In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter GDPR), and Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights, the Directorate General for Gambling Regulation (hereinafter DGOJ) undertakes to comply with its obligation of confidentiality regarding personal data and its duty to process such data confidentially. For this purpose, it will adopt the necessary measures to prevent their alteration, loss, unauthorized processing or access.
Additionally, the following information is provided regarding the protection of personal data in the specific processing carried out by the DGOJ for SIGMA – Global Betting Market Research Service:
Who is the controller responsible for processing your data?
Directorate General for Gambling Regulation
c/Atocha 3, 28012 MADRID, Spain
dgoj.dgeneral@ordenacionjuego.gob.es
Data Protection Officer: Technical Office of the Undersecretariat for Social Rights, Consumer Affairs and the 2030 Agenda.
Paseo del Prado 18, 28014, MADRID.
dpd@dsca.gob.es
For what purpose will the DGOJ process your data?
At the DGOJ, we will process your data for the prevention and detection of fraud in the sports betting market and the manipulation of such competitions, through the appropriate exchange of information among its participants.
How long will my data be retained in the DGOJ systems?
The DGOJ will retain your data for the period necessary to fulfill the purpose for which it was collected and to verify the irregularity of the conduct. The data will be deleted once it is established that it does not constitute suspicious activity, and in no case may it be retained for more than one year.
What legitimizes the DGOJ to process your data for the purposes indicated?
he processing of your data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority by the DGOJ (Article 6(1)(e) of the GDPR), and is necessary for compliance with a legal obligation to which it is subject as the data controller (Article 6(1)(c) of the GDPR), and for the performance of a contract (Article 6(1)(b) of the GDPR).
Regulations:
- Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights.
- Law 13/2011 of 27 May on the regulation of gambling.
- Law 11/2021 of 9 July on measures for the prevention of and fight against tax fraud.
- Organic Law 7/2021 of 26 May on the protection of personal data processed for the purposes of preventing, detecting, investigating and prosecuting criminal offences and the enforcement of criminal penalties.
- Legislative Royal Decree 2/2015 (Workers’ Statute).
To which recipients will your data be disclosed?
Your personal data may be disclosed to State Security Forces and Bodies.
What are your rights when you provide us with your data?
Any person has the right to obtain confirmation as to whether or not the DGOJ is processing personal data concerning them.- Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data.
- You may request the restriction of the processing of your data when:
- You request that we retain your data when it is no longer necessary for the purpose for which it was collected and prior to its deletion by the DGOJ; in this case, we will only retain it for the exercise or defense of legal claims.
- The accuracy of the data is contested, for a period enabling the DGOJ to verify its accuracy. - You may exercise these rights by submitting a request to the Directorate General for Gambling Regulation electronically, through this page.
or in person through the network of assistance offices for registrations by submitting this application form (editable and printable version) 
). - You may also lodge a complaint with the Spanish Data Protection Agency if you consider that your rights have not been satisfactorily exercised, either through its web form (Complaint Form of the Spanish Data Protection Agency), or in person at c/ Jorge Juan 6, 28001 MADRID.
