Purpose
Recording input and output documents in the General Registry of Banco de España
Legal basis
- Compliance with a legal obligation to which the controller is subject pursuant to:
- (i) Law 39/2015, of 1 October, on the common administrative procedure for public administration.
- (ii) Law 40/2015, of 1 October, on legal regime applicable to Public Sector
- Consent of the data subject regarding data to be filled in voluntarily.
Categories of data subjects
Senders and recipients of documents submitted to the General Registry of the Banco de España.
Categories of personal data
- Identification data: Name, surname, ID or passport number and electronic signature
- Contact data: Phone number, e-mail, postal address
- Professional and academic data: Academic background, qualifications, professional position, employee number, professional appraisals
- Economic and financial data: salary, accounts, transactions, financial information, etc.
- Personal characteristics data: Nationality
- Data relating to criminal and administrative offences.
- Special category of data: Data revealing trade union membership and health data, in accordance with Article 9(2)(b)(g) or (h) of the GDPR.
- Technological data: IP address, logs
- Data of vulnerable subjects: Data of children under 14 years old.
Retention period
Personal data shall be retained for the time necessary to fulfil the purpose for which they were collected and to allocate any liability arising from said purpose and from the processing of the data.
Security measures
In accordance with the First Additional Provision of the Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, the security measures implemented at Banco de España correspond to those provided for in the National Security Scheme.
Recipients
- Courts of Justice
- Other competent public authorities
International transfer of data
N/A
Data controller
Banco de España
NIF: Q2802472G
Data Protection Officer
Exercise of rights and complaints
You can check whether it is mandatory for you to provide your personal data, as well as the procedure to exercise your rights, withdraw your consent if applicable and lodge a complaint before the Data Protection Officer or the Spanish Data Protection Agency at our Privacy Policy