By virtue of Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, regarding the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and Organic Law 3/2018, of 5 December, regarding the Protection of Personal Data and Guarantee of Digital Rights, the obligation to appoint a Data Protection Officer to any authority or public sector body that processes personal information is established.
The functions of the Data Protection Officer are:
- Inform and advise the person responsible for and in charge of processing personal data, as well as employees who deal with the processing of the obligations incumbent upon them under the Regulation and other data protection provisions.
- In matters of data protection, supervise compliance with the provisions of the regulations and the policies of the person responsible for and in charge of data processing.
- Offer advice when requested about the impact assessment related to the protection of personal data.
- Cooperate with the Spanish Data Protection Agency (AEPD) and be the point of contact with them.
- Intervene in the event that interested parties file the optional claim prior to appealing to the AEPD.
- Deal with questions from interested parties regarding the processing of their personal data and the exercise of their rights under the General Data Protection Regulation.
In the Ministry of Consumer Affairs, the functions of the Data Protection Office (DPO), including its attached autonomous bodies, the Spanish Agency for Food Safety and Nutrition (AESAN), have been assumed by the Information Technologies and Services Division, reporting to the Undersecretariat of Consumer Affairs (C/Atocha 3, 28012 Madrid), DPD@consumo.gob.es
Anyone has the right to obtain information on how their data is processed by the bodies and units of the Ministry of Consumer Affairs. Contact the Consumer Affairs Data Protection Officer with regard to all questions regarding the processing of your personal data or the exercise of your rights.
Through the Data Processing Officer you can exercise, upon request and where appropriate, your rights of access, rectification, deletion and portability of your data, limitation and opposition to processing, withdraw consent, as well as your right not to be the subject of decisions based solely on the automated processing of your data.
Additionally, you can exercise your Right to make a claim with the Spanish Data Protection Agency, C/ Jorge Juan 6, 28001 MADRID.