DPD certification

This specific annex to our main Privacy Policy, provides an additional informative context on the data processing that we perform in the professional certification service for Data Protection Officer (DPD).

ANF Autoridad de Certificación [ANF AC], provides this service subject to the provisions of:

• The Certification Scheme of the Spanish Data Protection Agency for Data Protection Delegates (Scheme).
• General Data Protection Regulation (EU) 2016/679 on the protection of natural persons with regard to regard to the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR);
• Organic Law 3/2018, on the Protection of Personal Data and guarantee of digital rights. ISO 17024 Certification of Persons.
• ISO 17024 Certification of Persons.

ANF AC, is definitively accredited by the Spanish Data Protection Agency as a Certification Entity.

ANF AC, in accordance with the AEPD-DPD Certification Scheme (Scheme), has the obligation to collect the data of candidates who wish to undergo certification examination, verify them and determine whether the applicant has the prerequisites required by the Scheme are met.

If your application is approved as a candidate for examination, and you engage us to conduct the examination, we will evaluate it with human intervention and automated verification control.

We formally assume the obligation of CONFIDENTIALITY of the identity of the candidates to be tested. Likewise, if the result of the exam is NOT APT, the treatment will be confidential.

If the result is APT, and you accept the Code of Ethics of the AEPD, ANF AC will communicate the certification obtained to the AEPD, and we will publish on our corporate website, in the list of Certified DPD, the data required by the Scheme.

Periodically we will send you information on the new developments that occur in the field of data protection.

Conservation
The conservation period is the duration of the service contract, and during the period in which ANF AC needs to accredit the correct fulfillment of its services.

Except in the cases established in the main Privacy Policy, ANF AC does not transfer the data to third parties.

Registry of Processing Activities (RAT)
For further details of the data processing that we perform, we make available our RAT at, https://anf.es/en/activity-log-data-processing/