Archiving
GDPR Article 6(1)(c): the processing is necessary to comply with a legal obligation applicable to the data controller:
- Public Sector Act (Ley 40/2015, de 1 de octubre).
- Spanish Historical Heritage Act.
Article 6(1)(f) GDPR: processing is necessary for the purposes of the legitimate interests pursued by the controller.
(*) Foreigner identification number, passport number or residence card number. (**) Handwritten or electronic.
Security measures corresponding to Schedule A of UNE-EN/IEC 27001 - Information Security Management Systems.