https://gdprhub.eu/index.php?title=AEPD_(Spain)_-_PS/00314/2021&feed=atom&action=historyAEPD (Spain) - PS/00314/2021 - Revision history2024-03-29T13:31:50ZRevision history for this page on the wikiMediaWiki 1.39.6https://gdprhub.eu/index.php?title=AEPD_(Spain)_-_PS/00314/2021&diff=21225&oldid=prevSR: /* Facts */2021-11-10T12:05:04Z<p><span dir="auto"><span class="autocomment">Facts</span></span></p>
<table style="background-color: #fff; color: #202122;" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="en">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 12:05, 10 November 2021</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l59">Line 59:</td>
<td colspan="2" class="diff-lineno">Line 59:</td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>The complainant has reported that the municipality of Ayuntamiento de Molina de Segura was lacking a DPO. The DPO duties were first temporarily assigned to a specific person, but then they stopped being exercised altogether. </div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>The complainant has reported that the municipality of Ayuntamiento de Molina de Segura was lacking a DPO. The DPO duties were first temporarily assigned to a specific person, but then they stopped being exercised altogether. </div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">=== Holding ===</ins></div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>The Spanish DPA clarified that public sector bodies and agencies are obliged (as per article 37 GDPR) to appoint a suitably qualified DPO, to provide him/her with the necessary means, and to notify the AEPD of the designation for their inclusion in the Public Register of DPOs. </div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>The Spanish DPA clarified that public sector bodies and agencies are obliged (as per article 37 GDPR) to appoint a suitably qualified DPO, to provide him/her with the necessary means, and to notify the AEPD of the designation for their inclusion in the Public Register of DPOs. </div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">=== Holding ===</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>The Spanish DPA found that the Ayuntamiento de Molina de Segura did not have a DPO as required by [[Article 37 GDPR]]. As a consequence, the AEPD issued a reprimand on the municipality. </div></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>The Spanish DPA found that the Ayuntamiento de Molina de Segura did not have a DPO as required by [[<del style="font-weight: bold; text-decoration: none;">Article 37 GDPR|</del>Article 37 GDPR]]. As a consequence, the AEPD issued a reprimand on the municipality. </div></td><td colspan="2" class="diff-side-added"></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== Comment ==</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== Comment ==</div></td></tr>
</table>SRhttps://gdprhub.eu/index.php?title=AEPD_(Spain)_-_PS/00314/2021&diff=21201&oldid=prevFA at 09:04, 10 November 20212021-11-10T09:04:51Z<p></p>
<table style="background-color: #fff; color: #202122;" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="en">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 09:04, 10 November 2021</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l52">Line 52:</td>
<td colspan="2" class="diff-lineno">Line 52:</td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>}}</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>}}</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>The Spanish DPA issued a reprimand <del style="font-weight: bold; text-decoration: none;">on </del>the municipality Ayuntamiento de Molina de Segura for lacking a DPO.</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>The Spanish DPA issued a reprimand <ins style="font-weight: bold; text-decoration: none;">against </ins>the municipality <ins style="font-weight: bold; text-decoration: none;">of </ins>Ayuntamiento de Molina de Segura for lacking a DPO.</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== English Summary ==</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== English Summary ==</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== Facts ===</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== Facts ===</div></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>The complainant has reported that the Ayuntamiento de Molina de Segura was lacking a DPO<del style="font-weight: bold; text-decoration: none;">: at first the </del>DPO duties were temporarily assigned to a specific person, then <del style="font-weight: bold; text-decoration: none;">the DPO functions were not </del>exercised <del style="font-weight: bold; text-decoration: none;">anymore</del>.</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>The complainant has reported that the <ins style="font-weight: bold; text-decoration: none;">municipality of </ins>Ayuntamiento de Molina de Segura was lacking a DPO<ins style="font-weight: bold; text-decoration: none;">. The </ins>DPO duties were <ins style="font-weight: bold; text-decoration: none;">first </ins>temporarily assigned to a specific person, <ins style="font-weight: bold; text-decoration: none;">but </ins>then <ins style="font-weight: bold; text-decoration: none;">they stopped being </ins>exercised <ins style="font-weight: bold; text-decoration: none;">altogether</ins>. </div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div> </div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>The Spanish DPA clarified that public sector bodies and agencies are obliged (as per article 37 GDPR) to appoint a suitably qualified DPO, to provide him/her with the necessary means, and to notify the AEPD of the designation for their inclusion in the Public Register of DPOs. </div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>The Spanish DPA clarified that public sector bodies and agencies are obliged (as per article 37 GDPR) to appoint a suitably qualified DPO, to provide him/her with the necessary means, and to notify the AEPD of the designation for their inclusion in the Public Register of DPOs. </div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== Holding ===</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== Holding ===</div></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>The Spanish DPA found that the Ayuntamiento de Molina de Segura did not have a DPO as <del style="font-weight: bold; text-decoration: none;">requested </del>by [[Article 37 GDPR|Article 37 GDPR]]. As a consequence, the AEPD issued a reprimand on the municipality. </div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>The Spanish DPA found that the Ayuntamiento de Molina de Segura did not have a DPO as <ins style="font-weight: bold; text-decoration: none;">required </ins>by [[Article 37 GDPR|Article 37 GDPR]]. As a consequence, the AEPD issued a reprimand on the municipality. </div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== Comment ==</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== Comment ==</div></td></tr>
</table>FAhttps://gdprhub.eu/index.php?title=AEPD_(Spain)_-_PS/00314/2021&diff=21175&oldid=prevLaurap at 15:11, 8 November 20212021-11-08T15:11:57Z<p></p>
<table style="background-color: #fff; color: #202122;" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="en">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 15:11, 8 November 2021</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l52">Line 52:</td>
<td colspan="2" class="diff-lineno">Line 52:</td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>}}</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>}}</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>The <del style="font-weight: bold; text-decoration: none;">complainant has reported that </del>the Ayuntamiento de Molina de Segura <del style="font-weight: bold; text-decoration: none;">was </del>lacking a DPO<del style="font-weight: bold; text-decoration: none;">: at first the DPO duties were temporarily assigned to a specific person, then the DPO functions were not exercised anymore.</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>The <ins style="font-weight: bold; text-decoration: none;">Spanish DPA issued a reprimand on </ins>the <ins style="font-weight: bold; text-decoration: none;">municipality </ins>Ayuntamiento de Molina de Segura <ins style="font-weight: bold; text-decoration: none;">for </ins>lacking a DPO.</div></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">The Spanish DPA clarified that public sector bodies and agencies are obliged (as per article 37 GDPR) to appoint a suitably qualified DPO, to provide him/her with the necessary means, and to notify the AEPD of the designation for their inclusion in the Public Register of DPOs</del>.</div></td><td colspan="2" class="diff-side-added"></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== English Summary ==</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== English Summary ==</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== Facts ===</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== Facts ===</div></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>The <del style="font-weight: bold; text-decoration: none;">Spanish DPA issued a reprimand on </del>the <del style="font-weight: bold; text-decoration: none;">municipality </del>Ayuntamiento de Molina de Segura <del style="font-weight: bold; text-decoration: none;">for </del>lacking a DPO. </div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>The <ins style="font-weight: bold; text-decoration: none;">complainant has reported that </ins>the Ayuntamiento de Molina de Segura <ins style="font-weight: bold; text-decoration: none;">was </ins>lacking a DPO<ins style="font-weight: bold; text-decoration: none;">: at first the DPO duties were temporarily assigned to a specific person, then the DPO functions were not exercised anymore.</ins></div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">The Spanish DPA clarified that public sector bodies and agencies are obliged (as per article 37 GDPR) to appoint a suitably qualified DPO, to provide him/her with the necessary means, and to notify the AEPD of the designation for their inclusion in the Public Register of DPOs</ins>. </div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== Holding ===</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== Holding ===</div></td></tr>
<!-- diff cache key gdprwiki:diff::1.12:old-21174:rev-21175 -->
</table>Lauraphttps://gdprhub.eu/index.php?title=AEPD_(Spain)_-_PS/00314/2021&diff=21174&oldid=prevLaurap: Created page with "{{DPAdecisionBOX |Jurisdiction=Spain |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoES.jpg |DPA_Abbrevation=AEPD (Spain) |DPA_With_Country=AEPD (Spain) |Case_Number_Na..."2021-11-08T15:10:44Z<p>Created page with "{{DPAdecisionBOX |Jurisdiction=Spain |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoES.jpg |DPA_Abbrevation=AEPD (Spain) |DPA_With_Country=AEPD (Spain) |Case_Number_Na..."</p>
<p><b>New page</b></p><div>{{DPAdecisionBOX<br />
<br />
|Jurisdiction=Spain<br />
|DPA-BG-Color=background-color:#ffffff;<br />
|DPAlogo=LogoES.jpg<br />
|DPA_Abbrevation=AEPD (Spain)<br />
|DPA_With_Country=AEPD (Spain)<br />
<br />
|Case_Number_Name=PS/00314/2021<br />
|ECLI=<br />
<br />
|Original_Source_Name_1=AEPD<br />
|Original_Source_Link_1=https://www.aepd.es/es/documento/ps-00314-2021.pdf<br />
|Original_Source_Language_1=Spanish<br />
|Original_Source_Language__Code_1=ES<br />
<br />
|Type=Complaint<br />
|Outcome=Upheld<br />
|Date_Decided=<br />
|Date_Published=04.10.2021<br />
|Year=2021<br />
|Fine=None<br />
|Currency=<br />
<br />
|GDPR_Article_1=Article 37 GDPR<br />
|GDPR_Article_Link_1=Article 37 GDPR<br />
|GDPR_Article_2=Article 83(4)(a) GDPR<br />
|GDPR_Article_Link_2=Article 83 GDPR#4a<br />
|GDPR_Article_3=Article 83(4)(a) GDPR<br />
|GDPR_Article_Link_3=Article 83 GDPR#4a<br />
<br />
<br />
<br />
|Party_Name_1=AYUNTAMIENTO DE MOLINA DE SEGURA<br />
|Party_Link_1=http://portal.molinadesegura.es/<br />
|Party_Name_2=<br />
|Party_Link_2=<br />
|Party_Name_3=<br />
|Party_Link_3=<br />
|Party_Name_4=<br />
|Party_Link_4=<br />
|Party_Name_5=<br />
|Party_Link_5=<br />
<br />
|Appeal_To_Body=<br />
|Appeal_To_Case_Number_Name=<br />
|Appeal_To_Status=Unknown<br />
|Appeal_To_Link=<br />
<br />
|Initial_Contributor=n/a<br />
|<br />
}}<br />
<br />
The complainant has reported that the Ayuntamiento de Molina de Segura was lacking a DPO: at first the DPO duties were temporarily assigned to a specific person, then the DPO functions were not exercised anymore.<br />
The Spanish DPA clarified that public sector bodies and agencies are obliged (as per article 37 GDPR) to appoint a suitably qualified DPO, to provide him/her with the necessary means, and to notify the AEPD of the designation for their inclusion in the Public Register of DPOs.<br />
<br />
== English Summary ==<br />
<br />
=== Facts ===<br />
The Spanish DPA issued a reprimand on the municipality Ayuntamiento de Molina de Segura for lacking a DPO. <br />
<br />
=== Holding ===<br />
The Spanish DPA found that the Ayuntamiento de Molina de Segura did not have a DPO as requested by [[Article 37 GDPR|Article 37 GDPR]]. As a consequence, the AEPD issued a reprimand on the municipality. <br />
<br />
== Comment ==<br />
''Share your comments here!''<br />
<br />
== Further Resources ==<br />
''Share blogs or news articles here!''<br />
<br />
== English Machine Translation of the Decision ==<br />
The decision below is a machine translation of the Spanish original. Please refer to the Spanish original for more details.<br />
<br />
<pre><br />
1/9<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
Procedure No.: PS / 00314/2021<br />
<br />
RESOLUTION OF SANCTIONING PROCEDURE<br />
<br />
<br />
Of the procedure instructed by the Spanish Agency for Data Protection and based on<br />
to the following<br />
<br />
BACKGROUND<br />
<br />
<br />
FIRST: A.A.A. (hereinafter, the complaining party) dated December 21,<br />
2020 filed a claim with the Spanish Data Protection Agency. The<br />
claim is directed against MOLINA DE SEGURA CITY COUNCIL with NIF<br />
P3002700G (hereinafter, the claimed part). The reasons on which the<br />
claim are the following: that currently said Administration lacks<br />
<br />
Data Protection Officer as required by data protection regulations.<br />
The person who exercised the position and functions of DPD were attributed to him in a<br />
temporary and for more than a year these functions have not been carried out<br />
producing violation of rights.<br />
<br />
<br />
SECOND: In accordance with article 65.4 of Organic Law 3/2018, of 5<br />
December, Protection of Personal Data and guarantee of digital rights (in<br />
hereinafter LOPDGDD), said claim was transmitted to the claimed party, to<br />
to proceed with its analysis and inform this Agency within a month of the<br />
actions carried out to adapt to the requirements set forth in the regulations of<br />
<br />
Data Protection.<br />
There is no response from the claimed entity.<br />
<br />
THIRD: On 06/17/2021 the Director of the Spanish Protection Agency<br />
of Data agreed to admit to processing the claim presented by the complaining party.<br />
<br />
<br />
FOURTH: On 09/22/2021, the Director of the Spanish Protection Agency<br />
of Data agreed to initiate a sanctioning procedure for the claimed party, for the alleged<br />
infringement of article 37 of the RGPD, typified in article 83.4.a) RGPD,<br />
considering that the sanction that could correspond would be of APERCIBIMENTO.<br />
<br />
<br />
FIFTH: Notified the initiation agreement, the one claimed at the time of the present<br />
resolution has not submitted a brief of allegations, so it is applicable<br />
indicated in article 64 of Law 39/2015, of October 1, on the Procedure<br />
Common Administrative of Public Administrations, which in its section f)<br />
establishes that in case of not making allegations within the term provided on the<br />
<br />
content of the initiation agreement, it may be considered a proposal for<br />
resolution when it contains a precise pronouncement about the responsibility<br />
imputed, for which a Resolution is issued.<br />
<br />
SIXTH: Of the actions carried out in this proceeding, there have been<br />
accredited the following:<br />
<br />
<br />
<br />
<br />
<br />
<br />
C / Jorge Juan, 6 www.aepd.es<br />
28001 - Madrid sedeagpd.gob.es 2/9<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
PROVEN FACTS<br />
<br />
FIRST: On 12/21/2020 the claimant has a written entry in the AEPD<br />
<br />
stating that the complained party lacks a Data Protection Delegate and that the<br />
person who held the position and functions of DPD were attributed to him in a<br />
temporary and that for more than a year the functions of the<br />
charge resulting in violation of rights.<br />
<br />
SECOND: It is provided by the claimed Resolution No. 2018002623 issued by<br />
<br />
the one claimed on 06/04/2018, on temporary assignment of functions, for a maximum term<br />
one year extendable for another, corresponding to the data protection officer<br />
established in art. 39 of the General Data Protection Regulation, (…), by<br />
have the requisites, knowledge and skills necessary for the good<br />
performance of these functions.<br />
<br />
<br />
THIRD: The retirement resolution of 11/26/2019 of the person has been provided<br />
that temporarily held the functions of DPD.<br />
<br />
<br />
FOUNDATIONS OF LAW<br />
<br />
<br />
I<br />
By virtue of the powers that article 58.2 of the RGPD recognizes to each<br />
control authority, and as established in art. 47 of Organic Law 3/2018, of<br />
December 5, Protection of Personal Data and guarantee of rights<br />
<br />
digital (hereinafter LOPDGDD), the Director of the Spanish Agency for<br />
Data Protection is competent to resolve this procedure.<br />
<br />
II<br />
Law 39/2015, of October 1, on the Common Administrative Procedure of<br />
<br />
the Public Administrations, in its article 64 “Agreement of initiation in the<br />
procedures of a sanctioning nature ”, provides:<br />
<br />
"1. The initiation agreement will be communicated to the instructor of the procedure, with<br />
transfer of how many actions exist in this regard, and the interested parties will be notified,<br />
understanding in any case the accused as such.<br />
<br />
Likewise, the initiation will be communicated to the complainant when the regulations<br />
regulations of the procedure provide for it.<br />
<br />
2. The initiation agreement must contain at least:<br />
a) Identification of the person or persons allegedly responsible.<br />
<br />
b) The facts that motivate the initiation of the procedure, its possible<br />
qualification and the sanctions that may correspond, without prejudice to what<br />
result of the instruction.<br />
c) Identification of the instructor and, where appropriate, Secretary of the procedure, with<br />
express indication of the regime of challenge of the same.<br />
<br />
d) Competent body for the resolution of the procedure and regulation that<br />
attributes such competence, indicating the possibility that the alleged<br />
responsible can voluntarily acknowledge their responsibility, with the<br />
effects provided for in article 85.<br />
<br />
C / Jorge Juan, 6 www.aepd.es<br />
28001 - Madrid sedeagpd.gob.es 3/9<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
e) Provisional measures that have been agreed by the body<br />
competent to initiate the sanctioning procedure, without prejudice to those that<br />
can be adopted during the same in accordance with article 56.<br />
<br />
f) Indication of the right to make allegations and to the hearing in the<br />
procedure and the deadlines for its exercise, as well as an indication that, in<br />
case of not making allegations within the term provided on the content of the<br />
initiation agreement, this may be considered a resolution proposal<br />
when it contains a precise statement about liability<br />
charged.<br />
<br />
<br />
3. Exceptionally, when at the time of issuing the initiation agreement<br />
there are not enough elements for the initial qualification of the facts that motivate<br />
the initiation of the procedure, the aforementioned qualification may be carried out in a phase<br />
later by preparing a Statement of Charges, which must be notified to<br />
<br />
the interested".<br />
<br />
In application of the previous precept and taking into account that they have not<br />
formulated allegations to the initiation agreement, it is necessary to resolve the procedure initiated.<br />
<br />
<br />
<br />
III<br />
The denounced facts materialize in that the defendant lacks a DPD<br />
in contradiction with what is indicated and required by the data protection regulations.<br />
<br />
Article 58.2 of the RGPD establishes that “Each control authority shall have<br />
<br />
of all of the following corrective powers listed below:<br />
<br />
(...)<br />
b) punish any person in charge or in charge of treatment with<br />
awareness<br />
<br />
when the processing operations have infringed the provisions of the<br />
these Regulations;<br />
(...)<br />
d) order the person in charge of the treatment that the operations of<br />
treatment comply with the provisions of this Regulation, when<br />
proceed, in a certain way and within a specified timeframe;<br />
<br />
(...)<br />
<br />
It should be noted that the Public Administrations act as responsible<br />
of the processing of personal data and, on occasions, exercise functions of<br />
those in charge of the treatment so, following the principle of responsibility<br />
<br />
proactively, they are responsible for meeting the obligations detailed in the RGPD, among which<br />
includes appointing a data protection officer, making your data public<br />
contact and communicate them to the AEPD (article 37 RGPD).<br />
<br />
Article 37 RGPD, paragraphs 1 and 7 refer to these obligations and<br />
<br />
establish, respectively:<br />
<br />
"1. The person in charge and the person in charge of the treatment will designate a delegate of<br />
data protection provided that:<br />
<br />
C / Jorge Juan, 6 www.aepd.es<br />
28001 - Madrid sedeagpd.gob.es 4/9<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
a) the treatment is carried out by a public authority or body, except those<br />
courts that act in the exercise of their judicial function; ”.<br />
(…)<br />
<br />
<br />
"7. The person in charge or the person in charge of treatment will publish the data of<br />
Contact<br />
of the data protection officer and will communicate them to the control authority. "<br />
<br />
On the appointment of the data protection officer, sections 3 and 5<br />
<br />
of article 37 of the RGPD state that:<br />
<br />
"3. When the person in charge or the person in charge of the treatment is an authority or<br />
public body, a single data protection delegate may be appointed to<br />
several of these authorities or bodies, taking into account their structure<br />
<br />
organizational and size ”.<br />
<br />
"5. The data protection officer may be part of the staff of the<br />
controller or processor or perform their functions within the framework<br />
of a service contract. "<br />
<br />
<br />
For its part, the LOPDGDD dedicates article 34 to the “Designation of a<br />
data protection officer ”, provision that provides:<br />
<br />
"1. Those responsible and in charge of the treatment must designate a<br />
data protection officer in the cases provided for in article 37.1 of the<br />
<br />
Regulation (EU) 2016/679 and (...) "<br />
(…)<br />
"3. Those responsible and in charge of the treatment will communicate within the period of<br />
ten days to the Spanish Data Protection Agency or, where appropriate, to the<br />
Autonomous data protection authorities, the designations, appointments and<br />
<br />
terminations of the data protection delegates both in the cases in which<br />
are obliged to their designation as in the case in which it is voluntary ”.<br />
<br />
IV<br />
The organs and agencies of the Public Sector are obliged to designate a<br />
DPD that has the due qualification, to guarantee the necessary means<br />
<br />
for the exercise of its functions and to notify the designation to the AEPD for its<br />
inclusion in the Public Registry of DPD.<br />
<br />
The DPO will perform its functions paying due attention to the risks<br />
associated with treatment operations, taking into account the nature, the<br />
<br />
scope, context and purposes of the treatment.<br />
<br />
The DPD has no personal responsibility, for this mere fact, for the<br />
possible data protection infringements committed by your<br />
organization.<br />
<br />
<br />
The DPD of the Public Sector body or body must receive the<br />
claims addressed to them by the companies, when they choose this route before<br />
<br />
<br />
C / Jorge Juan, 6 www.aepd.es<br />
28001 - Madrid sedeagpd.gob.es 5/9<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
file a claim with the AEPD, and communicate the decision taken to the<br />
administered within a maximum period of two months.<br />
Likewise, the DPD must receive the claims that the AEPD decides<br />
<br />
transfer you prior to the initiation of a sanctioning file. The delegate<br />
must communicate the decision taken to the company and the AEPD within the maximum term<br />
of one month.<br />
In this way, in general, if the DPO achieves that the person responsible<br />
resolve the claim by either of these two ways, and without prejudice to the fact that the<br />
The interested party later goes to the AEPD, a file of<br />
<br />
declaration of infringement of that Public Administration.<br />
<br />
V<br />
Article 83.5 b) of the RGPD, considers that the infringement of “the obligations<br />
of the person in charge and the person in charge in accordance with articles 8, 11, 25 to 39, 42 and 43 ”, is<br />
<br />
punishable, in accordance with section 4 of the aforementioned article 83 of the aforementioned<br />
Regulation, “with administrative fines of 10,000,000 EUR maximum or,<br />
in the case of a company, an amount equivalent to a maximum of 2% of the<br />
total annual global business volume of the previous financial year, opting for<br />
the highest amount ”.<br />
<br />
<br />
The LOPDGDD in its article 71, Infractions, states that:<br />
<br />
“The acts and conducts referred to in the<br />
paragraphs 4, 5 and 6 of article 83 of Regulation (EU) 2016/679, as well as those that<br />
are contrary to this organic law ”.<br />
<br />
<br />
The LOPDGDD indicates in article 73, "Violations considered serious":<br />
<br />
"Based on the provisions of article 83.4 of Regulation (EU) 2016/679<br />
are considered serious and will prescribe after two years the infractions that suppose a<br />
<br />
substantial violation of the articles mentioned therein and, in particular, the<br />
following:<br />
<br />
(...)<br />
v) Failure to comply with the obligation to designate a delegate for the protection of<br />
data when their appointment is required in accordance with article 37 of the<br />
<br />
Regulation (EU) 2016/679 and article 34 of this organic law. "<br />
<br />
SAW<br />
On the other hand, article 83.7 of the RGPD, which indicates that “Without prejudice to the<br />
corrective powers of the supervisory authorities pursuant to Article 58 (2),<br />
<br />
Each Member State may lay down rules on whether and to what extent,<br />
impose administrative fines on public authorities and bodies established in<br />
said Member State ”.<br />
<br />
In accordance with this authorization granted by the RGPD, the LOPDGDD has<br />
<br />
provided in its article 77, “Regime applicable to certain categories of<br />
responsible or data controller ", the following:<br />
<br />
<br />
<br />
C / Jorge Juan, 6 www.aepd.es<br />
28001 - Madrid sedeagpd.gob.es 6/9<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
"1. The regime established in this article will be applied to the treatments<br />
of those who are responsible or in charge:<br />
<br />
<br />
a) The constitutional bodies or those with constitutional relevance and the<br />
institutions of the autonomous communities analogous to them.<br />
b) The jurisdictional bodies.<br />
c) The General State Administration, the Administrations of the<br />
autonomous communities and the entities that make up the Local Administration.<br />
d) Public bodies and public law entities linked to or<br />
<br />
dependent on Public Administrations.<br />
e) The independent administrative authorities.<br />
f) The Bank of Spain.<br />
g) Public law corporations when the purposes of the treatment<br />
are related to the exercise of powers of public law.<br />
<br />
h) Public sector foundations.<br />
i) Public Universities.<br />
j) Consortia.<br />
k) The parliamentary groups of the Cortes Generales and the Assemblies<br />
Legislative autonomic, as well as the political groups of the Corporations<br />
Local.<br />
<br />
<br />
2. When the managers or managers listed in section 1<br />
commit any of the offenses referred to in articles 72 to 74 of<br />
this organic law, the competent data protection authority will dictate<br />
resolution sanctioning them with warning. The resolution will establish<br />
<br />
Likewise, the measures to be adopted to stop the behavior or to correct it<br />
the effects of the offense that had been committed.<br />
<br />
The resolution will be notified to the person in charge of the treatment, at<br />
body on which it depends hierarchically, where appropriate, and those affected who have<br />
<br />
the condition of interested party, if applicable.<br />
<br />
3. Without prejudice to the provisions of the previous section, the authority of<br />
data protection will also propose the initiation of disciplinary actions<br />
when there is sufficient evidence to do so. In this case, the procedure and<br />
Sanctions to be applied will be those established in the legislation on disciplinary regime<br />
<br />
or sanctioner that results from application.<br />
<br />
Likewise, when the infractions are attributable to authorities and managers,<br />
and the existence of technical reports or recommendations for treatment is accredited<br />
that had not been duly attended to, in the resolution imposing the<br />
<br />
The sanction will include a reprimand with the name of the responsible position and<br />
will order the publication in the Official Gazette of the State or Autonomous<br />
corresponds.<br />
<br />
4. The data protection authority must be notified of the<br />
<br />
resolutions that fall in relation to the measures and actions to which they refer<br />
the previous sections.<br />
<br />
<br />
<br />
C / Jorge Juan, 6 www.aepd.es<br />
28001 - Madrid sedeagpd.gob.es 7/9<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
5. They will be communicated to the Ombudsman or, where appropriate, to the institutions<br />
analogous of the autonomous communities the actions carried out and the<br />
<br />
Resolutions issued under this article.<br />
<br />
6. When the competent authority is the Spanish Agency for the Protection of<br />
Data, it will publish on its website with due separation the resolutions<br />
referring to the entities of section 1 of this article, with express indication of the<br />
<br />
identity of the person in charge or in charge of the treatment that had committed the<br />
infringement.<br />
<br />
When the competence corresponds to an autonomous protection authority<br />
of data will be, in terms of the publicity of these resolutions, to what is available<br />
<br />
its specific regulations ”(the underlining corresponds to the AEPD).<br />
<br />
In accordance with the available evidence, the conduct of the<br />
claimed constitutes an infringement of the provisions of article 37 of the RGPD.<br />
<br />
<br />
It should be noted that the RGPD and without prejudice to what is established in its article<br />
83, contemplates in its article 77 the possibility of resorting to the sanction of warning<br />
to correct the processing of personal data that does not suit their<br />
provisions, when the managers or managers listed in section 1<br />
commit any of the offenses referred to in articles 72 to 74 of<br />
<br />
this organic law.<br />
<br />
Likewise, it is contemplated that the resolution issued will establish the measures<br />
that is appropriate to adopt so that the conduct ceases, the effects of the offense are corrected<br />
that had been committed and its adaptation to the requirements contemplated in the<br />
<br />
Articles 37 of the RGPD, as well as the contribution of supporting means of the<br />
compliance with what is required.<br />
<br />
In this sense, article 58.2 d) of the RGPD, states that each<br />
control authority may “order the person in charge of the treatment to<br />
<br />
the processing operations are in accordance with the provisions of this<br />
Regulation, where appropriate, in a certain way and within a period of time<br />
specified […] ”.<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
C / Jorge Juan, 6 www.aepd.es<br />
28001 - Madrid sedeagpd.gob.es 8/9<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
The defendant is obliged in accordance with the provisions of article 37<br />
of the RGPD to appoint a DPD since the treatment is carried out by an authority or<br />
public organization. The modality of their hiring, appointment and employment relationship<br />
<br />
is very broad, you can choose the most appropriate for your specific situation.<br />
<br />
Consequently, the defendant breaches the obligation established in article<br />
37 of the RGPD and sanctioned in article 83.4.a) thereof.<br />
<br />
Therefore, in accordance with the applicable legislation and assessed the criteria of<br />
<br />
graduation of sanctions whose existence has been proven,<br />
<br />
The Director of the Spanish Data Protection Agency RESOLVES:<br />
<br />
FIRST: IMPOSE MOLINA DE SEGURA CITY COUNCIL, with NIF<br />
<br />
P3002700G, for a violation of Article 37 of the RGPD, typified in Article 83.4<br />
of the RGPD, a warning sanction.<br />
<br />
SECOND: REQUEST MOLINA DE SEGURA CITY COUNCIL, with NIF<br />
P3002700G.<br />
<br />
<br />
1. The appointment of the Data Protection Delegate.<br />
<br />
You must inform this Agency within a month from the notification<br />
of this Resolution.<br />
<br />
<br />
THIRD: NOTIFY this resolution to the CITY COUNCIL OF MOLINA DE<br />
SEGURA, with NIF P3002700G.<br />
<br />
FOURTH: COMMUNICATE this resolution to the Ombudsman, of<br />
in accordance with the provisions of article 77.5 of the LOPDGDD.<br />
<br />
<br />
In accordance with the provisions of article 50 of the LOPDGDD, this<br />
Resolution will be made public once it has been notified to the interested parties.<br />
<br />
Against this resolution, which ends the administrative procedure in accordance with art. 48.6 of the<br />
LOPDGDD, and in accordance with the provisions of article 123 of the LPACAP, the<br />
<br />
Interested parties may optionally file an appeal for reconsideration before the<br />
Director of the Spanish Agency for Data Protection within a month to<br />
counting from the day after the notification of this resolution or directly<br />
contentious-administrative appeal before the Contentious-Administrative Chamber of the<br />
National High Court, in accordance with the provisions of article 25 and section 5 of<br />
<br />
the fourth additional provision of Law 29/1998, of July 13, regulating the<br />
Contentious-administrative jurisdiction, within two months from the<br />
day following notification of this act, as provided in article 46.1 of the<br />
referred Law.<br />
<br />
<br />
Finally, it is pointed out that in accordance with the provisions of art. 90.3 a) of the LPACAP,<br />
may provisionally suspend the final resolution through administrative channels if the<br />
interested party expresses his intention to file contentious-administrative appeal.<br />
If this is the case, the interested party must formally communicate this fact through<br />
<br />
C / Jorge Juan, 6 www.aepd.es<br />
28001 - Madrid sedeagpd.gob.es 9/9<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
writing addressed to the Spanish Agency for Data Protection, presenting it through<br />
of the Electronic Registry of the Agency [https://sedeagpd.gob.es/sede-electronica-<br />
web /], or through any of the other records provided for in art. 16.4 of the<br />
<br />
cited Law 39/2015, of October 1. You must also transfer to the Agency the<br />
documentation that proves the effective filing of the contentious appeal-<br />
administrative. If the Agency is not aware of the filing of the appeal<br />
contentious-administrative within a period of two months from the day following the<br />
<br />
notification of this resolution would terminate the precautionary suspension.<br />
<br />
<br />
Mar Spain Martí<br />
<br />
Director of the AEPD,<br />
P.O. the Deputy Director General of Data Inspection, Olga Pérez Sanjuan, Resolution<br />
10/4/2021<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
C / Jorge Juan, 6 www.aepd.es<br />
28001 - Madrid sedeagpd.gob.es<br />
</pre></div>Laurap