Additional Data Protection Information in the Processing of Data for Access Control of Personnel to the Department's Information Assets Service

In accordance with Articles 13 and 14 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter GDPR), we inform you that the personal data provided or obtained from you will be processed by the Undersecretary of the Ministry of Youth and Childhood for the purpose of enabling and ensuring access control to the Ministry's information assets. Additionally, they will be processed by the Undersecretary in its capacity as the data controller in the exercise of the competences attributed (Royal Decree 211/2024, of 27 February, which develops the basic organizational structure of the Ministry of Youth and Childhood). Your personal data will not be communicated to third parties, nor is a transfer to third countries or international organizations planned without the express consent of the affected party, except in cases legally provided for.

Additionally, the following detailed information on the specific processing of personal data carried out by the Undersecretary to perform the Access Control for Departmental Staff to information assets is provided.

Who is the Data Controller of your data?

Data Controller - Undersecretary of Youth and Childhood 
C/Alcalá 27, 28014, MADRID.  
subsecretaria@juventudeinfancia.gob.es

Data Protection Officer - Undersecretary of Youth and Childhood     
C/Alcalá 27, 28014, MADRID.      
dpd@juventudeinfancia.gob.es

For what purpose will the Undersecretary of Youth and Childhood process your data?

At the Undersecretary of Youth and Childhood, we will process the personal data of the staff serving the Department to enable and ensure access control to the Ministry's information assets (Information, Services, and Systems), authentication, permissions, action traceability, auditing, etc.

How long will my data be kept in the Systems of the Undersecretary of Youth and Childhood?

The data will be kept for the necessary time to fulfill the purpose for which they were collected, applying the provisions of the archives and documentation regulations.

This period will never exceed 1 year after the person stops serving in any of the Department's units.

What authorizes the Undersecretary of Youth and Childhood to process your data for the indicated purposes?

The processing of your data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Undersecretary of Youth and Childhood (Article 6.1.e of the GDPR), and it is necessary to comply with a legal obligation attributed to the Undersecretary of Youth and Childhood as the data controller (Article 6.1.c of the GDPR) through the following regulations:

  • Law 39/2015, of 1 October, on the Common Administrative Procedure of Public Administrations.
  • Law 40/2015, of 1 October, on the Legal Regime of the Public Sector.

The data processed for the indicated purpose are the essential minimum necessary to fulfill the purpose of the processing.

To whom will your data be communicated?

The referred data will be subject to processing or communication to third parties in the departmental units that are competent by reason of the matter (Royal Decree 495/2020, of 28 April, which develops the basic organizational structure of the Ministry of Youth and Childhood), as well as other units, Departments, Agencies, or Autonomous Organizations with competence in the matter and upon request (Spanish Data Protection Agency, CCN, judicial bodies, etc).

What are your rights when you provide us with your personal data?
  • Any person has the right to obtain confirmation as to whether or not personal data concerning them is being processed by the Central Services.
  • Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data.
  • In certain circumstances and for reasons related to their particular situation, which they must justify and attach to the request, they may object to the specific processing of their data based on the provisions of Article 21 of the GDPR. That is, the exercise of the right to object must be accompanied by an expression of your cause for the General Directorate of Youth and Childhood to balance the reasons given, as an objection on absolute terms could be understood as a revocation of a consent that has not been given since this is not the legal basis for the processing. The Undersecretary of Youth and Childhood will no longer process your data unless there are legitimate compelling reasons for the processing that prevail over your interests, your rights, and your freedoms, or for the formulation, exercise, and defense of claims.
  • You may request the limitation of the processing of your personal data when:
    • The accuracy of these is challenged and for the time that allows the Undersecretary of Youth and Childhood to verify the accuracy of the same.
    • You request that we keep them when they are no longer necessary for the purpose for which they were collected and before their deletion by the Undersecretary of Youth and Childhood, in which case we will only keep them for the exercise or defense of claims.
    • Once you have requested the exercise of your right to object to the processing, while it is verified whether the reasons of the Undersecretary of Youth and Childhood for processing your data are legitimate and therefore prevail over yours.
  • You can exercise these rights materially by requesting the Undersecretary of Youth and Childhood through this form, or in person through the network of assistance offices on registry matters using this application form (editable and printable version)
  • Additionally, you can file a complaint with the Spanish Data Protection Agency when you believe that your rights have not been satisfactorily exercised, either through their web form (Complaint Form of the Spanish Data Protection Agency), or in person at c/ Jorge Juan 6, 28001 MADRID. 

Automatically translated with OpenAI from Spanish