Data protection notice

Through this data protection notice, the APDCAT wants to provide quick and fast access to the main information relating to the data processing it carries out and the rights of the interested parties, so that they can effectively control their personal data.

Data controller	Data Protection Officer
Name or company name: Directorate of the Catalan Data Protection Authority Address: Gran Via de les Corts Catalanes, 635, 1st floor, 08010 Barcelona A/E: apdcat@gencat.cat Telephone: 93 552 78 00	The Data Protection Officer is the person responsible for ensuring that the APDCAT correctly complies with data protection regulations. You can contact the APDCAT Data Protection Officer in different ways: Name and surname(s): Joana Marí Cardona Address: Gran Via de les Corts Catalanes, 635, 1st floor, 08010 Barcelona E/E: dpd.apdcat@gencat.cat Telephone: 93 552 78 00 (Monday to Friday, from 10 a.m. to 2 p.m.)

Data controller

Data Protection Officer

Name or company name: Directorate of the Catalan Data Protection Authority
Address: Gran Via de les Corts Catalanes, 635, 1st floor, 08010 Barcelona
A/E: apdcat@gencat.cat
Telephone: 93 552 78 00

The Data Protection Officer is the person responsible for ensuring that the APDCAT correctly complies with data protection regulations. You can contact the APDCAT Data Protection Officer in different ways:

Name and surname(s): Joana Marí Cardona
Address: Gran Via de les Corts Catalanes, 635, 1st floor, 08010 Barcelona
E/E: dpd.apdcat@gencat.cat
Telephone: 93 552 78 00 (Monday to Friday, from 10 a.m. to 2 p.m.)

List of APDCAT treatment activities

The Authority carries out the following processing activities. You can find the full description of each one in the Inventory of APDCAT processing activities

Communications and institutional relations
Training activities
Human Resources Management
Economic management
Rights protection, inspection and sanctioning proceedings
Management of data protection queries
Application to exercise the right of access to public information
Application for the exercise of the rights of informative self-determination
Public sector consultancy
Audits
Registration of incoming and outgoing documents
Register of Data Protection Officers
International transfer authorisations
Codes of Conduct
TID communication based on compelling legitimate interests
Prior consultation
Opinions
Binding Corporate Rules
Awards
Notification of security breaches
Selection and provision of jobs
Sending of press releases and press releases from the APDCAT
Internal Alert Channel
Learning community "DPD en xarxa"
Control of physical access to the APDCAT headquarters

How can you exercise your rights before the APDCAT?

You can access your data, request its rectification or deletion, oppose its processing and request its limitation, by sending your request to the APDCAT address (C/ Gran Via de les Corts Catalanes, 635, 1st floor, 08010 Barcelona), or through its electronic headquarters. Specifically, you can do this by following the following link. You can find out about your rights in this other link.

This request must be resolved and notified within one month of receipt, even if your personal data is not processed, a period that may be extended for a further two months (therefore, up to a maximum of three months), if necessary, taking into account the complexity and number of requests. In the latter case, the APDCAT must inform of the extension of the deadline within the first month.

If you believe that we have not given an adequate response to your request, you can file a complaint with this Authority or take legal action.

How can you exercise your rights before other entities?

You can exercise your rights of access, rectification, opposition, deletion, portability and limitation of processing, as well as you may not be subject to individual decisions based solely on the automated processing of your data, by sending your request directly to the data controller, which is the natural or legal person, public authority, service or any other body that, alone or together with others, which determines the purposes and means of the processing.

If you want to file a claim because the data controller, who falls within the APDCAT's scope of action, has partially or totally denied your request or your request has not been answered within the period established by the regulations, you can do so before the APDCAT.

In the event that the data controller does not fall within the scope of action of the APDCAT, the complaint must be submitted to the Spanish Data Protection Agency (AEPD).