Following the entry into force of the General Data Protection Regulation, on 25 May 2018 , it is not necessary to register personal data files in the respective general register of the Spanish Data Protection Agency, but in accordance with article 30 of the Regulation, each controller must keep a Register of the personal data processing activities carried out under its responsibility (Article 30.1 GDPR). Furthermore, processors shall keep a Register with the categories of activities carried out on behalf of a controller (Article 30.2 GDPR).
In accordance with the above, ANECA keeps a Register of processing activities which it carries out under its responsibility as a controller, as well as a Register of processing activities which it carries out as a processor on behalf of other controllers.
This inventory of processing activities is accessible on ANECA's website, in accordance with Art. 31.2 of Act 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights.
Data Protection Officer
Dña. María Hernández Tártalo
C/ Orense 11, 7, 7ª planta