That is the Data Protection Act

It is a fundamental right of individuals, which seeks to protect your privacy and your privacy against violations of those rights may have come from the collection and storage of your personal information by companies or entities. Derivatives of that fundamental right, the Spanish legal system, and the European Community recognizes individuals certain rights regarding your personal data that companies must comply, and imposes a number of procedural and substantive requirements that such companies must meet.
The Act is governed by:

• Article 18.4 of the Spanish Constitution of 1978.
• Law 15/1999 of December 13, Protection of Personal Data.
• R.D. 994/1999 of 11 June, which approves the Regulation of Security Measures for automated files containing personal data.
• R.D. 332/1994 RD of 20 June, which develops the LO 5 / 1992 of October 29 .- Operation of the Data Protection Agency.
• R.D. 428/1993 of 26 March, which approved the Statute of the APD.

The obligations to which we submit this law are:

1. Declare to the Spanish news agency data protection files that possess personal data (employees, suppliers, distributors, clients, etc ...). To do this we must first understand that the term "file" does not refer to something physical, if not a collection of information, that is, for example:
   Employees file = data type of employees we have =
   DNI (not the ID card No, but we have this data)
   First Names (not the name. But we have this data)
   Last Names (not surnames but we have this data)
   Address (no address but we have this data)
   Account No. (not No account but we have this data)
   Low (no dates and reasons. But we have this data)
   N ° SS (not the SS No but we have this data)
   
2. To own and have updated the security document of our company. This document is a file which specifies the way we handle the data, we have security measures in place to ensure the current rules, etc ... It is mandatory to have him in the workplace and available in case inspection.
3. Get the legitimization of the hit (being available to affected contracts to which the law requires, apply in situations needed and which clauses in this post you will see that for the sending of mails).
4. Apply in the workplace necessary measures required by law to ensure the protection of personal data.