In compliance with the provisions of Article 30 of Regulation (EU) 2016/679 General Data Protection Regulation (GDPR), Navantia maintains a Processing Activities Register (PAR) with the content required by the aforementioned article, documenting all processing activities within the entity.

For informative purposes, the processing activities concerning personal data carried out by Navantia are listed.

• Occupational accidents
• Naval commercial action, systems and services
• Energy commercial action
• Training actions
• Archiving
• Legal advice
• Audit
• Employee benefits
• Whistleblower channel
• Transfers of personal data for grants and subsidies
• Purchases of the naval construction business Units
• Communication and marketing
• Procurement
• Compliance
• Administrative department
• Tax affairs department
• Insurance and industrial risks division
• Treasury and financial operations division
• Collaborating company (Social Security)
• Professional disease
• Evolution and performance
• Staff management
• Logistics management
• Corporate management
• Management of requests and exercise of rights
• R&D+i
• Equality and gender policies
• International mobility
• Shipbuilding business
• Business services
• Business systems
• Turbines business
• Training practices and grants
• Occupational hazard prevention
• Data protection and information security
• Shipbuilding projects
• Register
• Institutional relations
• Industrial security
• Management systems
• Systems, support and technology
• U.N. offshore foundations and platforms
• U.N. offshore substations and platforms