Purpose
- Management of human resources and employment contracts
- Processing of payroll, social security contributions and tax deductions
- Handling of employees’ insurance policies
- Expenses settlement
- Handling of union affairs
Legal basis
- The data subject's consent to the processing of his or her personal data related to disability for the purpose of making tax withholdings.
- Performance of a contract to which the data subject is party.
- Compliance with a legal obligation to which the controller is subject pursuant to:
- (i) Royal Legislative Decree 2/2015, of 23 October, whereby the amended text of the Statute of Workers was approved.
- (ii) Royal Legislative Decree 8/2015, of 30 October, whereby the amended text of the General Social Security Law was approved.
- (iii) Law 35/2006, of 28 November, on personal income tax and partially amending the laws on corporate tax, non-residents' income and wealth tax.
- (iv) Law 58/2003, of 17 December, on general taxation.
- Fulfilment of a public interest mission in relation to the processing of data relating to the commission of criminal offences (possible disciplinary sanctions and disqualification from public employment that selected candidates confirm in the affidavit that they are required to provide prior incorporation), as provided for in:
- (i) Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (Twelfth Additional Provision).
Categories of data subjects
- Employees and senior management
- Student trainees
- Retirees
- Other staff in the service of the Banco de España (Directors)
- Relatives of employees and retirees
Categories of personal data
- Identification data: Name, surname, ID card or equivalent, health card, user code, image, social security/mutuality number, electronic signature.
- Contact details: Telephone number, email address, postal address
- Academic and professional data: education, position held, employee number and job evaluations
- Economic and financial data: salary, account information.
- Personal characteristics data: marital status, family data, nationality, age, gender, place and date of birth.
- Data relating to the commission of criminal offences: Affidavit linked to the disqualification for public employment requested in the terms and conditions of selection processes exclusively with regard to those candidates who passed these processes in order to manage their incorporation.
- Special category data: Data relating to trade union membership, health data that may be included in sick leave reports due to incapacity (Article 9.2.b) of the GDPR) and health data relating to disabilities for tax withholdings (Article 9.2.a) of the GDPR).
Retention period
Personal data shall be retained for the time necessary to fulfil the purpose for which they were collected and to allocate any liability arising from said purpose and from the processing of the data
Security measures
Security measures provided for in Annex II of Royal Decree 3/2020, of 8 January, which regulates the National Security Scheme in the field of Electronic Administration
Recipients
- Insurance companies
- Financial institution managing the pension fund
- Tax authorities
- Mutual insurance company
- Mutual insurance companies for accidents at work and occupational illnesses
- Social security bodies
- Trade unions and staff councils
- Judges and courts
- Other competent public administration bodies
International transfer of data
Cornerstone (United Kingdom, Israel, New Zeland, Canada, USA)
Data controller
Banco de España
NIF: Q2802472G
Data Protection Officer
Division of Governance and Transparency
Contact form
Exercise of rights and complaints
You can check whether it is mandatory for you to provide your personal data, as well as the procedure to exercise your rights, withdraw your consent if applicable and lodge a complaint before the Data Protection Officer or the Spanish Data Protection Agency at our Privacy Policy