Information on the processing of personal data by
The Consejería de Medioambiente Vivienda y Ordenación del Territorio, Junta de Castilla y León
In accordance with Art. 13 paras. 1 and 2 and Art. 14 paras. 1 and 2 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) hereinafter referred to as “GDPR” – The General Directorate of State Forests informs that:
- Identity of the controller: The controller of your personal data is Consejería de Medioambiente Vivienda y Ordenación del Territorio, Junta de Castilla y León located at C/ Rigoberto Cortejoso, 14, 7ª planta. C.P.: 47014 Valladolid, Spain.
- Contact details of the controller: You can contact the controller:
– in writing at the controller’s registered office address
– by phone: 983-419-000
– by email at: consejero.medioambientevot@jcyl.es
- Contact details of the data protection officer: The controller has appointed a person responsible for overseeing the processing of personal data, with whom you can contact in all matters regarding the processing of personal data and the exercise of rights related to data processing, by sending correspondence to the address indicated above, or via email at sfc2025@comacyl.es
- Purpose of processing and legal basis: Your personal data are processed for the purpose of:
1). enabling contact with the Administrator and making contact with recipients via traditional and electronic mail;
2). exchanging traditional and electronic correspondence, including receiving letters, notifications, inquiries, and requests in electronic form
3). considering received correspondence;
4). handling incoming and outgoing correspondence in the Electronic Document Management (EDM) system;
5). documenting arrangements made with clients, contractors, co-workers, or other persons;
6). coordinating and supervising the activities of the directors of the Regional Directorates of State Forests and managers of other national organizational units of State Forests;
7). protection against claims and pursuing possible claims.
8). handling complaints, requests – based on the provisions of the Act of 14 June 1960 Code of Administrative Procedure (consolidated text Journal of Laws 2022.1301 as amended) and the regulation of the Council of Ministers of 8 January 2002 on the organization and acceptance and consideration of complaints and requests (Journal of Laws 2002.46);
9). handling petitions – based on the Act of 11 July 2014 on petitions (consolidated text Journal of Laws 2018.870).
10). Depending on whether the Administrator already has other data of the person with whom electronic or traditional correspondence is conducted and in what matter it is conducted, the Administrator may also process a range of other personal data to the extent necessary to handle this matter. Then, the Administrator processes personal data also for other, individually determined purposes, known to the person with whom correspondence is conducted, and separately informs them of these purposes.
The legal basis for processing data contained in electronic and traditional correspondence is:
1). fulfillment of a legal obligation incumbent on the Administrator (Art. 6 para. 1 lit. c of GDPR) or
2). performance by the Administrator of tasks carried out in the public interest or in the exercise of official authority vested in the Administrator (Art. 6 para. 1 lit. e of GDPR) or
3). realization or pursuit of concluding a contract with the Administrator (Art. 6 para. 1 lit b of GDPR);
4). realization of the legitimate interest of the data Administrator and senders of electronic messages and traditional mail (Art. 6 para. 1 lit. f of GDPR) – consisting in enabling electronic and traditional contact with the Administrator or
5). realization of the legitimate interest of the Administrator consisting in pursuing claims or defense against claims, in accordance with generally applicable laws, in particular the Civil Code (Art. 6 para. 1 lit. f and Art. 9 para. 2 lit. f of GDPR) or
6). processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law which is proportional to the aim pursued, respects the essence of the right to data protection and provides for suitable and specific measures to safeguard the fundamental rights and interests of the data subject (Art. 9 para 2 lit. g of GDPR) or
7). voluntarily expressed consent through an explicit confirmatory act (Art. 6 para. 1 lit. a of GDPR) – if the sender of correspondence requests information regarding the Administrator’s products, the response given to the sender will contain the information requested by the sender, and sending a query will mean consent to sending the sender commercial information by the Administrator to the email address provided by the sender to the extent necessary to provide a response (Art. 10 of the Act on Providing Services by Electronic Means) or to the address provided by the sender for correspondence (in the case of traditional mail); expressed consent can be withdrawn at any time without stating a reason, but commercial information sent after sending a request for it and before withdrawing consent will be sent in accordance with the law; withdrawal of consent may prevent providing a full response to the question asked.
- Source of data: Data are obtained from the data subject or third parties or from other sources (e.g., the addressee’s data obtained from the WWW page).
- Categories of data: Address data, contact data, and data contained in the content of email and traditional correspondence, including sensitive data.
- Recipients of data: Your personal data may be made available and transferred to public administration bodies, services, courts, and prosecutors or organizational units of the State Forests National Forest Holding based on and within the limits of applicable legal provisions. Your personal data may be made available to entities that process your data on behalf of the Administrator under a personal data processing entrustment agreement (processing entities);
- Transfer of personal data to a third country or international organization: The Administrator, processing personal data for the purposes indicated in point 4, may in justified cases use the services and technologies offered by Meta Platforms Inc., such as WhatsApp.
The Administrator indicates that Meta Platforms Inc. is based outside the European Union, and therefore, in light of the GDPR provisions, is treated as an entity operating in a third country;
The Administrator indicates that personal data shared within the services and technologies offered by Meta Platforms Inc. (WhatsApp), used by the Administrator, will be co-administered by Meta Platforms Inc.
More information about the principles of processing personal data by Meta Platforms, Inc. can be found at: https://www.whatsapp.com/legal/privacy-policy-eea/?lang=en
- Automated decisions and profiling: Not applicable
- Period of data storage: Your personal data will be stored for the period necessary to achieve the purposes mentioned in point 4 above – and after that time for the period and to the extent required by generally applicable laws.
- Rights of data subjects: In connection with the processing of your personal data, you have the following rights:
– the right to access data;
– the right to obtain a copy of the data
– the right to request rectification of data;
– the right to delete data;
– the right to restrict processing;
– the right to data portability
– the right to object to data processing
- The right to withdraw consent: You have the right to withdraw consent at any time. Withdrawal of consent does not affect the legality of the processing, which was carried out on the basis of consent before its withdrawal.
- The right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority dealing with personal data protection in the Member State of your habitual residence, place of work, or place of the alleged infringement.
Office of the President of the Personal Data Protection Office : / Jorge Juan, 6. 28001 – Madrid
Teléfono general: 900 293 183 ; email: prensa@aepd.es
- Information on the voluntariness or obligation to provide data: Providing your personal data is mandatory, in situations where the premise for processing personal data is a legal provision. The consequence of not providing personal data will be the inability to take actions mentioned in point 4.
