5. Record of processing activity

He Article 30 of the Regulation ( EU ) 2016/679 It establishes that the data controller will keep a record of the processing activities carried out under his responsibility. This record must contain all the information indicated below:

the name and contact details of the controller and, where applicable, the joint controller, the controller's representative, and the data protection officer;
the purpose of the data processing;
a description of the categories of data subjects and the categories of personal data;
the categories of recipients to whom the personal data have been or will be disclosed, including recipients in third countries or international organizations;
where applicable, transfers of personal data to a third country or an international organisation, including the identification of that third country or international organisation and, in the case of transfers referred to in Article 49(1), second subparagraph, documentation of appropriate safeguards;
where possible, the planned timeframes for the deletion of the different categories of data;
where possible, a general description of the technical and organizational security measures referred to in Article 32(1).

Furthermore, Public Administrations must make public the inventory of their processing activities, making it accessible by electronic means, as established in article 31.2 of Organic Law 3/2018, of December 5, on the Protection of Personal Data and the guarantee of digital rights.

Please note that the Tax Agency acts as the data controller for all processing activities specified in the RAT with the exception of the following processing activities in which it acts as the data processor:

Treatment 5.5 Integrated Collection System only in the case of non-tax debts managed by Ministerial Departments
Treatment 5.13 Identification System Registration Cl@ve
Treatment 5.7 Neutral Point Embargoes

DELETION PERIOD
Regarding the planned deletion periods, please note that these periods are those specified in the "Retention Period" section included in the "Detailed Information". In the event that a treatment must have a different timeframe, that timeframe will be described within the specific treatment.

In accordance with the above, the personal data processing activities carried out by the Tax Agency are listed below.