Citizen Assistant Privacy
✨ automatic translation — Automatic translation of the Catalan original; in case of doubt the Catalan version prevails.
The assistant answers general questions about municipal services from official sources. Do not write personal data (ID number, address, health data…): it does not need them to help you.
Who processes the data
The data controller is Ajuntament de Sant Just Desvern (art. 6.1.e GDPR — public-interest mission). EnaChat (EnaCast) acts as data processor, strictly following the town council's documented instructions. Conversations are never used to train models and are never mixed with other towns'.
What is stored and for how long
- Conversations are pseudonymous: no sign-in is needed and no cookies are used. We never ask for your name or any identifier.
- Conversation text is stored to improve answers and is deleted automatically after 90 days. Before storing it, we automatically try to mask common identifiers (ID numbers, phone numbers, emails, IBAN…); this is a good-faith measure, not a guarantee — which is why we ask you not to write personal data.
- If you ask to talk to a person and provide a contact email, the query is linked to that email so the citizen service office can reply to you.
Technical services
Answers are generated using Google's artificial-intelligence services (Gemini) and, for hand-off emails, Resend. The providers are listed in the processors register the town council keeps at your disposal.
To tell people from bots and protect this site's “Write to the OAC” form from automated submissions and abuse we use Cloudflare Turnstile (Cloudflare, Inc.), a security service. Only when you open the form, Cloudflare processes your IP address and technical data about your browser and device (such as the user agent and TLS fingerprint). It is a security measure necessary to provide the service (Art. 32 GDPR) and it sets no cookies on our domains. Cloudflare acts as a data processor and, when it uses these signals to improve its bot detection, as an independent controller; it may process the data outside the European Union under its data processing terms. More information: Turnstile privacy addendum.
Your rights
You can exercise your rights of access, rectification, erasure and the other GDPR rights before the town council (OAC, 93 480 48 00). If you wrote personal data in a conversation and want it deleted before the deadline, tell us the approximate date and time of the conversation. You can also complain to the APDCAT.