|Data Controller||Identity: Consorcio de Transportes de Bizkaia (CTB)
Address: Ugasko, 5 bis-1º dcha. – 48014 – Bilbao
Phone: 94 476 61 50
Data Protection Officer contact: firstname.lastname@example.org
|Purpose of the authorisation/application form data||Processing of the personal data of the holder, and/or the authorised person as applicable, in order to provide the services covered by the authorisation/application form and its appropriate processing.
The data included in the application shall be kept as long as the BARIK card covered by the authorisation/application form is not cancelled or the data subject does not request their deletion.
|Authorisation/application form data legitimacy||Consent of the holder and/or authorised person.|
|Purpose of the data of the suggestion, claim or incidence forms||Processing of the personal data of the user to register and process the incidence, claim or suggestion filed.
The data included on the suggestion, claim and incidence form shall be kept for 4 years from the response.
|Suggestion, claim or incidence form data legitimacy||Processing required to comply with a legal obligation applicable to the data processor, pursuant to the CTB regulations and pursuant to the coordination and management powers of Bizkaia public transport|
|Purpose of the data to obtain cards, season tickets and/or benefits||GManagement of the Barik card, of the standard season tickets and the management and coordination of public transport.
The personal data shall be kept while the season tickets obtained by the data subject or the latter does not request their deletion.
|Legitimacy of the data to obtain cards, season tickets and/or benefits||Exercising of its transport powers. Consent to be requested for other purposes.
If the data subject does not consent to information being requested from other public authorities for the indicated purpose, s/he shall meet the necessary requirements by providing the relevant documentary proof.
|Recipients||Data shall not be transferred to third parties, except when required by law.|
|Rights||The data subject is entitled to access his/her personal data, to seek rectification of inaccurate data or, as applicable, seek their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
Under certain circumstances, the data subject may challenge the processing of his/her data or seek its limitation, in which case, only the data required to exercise or defend claims shall be kept.