Personal Data Protection

Regulations

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation – GDPR).
• Organic Data Protection Law 3/2018, of 5 December, and guarantee of digital rights.

Personal data processing

Legitimate interest or legal basis

The legitimate interest for processing the personal data that you provide through this website or the forms that are provided from it may be based on the different reasons listed in Article 6 of the GDPR. In general, personal data processing activities are carried out for the purpose of meeting legal obligations, fulfilling tasks in the public interest or in the exercise of public powers conferred on the Ministry, or because you have given your consent by means of a clear affirmative action.

Purpose and Retention

The processing of personal data will be limited to the minimum necessary to achieve the purposes for which it was requested.

The personal data provided will be retained for the time necessary to comply with the purpose for which it was collected and to determine the possible liabilities that may arise from that purpose and the processing of the data. The provisions of Spanish legislation on files and documentary heritage shall apply.

The data subject is responsible for updating his/her own data; the Ministry of Health shall not be held responsible for any inaccuracy if any changes that may have occurred are not communicated.

Exercise of Rights

The personal data protection regulations allow you to exercise your rights of access, rectification, objection, erasure ("right to be forgotten"), limitation of processing, portability and not to be subject to decisions based solely on the automated processing of your data, under the terms established in Articles 15 to 22 of the GDPR. You can contact the Data Controller electronically, using this form , or in person through the network of registry assistance offices using this application form (editable and printable version ).

If you do not agree with the answer given to your request, you can file a complaint with the AEPD (Spanish Data Protection Agency). St/ Jorge Juan, 6. 28001. MADRID.

Prior to submitting a complaint to the AEPD, you may contact the Data Protection Officer.

Data Protection Officers (DPO)

The Ministry of Health has designated the person who will act as Data Protection Officer (DPO) to oversee compliance with this policy within the department, excluding its agencies. (delegadoprotecciondatos@sanidad.gob.es, Paseo del Prado 18-20, 28014 Madrid).

Treatment Activity Log (RAT)

Treatment Activity Log of the Ministry of Health, Consumer Affairs and Social Welfare, excluding its Bodies