Basic information on data protection

Below, we inform you about the data protection policy of the Spanish Data Protection Agency.

Data Controller

Personal data that may be collected directly from the data subject will be treated confidentially and will be incorporated into the corresponding processing activity owned by the Spanish Data Protection Agency (AEPD).

The updated list of processing activities carried out by the AEPD is available at the following link to the AEPD’s activity register.

Purpose

The purpose of data processing corresponds to each of the processing activities carried out by the AEPD and which are accessible in the register of processing activities.

Legitimacy

The processing of your data is carried out to comply with legal obligations by the AEPD, to fulfill missions carried out in the public interest, or in the exercise of public powers conferred on the AEPD, as well as when the purpose of the processing requires your consent, which must be given through a clear affirmative action.

You can consult the legal basis for each of the processing activities carried out by the AEPD at the following link to the AEPD’s register of activities.

Data Retention

The personal data provided will be retained for the time necessary to fulfill the purpose for which it is collected and to determine any potential liabilities that may arise from the purpose, in addition to the periods established in the archives and documentation regulations.

Data Communication

Generally, personal data will not be communicated to third parties, except under legal obligation, which may include communications to the Ombudsman, Judges and Courts, and interested parties in proceedings related to the complaints filed.

You can consult the recipients for each of the processing activities carried out by the AEPD at the following link to the AEPD’s activity log.

Rights of Data Subjects

To request access, rectification, erasure, or restriction of processing of personal data, or to object to processing, if the requirements established in the General Data Protection Regulation and Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights are met, you can write to the data controller, in this case, the Spanish Data Protection Agency (AEPD), addressing it to the Spanish Data Protection Agency, C/Jorge Juan, 6, 28001 Madrid, or to the AEPD electronic registry.

Contact details of the DPO: dpd@aepd.es.

Legal Notice
This portal, owned by the Spanish Data Protection Agency (AEPD), with Tax Identification Number (NIF) Q2813014D, registered office at Calle Jorge Juan, No. 6, 28001 Madrid, and telephone number 901 100 099, consists of the websites associated with the domains aepd.es, sedeagpd.gob.es, tudecideseninternet.es, and redipd.org.

Intellectual and Industrial Property

The design of the portal and its source code, as well as the logos, trademarks, and other distinctive signs appearing therein, belong to the AEPD and are protected by the corresponding intellectual and industrial property rights.

The Agency’s infographics and guides are published under a CC BY-NC-SA 4.0 license, which allows their reuse for non-commercial purposes, with attribution and the same conditions maintained (link to license details).

Content Responsibility

The AEPD is not responsible for the legality of other third-party websites from which the portal may be accessed. The AEPD is also not responsible for the legality of other third-party websites that may be linked or connected to this portal.

The AEPD reserves the right to make changes to the website without prior notice, in order to keep its information up-to-date, adding, modifying, correcting, or deleting published content or the design of the portal.

The AEPD shall not be liable for the use that third parties make of the information published on the portal, nor for any damages or economic losses that, directly or indirectly, cause or may cause economic, material, or data damages caused by the use of said information.

Reproduction of Content

The total or partial reproduction of the content published on the portal is prohibited. However, the contents that are considered as open data in the Electronic Office, published as provided for in Royal Decree 1495/2011, of October 24, implementing Law 37/2007, on the reuse of public sector information, for the scope of the state public sector, may be reproduced under the terms contained in the following Notice.

Electronic Office

In accordance with the provisions of Article 12 of Royal Decree 203/2021, of March 30, which approves the Regulations for the action and operation of the public sector by electronic means, the AEPD is responsible for the integrity, veracity, and updating of the information and services that can be accessed through its Electronic Office (https://sedeagpd.gob.es/).

Transparency Portal

Through the information published on the transparency portal, the AEPD regularly and updatedly adheres to the principle of active disclosure established by Law 19/2013, of December 9, on transparency, access to public information, and good governance, with appropriate mechanisms to facilitate accessibility, interoperability, quality, and reuse of information, as well as its identification and location.

Applicable Law

The applicable law in the event of a dispute or conflict over the interpretation of the terms contained in this legal notice, as well as any matter related to the services of this portal, will be Spanish law.