​Data Protection

  • The State Tax Administration Agency (henceforth ‘Tax Agency') is responsible for all personal data processing carried out while executing its activities, unless otherwise stated in a specific procedure.

    Such processing will be carried out on the personal data of users of the services provided by the Tax Agency while conducting its activities, be they taxpayers, their representatives, civil servants or any other person using these services. We shall hereinafter refer to them as ‘interested parties'.

    In relation to the use of the Tax Agency's website, the interested parties are hereby informed that their personal data may only be collected for processing when it is appropriate, pertinent, and non-excessive with regard to the scope and the specific, explicit, and legitimate purposes for which it was collected.
    The Tax Agency carries out this processing in accordance with current regulations governing the protection of personal data, information security and the specific legislation regulating its activities and stating all the issues regarding the conditions under which the interested parties' data may be processed.

    In this regard, the necessary technical and organisational measures have been adopted against accidental or unlawful destruction, loss or alteration of the personal data transmitted, stored or processed in some other form, or any unauthorised disclosure or access to such data, which are likely to result in physical damages, whether tangible or intangible. The measures adopted take into account the state of the technology, the nature of the data and the risks to which they are exposed and shall be reviewed periodically to ensure adaptation to new situations or risk scenarios.

    In its role as the responsible entity for all personal data processing of the interested parties and in accordance with the information requirements referred to in Article 14 of Regulation (EU) 2016/679, the Tax Agency sets out the following basic information concerning this processing:

    Responsible Entity Directorate General of the State Tax Administration Agency (AEAT)
    Purpose Effective implementation of the state tax and customs system
    Legitimacy Compliance with a legal obligation
    Addressees Other public administrations at the national and international level
    Rights Right of access
    Right of rectification
    Right of deletion (Right to forget)
    Right of opposition
    Right of limited processing
    Right of data portability
    Applicability It shall apply to the person concerned, other Public Administrations, legal persons other than the interested party, private entities, public registries and sources available to the public.
    Consent In those cases where it is legally necessary to obtain the consent of the interested party, it shall be requested in accordance with the requirements stipulated by current regulations.
    Data Protection Officer The Tax Agency Data Protection Officer may be contacted via the following email address: dpd@correo.aeat.es

    More detailed information relating to this processing and the procedure for exercising your rights can be found on the following link:

  • Data protection information for the data subject
  • Record of processing activity
  • Exercising of rights