Compliance
- Roles: the town hall is the data controller; Enantena (EnaInbox) is the data processor with a standard DPA.
- Minimization: email is the only required personal field; anonymous submissions collect none.
- Retention: by default, resolved tickets are anonymized after 2 years, keeping the statistics.
- Hosting: EU.
Photos without metadata
Section titled “Photos without metadata”Every uploaded image is re-processed and its EXIF metadata (including GPS coordinates) is stripped.
What “traceability” means, legally
Section titled “What “traceability” means, legally”For every request we keep the transition log (who, when, with what note — immutable) and the notification log (every email sent to the citizen). It is documentary proof that the citizen was informed at every step.
AI and transparency
Section titled “AI and transparency”AI only suggests and is always labelled; automatic translations always carry their marker; no decision with effects on the citizen is automated.
Accessibility
Section titled “Accessibility”Citizen pages target UNE-EN 301 549 / WCAG 2.1 AA.
Relation to the official registry
Section titled “Relation to the official registry”EnaInbox is not the official entry registry and does not replace it; the form states this and links to the electronic office.