{"id":82854,"date":"2025-10-09T12:50:33","date_gmt":"2025-10-09T10:50:33","guid":{"rendered":"https:\/\/dbus.eus\/?page_id=82854"},"modified":"2025-10-09T12:51:19","modified_gmt":"2025-10-09T10:51:19","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/dbus.eus\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<p>This Privacy Policy (hereinafter, the \u201c<strong>PRIVACY POLICY<\/strong>\u201d) generally governs the collection and processing by COMPA\u00d1\u00cdA DE TRANV\u00cdA DE SAN SEBASTI\u00c1N, S.A.U. (hereinafter, \u201c<strong>DBUS<\/strong>\u201d) of (i) the personal data that you provide to us as a user of the website accessible through the URL <a href=\"https:\/\/www.dbus.eus\/\">www.dbus.eus<\/a> (hereinafter, the \u201c<strong>WEBSITE<\/strong>\u201d), including the services available at any given time via the WEBSITE; and (ii) other data collected through other duly identified collection systems. All the above is without prejudice to the specific provisions set forth in certain sections, forms, or services available on the WEBSITE and\/or other channels, which are intended to provide you with the relevant information and, where applicable, to obtain your consent.<\/p>\n<p>DBUS reserves the right to modify the PRIVACY POLICY in order to align it with legislative, jurisprudential, and\/or administrative developments, as well as with its current practices within its operational scope, always considering your rights and interests.<\/p>\n<p>In any case, DBUS will provide you with the necessary technical resources to access the PRIVACY POLICY, in order to ensure compliance with the information obligations required by applicable data protection regulations.<\/p>\n<h2><span style=\"color: #72bf44;\">1. Who is the Data Controller for your data?<\/span><\/h2>\n<p>The Data Controller for your data is COMPA\u00d1\u00cdA DE TRANV\u00cdA DE SAN SEBASTI\u00c1N, S.A.U., a company domiciled in Donostia-San Sebasti\u00e1n (Gipuzkoa), C\/ Fernando de Sasia\u00edn, n\u00ba 7, registered in the Commercial Registry of Gipuzkoa in Volume 1,001, Folio 126, Sheet SS-572, Entry 1, holder of Tax Identification Number A-20003737.<\/p>\n<p>In compliance with the provisions of applicable data protection legislation, we have assigned a Data Protection Officer (DPO) to manage and control data privacy at DBUS, whom you can contact via the email <a href=\"mailto:dpo@dbus.eus\">dpo@dbus.eus<\/a>.<\/p>\n<h2><span style=\"color: #72bf44;\">2. How did we obtain your data?<\/span><\/h2>\n<p>All personal data we process at DBUS has been obtained from you, through (i) the various forms you complete while navigating the WEBSITE and\/or via other channels (e.g. registration as a user of the WEBSITE, where applicable; contact forms; forms related to job applications and\/or recruitment processes, etc.); (ii) via an enquiry email; or (iii) via other duly identified data collection mechanisms.<\/p>\n<p>Where specified, the provision of the requested data is mandatory, and failure to provide such data will result in the inability to process your request.<\/p>\n<p>If the personal data provided relates to a third party, you confirm that you have informed the third party of this PRIVACY POLICY and have obtained their authorisation to disclose their data to DBUS for the purposes outlined below.<\/p>\n<p>Additionally, you are hereby informed that your social media data may be processed via the corporate profiles that DBUS manages on its social media accounts, all in accordance with the terms and conditions set by each social media platform.<\/p>\n<h2><span style=\"color: #72bf44;\">3. What kind of data do we process?<\/span><\/h2>\n<p>All personal data we process at DBUS has been obtained from you via appropriate forms, email, and other data we may collect through DBUS\u2019s corporate profiles on social media platforms where we are active, and\/or other duly identified data collection mechanisms.<\/p>\n<p>In particular, DBUS processes the following categories of data:<\/p>\n<ul>\n<li>Identification and contact information (e.g. name, surnames, ID document, postal and email addresses, telephone number, etc.).<\/li>\n<li>Banking and financial transaction data.<\/li>\n<li>Usernames and passwords as a registered user of the WEBSITE.<\/li>\n<li>Data relating to purchases and\/or the contracting of services you have completed through the WEBSITE.<\/li>\n<li>Internet browsing data (e.g. IP address, visits to websites, WiFi connections, etc.).<\/li>\n<li>Data related to personal characteristics, training, employment, etc. (collected when you voluntarily participate in DBUS&#8217;s employment applications\/offers and\/or recruitment processes).<\/li>\n<li>Banking and financial transaction data.<\/li>\n<li>Images of data subjects participating in activities and events organised by DBUS, provided they have given their consent.<\/li>\n<li>Images captured by the video surveillance systems installed on our premises and\/or in the vehicles that make up our fleet.<\/li>\n<\/ul>\n<h2><span style=\"color: #72bf44;\">4. What is the purpose and lawful basis for processing your data?<\/span><\/h2>\n<p>We process your personal data for the following purposes:<\/p>\n<ul>\n<li>To manage and process your registration as a user of the WEBSITE, where applicable, based on your request for pre-contractual measures or the contractual relationship established with you in this context.<\/li>\n<li>To manage your access to and use of the content and services provided by DBUS through the WEBSITE, including blog services, social networks, or any other functionalities accessible from the WEBSITE at any given time, all based on your request for pre-contractual measures or the contractual relationship established with you in this context.<\/li>\n<li>To process and manage the purchase of products or services that you may formalise with DBUS through the WEBSITE, and, in general, to maintain, manage, and control the contractual relationship you establish with us as the purchaser of our products or services, all based on such contractual relationship.<\/li>\n<li>To process and manage the information submitted through the internal information system accessible via the WEBSITE, and, where applicable, to investigate the reported incidents, all in accordance with the legal obligations incumbent upon DBUS (Act 2\/2023, of 20 February, concerning the protection of individuals reporting regulatory infringements and combating corruption).<\/li>\n<li>To ensure access, through our Transparency Portal available on the WEBSITE, to all data we are legally required to disclose to the public, in compliance with our legal obligations under applicable transparency regulations.<\/li>\n<li>To ensure access, through our Contractor Profile available on the WEBSITE, to all data we are legally required to disclose to the public, in compliance with our legal obligations under applicable public sector contracts regulations.<\/li>\n<li>To process and manage requests for information, suggestions, complaints, and claims submitted through the WEBSITE or via email, always based on your consent.<\/li>\n<li>In cases where you have given consent, to manage and publicise activities and events organised by DBUS using your image and identifying data, all based on the consent granted.<\/li>\n<li>To manage your job application, enrolment in a job vacancy, and participation in the corresponding recruitment process, all based on your request for pre-contractual measures (job application), as well as your subsequent inclusion in employment pools where you have given consent (always based on that consent).<\/li>\n<li>To guarantee the safety and integrity of persons and property through the capture of images via the video surveillance system installed in our premises and\/or in our vehicles, all based on public interest (safety of persons and property).<\/li>\n<\/ul>\n<p>You are hereby reminded that if data processing is based on your consent, you may withdraw such consent at any time, voluntarily and free of charge, under the terms described in Section 7 below.<\/p>\n<h2><span style=\"color: #72bf44;\">5. Who is your data disclosed to?<\/span><\/h2>\n<p>Except when DBUS is legally required to disclose your data (e.g. to Tax Authorities, the Justice Administration, or other Public Administrations), your data will not be disclosed to third parties unless you have provided your consent.<\/p>\n<p>No international transfers of your data are anticipated.<\/p>\n<h2><span style=\"color: #72bf44;\">6. How long do we retain your personal data?<\/span><\/h2>\n<p>As a general rule, personal data will be retained until you withdraw your consent to processing or request its erasure, and for the duration necessary to fulfil the legal obligations incumbent upon DBUS.<\/p>\n<p>In any case, you are hereby informed that DBUS has implemented internal data retention policies to manage the storage periods for all personal data in its possession, ensuring erasure when the data is no longer necessary or appropriate for the purpose for which it was collected.<\/p>\n<p>In particular, the following is stated:<\/p>\n<ul>\n<li>For the handling and management of information provided through the internal information system accessible via the WEBSITE, your data will be kept for a maximum period of three months; however, if an investigation needs to be initiated, the data may be retained in accordance with the provisions set forth in the specific privacy policy available on that internal information channel.<\/li>\n<li>Regarding the video surveillance system installed on our premises and in our vehicles, it is hereby stated that captured images will be erased within a maximum period of one month.<\/li>\n<li>For the management of job applications, your data will be retained for the period necessary to ensure your participation in the relevant recruitment process and, in the case of unsolicited applications, for a maximum period of two years.<\/li>\n<\/ul>\n<h2><span style=\"color: #72bf44;\">7. What are your rights?<\/span><\/h2>\n<p>The data protection regulations grant you rights concerning your personal data, which you may exercise at any time during processing. These rights are as follows:<\/p>\n<ul>\n<li><u>Access to your data<\/u>: you have the right to access your data in order to know which of your personal data we are processing.<\/li>\n<li><u>Request the rectification or erasure of your data<\/u>: under certain circumstances, you may rectify inaccurate personal data we process about you or request its erasure if, among other reasons, the data is no longer necessary for the purposes for which it was collected.<\/li>\n<li><u>Request the restriction of processing of your data<\/u>: in certain circumstances, you have the right to request restriction of processing of your data, in which case we will only retain your data to initiate or defend legal claims as stipulated by applicable data protection regulations.<\/li>\n<li><u>Portability of your data<\/u>: in certain circumstances, you have the right to receive all personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit it to another data controller.<\/li>\n<li><u>Right to object to the processing of your data<\/u>: in certain circumstances, based on your specific situation, you have the right to object to the processing of your personal data, in which case we will cease processing unless there are compelling legitimate grounds for processing or for establishing, exercising, or defending legal claims.<\/li>\n<\/ul>\n<p>Furthermore, where the processing of your data is based on your consent, you have the right to withdraw this consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.<\/p>\n<p>You can exercise these rights by submitting a written request to DBUS at the address <a href=\"mailto:lopd@dbus.es\">lopd@dbus.es<\/a>.<\/p>\n<p>Finally, please be informed that you may file a claim with the competent supervisory authority (the Basque Data Protection Agency) especially if you have not achieved satisfaction in exercising your rights. You can contact this Authority through its website: <a href=\"http:\/\/www.avpd.eus\/\">www.avpd.eus<\/a>.<\/p>\n<h2><span style=\"color: #72bf44;\">8. Security measures<\/span><\/h2>\n<p>DBUS will always process your personal data with absolute confidentiality, upholding the mandatory duty of secrecy in accordance with applicable data protection regulations, and duly adopting all necessary technical and organisational measures to guarantee data security and prevent any alteration, loss, unauthorised processing, or unauthorised access, taking into account the state of the art, the nature of the data, and the risks to which it is exposed.<\/p>\n<h2><span style=\"color: #72bf44;\">9. Cookies policy<\/span><\/h2>\n<p>Additionally, you are hereby informed that DBUS has established a Cookies Policy which is accessible via the following <a href=\"https:\/\/www.dbus.eus\/es\/politica-de-cookies\/\">link<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This Privacy Policy (hereinafter, the \u201cPRIVACY POLICY\u201d) generally governs the collection and processing by COMPA\u00d1\u00cdA DE TRANV\u00cdA DE SAN SEBASTI\u00c1N, S.A.U. (hereinafter, \u201cDBUS\u201d) of (i) the personal data that you provide to us as a user of the website accessible through the URL www.dbus.eus (hereinafter, the \u201cWEBSITE\u201d), including the services available at any given time [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"acf":[],"_links":{"self":[{"href":"https:\/\/dbus.eus\/en\/wp-json\/wp\/v2\/pages\/82854"}],"collection":[{"href":"https:\/\/dbus.eus\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/dbus.eus\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/dbus.eus\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/dbus.eus\/en\/wp-json\/wp\/v2\/comments?post=82854"}],"version-history":[{"count":2,"href":"https:\/\/dbus.eus\/en\/wp-json\/wp\/v2\/pages\/82854\/revisions"}],"predecessor-version":[{"id":82856,"href":"https:\/\/dbus.eus\/en\/wp-json\/wp\/v2\/pages\/82854\/revisions\/82856"}],"wp:attachment":[{"href":"https:\/\/dbus.eus\/en\/wp-json\/wp\/v2\/media?parent=82854"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}