In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter GDPR), and Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights, the Directorate General for Gambling Regulation (hereinafter DGOJ) undertakes to comply with its obligation of confidentiality with regard to personal data and its duty to process them confidentially. To this end, it will adopt the necessary measures to prevent their alteration, loss, unauthorized processing or access.
Additionally, the following information is provided regarding the protection of personal data in the specific processing carried out by the DGOJ to enable and manage the granting of subsidies for the development of research activities related to the prevention of gambling disorders:
Who is the controller responsible for processing your data?
Directorate General for Gambling Regulation
c/Atocha 3, 28012 MADRID, Spain
dgoj.dgeneral@ordenacionjuego.gob.es
Data Protection Officer: Technical Office of the Undersecretariat for Social Rights, Consumer Affairs and the 2030 Agenda.
Paseo del Prado 18, 28014, MADRID.
dpd@dsca.gob.es
For what purpose will the DGOJ process your data?
At the DGOJ, we will process your data for the processing and resolution of applications for the granting of subsidies aimed at the development of research activities related to the prevention of gambling disorders, the effects derived from such disorders, or the risks associated with this activity.
How long will my data be retained in the DGOJ systems?
The DGOJ will retain your data for as long as necessary to fulfill the purpose for which it was collected and to determine any potential liabilities that may arise from that purpose and from the processing of the data. The provisions set out in the regulations on archives and documentation will apply.
This period shall never exceed 10 years after the final resolution of the last application or procedure carried out with the DGOJ.
What legitimizes the DGOJ to process your data for the purposes indicated?
The processing of your data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority by the DGOJ (Article 6(1)(e) of the GDPR), and is necessary for compliance with a legal obligation to which it is subject as the data controller (Article 6(1)(c) of the GDPR).
Regulations:
- Law 38/2003 of 17 November, General Law on Subsidies.
- Order CSM/472/2022 of 24 May, which establishes the regulatory bases for the granting of subsidies, under a competitive procedure, for the development of research activities related to the prevention of gambling disorders, the effects derived from such disorders, or the risks associated with this activity.
- The data provided through this form are the minimum strictly necessary to process and respond to your request. Otherwise, we will not be able to process it.
- Order of 13 June 2022 approving the call for the aforementioned subsidies for the 2022 financial year.
To which recipients will your data be disclosed?
Your personal data may be disclosed to independent experts, whether national or international, technical expert committees, or to the State Research Agency or other national or international evaluation agencies, in accordance with the provisions of Article 12 of Order CSM/472/2022 of 24 May, which establishes the regulatory bases for the granting of subsidies, under a competitive procedure, for the development of research activities related to the prevention of gambling disorders, the effects derived from such disorders, or the risks associated with this activity, and Article 13 of the Order of 13 June 2022 approving the call for these subsidies for the 2022 financial year.
What are your rights when you provide us with your data?
- Any person has the right to obtain confirmation as to whether or not the DGOJ is processing personal data concerning them.
- Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data.
- You may request the restriction of the processing of your data when:
- You request that we retain your data when it is no longer necessary for the purpose for which it was collected and prior to its deletion by the DGOJ; in this case, we will only retain it for the exercise or defense of legal claims.
- The accuracy of the data is contested, for a period enabling the DGOJ to verify its accuracy. - ou may exercise these rights by submitting a request to the Directorate General for Gambling Regulation electronically, through this page.
or in person through the network of assistance offices for registrations by submitting this application form (editable and printable version) 
). - You may also lodge a complaint with the Spanish Data Protection Agency if you consider that your rights have not been satisfactorily exercised, either through its web form (Complaint Form of the Spanish Data Protection Agency), or in person at c/ Jorge Juan 6, 28001 MADRID.
