Order Def / 704 / 2015, Of 13 Of April, By Which Is Created And Deleted Files Of Data Of Character Personal Of The Subdirectorate General Of Regime Inside Of The Ministry Of Defence.

Original Language Title: Orden DEF/704/2015, de 13 de abril, por la que se crean y suprimen ficheros de datos de carácter personal de la Subdirección General de Régimen Interior del Ministerio de Defensa.

Read the untranslated law here: http://www.boe.es/buscar/doc.php?id=BOE-A-2015-4352

The organic law 15/1999, of 13 December, of protection of Personal character data, a set of measures to guarantee and protect, with regard to the processing of personal data, the liberties and fundamental rights of individuals, and especially their honor and personal and family privacy.

He article 20.1 of the referred law determines that the creation, modification or suppression of files of the administrations public only may make is by means of available general posted in the «newsletter official of the State» or daily official corresponding. In the same way, the first additional provision of this law instructs the public administrations responsible for files approve the creation of the same provision.

The Ministry of defence, the General Sub-Directorate of regime inside handles certain files that were created on the basis of the Royal Decree 1332 / 1994 of 20 June, which develops certain aspects of the organic law 5/1992 of 29 October, regulation of the automated treatment of the personal data, and of the Royal Decree 994/1999 , of 11 of June, by which it approves the regulation of measures of security of them files automated that contain data of character personal.

The entry into force of the regulation of development of the organic law 15/1999, of 13 December, approved by Royal Decree 1720 / 2007, of 21 December, which repeals the abovementioned royal decrees, obliges the Ministry of defence to adapt these files to this regulation.

Finally, this project has been reported previously by the Spanish Agency of data protection.

In his virtue, I have: article 1. Creation of files.

The files of personal data of the General regime inside of the Ministry of defence, which are described in annex I to this ministerial order are created.

Article 2. Deletion of files.

Is suppress them files of data of character personal of the Subdirectorate General of regime inside of the Ministry of defense that are listed in the annex II to this order ministerial.

Sole additional provision. Integration of data.

Responsible for the files of annex II will integrate the data contained in these files in the new created, preserved, duly locked files, backups that may exist.

Sole repeal provision. Repeal legislation.

Are repealed all those provisions of equal or lower rank that is opposed to it provisions in this order ministerial.

Sole final provision. Entry into force.

This ministerial order shall enter into force the day following its publication in the "Official Gazette".

Madrid, 13 of April of 2015.-the Minister of defence, Pedro Morenés Eulate.

ANNEX I list of files with personal data of various organs of the General regime inside of the Ministry of defence unit of security 1. File of the arms of Central intervention of the Central Organ of the MINISDEF.

2. the headquarters of the MINISDEF Access Control file.

3. file's identification of Personal of the organ Center of the MINISDEF.

4. file of video surveillance of the organ Center of the MINISDEF.

5 General Service area. The SDG's regime inside the MINISDEF drivers management file.

6 the health unit of the Central Organ of the MINISDEF file.

7. the Central Organ of the MINISDEF dental cabinet file.

8 Control file of religious services in the Central body of the MINISDEF.

Resources and 9 labour relations management area. Service file of prevention of occupational hazards of the SDG's regime inside of the MINISDEF.

10. file of coordinating business in the organ Center of the MINISDEF.

11 file dependent on GSD's regime inside the MINISDEF civilian personnel.

Secretariat General 12. File management of military personnel of the SDG's regime inside of the MINISDEF.

13. file of the Central Organ of the MINISDEF social activities.

Unit of security 1. File of the arms of Central intervention of the Central Organ of the MINISDEF.

(a) purpose of the file and the intended uses for the same: establish control of particular weapons for the dependent of the Central Organ of the MINISDEF staff.

(b) persons or groups over which is intended to obtain personal data or that they are obliged to provide them: military and other authorized personnel.

(c) the personal data collection procedure: the person concerned or his legal representative.

(d) basic structure of the file and a description of the personal data included therein: description of data types: 1 Identificativos: name and surname, NIF/DNI, address, phone and signature/footprint.

2nd social circumstances: military situation.

3rd details of employment: jobs.

Treatment system: mixed.

(e) transfers of data of a personal nature and, where appropriate, data transfers that provide for third countries: Ministry of the Interior, General Directorate of the Civil Guard.

f) organ of the Administration responsible for file: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. Security Unit.

(g) services or units to those who can exercise their rights of access, rectification, cancellation and opposition: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. General Secretariat. Paseo de la Castellana, 109; 28071 Madrid.

(h) measures of security with indication of the required level: basic level.

2 file access Control at the headquarters of the MINISDEF.

(a) purpose of the file and the intended uses for the same: access control (personal internal and external) to the premises of the headquarters of the MINISDEF, to ensure security at the site.

(b) persons or groups over which is intended to obtain personal data or that they are obliged to provide them: employees, suppliers and citizens.

(c) the personal data collection procedure: the person concerned or his legal representative.

(d) the basic structure of the file and a description of the personal data included therein: description of data types: 1 Identificativos: name and surname, phone, NIF/DNI, image/voice.

2nd personal characteristics: nationality.

Treatment system: automated.

(e) transfers of data of a personal nature and, where appropriate, data transfers that provide for third countries: Ministry of industry, energy and tourism.

f) organ of the Administration responsible for file: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. Security Unit.

(g) services or units to those who can exercise their rights of access, rectification, cancellation and opposition: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. Secretary General. Paseo de la Castellana, 109; 28071 Madrid.

(h) measures of security with indication of the required level: basic level.

3. identification of the personnel of the Central Organ of the MINISDEF file.

(a) the file and the intended uses for the same purpose: allow the implementation of provisions of the regulations in relation to the system of common identification of the personnel at the service of the Central Organ of the MINISDEF.

(b) persons or groups over which is intended to obtain personal data or that they are obliged to provide them: employees, suppliers and citizens.

(c) the personal data collection procedure: the person concerned or his legal representative.

(d) the basic structure of the file and a description of the personal data included therein: description of data types: 1 Identificativos: name and surname, NIF/DNI, address, phone, image/voice, signature/footprint.

2nd personal characteristics: nationality.

3rd details of employment: jobs.

Treatment system: mixed.

(e) transfers of data of a personal nature and, where appropriate, data transfers that provide for third countries: Ministry of industry, energy and tourism (Security Area).

f) organ of the Administration responsible for file: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. Security Unit.

(g) services or units to those who can exercise their rights of access, rectification, cancellation and opposition: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. General Secretariat. Paseo de la Castellana, 109; 28071 Madrid.

(h) measures of security with indication of the required level: basic level.

4. file of video surveillance of the organ Center of the MINISDEF.

(to) purpose of the file and them applications expected for the same: recording of images for the management of it security in them different headquarters or complex of the organ Central of the MINISDEF to charge of the SDG of regime inside of the MINISDEF.

(b) persons or groups over which is intended to obtain personal data or that they are obliged to provide them: employees, suppliers and citizens.

(c) the personal data collection procedure: the person concerned or his legal representative.

(d) the basic structure of the file and a description of the personal data included therein: description of data types: 1 Identificativos: image/voice.

Treatment system: automated.


(e) transfers of data of a personal nature and, where appropriate, data transfers that provide for third countries: judicial bodies, forces and security corps.

f) organ of the Administration responsible for file: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. Security Unit.

(g) services or units to which is can exercise the rights of access, rectification, cancellation and opposition: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. General Secretariat. Paseo de la Castellana, 109; 28071 Madrid.

(h) measures of security with indication of the required level: basic level.

Area of services General 5. The SDG's regime inside the MINISDEF drivers management file.

(to) purpose of the file and them applications expected for the same: identify to the personal of the service of automobiles for your location during or for the provision of the work.

(b) persons or groups over which is intended to obtain personal data or that they are obliged to provide them: employees and authorized personnel.

(c) the personal data collection procedure: the person concerned or his legal representative.

(d) the basic structure of the file and a description of the personal data included therein: description of data types: 1 Identificativos: name and surname, NIF/DNI, address, telephone and other call sign data: driver's license.

2nd job details: job, profession.

Treatment system: automated.

(e) transfers of data of a personal nature and, where appropriate, data transfers that provide for third countries: not be provide for transfers.

f) organ of the Administration responsible for file: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. Car service.

(g) services or units to those who can exercise their rights of access, rectification, cancellation and opposition: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. General Secretariat. Paseo de la Castellana, 109; 28046 Madrid.

(h) measures of security with indication of the required level: basic level.

6 the health unit of the Central Organ of the MINISDEF file.

(a) purpose of the file and the intended uses for the same: health care and occupational health of the staff of the Central Organ of the MINISDEF. The intended use is the optimization of prevention, rehabilitation and health studies.

(b) persons or groups over which is intended to obtain personal data or that they are obliged to provide them: military/employees/officials, patients (employees and authorized personnel) and people outside the Ministry of defense that may need it urgently.

(c) the personal data collection procedure: the person concerned or his legal representative, a private entity.

(d) the basic structure of the file and a description of the personal data included therein: description of data types: 1 data: health: data arising from acts of gender-based violence; racial or ethnic background; sex life.

2nd Identificativos: name and surname, phone, NIF/DNI, address, signature/footprint, Social Security number / mutuality, image/voice, health card.

3rd personal characteristics: data of marital status, age, date of birth, sex, family, place of birth, physical characteristics, nationality, anthropometric.

4th social circumstances: features lodging, housing; hobbies and lifestyle; military situation; membership to clubs, associations; licenses, permits, authorizations.

5 details of employment: profession, jobs, history of the worker.

6 academics and professionals: training, qualifications and professional experience.

Treatment system: mixed.

(e) transfers of data of a personal nature and, where appropriate, data transfers that provide for third countries: not be provide for transfers.

f) organ of the Administration responsible for file: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. Medical service.

(g) services or units to those who can exercise their rights of access, rectification, cancellation and opposition: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. General Secretariat. Paseo de la Castellana, 109; 28046 Madrid.

(h) measures of security with indication of the required level: high.

7. dental Cabinet of the Central Organ of the MINISDEF file.

(a) purpose of the file and the intended uses for the same: optional assistance bucco-dental staff in the Central body of the MINISDEF, relatives in first grade and authorized personnel.

(b) persons or groups on which it is intended to obtain personal data or that they are obliged to supply them: employee / military / officials, relatives in the first degree of the staff assigned to the Central Organ of the MINISDEF and come voluntarily and authorized personnel.

(c) the personal data collection procedure: the person concerned or his legal representative.

(d) the basic structure of the file and a description of the personal data included therein: description of data types: 1 data: health: data arising from acts of gender-based violence; racial or ethnic background; sex life.

2nd Identificativos: name and surname, phone, NIF/DNI, address, signature/footprint, Social Security number / mutuality, image/voice, health card.

3rd personal characteristics: data of marital status, age, date of birth, sex, family, place of birth, physical characteristics, nationality, anthropometric.

4th social circumstances: hobbies and lifestyle.

5 details of employment: profession, jobs.

Treatment system: mixed.

(e) transfers of data of a personal nature and, where appropriate, data transfers that provide for third countries: not be provide for transfers.

f) organ of the Administration responsible for file: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. Dental Cabinet.

(g) services or units to those who can exercise their rights of access, rectification, cancellation and opposition: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. General Secretariat. Paseo de la Castellana, 109; 28046 Madrid.

(h) measures of security with indication of the required level: high.

8 Control file of religious services in the Central body of the MINISDEF.

(a) the file and the intended uses for the same purpose: control of religious services (marriages and baptisms) dispensed to the MINISDEF staff and their families who require these services.

(b) persons or groups on which it is intended to obtain personal data or that they are obliged to supply them: employee / military / civil servants; families of the military and civilian personnel stationed at the MINISDEF.

(c) the personal data collection procedure: the person concerned or his legal representative.

(d) the basic structure of the file and a description of the personal data included therein: description of data types: 1 data: religion.

2nd Identificativos: name and surname, NIF/DNI, address and signature/footprint.

3rd personal characteristics: age, nationality, date of birth, sex, place of birth, marital status, data on family data.

Treatment system: manual.

(e) transfers of data of a personal nature and, where appropriate, data transfers that provide for third countries: judicial bodies; public records; organs of ecclesiastical administration.

f) organ of the Administration responsible for file: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. Religious service.

(g) services or units to those who can exercise their rights of access, rectification, cancellation and opposition: Ministry of defence. Undersecretary of Defense. Undersecretary of Defense. Subdirectorate General of internal regime. General Secretariat. Paseo de la Castellana, 109; 28046 Madrid.

(h) measures of security with indication of the required level: high.

Resources and labor relations management area.

9 file service of prevention of occupational hazards of the SDG's regime inside of the MINISDEF.

(a) purpose of the file and the intended uses for the same: Prevención de riesgos laborales (PRL) of personnel providing services in the Central Headquarters of the Ministry of defence or the scope of the regime inside SDG peripherals; risk assessments of job security, hygiene, ergonomics and psychology techniques: management: accidents / incidents labour, training/information on PRL, equipments of individual protection and personnel of special sensitivity.

(b) persons or groups over which is intended to obtain personal data or that they are obliged to provide them: employees, citizens or residents and suppliers.

(c) the personal data collection procedure: the person concerned or his legal representative; other physical persons other than the plaintiff or his representative; mutuality or entity private contracted as provider of services related with the prevention of risks labor and with authorization previous of the interested.


(d) the basic structure of the file and a description of the personal data included therein: description of data types: 1 data: health. Is specifies that to the be especially protected only can allocate is to them purposes legitimate for which was obtained in relation to the service of PRL.

2nd Identificativos: name and surname, NIF/DNI, address, phone, voice/image, Social Security number / mutuality, other call sign data: e-mail.

3rd features personal: age, date of birth, sex, anthropometric.

4th academics and professionals: training, qualifications and professional experience.

5 details of employment: profession, history of the worker, jobs.

System of treatment: mixed.

(e) transfers of data of a personal nature and, where appropriate, data transfers that provide for third countries: mutual work and external prevention service. In the event of industrial accident, if requested it the mutuality and was essential to the integrity of the worker.

f) organ of the Administration responsible for file: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. Service of prevention of risks labour.

(g) services or units to those who can exercise their rights of access, rectification, cancellation and opposition: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. General Secretariat. Paseo de la Castellana, 109; 28046 Madrid.

(h) measures of security with indication of the required level: high.

10. file of the Central Organ of the MINISDEF business coordination.

(a) the file and the intended uses for the same purpose: control of external companies and their staff, who work or provide services at the headquarters and peripherals within the scope of the SDG's regime inside of the MINISDEF. Management of the coordination of business as set out in the law 31/1995 of 8 November, de Prevención de Riesgos Laborales.

(b) persons or groups over which is intended to obtain personal data or that they are obliged to provide them: suppliers.

(c) the personal data collection procedure: the person concerned or his legal representative.

(d) structure basic of the file and description of the data of character personal included in the same: description of them types of data: 1 identifying: name and surnames, NIF / DNI / card of residence, address, phone, image, number of Security Social / mutuality, card health, signature / footprint.

2nd personal characteristics: date of birth, physical characteristics, age, nationality, gender, place of birth.

3rd academic and professional: experience professional, training, qualifications.

4th job details: profession, job, history of the worker.

5 business information: business licenses, business and activities.

6 economic, financial and insurance: insurance, civil liability insurance policy.

7th transactions of goods and services: goods and services provided by the affected party.

8th circumstances social: not be contemplated.

9th data Commission criminal offence: data relating to administrative offences.

Treatment system: mixed.

(e) transfers of data of a personal nature and, where appropriate, data transfers that provide for third countries: not be expected.

f) organ of the Administration responsible for file: Ministry of Defense, under Secretary of Defense. Subdirectorate General of internal regime. General Affairs Unit.

(g) services or units to those who can exercise their rights of access, rectification, cancellation and opposition: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. General Secretariat. Paseo de la Castellana, 109; 28046 Madrid.

(h) measures of security with indication of the required level: mid-level.

11 file dependent on GSD's regime inside the MINISDEF civilian personnel.

(a) the file and the intended uses for the same purpose: control of records: licenses, leaves of absence, permissions, holiday, high and low medical, quoted staff disciplinary cases.

(b) people or groups on which is intends to obtain data of character personal or that are forced to supply them: employees officials, beneficiaries, demanding of employment.

(c) procedure of collection of the data of character personal: the own interested or his representative legal; sources accessible to the public.

(d) structure basic of the file and description of the data of character personal included in the same: description of them types of data: 1 data especially protected: health, affiliation Union and data derived of acts of violence of gender.

2nd identifying: name and surname, NIF / DNI, address, phone, image / voice, number of safety Social / mutual, card health, signature electronic, number of record personal, signature / footprint.

3rd features personal: age, nationality, date of birth, sex, place of birth, data of State civil, details of family, features physical, anthropometric.

4th circumstances social: licenses, permits, authorizations.

5 academic and professional: training, qualifications, experience professional.

6 details of the job: history of the worker, profession, positions of work.

7th economic, financial and of insurance: plans of pension, retirement, subsidies, benefits, insurance.

8 transactions of goods and services: compensation/allowances.

9th data Commission criminal offence: data relating to criminal and administrative offences.

Treatment system: mixed.

(e) transfers of data of a personal nature and, where appropriate, data transfers that provide for third countries: not be provide for transfers.

f) organ of the Administration responsible for file: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. General Affairs Unit.

(g) services or units to those who can exercise their rights of access, rectification, cancellation and opposition: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. General Secretariat. Paseo de la Castellana, 109; 28046 Madrid.

(h) measures of security with indication of the required level: high.

Secretariat General 12. File management of military personnel of the SDG's regime inside of the MINISDEF.

(a) purpose of the file and the intended uses for the same: management of military personnel of the SDG's regime inside and conservation of historical services leaves of the same, during the legally established time period.

(b) persons or groups over which is intended to obtain personal data or that they are obliged to provide them: military/beneficiaries of the collective insurance.

(c) the personal data collection procedure: the person concerned or his legal representative; official publications, for example, BOD, BOE.

(d) the basic structure of the file and a description of the personal data included therein: description of data types: 1 data: health, data derived from the acts of gender-based violence.

2nd Identificativos: name and surname, NIF/DNI, address, telephone, signature/mark, image/voice, Social Security number / mutuality, personal registration number, other call sign data: email, electronic signature, health card.

3rd personal characteristics: age, nationality, date of birth, sex, place of birth, marital status, family information, physical, anthropometric data.

4th social circumstances: licenses, permits, authorizations, military situation.

5 academics and professionals: training, diplomas; professional experience; training; professional associations.

6 details of employment: non-economic data of payroll, worker, profession, job history.

7th economic, financial and insurance.

8 transactions of goods and services: compensation/allowances.

9th data Commission criminal offence: data relating to criminal offences and administrative infringements related data.

Treatment system: mixed.

(e) transfers of data of a personal nature and, where appropriate, data transfers that provide for third countries: not be provide for transfers.

f) organ of the Administration responsible for file: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. Leaves of services section.

(g) services or units to those who can exercise their rights of access, rectification, cancellation and opposition: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. General Secretariat. Paseo de la Castellana, 109; 28046 Madrid.

(h) measures of security with indication of the required level: high.

13. file of the Central Organ of the MINISDEF social activities.

(a) purpose of the file and the intended uses for the same: management of the various cultural activities promoted in the field of the Central Organ of the MINISDEF and managed by the SDG's regime inside.

(b) persons or groups over which is intended to obtain personal data or that they are obliged to provide them: employee / military / civil servants, citizens or residents, family members participating in the activity.

(c) the personal data collection procedure: the person concerned or his legal representative.


(d) the basic structure of the file and a description of the personal data included therein: description of data types: 1 Identificativos: name and surname, NIF/DNI, phone, signature, other call sign data: email / license / vehicle.

2nd features personal: age; date of birth; sex.

3rd circumstances social: situation military; membership clubs.

4th details of the employment, profession, positions of work, phone.

5 transactions of goods and services.

Treatment system: mixed.

(e) transfers of data of character personal and, in its case, the transfers of data that is provide to countries third: not is expected assignments.

f) organ of the Administration responsible for file: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. Secretariat General.

(g) services or units to those who can exercise their rights of access, rectification, cancellation and opposition: Ministry of defence. Undersecretary of Defense. Subdirectorate General of internal regime. Secretariat General. Paseo de la Castellana, 109; 28046 Madrid.

(h) measures of security with indication of the required level: basic level.

ANNEX II relationship of files of data of character personal that are removed 1. File computerized of identification personal in the body Central.

2. automated control visits to the Central body.

3. automated file of the intervention Central weapons of the Ministry of defence.

4. file of medical service of the Central Organ of the Ministry of defence.

1. automated file of personal identification in the Central body.

Created by ORDER 75/1994, of 26 July, which regulates the files of automated processing of personal data in the Ministry of defence.

The information of this file is has included in the «file of identification of Personal of the organ Central of the Ministry of Defense ", referenced with the number 3 in the annex I of this order ministerial.

2. automated control visits to the Central body.

Created by ORDER 75/1994, of 26th of July.

The information in this file was included in the «file of Control of access of the headquarters Central of the Ministry of defence", referenced with the number 2 in annex I to this ministerial order.

3. automated file of the intervention Central weapons of the Ministry of defence.

Created by ORDER 75/1994, of 26th of July.

The information in this file was included in the «file of the intervention Central of weapons of the organ Center of the Ministry of defence», referenced with the number 1 in annex I of this ministerial order.

4. file of service medical of the organ Center of the Ministry of defence.

Created by order DEF/3026/2009 of 4 November, which are created and deleted files of data of a personal nature in the Centre of Informatics of management of of the air force, with the doctor of the body Central, in the Institute for the housing of the armed forces and units of the army.

The information in this file was included in the «file of the unit health of the organ Center of the Ministry of defence», referenced with the number 6 in annex I to this ministerial order.