Those responsible and in charge of the treatment are obliged to keep and update a Registry of Treatment Activities in accordance with the provisions of articles 31 of Organic Law 3/2018, of December 5, on Protection of Personal Data guarantee of digital rights, and 30 of the General Data Protection Regulation (UE) 2016/679 of the European Parliament and of the Council, of April 27, 2016.
Said record must contain all the information indicated below:
The name and contact details of the person in charge and, where appropriate, of the joint controller, the representative of the person in charge, and the data protection officer.
The purposes of the treatment.
A description of the categories of data subjects and the categories of personal data.
Categories of recipients to whom the personal data was communicated or will be communicated, including recipients in third countries or international organizations.
Where appropriate, transfers of personal data to a third country or an international organization, including the identification of said third country or international organization and, in the case of transfers indicated in article 49, paragraph 1, second paragraph, documentation of adequate warranties.
When possible, the terms provided for the deletion of the different categories of data.
Where possible, a general description of the technical and organizational security measures referred to in article 32, section 1.
In accordance with the provisions of article 31.2 of Organic Law 3/2018, of December 5, the State Research Agency is obliged to publish by electronic means the inventory of its treatment activities. To comply with the foregoing, the following link accesses the Registry of Treatment Activities of the State Research Agency.
- Registry of Treatment Activities of the State Research Agency (PDF 505.99 KB)