Treatment activity log
of the Illustrious Bar Association of Madrid

Treatment:

ASSOCIATIVE ACTIVITIES
Purposes – Membership, management of the legally foreseen functions and sending of associative information.
– Charging the Bar Association fee.
– Elaboration of the lists of members and publication of data in a single window.
– Sending information related to the exercise of the profession or of professional interest.
– Management of service provision by the Bar Association.
– Management of insurance associated with membership.
– Issuing opinions on fees in cost assessment proceedings.
(+info)
Legitimacy– GDPR: 6.1(a) Consent of the interested party
– GDPR: 6.1(e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in the controller
– GDPR: 6.1(c) Processing necessary for compliance with a legal obligation applicable to the data controller.
– GDPR: 6.1(f) Satisfaction of legitimate interests pursued by the controller.
– Act 2/1974, of 13 February, on Professional Associations and Act 19/1997, of 11 July, on Professional Associations of the Community of Madrid
(+info)
Assignments or communications – Judicial Bodies.
– Administration of Justice and related entities.
– General Council of Spanish Lawyers  and Council of Bar Associations of the Community of Madrid.
– Publication of contact details in the one-stop window.
– Professional Associations and Trade Registers.
– If authorised, Mutual Funds and Insurance Companies.
(+info)
Origin The interested party or their legal representative.
(+info)
Version 2018.5
(+info) https://web.icam.es/bucket/RGPD/actividadcolegial.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html
BANKRUPTCY TRUSTEES
Purposes Management of the list of Bankruptcy Trustees
(+info)
Legitimacy – GDPR: 6.1(a) Consent of the interested party
– GDPR: 6.1(e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in the controller
– GDPR: 6.1(c) Processing necessary for compliance with a legal obligation applicable to the data controller.
– Law 22/2003, of 9 July, on Bankruptcy.
(+info)
Assignments or communications– Judicial Bodies.
– Administration of Justice
– Publication and distribution of the list.
(+info)
Origin The interested party.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/administradoresconcursales.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html
AGENDA AND INSTITUTIONAL RELATIONS
Purposes Manage the institutional agenda, institutional and communication relations
(+info)
Legitimacy – GDPR: 6.1(e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in the controller
– GDPR: 6.1(f) Processing is necessary for the purposes of satisfying the legitimate interests pursued by the controller or by a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject that require the protection of personal data.
(+info)
Assignments or communicationsWhere appropriate, communications may be made to persons related to the institutional or communication activity of the Association.
(+info)
Origin The data to be processed by the Association are those provided by the data subject or his legal representative, or those obtained from sources accessible to the public.
(+info)
Version 2018.9
(+info)https://web.icam.es/bucke/RGPD/agendayrelacionesinstitucionales.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

EMPLOYMENT AREA (Applicants)
Purposes Job board management.
(+info)
Legitimacy GDPR: 6.1(a) Consent of the interested party
(+info)
Assignments or communications Job providers.
(+info)
Origin – The interested party.
– Job providers.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/areadeempleo.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

EMPLOYMENT AREA (providers)
Purposes Management of the employment portal and the job board.
(+info)
Legitimacy GDPR: 6.1(a) Consent of the interested party
(+info)
Assignments or communications – Publication in job portal.
– Applicants
(+info)
Origin – The interested party.
– Applicants.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/ofertantesempleo.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html
FREE LEGAL ASSISTANCE
Purposes Management of the Free Legal Assistance service.
(+info)
Legitimacy – GDPR: 6.1(a) Consent of the interested party
– GDPR: 6.1(e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in the controller
– GDPR: 6.1(c) Processing necessary for compliance with a legal obligation applicable to the data controller.
– Act 1/1996 of 10 January 1996 on free legal aid.
– Act 39/2015, of 1 October, on the Common Administrative Procedure of Public Administrations.
– Act 2/1974, of 13 February, on Professional Associations and Act 19/1997, of 11 July, on Professional Associations of the Community of Madrid
(+info)
Assignments or communications – Lawyers appointed for assistance, care or defence.
– Judicial Bodies.
– Administration of Justice and Free Legal Assistance Committees.
– Attorney Association.
(+info)
Origin – The interested party or their legal representative.
– As a result of the management of the service and administrative or judicial procedures, data communicated by third parties (lawyers, public administrations and courts) may be processed
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/SolicitudAJG.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html
PUBLIC ATTENTION SERVICE
Purposes Query or request management.
(+info)
Legitimacy – GDPR: 6.1(a) Consent of the interested party
– GDPR: 6.1(c) Processing necessary for compliance with a legal obligation applicable to the data controller.
– GDPR: 6.1(e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in the controller – Act 39/2015, of 1 October, on the Common Administrative Procedure of Public Administrations.
– Act 2/1974, of 13 February, on Professional Associations and Act 19/1997, of 11 July, on Professional Associations of the Community of Madrid
(+info)
Assignments or communications Communications necessary for the processing of the procedure to which the application gives rise
(+info)
Origin – The interested party or their legal representative.
– Other parties to the proceedings to which the application gives rise
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/atencionalciudadano-ventanilla.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html
TRAINING SCHOLARSHIPS
Purposes Management of training scholarships.
(+info)
Legitimacy GDPR: 6.1(a) Consent of the interested party
(+info)
Assignments or communications – Scholarship providers or Entities participating in the scholarship programs.
– Law firms and Bar Associations, or similar international entities.
(+info)
Origin The interested party.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/becasformativas.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

PROFESSIONAL INITIATION SCHOLARSHIPS
Purposes Management of the selection process for the award of the Professional Initiation Scholarships and of the relationship of the School with the selected scholars who participate in the program.
(+info)
Legitimacy – GDPR: 6.1(a) Consent of the interested party
– GDPR: 6.1(c) Processing necessary for compliance with a legal obligation applicable to the data controller.
– Act 58/2003 of 17 December, General Taxation
(+info)
Assignments or communications In the case of the selected scholars:
– Tax administration.
– Bank entities.
(+info)
Origin The interested party, and those coming from the selection process and the development of the scholarship.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/becasiniciacion.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html
STUDY CENTRE (students)
Purposes Management of participation in courses delivered by the Study Centre.
(+info)
Legitimacy GDPR: 6.1(a) Consent of the interested party
(+info)
Assignments or communications Directors, teachers or speakers of the courses.
(+info)
Origin – The interested party.
– Directors, teachers or speakers of the courses..
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/centrodeestudios-alumnos.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html
STUDY CENTRE (speakers)
Purposes Management and dissemination of participation in courses delivered by the Study Centre.
(+info)
Legitimacy GDPR: 6.1(a) Consent of the interested party
(+info)
Assignments or communications – Students.
– Directors, teachers, other speakers.
– Publication on web and brochures.
– Third parties to justify subsidies.
(+info)
Origin – The interested party.
– Course directors.
– Students or course attendants.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/centrodeestudios-ponentes.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html
ClubICAM
Purposes Management of the ClubICAM subscription, sending of informative, advertising or promotional communications, including the possible elaboration of profiles to adapt the offers to the subscribers.
(+info)
Legitimacy GDPR: 6.1(a) Consent of the interested party
(+info)
Assignments or communications They are not foreseen.
(+info)
Origin The interested party.
(+info)
Version 2019.1
(+info)https://web.icam.es/bucket/RGPD/clubicam.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html
CLAIM COMMUNICATION
Purposes Management of Civil Liability claim communication, claim control and insurance quality.
(+info)
Legitimacy GDPR: 6.1(a) Consent of the interested party
(+info)
Assignments or communications– Insurance brokers or mediators.
– Insurance companies.
(+info)
Origin The interested party.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/siniestrorc.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html
CONFIRMING FOR LEGAL AID LAWYER
PurposesManagement of the service of the self-collection system for the advance of the payments corresponding to the actions of Free Justice/Legal Aid Scheme that have been justified and certified (confirming).
(+info)
Legitimacy GDPR: 6.1(a) Consent of the interested party
(+info)
Assignments or communications Bank entities.
(+info)
Origin The interested party.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/confirmingabogadoto.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html
ACCOUNTANTS-AUDITORS
Purposes Management of the list of Accountants-Auditors.
(+info)
Legitimacy – GDPR: 6.1(a) Consent of the interested party
– GDPR: 6.1(e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in the controller
– GDPR: 6.1(c) Processing necessary for compliance with a legal obligation applicable to the data controller.
– Civil Prosecution Act, of 7 January 2000.
– Notaries’ Act of 28 May 1862. Under Act 15/2015 of 2 July.
(+info)
Assignments or communications– Administration of Justice and Judicial Bodies.
– General Council of Notaries, Notary Schools, Notaries.
– Publication and distribution of the list.
(+info)
Origin The interested party.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/contadorespartidores.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html
ARBITRATION COURT
PurposesManagement of the Court of Arbitration and the appointment of arbitrators
(+info)
Legitimacy GDPR: 6.1(a) Consent of the interested party
(+info)
Assignments or communications – Parties to arbitration proceedings.
– Publication of the website of the Bar Association.
(+info)
Origin The interested party.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/cortedearbitraje.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html
COMPLIANCE WITH GDPR OBLIGATIONS
Purposes – Attention to the rights of persons (art. 5 RGPD).
– Notification of personal data security breaches to the supervisory authority and to the data subjects (Articles 33 and 34 GPRS)
– Attention to queries from interested parties by the Data Protection Delegate of the Bar Association (art. 38.4 of the RGPD).
(+info)
Legitimacy – GDPR: 6.1(c) Processing necessary for compliance with a legal obligation applicable to the data controller.
– General Data Protection Regulation.
(+info)
Assignments or communications They are not foreseen.
(+info)
Origin The interested party.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/cumplimientorgpd.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html
DEFENCE OF THE LEGAL PROFESSION
Purposes Management of the defence service of the legal profession and of the incidents reported regarding the functioning of the Public Administration or the Judicial Bodies.
(+info)
Legitimacy– GDPR: 6.1(a) Consent of the interested party
– GDPR: 6.1(c) Processing necessary for compliance with a legal obligation applicable to the data controller.
(+info)
Assignments or communications If authorised, Public Administration with competence in the Administration of Justice; Judicial Bodies, Public Prosecutor’s Office, or other Public Administrations.
(+info)
Origin The interested party or their legal representative.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/defensaabogacia.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

DEONTOLOGY
Purposes Management of deontological complaints and processing of the corresponding procedures.
(+info)
Legitimacy – GDPR: 6.1(a) Consent of the interested party
– GDPR: 6.1(e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in the controller
– GDPR: 6.1(c) Processing necessary for compliance with a legal obligation applicable to the data controller.
– Act 39/2015, of 1 October, on the Common Administrative Procedure of Public Administrations.
– Act 2/1974, of 13 February, on Professional Associations and Act 19/1997, of 11 July, on Professional Associations of the Community of Madrid
(+info)
Assignments or communications – Defendant and legitimately interested in the procedure to which the complaint gives rise,
– Council of Bar Associations of the Community of Madrid, Courts and Tribunals.
(+info)
Origin – The interested party.
– Other parties to the proceedings to which the complaint gives rise
– Third persons, as results offered by the evidence in the procedure.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/deontologia.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

ESPACIO ABOGACÍA
Purposes-Management of application and provision of services by the Bar Association in Espacio Abogacía, consisting of the reservation and management of work spaces.
– Management of invoicing and collection of services.
(+info)
Legitimacy – GDPR: 6.1(a) Consent of the interested party
– GDPR: 6.1(b) Performance of a contract whereto the interested party is a party.
– GDPR: 6.1(c) Processing necessary for compliance with a legal obligation applicable to the data controller.
– Act 58/2003 of 17 December, General Taxation.
(+info)
Assignments or communications – Bank entities.
– Tax administration.
(+info)
Origin The interested party.
(+info)
Version 2019.03
(+info)https://web.icam.es/bucket/RGPD/espacioabogacia.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

CERTIFICATE MANAGEMENT BEFORE THE CENTRAL CIVIL REGISTRATION
Purposes Certificate management before the Central Civil Registry.
(+info)
Legitimacy – GDPR: 6.1(a) The interested party has given their consent to the processing of their personal data for one or more specific purposes.
– GDPR: 6.1(f) Processing is necessary for the purposes of satisfying the legitimate interests pursued by the controller or by a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
(+info)
Assignments or communications Central Civil Registry (Ministry of Justice).
(+info)
Origin The interested party or their legal representative.
(+info)
Version 2019.05
(+info)https://web.icam.es/bucket/RGPD/gestionCRC.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

CONGRESS, CONFERENCE AND EVENT MANAGEMENT
Purposes Management of the participation in activities and events organised by the Bar (such as, among others, congresses or conferences) including carrying out quality or satisfaction surveys on the activities or events in which it participates and the communication of its identification data to directors or speakers of the events in which it registers.
(+info)
Legitimacy – GDPR: 6.1(a) Consent of the interested party
– GDPR: 6.1(b) Performance of a contract whereto the interested party is a party.
(+info)
Assignments or communications Directors or speakers of the activities or events.
(+info)
Origin The interested party.
(+info)
Version 2019.01
(+info)https://web.icam.es/bucket/RGPD/gestioncongresoseventos.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

CONTRACTUAL AND AGREEMENT MANAGEMENT
Purposes – Management of the contractual and conventional activity of the Bar Association.
– Management of the relationship with service or product providers.
(+info)
Legitimacy – GDPR: 6.1(a) Consent of the interested party
– GDPR: 6.1(c) Processing necessary for compliance with a legal obligation applicable to the data controller.
– GDPR: 6.1(b) The processing is necessary for the execution of a contract to which the data subject is a party or for the implementation at the request of the data subject of pre-contractual measures.
– Act 58/2003 of 17 December, General Taxation.
(+info)
Assignments or communications – Bank entities.
– Tax administration.
(+info)
Origin The interested party.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/provedores.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

GENERAL MANAGEMENT OF SPEAKERS
Purposes Management and dissemination of participation in conferences, activities and events organised by the Bar Association.
(+info)
Legitimacy – GDPR: 6.1(a) Consent of the interested party
– GDPR: 6.1(b) Where appropriate, execution of a contract to which the interested party is a party.
(+info)
Assignments or communications – Participants in conferences and events.
– Directors or organisers of the conferences, activities or events. Other speakers
– Publication in brochures, media and publications of the Bar Association, website, social networks…
(+info)
Origin The interested party.
(+info)
Version 2019.1
(+info)https://web.icam.es/bucket/RGPD/restoponentes.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

PUBLICATION MANAGEMENT
Purposes Management of publications.
(+info)
Legitimacy GDPR: 6.1(a) Consent of the interested party
(+info)
Assignments or communications Publication of personal data and articles, works or collaborations, in publications, media, and social networks of the Bar Association
(+info)
Origin The interested party.
(+info)
Version 2018.7
(+info)https://web.icam.es/bucket/RGPD/gestionpublicaciones.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

AWARD MANAGEMENT
Purposes Management of awards.
(+info)
Legitimacy GDPR: 6.1(a) Consent of the interested party
(+info)
Assignments or communications– Publication of personal data and award-winning works on the Bar’s website, media or publications and social networks.
– Media
(+info)
Origin The interested party.
(+info)
Version 2018.7
(+info)https://web.icam.es/bucket/RGPD/gestionpremios.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

LAWYER DEGREE MANAGEMENT
Purposes – Management of the delivery of the lawyer degree
(+info)
Legitimacy – GDPR: 6.1(e) GDPR: The processing is necessary for the fulfilment of a mission carried out in the public interest or in the exercise of public powers conferred on the controller, in relation to Law 2/1974, of 13 February, on Professional Associations (articles 1.3 and 5.b).
(+info)
Assignments or communications Ministry of Justice.
(+info)
Origin Ministry of Justice.
The interested party.
(+info)
Version 2019.03
(+info)https://web.icam.es/bucket/RGPD/tituloabogado.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

SALES MANAGEMENT AND PAYMENT SERVICES
Purposes – Product procurement and delivery management.
– Management of payment services and their provision
Management of subscriptions to publications and delivery thereof
(+info)
Legitimacy – GDPR: 6.1(a) Consent of the interested party
– GDPR: 6.1(b) Performance of a contract whereto the interested party is a party.
(+info)
Assignments or communications They are not foreseen.
(+info)
Origin The interested party.
(+info)
Version 2018.11
(+info)https://web.icam.es/bucket/RGPD/gestionventaspago.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

PUBLICATION SUBSCRIPTION MANAGEMENT
Purposes Management of publication subscriptions and delivery thereof.
(+info)
Legitimacy GDPR: 6.1(a) Consent of the interested party
(+info)
Assignments or communications They are not foreseen.
(+info)
Origin The interested party.
(+info)
Version 2018.11
(+info)https://web.icam.es/bucket/RGPD/gestionsuscripcionpublicaciones.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

QUALIFICATIONS
Purposes Management of Qualifications for Own or Family-related Affairs.
(+info)
Legitimacy GDPR: The interested party or their legal representative.
(+info)
Assignments or communications Judicial Bodies.
(+info)
Origin The interested party or their legal representative.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/habilitaciones.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

MEDIAICAM (request for mediation)
Purposes Management of the mediation request.
(+info)
Legitimacy– GDPR: 6.1(a) Consent of the interested party
– GDPR: 6.1(e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in the controller
– GDPR: 6.1(c) Processing necessary for compliance with a legal obligation applicable to the data controller.
– Law 5/2012, of July 6, on mediation in civil and commercial matters.
– Act 2/1974 of 13 February, on Professional Associations
(+info)
Assignments or communications – Mediators.
– Party in respect of which mediation is requested
(+info)
Origin – The interested party or their legal representative.
– Other parties to the proceedings to which the mediation request gives rise
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/mediaicam-ciudadano.pdf
https://web.icam.es/bucket/RGPD/mediaicam-ciudadano-terceraparte.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

MEDIAICAM (registration as a mediator)
Purposes – Management of the mediation institution mediaICAM, the census of mediators, and the mediation procedures
– Sending information related to mediation.
(+info)
Legitimacy – GDPR: 6.1(a) Consent of the interested party
– GDPR: 6.1(e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in the controller
– GDPR: 6.1(c) Processing necessary for compliance with a legal obligation applicable to the data controller.
– Law 5/2012, of July 6, on mediation in civil and commercial matters.
– Act 2/1974 of 13 February, on Professional Associations
(+info)
Assignments or communications – Parties to mediation procedures.
– Publication of identity, training, speciality and experience in web page.
– Registry of Mediators and Mediation Institutions (Ministry of Justice)(Ministerio de Justicia).
(+info)
Origin The interested party
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/mediaicam-solicitud.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

BODIES TO THE BAR ASSOCIATION
Purposes – Management of the bodies to the Bar Association and their secretariat, including the calling of meetings and the preparation and filing of minutes.
– Communication of data on the composition of the Governing Board to the competent Registries and Public Administrations.
– Audio and video recording for the preparation of minutes and to ensure the safety and proper conduct of meetings of collegiate bodies.
– Management of the mediation institution mediaICAM, the census of mediators, and mediation procedures.
(+info)
Legitimacy – GDPR: 6.1(a) Consent of the interested party
– GDPR: 6.1(e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in the controller
– GDPR: 6.1(c) Processing necessary for compliance with a legal obligation applicable to the data controller.
– GDPR: 6.1(f) Processing is necessary for the purposes of satisfying the legitimate interests pursued by the controller or by a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject that require the protection of personal data.
– General Statute of the Spanish Bar.
– Act 19/2013, of 9 December, on transparency, access to public information and good governance.
– Act 39/2015, of 1 October, on the Common Administrative Procedure of Public Administrations.
– Act 2/1974, of 13 February, on Professional Associations and Act 19/1997, of 11 July, on Professional Associations of the Community of Madrid
(+info)
Assignments or communications – Publication of identification data on the Bar Association website and its one-stop window.
– Registry of Professional Associations of the Community of Madrid.
– General Council of Spanish Lawyers and Council of Bar Associations of the Community of Madrid.
– Distribution of minutes of collegiate bodies to legitimate stakeholders.
(+info)
Origin – The interested party.
– Minutes to which data is incorporated
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/organoscolegiales.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

SECTION SPEAKERS
Purposes Management and dissemination of participation in conferences, activities and events organised by the Sections of the Bar Association.
(+info)
Legitimacy GDPR: 6.1(a) Consent of the interested party
(+info)
Assignments or communications – Participants in conferences and events.
– Presidents of the Sections, collaborators of these.
– Directors or organisers of the conferences and events. Other speakers
– Publication in brochures, media and publications of the Bar Association, website, social networks, etc.
(+info)
Origin The interested party.
(+info)
Version 2018.9
(+info)https://web.icam.es/bucket/RGPD/ponentesecciones.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

SECTION PRESIDENT
Purposes Management of the presidency of the corresponding Section and the organisation of the Section’s activity.
(+info)
Legitimacy GDPR: 6.1(a) Consent of the interested party
(+info)
Assignments or communications – Members of the section.
– Organisers, speakers and participants to events organised by the section.
– Publication of CVs.
(+info)
Origin The interested party.
(+info)
Version 2018.9
(+info)https://web.icam.es/bucket/RGPD/ presidentesecciones.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

COMPLIANCE PROTOCOL
Purposes Management of the Compliance Protocol.
(+info)
Legitimacy GDPR: The interested party or their legal representative.
(+info)
Assignments or communications – Judicial Bodies.
– Prosecuting Authority.
– Defendant.
(+info)
Origin The interested party.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/protocolodeconformidades.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

REGISTER
Purposes Management of the register of incoming and outgoing documents of the Bar Association, under the terms provided for in Article 16 of Law 39/2015, of 1 October, on the Common Administrative Procedure of Public Administrations.
(+info)
Legitimacy – GDPR: 6.1(c) Processing necessary for compliance with a legal obligation applicable to the data controller.
– Act 39/2015, of 1 October, on the Common Administrative Procedure of Public Administrations.
(+info)
Assignments or communications – Spanish Data Protection Agency.
(+info)
Origin The interested party or their legal representative.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/registro.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

HUMAN RESOURCES
Purposes – Employment and human resources management.
– Compliance with legal labour, social security and tax obligations arising from the employment relationship.
(+info)
Legitimacy – GDPR: 6.1(b) Treatment necessary for the execution of a contract to which the person concerned is a party or for the application at his request of pre-contractual measures
– GDPR: 6.1(c) Processing necessary for compliance with a legal obligation applicable to the data controller.
– Royal Legislative Decree 2/2015, of 23 October, approving the Consolidated Text of the Statute of Workers’ Rights.
– Royal Legislative Decree 8/2015, of 30 October, approving the Consolidated Text of the General Law on Social Security.
– Act 58/2003 of 17 December, General Taxation.
(+info)
Assignments or communications – Tax administration.
– Social Security and Labour Administration.
– Bank entities.
– Mutual Company of accidents and occupational diseases.
(+info)
Origin The interested party.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/rrhh.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

SOCIAL RESPONSABILITY
Purposes Management of:
– collaboration or participation in social responsibility projects of the legal profession (RSA) and
– grants for RSA projects.
(+info)
Legitimacy GDPR: 6.1(a) Consent of the interested party
(+info)
Assignments or communications – Associations, foundations or other organisations that are going to direct, participate or manage projects.
(+info)
Origin – The interested party.
– Associations, foundations or other organisations that direct, participate in or manage projects.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/rsa.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

SECTIONS
Purposes – Management of participation in Sections and in the events organised.
– Information about their activities and matters of professional interest of the Section.
(+info)
Legitimacy GDPR: 6.1(a) Consent of the interested party.
(+info)
Assignments or communications – Members of the section.
– If authorised, organisers, speakers and participants to events organised by the section.
(+info)
Origin The interested party.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/secciones.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

SECURITY (access control)
Purposes Access control management to ensure the safety of people, goods and facilities.
(+info)
Legitimacy GDPR: 6.1(f) The processing is necessary for the satisfaction of legitimate interests pursued by the controller.
(+info)
Assignments or communicationsWhere appropriate, Law Enforcement Authorities, judicial bodies, Prosecuting Authority.
(+info)
Origin The interested party.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/controldeacceso.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

PROFESSIONAL COMPANIES
Purposes Management of Registry of Professional Companies.
(+info)
Legitimacy – GDPR: 6.1(a) Consent of the interested party.
– GDPR: 6.1(e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in the controller
– GDPR: 6.1(c) Processing necessary for compliance with a legal obligation applicable to the data controller.
– Act 2/2007 of 15 March, on Professional Companies.
– Act 2/1974, of 13 February, on Professional Associations and Act 19/1997, of 11 July, on Professional Associations of the Community of Madrid
– Act 39/2015, of 1 October, on the Common Administrative Procedure of Public Administrations.
(+info)
Assignments or communications – Ministry of Justice; Madrid’s community.
– Mercantile Registries.
– Other professional associations.
– Administrators and representatives of the professional company.
– Publication in the one-stop window of the Bar Association.
(+info)
Origin – The interested party.
– Mercantile Registries.
– Other professional associations.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/sociedadesprofesionales.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

LEGAL ADVICE SERVICE
Purposes Management of the Legal Advice Appointment Service.
(+info)
Legitimacy – GDPR: 6.1(a) Consent of the interested party
– Act 1/1996 of 10 January 1996 on free legal aid.
– Act 39/2015, of 1 October, on the Common Administrative Procedure of Public Administrations.
(+info)
Assignments or communications They are not foreseen
(+info)
Origin The interested party.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/SolicitudSOJ.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

LEGAL SERVICES
Purposes Management of the legal advice and defence of the rights and interests of the Corporation and the profession, before the Administrations or the jurisdiction.
(+info)
Legitimacy– GDPR: 6.1(f) The processing is necessary for the satisfaction of legitimate interests pursued by the controller. Right to defence and effective judicial protection (art. 24 Spanish Constitution) and procedural laws.
– GDPR: 6.1(c) Processing necessary for compliance with a legal obligation applicable to the data controller. Act 2/1974 of 13 February, on Professional Associations.
– GDPR: 6.1(b) Regarding professionals who provide services to the Bar Association. Where appropriate, execution of a contract to which the interested party is a party.
(+info)
Assignments or communications – Judicial Bodies.
– Public Administrations.
– Attorneys.
– Notaries Public.
– Other professionals involved in the procedures (experts).
(+info)
Origin – The interested party.
– Third parties.
– Judicial Bodies.
– Public Administrations.
– Publicly accessible sources.
(+info)
Version 2018.11
(+info)https://web.icam.es/bucket/RGPD/serviciosjuridicos.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

NON-MEMBER SUBSCRIBERS
Purposes Subscriptions to the Bar’s newsletters.
(+info)
Legitimacy GDPR: 6.1(a) Consent of the interested party
(+info)
Assignments or communications They are not foreseen.
(+info)
Origin The interested party.
(+info)
Version 2018.7
(+info)https://web.icam.es/bucket/RGPD/suscriptoresnc.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

TRANSPARENCY AND ACCESS TO INFORMATION
Purposes To register and process requests for access to information made by citizens under Law 19/2013 of 9 December on transparency, access to information and good governance.
(+info)
Legitimacy– GDPR: 6.1(c) Processing necessary for compliance with a legal obligation applicable to the data controller.
– General Data Protection Regulation.
(+info)
Assignments or communications They are not foreseen.
(+info)
Origin The interested party.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/transparenciayaccesoalainformacion.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

LEGAL AID
Purposes Management of the Legal Aid Scheme and the Free Legal Assistance service.
(+info)
Legitimacy – GDPR: 6.1(a) Consent of the interested party
– GDPR: 6.1(e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in the controller
– GDPR: 6.1(c) Processing necessary for compliance with a legal obligation applicable to the data controller.
– Act 1/1996 of 10 January 1996 on free legal aid.
– Act 39/2015, of 1 October, on the Common Administrative Procedure of Public Administrations.
– Act 2/1974, of 13 February, on Professional Associations and Act 19/1997, of 11 July, on Professional Associations of the Community of Madrid
(+info)
Assignments or communications – Judicial Bodies.
– Administration of Justice and Free Legal Assistance Committees.
– Attorney Association.
– Persons defended.
– Publication of contact details in the one-stop window.
– Publicity of the lists of lawyers on-call.
(+info)
Origin– The interested party or their legal representative.
– As a result of the management of the service and administrative or judicial procedures, data communicated by third parties (individuals, public administrations and courts) may be processed
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/altaletradoturnodeoficio.pdf
https://web.icam.es/bucket/RGPD/turnodeoficio.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

VIDEO SURVEILLANCE
Purposes Management of video surveillance to ensure the safety of people, goods and facilities
(+info)
Legitimacy GDPR: 6.1(f) The processing is necessary for the satisfaction of legitimate interests pursued by the controller.
(+info)
Assignments or communications Where appropriate, Law Enforcement Authorities, judicial bodies, Prosecuting Authority.
(+info)
Origin The interested party.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/videovigilancia.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html

PRISON SLIPS
Purposes Prison slip management, for lawyer-inmate communication.
(+info)
Legitimacy– GDPR: 6.1(a) Consent of the interested party
– GDPR: 6.1(e) Processing necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in the controller
(+info)
Assignments or communications Public Administration with competences in Prisons.
(+info)
Origin The interested party or their legal representative.
(+info)
Version 2018.5
(+info)https://web.icam.es/bucket/RGPD/volanteprision.pdf
https://web.icam.es/bucket/RGPD/protecciondedatos.html