The processing of personal data carried out by the General Council of the Judiciary (GCJ) is done in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 relating to the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), and by Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Safeguarding of Digital Rights (LOPDGDD).

In this regard, any personal data collected will be incorporated into the corresponding processing activity for which the GCJ is responsible.

These processing activities by the GCJ are available via the following link to the "Register of processing activities".

Furthermore, via this register of activities it is possible to consult the purpose of the data processing that corresponds to each of them.

As for the legitimacy for the processing of personal data carried out by the GCJ, depending on the type and purpose of each process, this is based on the execution of a contract in which the affected person is a party, or the application of pre-contractual measures at that person’s request, compliance with legal obligations, fulfilment of tasks carried out in the public interest or the exercise of public powers.

When processing is carried out on special categories of data, the legitimising circumstances that apply are essential public interest, fulfilment of obligations and the exercise of specific rights of the responsible party or interested party within the scope of employment law and security and social protection, and the formulation, exercise or defence of complaints or when the courts are exercising their judicial function.

The application of these legitimising circumstances for the processing of data, in relation to each processing activity, can be consulted in the aforementioned “Register of processing activities”.

As for the storage of the personal data subject to processing, it shall be stored for the time necessary to complete the purpose for which it was collected and to determine the possible responsibilities that may derive from that aim, as well as the periods established in the regulations on archives and documentation.

With regards to the transfer of personal data, this shall only be done, as a general rule, when there is a legal obligation to do so, such as in the case of communications to the Courts, the State Agency for Tax Administration, the Mutual Insurance Scheme for Judicial Personnel, the Ministry of Justice, or the Social Security, notwithstanding the fact that there may be grounds for communication in one of the other circumstances that regulates the legitimacy of the processing of personal data in articles 6 and 9 of the GDPR.

In any case, the “Register of processing activities”lists the communications of personal data for each processing activity.

Furthermore, in relation to the processing that this Council may carry out on their personal data, the interested parties may exercise the rights of access, rectification, deletion, limitation, opposition and portability.

For this, they must address this Council in writing (C/ Marqués de la Ensenada nº8, 28004 Madrid) or use the following electronic form.

For more information you can access the topic “Data Protection” at https://www.poderjudicial.es/cgpj/en/Subjects/Data-Protection/General-information-/ where you will find information on:

• Regulations
• Register of processing activities
• Exercise of rights: form
• Data Protection Commissioner

If you would like more information on the application of the data protection legislation you can consult the website of the Spanish Data Protection Agency as well as its electronic office, primarily the section referring to “Queries/FAQS”.

The General Council of the Judiciary, title-holder of the website "poderjudicial.es”, only obtains and stores the following information on visitors to our website:

1. The domain name of the service provider (ISP) and/or IP address from which they access the network. For example, a user of service provider XXX will only be identified by the domain xxx.es and/or the IP address. That way we can create statistics on the countries and servers that most frequently visit our website.

2. The date and time of accessing our website. This allows us to find out the hours with the most traffic, and make specific adjustments to avoid problems of saturation during our peak hours.

3. The address of the website containing the link via which the user arrived at our website. With this we can find out the effectiveness of the various banners and links that lead to our server, in order to optimise those that offer the best results.

4. The number of daily visitors to each section. This allows us to see the most successful areas and increase and improve their content, to give the users a more satisfactory result.

The information obtained is totally anonymous, and will not in any case be associated with a specific or identified user.

Additionally, this website uses its own cookies which, like in the previous case, will not provide any personal details nor identify a person. The cookies used are of two types: session cookies and persistent cookies.

• The session cookies are cookies that are commonly used to gather and store data temporarily while the user is using the website. They are necessary for the correct functioning of some services used on this website.
• Persistent cookies allow data to be stored on the user’s device for a set period. In our case, they are used to save the language preferences of our visitors.

As an additional clause, it is indicated that for those specific services provided by www.poderjudicial.es that present special conditions with regards to the privacy policy stated, the use of the personal data supplied shall be clearly explained.