CUSTOMERS
PURPOSE
Customer management and maintenance of business relationships
CATEGORIES OF STAKEHOLDERS
Natural persons, including representatives of legal persons to whom the entity provides services.
CATEGORIES PERSONAL DATA
Name and surname, address, signature and telephone number. Position in the entity you represent.
DATA TRANSFERS
Collaborating entities and event organizers
INTERNATIONAL TRANSFERS
To collaborating entities or organizers of international missions and/or events.
CONSERVATION PERIOD
They will be kept for the time necessary to fulfill the purpose for which they were collected and to determine the possible responsibilities that may arise from that purpose and the processing of the data. The provisions of the rules of archives and documentation will apply.
SECURITY MEASURES
Confidentiality, integrity and availability. Encryption.
LEGAL BASIS
GDPR: 6.1.b) Treatment necessary for the performance of a contract to which the data subject is a party or for the application at the request of the latter of pre-contractual measures.
GDPR: 6.1.c) Treatment necessary for the fulfillment of a legal obligation applicable to the controller.
ECONOMIC AND BUDGETARY MANAGEMENT
PURPOSE
1. Economic, accounting and fiscal management.
2. Processing of contracting and spending files and the formalization, development and execution of the contract.
3. Registration of representatives and proxies.
CATEGORIES OF STAKEHOLDERS
Natural persons, including representatives of legal persons.
CATEGORIES PERSONAL DATA
Name and surname, address, signature and telephone number.
Bank details (account, bank entity)
Position in the entity you represent.
DATA TRANSFERS
— Social Security, Public Finance and Tax Administration Bodies - Financial Institutions. — Contracts Platform of the Junta de Andalucía.
— Publication on the Extenda website of the data relating to contracts
— Possible treatment managers on behalf of Extenda.
INTERNATIONAL TRANSFERS
No.
CONSERVATION PERIOD
They will be kept for the time necessary to fulfill the purpose for which they were collected and to determine the possible responsibilities that may arise from that purpose and the processing of the data. The provisions of the rules of archives and documentation will apply.
The economic data of this processing activity will be kept under the provisions of Law 58/2003, of 17 December, General Tax.
SECURITY MEASURES
Confidentiality, integrity and availability. Encryption.
LEGAL BASIS
GDPR: 6.1.b) Treatment necessary for the performance of a contract to which the data subject is a party or for the application at the request of the latter of pre-contractual measures.
GDPR: 6.1.c) Treatment necessary for the fulfillment of a legal obligation applicable to the controller.
Law 9/2017, of 8 November, on Public Sector Contracts
Law 39/2015, of October 1, on the Common Administrative Procedure of Public Administrations.
STAFF
PURPOSE
HR management, staff payroll management and compliance with the legal requirements inherent in such management, including:
— Management of staff records and situations
— Timetable, holiday and permits and licenses control
— Management of staff training
— Management of diets and productivity
— Other aspects related to the management of labour and civil servants
CATEGORIES OF STAKEHOLDERS
Labour and civil servants and members of their families.
CATEGORIES PERSONAL DATA
Name and surname, ID /VAT num. /identification document, personnel registration number, Social Security/Mutuality number, address, signature and telephone number.
Special categories of data: health data (sick leave, occupational accidents and degree of disability, not including diagnoses), trade union membership, excuses for the payment of union dues (if applicable), trade union representative (where applicable), proof of assistance from own and third parties.
Personal characteristics data: Sex, marital status, nationality, age, date and place of birth and family data.
Family circumstances data: Date of registration and withdrawal, licenses, permits and authorizations. Academic and professional data: Degrees, training and professional experience.
Details of employment and administrative career.
Presence control data: Date/time in and out, reason for absence.
Economic-financial data: Economic data on payroll, credits, loans, guarantees, low tax deductions from holdings corresponding to the previous job (if applicable), legal withholdings (if applicable), other withholdings (if applicable). Bank details.
Other information: data on social action, data on penalties in the field of public service.
DATA TRANSFERS
Security agencies E15 public finance and tax administration.
Other bodies of the General Administration of the G9 Board trade unions and staff boards.
— Financial institutions, for the payment of payrolls.
— In charge of treatment on behalf of Extenda. G8The data relating to the identification of the owners and/or persons responsible for administrative units will be published on the website, in accordance with the provisions of the Law on Public Transparency of Andalusia.
INTERNATIONAL TRANSFERS
No.
CONSERVATION PERIOD
They will be kept for the time necessary to fulfill the purpose for which they were collected and to determine the possible responsibilities that may arise from that purpose and the processing of the data. The provisions of the rules of archives and documentation will apply.
The economic data of this processing activity will be kept under the provisions of Law 58/2003, of 17 December, General Tax.
SECURITY MEASURES
Confidentiality, integrity and availability. Encryption.
LEGAL BASIS
GDPR: 6.1.b) Treatment necessary for the performance of a contract to which the data subject is a party or for the application at the request of the latter of pre-contractual measures.
GDPR: 6.1.c) Treatment necessary for the fulfillment of a legal obligation applicable to the controller. — Law 6/1985, of 28 December, on the Administration of the Public Service of the Junta de Andalucía
— Royal Legislative Decree 5/2015, of 30 October, approving the consolidated text of the Law on the Basic Statute of Public Employees.
— Order of 26 December 2000 regulating the content, processing, management and archiving of personal files for the staff of the Junta de Andalucía.
Law 30/1984, of 2 August, on measures for the reform of the public service.
Royal Legislative Decree 5/2015, of 30 October, approving the Law on the Basic Statute of the Public Employee.
Royal Legislative Decree 2/2015, of 23 October, approving the consolidated text of the Workers' Statute Act.
SECURITY
PURPOSE
Access control and presence in the entity's premises for security reasons.
CATEGORIES OF STAKEHOLDERS
People who access the facilities. Visiting control. Security.
CATEGORIES PERSONAL DATA
Name and surname, address, signature and, where applicable, telephone number or ID/CIF. Position in the entity you represent.
DATA TRANSFERS
State security forces and bodies, judicial bodies, prosecutor's office.
INTERNATIONAL TRANSFERS
No.
CONSERVATION PERIOD
1 month
SECURITY MEASURES
Confidentiality, integrity and availability. Encryption.
LEGAL BASIS
GDPR: 6.1.e) Treatment necessary for the performance of a mission carried out in the public interest or in the exercise of public powers conferred on the controller.
CANDIDATES
PURPOSE
Selection of potential candidates for vacant positions.
CATEGORIES OF STAKEHOLDERS
Candidates.
CATEGORIES PERSONAL DATA
Name and surname, address, signature and telephone number.
Academic and professional data: Degrees, training and professional experience.
Details of employment and administrative career. Incompatibilities.
DATA TRANSFERS
Not
INTERNATIONAL TRANSFERS
No.
CONSERVATION PERIOD
Not
SECURITY MEASURES
Confidentiality, integrity and availability. Encryption.
LEGAL BASIS
GDPR: 6.1.e) Treatment necessary for the performance of a mission carried out in the public interest or in the exercise of public powers conferred on the controller.
VIDEO SURVEILLANCE
PURPOSE
Video surveillance of the facilities.
CATEGORIES OF STAKEHOLDERS
People who access the facilities. Timetable and work control of workers.
CATEGORIES PERSONAL DATA
Image
DATA TRANSFERS
State security forces and bodies, judicial bodies, prosecutor's office.
INTERNATIONAL TRANSFERS
No.
CONSERVATION PERIOD
1 month.
SECURITY MEASURES
Confidentiality, integrity and availability. Encryption.
LEGAL BASIS
GDPR: 6.1.e) Treatment necessary for the performance of a mission carried out in the public interest or in the exercise of public powers conferred on the controller.
COMMUNICATIONS, AGENDA AND CONTACTS
PURPOSE
Management of communications, calendar and contacts.
CATEGORIES OF STAKEHOLDERS
People who are sent communications. Institutional contacts.
CATEGORIES PERSONAL DATA
Name and surname, address, signature and telephone number.
Position in the entity you represent.
DATA TRANSFERS
Entities requesting information.
INTERNATIONAL TRANSFERS
No.
CONSERVATION PERIOD
They shall be kept as long as the persons concerned maintain their professional position or as long as they do not request their abolition.
SECURITY MEASURES
Confidentiality, integrity and availability. Encryption.
LEGAL BASIS
GDPR: 6.1.e) Treatment necessary for the performance of a mission carried out in the public interest or in the exercise of public powers conferred on the controller.
SOCIAL NETWORKS
PURPOSE
Management of the social networks used by the entity to promote the activities that are their own.
CATEGORIES OF STAKEHOLDERS
Users who follow the entity on social networks.
CATEGORIES PERSONAL DATA
Name and surname, Identifier in the social network. Image.
DATA TRANSFERS
Social network in which the activity takes place.
INTERNATIONAL TRANSFERS
Yes, according to the relevant social network.
CONSERVATION PERIOD
They shall be kept as long as the persons concerned maintain their professional position or as long as they do not request their abolition.
SECURITY MEASURES
Confidentiality, integrity and availability. Encryption.
LEGAL BASIS
GDPR: 6.1.a) the data subject gave his consent to the processing of his personal data for one or more specific purposes
VIDEO RECORDING OF THE SESSIONS OF THE RECRUITMENT TABLES
PURPOSE
Recording of the development of the sessions of the contracting tables for broadcasting through the internet.
CATEGORIES OF STAKEHOLDERS
People who come to the hiring tables.
CATEGORIES PERSONAL DATA
Name and surname, address, signature and telephone number. Image.
Position in the entity you represent.
DATA TRANSFERS
No.
INTERNATIONAL TRANSFERS
No.
CONSERVATION PERIOD
They will be kept for as long as necessary to resolve claims. The provisions of the rules of archives and documentation will apply.
SECURITY MEASURES
Confidentiality, integrity and availability. Encryption.
LEGAL BASIS
GDPR: 6.1.e) Treatment necessary for the performance of a mission carried out in the public interest or in the exercise of public powers conferred on the controller.
PROGRAMS AND SCHOLARSHIPS
PURPOSE
Management of the various programmes and scholarships
CATEGORIES OF STAKEHOLDERS
Persons accessing the entity's programs or benefiting from scholarships.
CATEGORIES PERSONAL DATA
Name and surname, address, signature and telephone number. Image.
Position in the entity you represent.
DATA TRANSFERS
Entities that participate or collaborate in the various programs or scholarships.
INTERNATIONAL TRANSFERS
No, unless expressly stated.
CONSERVATION PERIOD
They will be kept for as long as necessary to resolve claims. The provisions of the rules of archives and documentation will apply.
SECURITY MEASURES
Confidentiality, integrity and availability. Encryption.
LEGAL BASIS
GDPR: 6.1.e) Treatment necessary for the performance of a mission carried out in the public interest or in the exercise of public powers conferred on the controller.
BACKGROUND
PURPOSE
Management of training programmes.
CATEGORIES OF STAKEHOLDERS
Persons who have access to the training programmes.
CATEGORIES PERSONAL DATA
Name and surname, address, signature and telephone number. Image.
Position in the entity you represent.
DATA TRANSFERS
Entities that participate or collaborate in the various training programmes.
INTERNATIONAL TRANSFERS
No.
CONSERVATION PERIOD
They will be kept for as long as necessary to resolve claims. The provisions of the rules of archives and documentation will apply.
SECURITY MEASURES
Confidentiality, integrity and availability. Encryption.
LEGAL BASIS
GDPR: 6.1.b) Treatment necessary for the performance of a contract to which the data subject is a party or for the application at the request of the latter of pre-contractual measures.
GDPR: 6.1.c) Treatment necessary for the fulfillment of a legal obligation applicable to the controller.
EXERCISE OF RIGHTS
PURPOSE
Attend to citizens' requests in data protection.
CATEGORIES OF STAKEHOLDERS
Natural persons claiming or exercising their rights.
CATEGORIES PERSONAL DATA
Name and surname, address, signature and telephone number. Image.
Position in the entity you represent.
DATA TRANSFERS
Spanish Data Protection Agency, or where applicable, Andalusia Transparency and Data Protection Council.
INTERNATIONAL TRANSFERS
No.
CONSERVATION PERIOD
They will be kept for as long as necessary to resolve claims. The provisions of the rules of archives and documentation will apply.
SECURITY MEASURES
Confidentiality, integrity and availability. Encryption.
LEGAL BASIS
GDPR: 6.1.e) Treatment necessary for the performance of a mission carried out in the public interest or in the exercise of public powers conferred on the controller.
TRANSPARENCY
PURPOSE
Register and process requests for access to information made by citizens under Law 19/2013 of 9 December on transparency, access to information and good governance.
CATEGORIES OF STAKEHOLDERS
Applicants for public information.
CATEGORIES PERSONAL DATA
Name and surname, address, signature and telephone number. Image.
Position in the entity you represent.
DATA TRANSFERS
Transparency and Data Protection Council of Andalusia.
INTERNATIONAL TRANSFERS
No.
CONSERVATION PERIOD
They will be kept for as long as necessary to resolve claims. The provisions of the rules of archives and documentation will apply.
SECURITY MEASURES
Confidentiality, integrity and availability. Encryption.
LEGAL BASIS
GDPR: 6.1.e) Treatment necessary for the performance of a mission carried out in the public interest or in the exercise of public powers conferred on the controller.
GDPR: 6.1.c) Treatment necessary for the fulfillment of a legal obligation applicable to the controller.
— Law 1/2014, of 24 June, on Public Transparency of Andalusia
— Law 19/2013, of 9 December, on transparency, access to public information and good governance.
SECURITY BREACHES
PURPOSE
Management and evaluation of security gaps.
CATEGORIES OF STAKEHOLDERS
Natural persons, including representatives of legal persons.
CATEGORIES PERSONAL DATA
Name and surname, address, signature and telephone number. Image.
Position in the entity you represent.
DATA TRANSFERS
State security forces and bodies.
Supervisory authorities belonging to the EU in the framework of the development of joint actions set out in Title VII of the GDPR.
Computer emergency response teams (CERT) of the National Cryptological Centre and those provided for in Directive 2016/1148 on measures to ensure a high common level of security of networks and information systems in the Union.
INTERNATIONAL TRANSFERS
No.
CONSERVATION PERIOD
They will be kept for the time necessary to fulfill the purpose for which they were collected and to determine the possible responsibilities that may arise from that purpose and the processing of the data. The provisions of the rules of files and documentation will apply.
SECURITY MEASURES
Confidentiality, integrity and availability. Encryption.
LEGAL BASIS
GDPR: 6.1.e) Treatment necessary for the performance of a mission carried out in the public interest or in the exercise of public powers conferred on the controller.