Additional Data Protection Information in the Processing of data for Personnel Access Control to the Department's Information Assets Service

In accordance with Art.13 and 14 of the Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter GDPR), we inform you that the personal data provided or obtained from you, will be processed by the Undersecretary of the Ministry of Youth and Children to enable and ensure control of access to the Ministry's information assets. Additionally, they will be processed by said Undersecretariat, in its capacity as data controller, in the exercise of the assigned competences (Royal Decree 211/2024, of February 27, by which the basic organic structure of the Ministry of Youth and Children is developed). Your personal data will not be communicated to third parties, nor is it planned to transfer to third countries or international organizations without the express consent of the affected person, except in legally provided cases.

Additionally, the following detailed information on the specific processing of personal data carried out by the Undersecretariat to perform the Access Control of Department Personnel to the information assets is provided

Who is the Data Controller?

Data Controller - Undersecretariat of Youth and Children  
C/Alcalá 27, 28014, MADRID.   
subsecretaria@juventudeinfancia.gob.es

Data Protection Officer - Undersecretariat of Youth and Children      
C/Alcalá 27, 28014, MADRID.       
dpd@juventudeinfancia.gob.es

For what purpose will the Undersecretariat of Youth and Children process your data?

In the Undersecretariat of Youth and Children, we will process the personal data of the Department personnel to enable and ensure access control to the Ministry's information assets (Information, Services, and Systems), authentication, permissions, traceability of actions, auditing, etc.

How long will my data be stored in the Systems of the Undersecretariat of Youth and Children?

Data will be retained for the time necessary to fulfill the purpose for which they were collected, and the provisions of archive and documentation regulations will be applicable.

This period will never exceed 1 year after the person stops providing services in any of the Department units.

What legitimizes the Undersecretariat of Youth and Children to process your data for the indicated purposes?

The processing of your data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority by the Undersecretariat of Youth and Children (Article 6.1.e of the GDPR), and it is necessary to comply with a legal obligation attributed to the Undersecretariat of Youth and Children as the data controller (Article 6.1.c of the GDPR) through the following regulations:

  • Law 39/2015, of October 1, on the Common Administrative Procedure of Public Administrations.
  • Law 40/2015, of October 1, on the Legal Regime of the Public Sector.

The data processed for the indicated purpose are the minimum necessary to fulfill the purpose of the processing.

To whom will your data be communicated?

The aforementioned data will be processed or transferred to third parties to the units of the ministerial Department that are competent for the matter (Royal Decree 211/2024, of February 27, by which the basic organic structure of the Ministry of Youth and Children is developed), as well as other units, Departments, Agencies, or Autonomous Bodies with competence in the matter and upon request (Spanish Data Protection Agency, CCN, judicial bodies, etc).

What are your rights when you provide us with your personal data?
  • Any person has the right to obtain confirmation as to whether or not the Central Services are processing personal data concerning them.
  • Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data.
  • In certain circumstances and for reasons related to their particular situation, which must be justified and attached with the request, they may object to specific data processing based on Article 21 of the GDPR. That is, the exercise of the right to object must be accompanied by a statement of cause for the General Directorate of Youth and Children to weigh the alleged reasons, with an objection in absolute terms being invalid, which could be understood as the revocation of consent that was not provided given that this is not the legal basis for the processing. The Undersecretariat of Youth and Children will stop processing your data, unless overriding legitimate grounds for the processing can be demonstrated which prevail over your interests, rights, and freedoms, or for the establishment, exercise, and defense of legal claims.
  • You may request the limitation of the processing of your personal data, when:
    • The accuracy of these is disputed and during the time that allows the Undersecretariat of Youth and Children to verify their accuracy.
    • Request that we retain them when they are no longer necessary for the purpose for which they were collected and before their deletion by the Undersecretariat of Youth and Children, in which case we will only retain them for the defense or pursuit of claims.
    • Once the exercise of your right to object to processing has been requested, while it is verified whether the grounds of the Undersecretariat of Youth and Children are legitimate, and therefore prevail over yours.
  • You can materialize these rights through a request addressed to the Undersecretariat of Youth and Children through this form, or in person through the network of registration assistance offices using this application form (editable and printable version)
  • Additionally, you can file a complaint with the Spanish Data Protection Agency if you believe your rights have not been satisfactorily addressed, either through its web form (Spanish Data Protection Agency Complaint Form), or in person at c/ Jorge Juan 6, 28001 MADRID. 

ERROR GENERAL REVISE LA CONFIGURACION DEL API KEYcURL error 60: SSL certificate problem: unable to get local issuer certificate (see https://curl.haxx.se/libcurl/c/libcurl-errors.html)