In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter GDPR), and Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights, the Directorate General for the Regulation of Gambling (hereinafter DGOJ) is committed to complying with its obligation of secrecy regarding personal data and its duty to process them confidentially. To this end, it shall adopt the necessary measures to prevent their alteration, loss, or unauthorized processing or access.
Additionally, you are provided with the following information regarding the protection of personal data in the specific processing activity carried out by the DGOJ for the management of gambling access bans:
Who is the Data Controller for your data?
Dirección General de Ordenación del Juego
c/Atocha 3, 28012 MADRID, España
dgoj.dgeneral@ordenacionjuego.gob.es
Delegado de Protección de Datos - División de Tecnología y Servicios de la Información
C/Alcalá 27, 28014, MADRID.
dpd@consumo.gob.es
For what purpose will the DGOJ process your data?
The DGOJ will process the data registered in the General Registry of Gambling Access Bans (Registro General de Interdicciones de Acceso al Juego - RGIAJ), as well as the data you provide through this form and its accompanying information, to manage and enable your right to be prohibited from participating in gambling activities in cases where identification is required for participation. Furthermore, we will process this data for historical, statistical, and scientific purposes regarding gambling and its impact on society.
How long will my data be retained in the DGOJ Systems?
The DGOJ will retain your data for as long as necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and from the processing of the data. The provisions established in the archives and documentation regulations shall apply.
This period shall never exceed 10 years from the termination of the enabling titles, in accordance with the cases set forth in Article 9.5 of Law 13/2011 on Gambling Regulation, and provided that there are no proceedings in the investigation phase.
What legitimizes the DGOJ to process your data for the indicated purposes?
The processing of your data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the DGOJ (Article 6.1(e) of the GDPR), and it is necessary for compliance with a legal obligation to which the data controller is subject (Article 6.1(c) of the GDPR) through the following regulations:
-
Law 13/2011 on Gambling Regulation (Articles 21 and 24)
The data processed by the DGOJ are the minimum necessary to fulfill the intended purpose. Otherwise, we would be unable to monitor, investigate, supervise, control, and inspect online gambling activities with a minimum level of guarantees.
To which recipients will your data be disclosed?
Your personal data will be disclosed to the State Security Forces and Bodies and to the Executive Service of the Commission for the Prevention of Money Laundering and Monetary Offences (Article 24 of Law 13/2011 of May 27 on Gambling Regulation), as well as to courts, tribunals, and the AEAT (Spanish Tax Agency).
Additionally, for games offered within an international liquidity environment, data will be disclosed to the online gambling regulatory authorities of the different Member States (Articles 21 and 24 of Law 13/2011).
What are your rights when you provide us with your data?
- Any person has the right to obtain confirmation as to whether or not the DGOJ is processing personal data concerning them.
- Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data.
- You may request the restriction of processing of your data when you request that we retain them when they are no longer necessary for the purpose for which they were collected and prior to their erasure by the DGOJ, in which case we will only retain them for the exercise or defense of claims.
- You may effectively exercise these rights by submitting a request addressed to the Directorate General for the Regulation of Gambling, either electronically through this form
or in person through the network of registry assistance offices by submitting this application form (editable and printable version 
). - Likewise, you may lodge a complaint with the Spanish Data Protection Agency if you consider that you have not obtained satisfaction in the exercise of your rights, either through their web form (Spanish Data Protection Agency Complaint Form) or in person at c/ Jorge Juan 6, 28001 MADRID.
