Skip to content

Compliance

  • The town hall is the data controller; Enantena is the processor under a standard DPA (art. 28 GDPR).
  • Data processed: newsletter subscriber emails (consent with verifiable double opt-in) and staff accounts.
  • EU hosting; sub-processors listed in the DPA; one-click unsubscribe; list always exportable.
  • Public pages carry no tracking cookies.

Citizen-facing pages follow WCAG 2.1 AA / EN 301 549. The embedded widget is accessible and inherits the official site’s styling. Radio audio and printable posters complement the digital channel.

All AI-generated content shows a visible indicator (“AI-generated”, “automatic translation”, “AI voice”) which clears once a human reviews it. Nothing is published without human approval. Translations carry a permanent notice: the original is the only legally valid text.

Delivery log per post and channel; individual email log; daily backups with documented recovery.

  • The screen page is a public surface with no cookies, no external services and no analytics; only aggregate connectivity (that the TV is online) is counted. Nobody is identified.
  • Each screen’s link is a device key: it can be regenerated at any time and is redacted from server logs.
  • Accessibility: any key or tap pauses the rotation (WCAG 2.1 SC 2.2.2); static-board mode has no motion; the same content is accessible on the town’s public pages. AA contrast on every slide.

Signed DPA, accessibility statement, technical description and security measures (Spanish ENS basic level), justification report for procurement.