Register of processing activities (RAT)

Article 30 of Regulation EU 2016/679 General Data Protection Regulation (GDPR), establishes that each controller shall maintain a record of the processing activities they perform, with the following information:

  • The name and contact details of the controller and the data protection officer.
  • The purposes of the processing.
  • A description of the categories of data subjects and the categories of personal data.
  • The categories of data recipients.
  • Transfers of personal data, if any.
  • The planned retention periods for the various categories of data, when possible.
  • A general description of the technical and organizational security measures.

Additionally, as regulated in Article 31.2 of the Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), all entities included in Article 77.1 of this organic law must publish an inventory of their processing activities, which will include the information established in Article 30 of the GDPR and its legal basis for the processing of personal data.

In accordance with this regulation, a record of processing activities carried out by the AYUNTAMIENTO DE FUENGIROLA is maintained:

REGISTER OF PERSONAL DATA PROCESSING ACTIVITIES