Foreign transactions and securities


  • Public statistical purposes
  • Administrative purposes

Legal basis

  • Performance of a task carried out in the public interest or in the exercise of official authority vested in the controller pursuant to:
    • (i) Law 19/2003, of 4 July, on legal framework for capital movements and economic transactions abroad
    • (ii) Law 10/2010, of 28 April, on prevention of money laundering and terrorist financing
    • (iii) Regulation (EU) 1011/2012 of the European Central Bank, of 17 October 2012, regarding statistics on stock portfolio

Categories of data subjects

  • Foreign transaction’s originators/beneficiaries
  • Contact persons of reporting subjects

Categories of personal data

For foreign transaction’s holders:

  • Identification data: Name, surname and ID number
  • Contact data: Phone number, e-mail and postal address
  • Economic and financial data: Accounts, transactions, financial information, IBAN
  • Technological data: Logs

For contact persons:

  • Identification data: Name and surname
  • Contact data: Phone number, e-mail and postal address
  • Academic and professional data: Professional position and department.
  • Technological data: Logs

Retention period

Personal data shall be retained for the time necessary to fulfil the purpose for which they were collected and to allocate any liability arising from said purpose and from the processing of the data.

Security measures

Security measures provided for in Annex II of Royal Decree 3/2020, of 8 January, which regulates the National Security Scheme in the field of Electronic Administration.


  • Tax administration
  • Spanish AML/CFT supervisor (Sepblac)
  • Courts of Justice
  • Other competent public authorities

International transfer of data


Data controller

Banco de España
NIF: Q2802472G

Data Protection Officer

Division of Governance and Transparency
Contact formOpens in a new window

Exercise of rights and complaints

You can check whether it is mandatory for you to provide your personal data, as well as the procedure to exercise your rights, withdraw your consent if applicable and lodge a complaint before the Data Protection Officer or the Spanish Data Protection Agency at our Privacy Policy