Proceedings handled by the legal department


  • Processing of administrative and judicial files and appeals.
  • Addressing consultations and information requests.

Legal basis

  • Performance of a task carried out in the public interest or in the exercise of official authority vested in the controller pursuant to:
    • (i) Law 13/1994, of 1 June, on the Autonomy of Banco de España.
    • (ii) Law 10/2014, of 26 June, on management, supervision and solvency of credit institutions.

Categories of data subjects

  • Authorized or empowered persons by direct account holders.
  • Administration and management positions.
  • Public positions.
  • Citizens and residents.
  • Contributors.
  • Employees.
  • Tenderers.
  • Contact persons.
  • Suppliers.
  • Legal Representatives.
  • Applicants.
  • Holders of foreign operations.

Categories of personal data

  • Identification data: Name, surname, ID or passport number, family, image/voice, social security number, signature, electronic signature, residence card
  • Contact data: Phone number, e-mail
  • Professional and academic data: Education background, qualifications, professional position and job evaluations
  • Economic and financial data: Goods and services transactions, commercial information, salary, information about bank accounts and other products
  • Data related to criminal and administrative offences
  • Special categories of data: Trade-union membership and position, health, religion
  • Personal characteristics data: Age, date and place of birth and nationality

Retention period

Personal data shall be retained for the time necessary to fulfil the purpose for which they were collected and to allocate any liability arising from said purpose and from the processing of the data.

Security measures

Security measures provided for in Annex II of Royal Decree 3/2020, of 8 January, which regulates the National Security Scheme in the field of Electronic Administration.


  • Tax Administration
  • Interested parties
  • Notaries, lawyers and attorneys
  • Social Security institutions
  • European Union institutions
  • Spanish AML/CFT supervisor (Sepblac)
  • Court of Auditors
  • Courts of Justice
  • Other competent public authorities

International transfer of data


Data controller

Banco de España
NIF: Q2802472G

Data Protection Officer

Division of Governance and Transparency
Contact formOpens in a new window

Exercise of rights and complaints

You can check whether it is mandatory for you to provide your personal data, as well as the procedure to exercise your rights, withdraw your consent if applicable and lodge a complaint before the Data Protection Officer or the Spanish Data Protection Agency at our Privacy Policy