The personal data that this Ministry collects are processed confidentially pursuant to the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 , on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulations) and the provisions of the Organic Law 3/2018, of 5 December, on Personal Data Protection and digital rights guarantee.
Data controller and Registry of Processing Activities
The personal data shall be included in the corresponding processing activity of this Ministry. The updated list of data controllers and the activities they carry out is published in the Registry of Processing Activities (RAT) you will find at the end of this page.
Data Protection Officer (DPO)
The duties of the Data Protection Officer (DPO) of this Ministry, excluding the attached Public Bodies, have been assumed by the Technical General Secretariat and are exercised by the Subdirectorate General for Web Services, Transparency and Data Protection (C/Alcalá 9, 28071 MADRID. E.mail: DPDHacienda@hacienda.gob.es).
Purpose and data categories
The purpose and categories of personal data processed corresponding to each of the processing activities carried out in this Ministry can be checked in the Registry of Processing Activities (RAT).
Legitimation or legal basis
The personal data is processed by this Ministry for complying with the legal obligations, for complying with missions carried out in the public interest or in the exercise of public powers conferred thereon, as well as in the case in which the purpose of the processing may require the corresponding consent, which must be provided by means of a clear and undoubted affirmative action.
You can consult the legal basis for each of the treatment activities carried out by this Ministry next link to the register of d ousted ousted and Treatment (RAT).
Preservation of data
The personal data processed shall be preserved for the time required to fulfil the purpose for which they were collected, as well as to determine the possible liabilities that may arise from it, in addition to the periods established in the regulations on files and documents.
Transmission of data
On a general basis, personal data shall not be transferred to third parties, to the extent required by law. You can consult targeted for each of the treatment activities carried out by this Ministry on the link at the Opening of national Treatment (RAT).
No international data transfers are planned.
Rights of the interested parties
Data subjects may exercise their rights of access, rectification, erasure, restriction and objection to processing, withdrawal of consent, as well as their right not to be subject to decisions based solely on automated processing of their data, where applicable, before the controller, by means of this exercise of rights form. The list of data controllers and the data processing carried out by each of them within the scope of this Ministry, excluding its dependent bodies, is available in the Register of Processing Activities (RAT).
In the event that the personal data protection rights referred to in the previous section are not duly met by the data controller to whom they have been requested, data subjects may lodge a complaint with the Spanish Data Protection Agency. C/ Jorge Juan 6, 28001 MADRID, at the following address link. Prior to submitting such a complaint, interested parties may contact the Data Protection Delegate in accordance with the provisions of Art. 37.1 of the aforementioned Organic Law by means of this prior claim form.
Data subjects may also contact the Data Protection Officer (DPO) with regard to all questions concerning the processing of their personal data and the exercise of their rights under the General Data Protection Regulation (GDPR) via the following e-mail address DPDHacienda@hacienda.gob.es, no identification is required for the provision of this information service. The personal data provided in the information request emails will be processed for the purpose of answering the questions raised, and the Subdirectorate General for Web Services Information, Transparency and Data Protection, in the exercise of the functions of the Data Protection Delegate, will be responsible for the processing of said data. You may exercise your data protection rights before the data controller. For further information on data processing, please consult the data controller.