Política de Privacidad - SGAD

DATA PROTECTION AND PRIVACY POLICY

The FNMT-RCM hereby informs you about the Privacy Policy for processing and protecting the personal data of users and clients that may be collected by the FNMT-RCM through its services of validation and identification of credentials or any other products provided directly or through operators of onboarding services, ensuring compliance with the regulations in force on personal data protection pursuant to the Organic Law 3/2018 of December 5 on Personal Data Protection and Protected Digital Rights, the EU Regulation 2016/679 of the European Parliament and the Council of the EU of April 27, 2016, regarding the protection of individuals (GPDR) and any other related regulation in force.

Contracting and using the services of validation and identification of credentials or other products provided directly by the FNMT-RCM or through operators of onboarding services implies accepting this Privacy Policy, the terms of use, as well as the terms included in the Legal Notice.

Identity of the responsible party

  • Owner: National Mint and Stamp Factory-Royal Spanish Mint
  • NIF/CIF (Business ID): Q2826004J
  • Address: Calle Jorge Juan 106, C.P. 28009, Madrid
  • Customer service email: info@fnmt.es
  • Website: http://www.fnmt.es

Purpose of personal data processing

When you connect to the website of the FNMT-RCM or of any operator of onboarding services employed by the organisation to carry out a process of identification or certification, you are providing personal data that the FNMT-RCM is responsible for processing. This information includes personal data such as your IP address, biometric data, your personal ID, name, address, email address, phone number, or other information related to the purposes of the provision of the service or the acquisition of the product. By providing this information, you are giving your consent to your data being processed as described in the Legal Notice and this Privacy Policy. The consent given to process your personal data will always be given expressly and demonstrably.

The purpose of collecting this personal data is to validate your identity to acquire or use validation and certification products, as well as other services related to or derived from them. In addition, there are other purposes such as ensuring compliance with the terms detailed in the Legal Notice and the applicable regulations. This may include the development of tools and algorithms that help this website to ensure the confidentiality of the personal data collected in order to support and improve the services offered.

Personal data may also be collected to analyse web metrics. The FNMT-RCM collects other non-identifier data using cookies downloaded on your device when you navigate the website, whose purpose and characteristics are detailed in the Cookies Policy.

Finally, we hereby inform you that your personal data may also be used to manage our social media accounts. The FNMT-RCM is present in social media such as Facebook and LinkedIn. If you follow the social media accounts of the FNMT-RCM, the way your personal data is processed will also be governed by this section, as well as by the terms of use, privacy policy and access regulations of each pertinent social media, which you will have already accepted.

The FNMT-RCM will use your personal data with the purpose of appropriately managing its presence on social media, informing you of its activities, products or services, as well as any other purpose that the regulations of each social media allow.

The FNMT-RCM will not use under any circumstance the profiles of its followers on social media to send personalised ads.

To find out more about how the FNMT-RCM processes personal data, please visit the follow link: Registry of Activities of Personal Data Processing.

Personal Data Security

In order to protect your personal data, the FNMT-RCM and the operators it may employ on its behalf to provide services of identification, validation and certification will take every reasonable measure and follow the best industry practices to prevent the loss, misuse, disclosure, modification or destruction of and unauthorised access to said data.

The products and services detailed are hosted on AMAZON WEB SERVICES, ensuring your data is protected by complying with the National Security Framework, as well as on the facilities of FNMT-RCM.

The FNMT-RCM will apply the following principles when processing your data, pursuant to the regulatory requirements on data protection:

  • Principle of lawfulness, fairness, and transparency: since you own the data, we will always request express consent to process your personal data for one or more specific purposes, which you will be informed about in advance and with complete transparency.
  • Principle of data minimisation: since you own the data, you will only be required to share data that is strictly necessary for the intended purpose or purposes the data is requested.
  • Principle of storage limitation: the data will be held only during the time needed to achieve the purpose or purposes it is being processed for.
  • Principle of integrity and confidentiality: Your data will be used in such a way to guarantee its safety, confidentiality and integrity. The FNMT-RCM adopts the necessary measures to prevent unauthorised access to or misuse of the data of its users by third parties.

Cookies Policy

The webpage of the FNMT-RCM uses cookies to operate properly. Cookies are files that store information in your browser when you visit our website, which usually save the user's configurations and preferences or the session state of the browser.

In the Cookies Policy page you can review all the information regarding the policy for the collection, purpose and processing of cookies.

Legal basis for processing personal data

The legal basis for processing your personal data, as well as other additional information, can be found by clicking here to visit our Registry of Activities of Personal Data Processing.

In order to get in touch with the FNMT-RCM, leave a comment, contract any services or acquire any products of the organisation, you must accept this Privacy Policy.

Exercising rights on the protection of personal data

The FNMT-RCM hereby informs you that you have the following rights regarding your personal data:

  • Requesting access to the data stored.
  • Requesting an amendment or removal.
  • Requesting limitations on how your data is processed.
  • Objecting to how your data is processed.
  • Requesting the portability of your data.
  • Requesting that your data is not subjected to automated individual decisions.

Exercising these rights is a personal matter so the interested party must request it directly to the Owner, which means that any client, subscriber or collaborator that has provided his or her data at some point can address the Owner and request information about the data it has stored and how it has been obtained, request that the data is amended, request the portability of the data, object to its processing, limit its use or request the removal of said data from the files of the Owner.

You may access the following link to exercise your rights.

You may contact the Personal Data Protection Representative of the FNMT-RCM if you have any questions about the protection of personal data.

Contact details of the Personal Data Protection Representative:

  • Address: FNMT-RCM Personal Data Protection Representative, C/ Jorge Juan, 106. 28009. MADRID.
  • Email: dpd@fnmt.es

Storage of personal data

The personal data you provide to FNMT-RCM or to the operators in charge of processing the data on its behalf will be stored according to their intended purpose, pursuant to the regulations in force or until you request their deletion, within the set legal limits.

Useful links

FNMT-RCM's Registry of Activities of Personal Data Processing

Spanish Data Protection Agency (AEPD) (link to the AEPD)

Certificate of the ISO 27001 Information Security Management System

 

Sello AENOR