Article 20.1 of the Organic Law 15/1999 of 13 December on the Protection of Personal Data requires that the creation, modification or deletion of the files of the Public Administrations be made by means of general provision published in the Official Journal of the State or Official Journal.

In its virtue, in order to comply with the aforementioned legal mandates and to guarantee the citizens the exercise of their legitimate rights, I come to have:

First. -It is extended and amends the Annex of the Order of 22 July 1994, which establishes and regulates the automated files with personal data existing in the Ministry of Foreign Affairs, extended by Order of 26 of May 1995 ("Official State Gazette" of June 10).

Second. -According to the provisions of article 20.1 of the Organic Law 15/1999 of 13 December on the Protection of Personal Data, the automated file of a personal character is created which is related to Annex I of the This Order.

Third. -The transfer of all files of ownership of this Ministry to the National Institute of Statistics is foreseen for the performance of the functions attributed to it in article 26 of Law 12/1989, of May 9, of the Public Statistics; to the statistical services of the Ministerial Departments for the tasks assigned to them by Article 33 of the same Law and to the statistical services of the Autonomous Communities under the conditions laid down in Article 40; Paragraphs 2 and 3 of the Law on Public Statistics.

Fourth.-The holder of the automated file management organ referred to in the Annex shall, under the top management of the Minister, take the necessary technical and organisational measures to protect the security, integrity and confidentiality of personal data, as well as those designed to guarantee the honour, personal and family privacy of natural persons and the full exercise of their rights.

Fifth. The exercise of the rights granted to those affected by the Organic Law 15/1999 will be carried out in accordance with the provisions of the Law 15/1999.

Sixth. -As many provisions, of equal or lower rank, are repealed, they are contrary to the provisions of this Order.

Seventh. This Order shall enter into force on the day following that of its publication in the "Official Gazette of the State".

Madrid, 5 July 2004.

MORATINOS CUYAUBE

ANNEX I

Creating files

UFI

Filename: OOII.MDF Vacants

Purpose of the file: Database of candidates for vacant posts and any other forms of employment in the International Organizations and Institutions of which Spain is a member, and of which has previously been reported on the Ministry's website.

Expected uses for the same:

Human resources: Promotion and selection of staff, competitions and competitions.

Work and social welfare: Promotion and management of employment.

Purposes several: Administrative procedures.

Persons or collectives on which they are intended to obtain data of a personal nature or which are obliged to supply them: persons interested in filling vacancies in the international organizations and institutions of which Spain is a member.

Procedure for the collection of personal data: data supplied by the data subject by means of telematics.

Basic file structure and description of the data types included in the file: relational database.

Identification data: DNI/NIF, first and last name, address (postal, electronic), telephone.

Personal Feature Data: Date of Birth.

Social circumstance data: Licenses, permissions, and authorizations.

Academic and professional data: Training, certification, professional experience.

Job Details Data: Jobs.

Personal Data Crashes: No data disposals are contemplated.

Authority of the Administration responsible for the file: Cabinet of the Minister.

Unit to which the rights of access, rectification, cancellation and opposition may be exercised: Cabinet of the Minister.

Security measures: Qualified basic level:

Security document.

Staff duties and obligations with access to personal data and information systems.

Record of Incidents.

Identification and authentication.

Control of access to personal data.

Media management.

Backup and Recovery copies.

Audit.

Physical access control.

Media management.

Not testing with actual data.