Staff administration


  • Management of human resources and employment contracts
  • Processing of payroll, social security contributions and tax deductions
  • Handling of employees’ insurance policies
  • Expenses settlement
  • Handling of union affairs

Legal basis

  • Performance of a contract to which the data subject is party.
  • Compliance with a legal obligation to which the controller is subject pursuant to:
    • (i) Royal Legislative Decree 2/2015, of 23 October, whereby the amended text of the Statute of Workers was approved.
    • (ii) Royal Legislative Decree 8/2015, of 30 October, whereby the amended text of the General Social Security Law was approved.
    • (iii) Law 35/2006, of 28 November, on personal income tax and partially amending the laws on corporate tax, non-residents' income and wealth tax.
    • (iv) Law 58/2003, of 17 December, on general taxation.

Categories of data subjects

  • Employees
  • Trainees/Interns
  • Other staff providing services at Banco de España

Categories of personal data

  • Identification data: Name, surname, ID number, healthcare card number, user code, image, social security number, electronic signature, residence card number
  • Contact data: Phone number, e-mail, postal address
  • Professional and academic data: Education background, professional position, job evaluations
  • Economic data: Salary, information on bank accounts
  • Data on personal characteristics: Family, nationality, age, gender, date and place of birth
  • Special categories of data: Trade-union membership

Retention period

Personal data shall be retained for the time necessary to fulfil the purpose for which they were collected and to allocate any liability arising from said purpose and from the processing of the data.

Security measures

Security measures provided for in Annex II of Royal Decree 3/2020, of 8 January, which regulates the National Security Scheme in the field of Electronic Administration.


  • Insurance and financial institutions
  • Companies providing meal vouchers
  • Pension funds
  • Tax Administration
  • Mutual insurance funds
  • Mutual insurance companies dealing with accidents at work and occupational diseases
  • Social security institutions
  • Trade unions
  • CNPIC (National Centre for Infrastructure Protection and Cybersecurity)
  • Courts of Justice
  • Other competent public authorities

International transfer of data


Data controller

Banco de España
NIF: Q2802472G

Data Protection Officer

Division of Governance and Transparency
Contact formOpens in a new window

Exercise of rights and complaints

You can check whether it is mandatory for you to provide your personal data, as well as the procedure to exercise your rights, withdraw your consent if applicable and lodge a complaint before the Data Protection Officer or the Spanish Data Protection Agency at our Privacy Policy