European Parliament and Council Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and to the free flow of such data (GDPR).
Records of data processing activities
In accordance with Article 31.2 of Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights, we at Adif, in our capacity as Data Controller, or where appropriate, Data Processor, and within the proactive responsibility measures that we are implementing, we publish on our website all personal data processing activities carried out, including, among other information, who processes the data, for what purpose and what legal basis legitimises the processing.
Rights of interested parties
Requests to exercise data rights
The data subject shall directly exercise the rights of access, objection, rectification, erasure and restriction of their personal data before the data controller through the corresponding request forms.
Such request forms shall be available in all departments or addresses where data rights may be exercised, as well as online in the following sections of Adif's website: "About Adif" section, "Transparency" section.
Right to information
ADIF, as data controller, will adopt the necessary technical and organisational measures to ensure the security of the personal data provided, thus avoiding its alteration, loss, and unauthorized processing or access. ADIF will process personal data in accordance with the conditions set forth in this section and with the specific conditions of the corresponding service.
Also, users may exercise their rights of access, rectification, erasure, objection and restriction before ADIF in the manner provided by law, by sending their request to the following addressess: firstname.lastname@example.org or by post to 3, Sor Ángela de la Cruz Street, 7th floor, Madrid 28020 –with a copy of the data subject's ID card or passport.
You can exercise your data rights by sending a written communication to the "Data Controller" whose contact details can be found in the section "Who is responsible for the processing of your personal data?" Likewise, you can contact our Data Protection Officer if you wish to clarify any aspect related to the processing of your data, on the following e-mail address: email@example.com
In the event that you are not satisfied with the response provided by ADIF regarding your data rights, you may file a complaint with the Spanish Data Protection Agency (www.agpd.es) or any other supervisory authority competent in terms of data protection in the European Union.