3.7. Origin

The data obtained are obtained from the following sources:

• From the interested party himself.
• From data provided by other Public Administrations.
• From Private Entities.
• From natural persons other than the interested party.
• From public records.
• From publicly accessible sources.

This data collection is carried out by legal mandate, either voluntarily or in the exercise of its functions via request.

The State Tax Administration Agency has no obligation to inform interested parties about the collection of data, based on article 14 of EU Regulation 2016/679, according to which, the information obligation will not apply, among others, in the following assumptions:

• the collection or communication of the data is expressly provided for by Union or Member State law to which the controller is subject or
• where the personal data must remain confidential on the basis of an obligation of professional secrecy governed by Union or Member State law, including a statutory obligation of secrecy.

In the case of the Tax Agency, the first assumption is covered by articles 93 and 94 of the General Tax Law and the second assumption is covered by article 95 of the General Tax Law, which establishes the confidential nature of data with tax significance.

In addition to what is described above, other treatments not associated with the management of the state tax and customs system are carried out, the origin of which is described in each of the processing activities of this type carried out by the AEAT and which are accessible in the register of processing activities.