Rights of the interested party in keeping with the European Data Protection Regulation 

Common requirements for the exercise of the rights 

For the adequate exercise of the rights it is required the fulfillment of a number of formal requirements, which allow SEPI to check the formal identity of the person who exercises the right, as well as their wishes. The minimum content of the request for exercising the rights must include.     

  • Name and surname.
  • A photocopy of the National Identity Card or of any other instrument with legal recognition which makes possible to ascertain your identity.
  • In case of legal representation, the photocopy of the representative’s National Identity Card and the document which certifies his being the legal representative of the third party in question.
  • A request with the requirement (right whose exercise is sought)
  • Statement of the domicile for the purpose of giving notices.
  • Date and signature of the interested party.
  • Documentation certifying the request made, when appropriate.

The interested party can exercise their rights by email, to the attention of the Delegada de Protección de datos (Data Protection Officer), at the following address cumplimiento@sepi.es, or by ordinary mail at c/ Velázquez 134, 28006 Madrid.

Procedure for the exercise of the rights by the holder of the rights:

The company will submit its answer to the interested party through their Data Protection Officer with regard to the exercise of the requested right within a month of the request being served. 

The above term can be extended for a further two months when required, taking into account the complexity and number of requests. The company will inform the interested party about any of those extensions within a month since the request was served, explaining the reasons of the delay. 

In case that the company were not to proceed with the request from the interested party, it will inform them without delay, no later than one month since the request was served, about the reasons for not proceeding and about the possibility of submitting a claim before a controlling authority and of starting legal actions.

Any action carried out as a result of the exercise of rights will be free of any charge. 

When the requests are manifestly groundless or excessive, especially as a result of their repetitive nature, SEPI may:

  • To charge a reasonable canon based on the administrative costs incurred for supplying the information or communication or for carrying out the requested action, or 
  • To refuse to act with regard to the request.

SEPI will bear the burden of proving the manifestly groundless or excessive nature of the request.

Whenever SEPI has a reasonable doubt about the identity of the natural person which submits the request for the exercise of rights, it may require that further information be submitted in order to confirm the identity of the interested party.

SEPI will communicate any amendment, removal of personal data, or limitation of the treatment made as a result of the exercise of rights on the part of the interested party, to each one of the addressees to which the personal data have been communicated, unless that were impossible or required a disproportionate effort. The company will inform the interested party about those addressees, when the interested party were to require it.

1. Forms for the exercise of the right of access 

Data regarding the file’s manager 
 
Name / corporate name: .............................................................. Address of the Bureau / Service before which the right of access is exercised: C/Plaza....................................................................... Number........... Postal code.................. Town..................................... Province................................. Region.............................. TIN /National ID Card.................................

Data regarding the interested party or their legal representative 

Mr. / Ms. ....................................................................., of age, with domicile in C/Plaza.............................................................................. Number........, Town........................................... Province.......................................... Postal Code................ Region...........................................with National Identity Card.........................., a copy of which is attached.

By mean of this writing he exercises the right of access, in keeping with that envisaged in section 15 of the Regulation (UE) 2016/679 of the European Parliament and the Council of Europe, of April 27th, 2016, regarding the protection of natural persons as for the processing of personal data and the free circulation of those data (RGPD), and as a result

Requests,

That he be given without cost the right of access to the personal data of which I  am (or my represented is) a holder and which are included in SEPI’s files, and specifically, I request to have access to:

  • The following specific data: ............................................................................................
  • The data included in the file ………………………………………………………………
  • All the requester’s data which are being processed.

The requester opts for receiving the information required through the following file consultation system (indicate one or more of them):

On-screen display, writing, copy or photocopy submitted by post, either certified or not, fax, email, or other electronic communication systems. Any other system which is adequate for the configuration or the material setup of the file or the nature of the processing provided by the controller.

The information supplied by SEPI will include the personal data of the interested party (or of their represented) which are being processed, as well as the purpose of the processing, the category of the data concerned, envisaged time limit, the existence of automated decisions, including profiling, the existence of the right to request from the controller the amendment or erasure of personal data, or limiting the processing of personal data regarding the interested party, or to object to such processing, when the data have been obtained directly from the interested party, the information available about the origin of such data, as well as the communications or transfers made or envisaged of the above data, including, when that is the case, those made to a third country or to an international organization.

To the duly filled out form submitted must be attached a photocopy of the National Identification Card – or an equivalent document – which proves the identity of the interested party and which is regarded as legally valid.  In case of acting through a legal representative, this must supply the representative’s National Identification Card and document proving that they represent the interested party. 

This form can be submitted by mail to the address of SEPI’s Data Protection Officer cumplimiento@sepi.es

In Madrid on...........................20......

Signed:

Mr./Ms. ……………………………………………………………………

2. Forms for the exercise of the right to rectification 

Data regarding the file’s manager 

Name / Corporate name: .................................................... Address of the Bureau / Service before which the right of rectification is exercised: C/Plaza........................................................... Number........ Postal Code.............. 
Town..................................... Province................................. Region.............................. 
TIN/National ID Card.................................

Data regarding the interested party or legal representative 

Mr. / Ms. ......................................................................., of age, with domicile in C/Plaza.................................................................. Number........, Town........................................... Province..................................... C.P................ Region ....................................... with National Identification Card.........................., of which a copy is attached,  through this writing they exercise the right of rectification regarding the attached data, providing the corresponding certificates, in keeping with that envisaged in section 16  of the Regulation (UE) 2016/679 of the European Parliament and the Council, of April 27th, 2016, regarding the protection of natural persons with respect to the processing of personal data and their free circulation (RGPD),  and as a result,

Requests,

To proceed to agree to rectify the personal data on which the right is exercised, and that I should be served notice in writing about the results of the rectification made.

That in case that it is agreed that is not appropriate to carry out, totally or partially, the proposed rectifications, I should be informed about it in a reasoned way so that, where appropriate, I can request the protection of the Agencia Española de Protección de Datos (Spanish Data Protection Agency).

That if the rectified data had been previously communicated, notice should be served to the controller of the file of the rectification made, with the purpose of making sure that this also makes the appropriate corrections, so that the duty of quality of the data is observed.

This form can be submitted by mail to the address of SEPI’s Data Protection Officer cumplimiento@sepi.es

In............................on....................................20......

Signed.

3. Forms for exercising the right to erasure 

Data regarding the file’s manager 

Name / corporate name: .................................................... Address of the Bureau / Service before the right to rectification is exercised: C/Plaza........................................................... Number........ Postal Code.............. Town..................................... Province................................. Region.............................. TIN/National ID Card.................................

Data of the interested party or their legal representative 

Mr. / Ms. ......................................................................., of age, with domicile in C/Plaza.................................................................. Number........, Town........................................... Province..................................... Postal Code................ Region ....................................... with National ID Card.........................., a copy of which is attached, through this writing they exercise the right of rectification regarding the attached data, providing the corresponding certificates, in keeping with that envisaged in section 17 of the Regulation (UE) 2016/679 of the European Parliament and the Council, of April 27th, 2016, regarding the protection of natural persons with respect to the processing of personal data and their free circulation (RGPD),  and as a result,

Requests,

To proceed to agree to erase the personal data on which the right is exercised, and that I should be served notice in writing about the results of the rectification made.

That in case that it is agreed that is not appropriate to carry out, totally or partially, the proposed rectifications, I should be informed about it in a reasoned way so that, where appropriate, I can request the protection of the Agencia Española de Protección de Datos (Spanish Data Protection Agency).

This form can be submitted by mail to the address of SEPI’s Data Protection Officer cumplimiento@sepi.es

In............................on.................................... 20......

Signed.

4. Forms for the exercise of the right to restrict processing 

Data of the person in charge of the file 

Name / corporate name: .................................................... Address of the Bureau / Service in which the right of rectification is exercised: C/Plaza........................................................... Number........ Postal Code.............. Town..................................... Province................................. Region.............................. TIN/National ID Card.................................

Data of the interested party or legal representative 

Mr. / Ms. ......................................................................., of age, with domicile in C/Plaza.................................................................. nº........, Town........................................... Province..................................... Postal Code................ Region....................................... with National ID Card.........................., a copy of which is attached, through this writing exercises their right to rectification regarding the attached data, supplying the corresponding certificates, in keeping with that envisaged in section 18 of Regulation (UE) 2016/679 of the European Parliament and of the Council, of April 27th, 2016, regarding the protection of natural persons with respect to the processing of personal data and their free circulation (RGPD),  and as a result,

Requests,

To proceed to agree to restrict the processing of the personal data on which the right is exercised, and that I should be served notice in writing about the results of the rectification made.

That in case that it were agreed that it is not appropriate to carry out, totally or partially, the proposed processing restrictions, I should be informed about it in a reasoned way so that, where appropriate, I might request the protection of the Agencia Española de Protección de Datos (Spanish Data Protection Agency).

This form can be submitted by mail to the address of SEPI’s Data Protection Officer cumplimiento@sepi.es

In............................on.................................... 20......

Signed.

5. Forms for the exercise of the right to data portability 

Data of the manager’s file 

Name / corporate name: .................................................... Address of the Bureau / Service before which the right to rectification is exercised: C/Plaza........................................................... Number........ Postal Code.............. Town..................................... Province................................. Region.............................. TIN/National ID Card.................................

Data of the interested party or legal representative 

Mr. / Ms. ......................................................................., of age, with domicile in C/Plaza.................................................................. Number........, Town........................................... Province..................................... Postal Code................ Region ....................................... with National ID Card.........................., a copy of which is attached, through this writing exercises their right to rectification regarding the attached data, supplying the corresponding certificates, in keeping with that envisaged in section 20 of Regulation (UE) 2016/679 of the European Parliament and of the Council, of April 27th, 2016, regarding the protection of natural persons with respect to the processing of personal data and their free circulation (RGPD),  and as a result,

Requests,

To proceed to the portability of the personal data on which the right is exercised, and that I should be served notice in writing about the results of the rectification made.

That in case that it were agreed that it is not appropriate to carry out, totally or partially, the proposed portability of personal data, I should be informed about it in a reasoned way so that, where appropriate, I might request the protection of the Agencia Española de Protección de Datos (Spanish Data Protection Agency).

This form can be submitted by mail to the address of SEPI’s Data Protection Officer cumplimiento@sepi.es

In............................on.................................... 20......

Signed.

6. Forms for the exercise of the right to object 

Data of the file’s manager 

Name / corporate name: ................................................Address of the Bureau / Service before the right to object is exercised: Calle/Plaza............................................... Number........... Postal Code.................. Town.................................................... Province.................................
Region......................... TIN/National ID Card................................
Data of the interested party or legal representative 
Mr. / Ms. .............................................................., of age, with domicile in Calle/Plaza......................................................... Number..... Town..................................... Province.......................................... Postal Code................ Region............................................ with National ID Card.........................., a copy of which is attached, through this writing exercises their right to object, in keeping with that envisaged in section 21 of Regulation (UE) 2016/679 of the European Parliament and of the Council, of April 27th, 2016, regarding the protection of natural persons with respect to the processing of personal data and their free circulation (RGPD), and as a result,

I state,

(To describe the situation in which takes place the processing of their personal data and enumerate the grounds for objecting to it)

In order to prove the above mentioned situation, a copy of the following documents is attached.
(Enumerate the documents attached to this request in order to prove the situation described)

I request,

That my right to object can be exercised according to the terms stated before.

This form can be submitted by mail to the address of SEPI’s Data Protection Officer cumplimiento@sepi.es

In............................on.................................... 20......
Signed.