In order to provide the services that correspond to it, the Ministry may request through forms personal data that will generally be treated in accordance with the provisions of the General Data Protection Regulation, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (RGPD) and the Organic Law 3/2018 of Protection of Personal Data and Guarantee of Digital Rights, approved on 5 December 2018 (LOPD and GDD).

The Ministry will inform and may collect data from the following categories of personal data:

• Identification and contact details (including postal and/or electronic addresses).
• Identification codes or keys for access and operation in the Portal and the electronic Headquarters.
• Transactional data, that is, any operation, movement and consultation associated with any of the services and administrative procedures that a user maintains with the Ministry.
• Socioeconomic and labour data.
• Data of legal representation

The personal data processing activities correspond to different Data Controllers, depending on the service provided by the Ministry for Digital Transformation and the Public Service. The Registry of Treatment Activities (RAT), published and downloadable on this site, identifies those responsible for all treatments registered with the Ministry.

Through the Web Portals and Electronic Offices, no personal data is collected without due legitimacy. The data provided by the interested party will be used, on a unique and exclusive basis, for the purposes provided in each procedure or action.

The general purpose of the collection and processing of personal data is the management, provision and improvement of services and the processing of administrative procedures related to the Ministry for Digital Transformation and the Public Service as well as any other service requested at any time by the user and the monitoring and response to queries raised by them.

The processing of personal data collected by the Ministry may have additional purposes, all of which are justified by the explicit consent of the user or by the legitimacy conferred on the Ministry by the laws and regulatory provisions governing the services offered and the respective procedures, in accordance with the cases of legality of the treatments provided for by Article 6 of the Regulation (GDPR).

The different purposes and their legitimacy can be consulted in the access to each of the services and procedures offered by the Ministry; and in general, in the RAT published in compliance with the provisions of art. 31.2 of Organic Law 3/2018 (LOPDyGDD).

Once informed of the type of data necessary for the provision of the services and associated administrative procedures, the processing activities to be carried out, their purpose and their legitimacy, express consent will be obtained when necessary for the Ministry to carry out the processing activities of the personal data provided by the user of the services.

In general, the Ministry for Digital Transformation and Public Service is the only recipient of the data collected. In no case will the aforementioned data be the object of treatment or transfer to third parties, if it is not with the express consent of the affected party, unless legal authorization, according to the cases provided by the current legal regulations.

When the service provided or its associated procedure includes legal obligations derived from the legitimacy of the treatment that require the transfer or transfer to third parties, the third parties to whom these data are intended and the purposes of their treatment activities will be indicated.

Where appropriate, the express consent of the user will be obtained for such transfers and transfers of data. Consent will be requested separately and specifically when the transfer of data is international.