Purpose
- Processing of requests from applicants to exercise their rights of access, rectification and deletion of data contained in the Central Credit Register (CIR).
- Checking and improving the quality of the telephone service provided to CIR users by recording calls.
Legal basis
Performance of a task carried out in the public interest or in the exercise of official authority vested in the controller pursuant to:
- Law 44/2002, of 22 November, on measures to reform the financial system.
- Law 5/2019, of March 15, regulating real estate credit contracts.
Categories of data subjects
- Applicants/petitioners
- Legal representatives
Categories of personal data
- Identification data: Name, surname, ID card or equivalent, signature.
- Contact data: Phone number, e-mail, postal address
- Economic and financial data: Information about financial risks
- Personal characteristics data: Nationality, date and place of birth, voice.
- Other: Representation data
Retention period
Personal data shall be retained for the time necessary to fulfil the purpose for which they were collected and to allocate any liability arising from said purpose and from the processing of the data.
Security measures
In accordance with the First Additional Provision of the Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, the security measures implemented at Banco de España correspond to those provided for in the National Security Scheme.
Recipients
- Reporting institutions
- Courts of Justice
- Other competent public authorities (AEPD)
International transfer of data
N/A
Data controller
Banco de España
NIF: Q2802472G
Data Protection Officer
Exercise of rights and complaints
You can check whether it is mandatory for you to provide your personal data, as well as the procedure to exercise your rights, withdraw your consent if applicable and lodge a complaint before the Data Protection Officer or the Spanish Data Protection Agency at our Privacy Policy