Market conduct supervision


  • Supervision of the conduct of supervised financial institutions
  • Registration and supervision of the good reputation, knowledge and competence of customer service representatives of supervised financial institutions and customer ombudsmen to whom these institutions may be attached

Legal basis

Performance of a task carried out in the public interest or in the exercise of official authority vested in the controller pursuant to_

  • Law 10/2014, of 26 June, on management, supervision and solvency of credit institutions
  • Law 44/2002, of 22 November, on financial system reform measures

Categories of data subjects

  • Clients of supervised financial institutions
  • Customer services representatives and ombudsmen

Categories of personal data

  • Identification data: Name, surname(s) and ID number
  • Contact details: postal address, e-mail address, telephone number
  • Academic and professional data: CV, professional entity, employment details and data related to commercial and professional reputation.
  • Economic and financial data: data relating to financial transactions
  • Data relating to the commission of administrative and criminal offences

Retention period

Personal data shall be retained for the time necessary to fulfil the purpose for which they were collected and to allocate any liability arising from said purpose and from the processing of the data.

Security measures

Security measures provided for in Annex II of Royal Decree 3/2020, of 8 January, which regulates the National Security Scheme in the field of Electronic Administration.


  • Users consulting the register of customer service representatives and customer ombudsmen
  • Courts of Justice
  • Other competent public authorities

International transfer of data


Data controller

Banco de España
NIF: Q2802472G

Data Protection Officer

Division of Governance and Transparency
Contact formOpens in a new window

Exercise of rights and complaints

You can check whether it is mandatory for you to provide your personal data, as well as the procedure to exercise your rights, withdraw your consent if applicable and lodge a complaint before the Data Protection Officer or the Spanish Data Protection Agency at our Privacy Policy