61 50 Email: barikctb@cotrabi.eus Data Protection Officer contact: dpd@cotrabi.eus
Purpose of the authorisation/application form data	Processing of the personal data of the holder, and/or the authorised person as applicable, in order to provide the services covered by the authorisation/application form and its appropriate processing. The data included in the application shall be kept as long as the BARIK card covered by the authorisation/application form is not cancelled or the data subject does not request their deletion.
Authorisation/application form data legitimacy	Consent of the holder and/or authorised person.
Purpose of the data of the suggestion, claim or incidence forms	Processing of the personal data of the user to register and process the incidence, claim or suggestion filed. The data included on the suggestion, claim and incidence form shall be kept for 4 years from the response.
Suggestion, claim or incidence form data legitimacy	Processing required to comply with a legal obligation applicable to the data processor, pursuant to the CTB regulations and pursuant to the coordination and management powers of Bizkaia public transport
Purpose of the data to obtain cards, season tickets and/or benefits	GManagement of the Barik card, of the standard season tickets and the management and coordination of public transport. The personal data shall be kept while the season tickets obtained by the data subject or the latter does not request their deletion.
Legitimacy of the data to obtain cards, season tickets and/or benefits	Exercising of its transport powers. Consent to be requested for other purposes. If the data subject does not consent to information being requested from other public authorities for the indicated purpose, s/he shall meet the necessary requirements by providing the relevant documentary proof.
Recipients	Data shall not be transferred to third parties, except when required by law.
Rights	The data subject is entitled to access his/her personal data, to seek rectification of inaccurate data or, as applicable, seek their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected. Under certain circumstances, the data subject may challenge the processing of his/her data or seek its limitation, in which case, only the data required to exercise or defend claims shall be kept.