The processing of the data voluntarily provided by the interested parties in any procedure managed by the Ministry of Territorial Policy and Democratic Memory, as well as that carried out by it by legal obligation, public interest or exercise of public powers, will be directed solely and exclusively to the satisfaction of the purposes of the corresponding procedure.

In compliance with the provisions of the General Data Protection Regulation (articles 12 and following), and the Organic Law on Protection of Personal Data and Guarantee of Digital Rights (articles 12 and following), the assignor of the data may, at any time, exercise the rights of access, rectification, deletion, limitation of treatment, portability and opposition.

The forms of exercise of the aforementioned rights by the interested parties are the following:

• Contact the person responsible for the treatment, that is, the natural or legal person who determines the purposes and means of the treatment (Article 4 of the GDPR), through the electronic headquarters of the Ministry of Territorial Policy and Democratic Memory, or in person, through the Register Assistance Office Network (https://administracion.gob.es)

• Contact the Data Protection Officer regarding all matters relating to the processing of your personal data and the exercise of your rights (Article 38.4 of the GDPR), whose functions include monitoring compliance with data protection regulations.

• Make use of the mediation mechanisms, out-of-court procedures and other dispute resolution procedures, provided for in Article 40 of the GDPR, to resolve disputes arising with those responsible for the treatment.
• File a complaint with the Spanish Data Protection Agency (AEPD)), in accordance with the provisions of Article 77 of the GDPR. C/ Jorge Juan, 6. 28001. Madrid

Prior to submitting a complaint to the AEPD against a data controller or processor, the data subject may contact the Data Protection Officer (Article 37.1 of the LOPDGDD).

These rights can be exercised directly or through a representative and their exercise is free of charge.

When the requests submitted are manifestly unfounded or excessive (for example, when they are repetitive), the person responsible for the treatment may charge a fee proportional to the administrative costs incurred or refuse to act.

Requests from interested parties must be responded to within one month, although that deadline may be extended by two more months depending on the complexity and number of requests.

The person responsible for the treatment is obliged to inform the interested parties about the means at their disposal to exercise their rights. Such means must be easily accessible to the data subject, and the right may not be denied to the data subject on the sole ground that he or she has chosen another means.

If the request is submitted by electronic means, the information shall be provided by the same means where possible, unless the data subject requests otherwise.

If the person responsible does not comply with the request submitted, he must inform, within a maximum period of one month, of the reasons for his non-action and the possibility of complaining to a control authority.

It is possible for the person in charge to attend the request on behalf of the person in charge, if both have established it in the contract or legal act that binds them.