Personal Data Protection

Data protection

Through no personal data is collected from users without their knowledge, nor is it transferred to third parties. The personal data subject to processing by the CIS is obtained and processed pursuant to Regulation EU/2016/679, of April 27, 2016, General Data Protection (GDPR) and Organic Law 3/2018, of 5 December, on Protection of Personal Data and Guarantee of Digital Rights.

Data Controller and Register of Processing Activities

The personal data that could be collected directly from the interested party will be processed confidentially and will be incorporated into the corresponding processing activity held by the CIS. The updated list of the processing activities carried out by the different Units of the Ministry is published in the Register of Processing Activities.

Processing conditions: which personal data, what is the purpose of this data and why does the CIS process your personal data

In order to be aware of the categories of personal data that are incorporated into the CIS processing activities, as well as the purposes for which they will be processed and all the details of the processing, you can check the Register of Processing Activities.

Legitimation or legal grounds

These processing activities are carried out so that the CIS can comply with legal obligations, to achieve goals in the public interest or in the exercise of public powers conferred on this agency, or because you have given your consent through a clear affirmative action. You can check the legal basis for each processing activity carried out by the CIS in the Register of Processing Activities.

Data retention

The personal data provided will be stored for the time required to fulfil the purpose for which they are collected and determine responsibilities, always taking into account the deadlines established by the Spanish archives and documentary heritage regulations. The personal data used by the CIS in conducting studies are dissociated once the works within field of the study are completed and, where appropriate, the study quality control has been carried out. From that moment on, the studies are anonymised and their publication does not include any personal data.

Data communications to third parties

Personal data will not be communicated to third parties unless there is a legal obligation. In the Register of Processing Activities you can check the recipients for each of the processing activities carried out by this Agency.

International transfers

No international data transfer is planned

Data protection rights

Anyone has the right to obtain information about the processing of their personal data carried out by the CIS. You can exercise your rights of access, rectification, deletion and portability of your data, the rights of limitation and opposition to its processing, as well as the right of not being subject to decisions based solely on the automated processing of your data, where appropriate, by using this form.

Data Protection Officer (DPO)

The Ministry of the Presidency, Relations with the Cortes and Democratic Memory has appointed a Data Protection Officer (DPO) to undertake the corresponding duties in relation to the processing of personal data of the Government Presidency, the Ministry of the Presidency, Relations with the Courts and Equality and its bodies, including the CIS. To request information or make a query to the Data Protection Officer please use this link.

More information of interest

Register of Processing Activities

Regulation EU / 2016/679, of 27 April, 2016, General Data Protection (GDPR) 

Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights

Spanish Data Protection Agency