Exercising the right of access, rectification, erasure and portability of personal data, limitation and opposition to processing and not being subject to automated individual decisions regarding personal data registered with the Generalitat. - GVA.ES

The data controller (hereinafter the controller), will ensure that data subjects can exercise their rights under Regulation (EU) 2016/679 of the European Parliament and of the Council dated 27 April 2016 on the protection of individuals with regard to personal data processing and on the free movement of said data (hereinafter the GDPR), as well as those rights relating to the mechanisms for requesting and obtaining the data free of charge, unless the requests are manifestly unfounded or excessive. It should also provide the means for requests to be submitted by electronic means, in particular where personal data are processed by electronic means, and it will provide information by electronic means where possible, unless the data subject requests otherwise. In order to exercise rights, the identity of the applicant must be proven. - Right of access: regulated in Art. 13 of LO 3/2018, and Art. 15 of the GDPR, the data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning them are being processed and, if so, the right of access to the personal data, under the terms established in the aforementioned regulations. - Right of rectification: regulated in Art. 14 of LO 3/2018, and Art. 16 and 19, the data subject has the right to obtain without undue delay from the controller the rectification of inaccurate personal data concerning them. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of an additional declaration. - Right to erasure, the "right to be forgotten" regulated in Art. 15 of LO 3/2018, and Art. 17 and 19 of the GDPR, the data subject has the right to obtain without undue delay from the controller the erasure of personal data related to them, and the controller is obliged to erase said personal data without undue delay when any of the aforementioned circumstances occur under the terms set forth in the aforementioned regulations. - Right to data portability: regulated in Art. 17 of LO 3/2018, and Art. 20 of the GDPR, a data subject has the right to receive personal data relating to them, which they have provided to a controller, in a structured, commonly used and machine-readable format, and to transmit them to another controller without being prevented from doing so by the controller to whom they have been provided, under the terms set out in the aforementioned regulations. - Right of limitation, regulated in Art. 16 of LO 3/2018 and in Art. 18 GDPR, the data subject has the right to obtain from the controller a restriction on the processing of their data when any of the conditions set out in the aforementioned regulations are met. - Right of opposition: regulated in Art. 18 of LO 3/2018, and Art. 21 GDPR, the data subject has the right to object at any time, on grounds relating to their individual situation, to the processing of personal data relating to them, under the terms set out in the aforementioned regulations. - Right not to be subject to automated individual decisions: regulated in Art. 18 of LO 3/2018 and in Art. 22 of the GDPR, every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or significantly affects them in a similar way, within the meaning of the aforementioned legislation. BASIC INFORMATION ON DATA PROTECTION We hereby inform you of the characteristics of the processing that will be carried out on the personal data that you provide through the request to exercise your rights. - Name of the processing activity: Attention to data protection rights. - Purposes or uses of the processing: Management of requests to exercise individual personal data protection rights. - Data controller: the head of the sub-secretariat within the responsible conselleria (regional ministry) before which the right is exercised or the head of the body responsible for the matter in accordance with the organic and functional regulations. - Legal basis lawfulness or legitimacy: Under Article 6.1.c) of the GDPR, the processing is necessary in order to comply with a legal obligation applicable to the data controller. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation), which repeals Directive 95/46/EC, and Organic Law 3/2018 dated 5 December on Personal Data Protection and the guarantee of digital rights. - Retention period: Requests will be kept for as long as is necessary. The provisions of the archives and documentation regulations will apply. - Type or categories of personal data: a) Identification: Name and surnames; DNI/NIF/NIE/Passport), address (postal or electronic); telephone (fixed or mobile); signature; digital fingerprint; electronic signature; access or identification credential. b) Other data: those that may be provided in the application. Categories of interested or affected parties and origin of the data: a) Applicants; legal representative or volunteer. b) Origin: directly from the person concerned. - Transfer or communication of data (categories of recipient parties): national Ombudsman or Comunitat Valenciana Ombudsman - Security, technical and organisational measures: the security measures implemented correspond to those set out in Appendix II (Security measures) to Royal Decree 3/2010, dated 8 January, which regulates the National Security Scheme in the field of e-Government.