…Terms of use of “Mi Carpeta Ciudadana”

WHEN ACCESSING THE “MI CARPETA CIUDADANA” SERVICE (MI

CARPETA CIUDADANA), AVAILABLE AT THE ELECTRONIC ADDRESS
CARPETACIUDADANA.GOB.ES, OR IN MOBILE APPLICATION, YOU
REPRESENT THAT YOU HAVE READ AND AGREE TO THESE TERMS OF
USE AND PRIVACY POLICY. ALL INFORMATION RELATING TO YOUR
RIGHTS AND OBLIGATIONS AS A USER OF SUCH SERVICE IS COLLECTED
HERE.

1. What is “Mi Carpeta Ciudadana”?

The "Mi Carpeta Ciudadana" service (hereinafter "MI CARPETA CIUDADANA")

available at the e-mail address https://carpetaciudadana.gob.es is a service that
facilitates citizens' relationship with the Public Administrations. It offers
citizens (hereinafter, individually the "USER" and jointly the "USERS") at a single
access point, personalized information about their relations with the different
Public Administrations:


Information existing in the basic registers of the Public Administrations
attached to the service in relation to different areas, such as: educational,
household, identification, traffic, benefits, among others. Allowing to obtain
certifications required by the regulations.


Allow the monitoring of your administrative procedures with the different
administrations attached to the service.


Applications and writings obtained by consulting the "System for the
Interconnection of Registries” (SIR) which permits the exchange of electronic
registration documents between Public Administrations.

IMPORTANT NOTICE: The USER is informed that the user information that the
Public Administrations attached to the service provide is displayed in “MI
CARPETA CIUDADANA”
2. Use and Access to MI CARPETA CIUDADANA

For access to the “MI CARPETA CIUDADANA” service, it is not required to be

registered as a USER, it is only sufficient to have an electronic identification:


Electronic ID.


Recognized electronic certificate of electronic signature issued by providers
included in the Trust List of electronic certification service providers.


Cl@ve PIN.


Cl@ve Permanente.

The USER accepts without reservation the content of these TERMS OF USE.
Consequently, the USER must carefully read them before accessing the “MI
CARPETA CIUDADANA” and using any of its functionalities.

The use of the “MI CARPETA CIUDADANA” service is free, free and voluntary for
the USER.

The provision of false data is prohibited and, therefore, the USER must identify
himself with his/her actual data.

3. Security and privacy

The security measures implemented correspond to those provided for in Annex

II (Security Measures) of Royal Decree 3/2010 of 8 January regulating the
National Security Scheme in the field of Electronic Administration.

We inform you that your personal data will be processed in accordance with the
provisions of the Privacy Policy of the “MI CARPETA CIUDADANA”: https://
masinformacioncarpeta.carpetaciudadana.gob.es/infocc/en/
masInformacion.html?tabId=16 .

All information is collected for purposes strictly to improve the service and user
experience in the relationship of THE USER with the Public Authorities, In the
terms described in the Privacy Policy.

4. Intellectual and industrial property

The Ministerio de Asuntos Económicos y Transformación Digital is the OWNER

of all intellectual and industrial property rights related to “MI CARPETA
CIUDADANA” service.
The texts, designs, images, databases, logos, structure, trademarks and other
elements of the “MI CARPETA CIUDADANA” are protected by international laws
and treaties on intellectual and industrial property. Any reproduction,
transmission, adaptation, translation, modification, communication to the public,
or any extraction of all or part of the content of this site, made in any form or by
any means, electronic, mechanical and otherwise, are strictly prohibited unless
prior written authorization of their corresponding OWNER or subject, of such
content, to Creative Common licenses, in which case the uses that under these
licenses will be permitted according to the modality of application in each case.

The legitimacy of the intellectual and industrial property rights corresponding

to the agreements provided by third parties is the sole responsibility of them.

In order to preserve possible intellectual property rights, in the event that any
USER or a third party considers that there has been a violation of their
legitimate rights by the introduction of a certain content in the “MI CARPETA
CIUDADANA”, they must notify the OWNER in writing.

5. Responsibility and obligations

The “MI CARPETA CIUDADANA” service is offered by dedicating the best efforts
to guarantee its quality and avoid errors and, where appropriate, repair or
update them as soon as possible. Likewise, USERS accept that the service may
be interrupted when necessary by maintenance, the OWNER in any case,
undertakes that the duration of interruption times is strictly essential.

The “MI CARPETA CIUDADANA” service provides information of the

user obtained from different Public Administrations and their Public Agencies
and Related or Dependent Entities. In these circumstances, the OWNER does
not guarantee or be responsible, in any case or circumstance for
the updating, accuracy, completeness, relevance or timeliness of the
information offered by third parties.

As a MI CARPETA CIUDADANA USER:

 Safeguard your USER credentials with diligence, preventing unauthorized

third parties from accessing them and therefore ensuring their confidentiality.

 Notify the HOLDER immediately of any indication of the existence of a

violation in the security of MY CITIZEN FOLDER, of inappropriate or prohibited
uses of the services provided from it, or of security failures of any kind.
 Make proper use of the contents, information and services provided from or
through MI CARPETA CIUDADANA, in accordance with the law, good faith and
generally-accepted good practices, expressly undertaking to:

 Refrain from any practices or uses of the services for unlawful or

fraudulent purposes or which are harmful to the rights and interests of the
OWNER or third parties and which violate the rules contained in this
document.

 Refrain from any actions of any kind which could overload, damage or
disable the systems, equipment or services of MI CARPETA CIUDADANA or
those which are indirectly accessible through it.

 Respect the intellectual and industrial property rights of the OWNER

and third parties over the contents, information and services provided from or
through MI CARPETA CIUDADANA, in general refraining from copying,
distributing, reproducing or communicating them to third parties in any form
whatsoever, save express, written authorization from the OWNER or the
owners of those rights.

 Not provide false personal information in MI CARPETA CIUDADANA,

bearing sole responsibility for the true and accurate communication of his/
her personal data.

 Not impersonate any third party without his/her authorisation.

As the USER of MI CARPETA CIUDADANA, you have sole responsibility for the
use you decide to make of its services.

In no case will the OWNER be responsible for any improper use of MI CARPETA
CIUDADANA and the information offered through it, and the USER bears sole
liability for any damages and/or prejudicial consequences that may derive from
misuse thereof. The USER undertakes to hold the OWNER harmless from any
claims or sanctions which may be received from third parties, whether
individuals or public or private entities, in relation to such violations, and also in
regard of any damages and/or prejudicial consequences which he or she may
incur as a result of those violations.

In any case, the OWNER reserves the right to modify or delete the content,
structure, design, services and conditions for access and/or use of this site, at
any time and without the need for prior notification, whenever that is deemed
appropriate, provided that that change does not affect the principles and rights
of data protection, as well as the right to interpret the present conditions in
regard of any questions which may arise in their application.

Likewise, the reproduction, distribution, transmission, adaptation or

modification, by any means and in any form, of the contents of MI CARPETA
CIUDADANA or its courses (texts, designs, information, databases, sound and/or
image files, logos and other elements of these sites) is strictly prohibited, save
prior authorisation from their legitimate owners or when that is permitted by the
Creative Commons licence applicable to the contents or by the current
applicable legislation.

The list given above is merely for informative purposes and in no case may it be
considered exclusive or exclusionary. In all cases, THE OWNER EXCLUDES ANY
LIABILITY FOR ANY DAMAGES AND/OR PREJUDICIAL CONSQUENCES OF ANY
KIND DERIVING, DIRECTLY OR INDIRECTLY, THEREFROM AND ANY OTHERS OF
SIMILAR CHARACTERISTICSWHICH ARE NOT SPECIFIED.

6. Links

MI CARPETA CIUDADANA includes within its contents links to sites owned or

managed by other Public Administrations or Public Bodies in order to offer the
USER personalized information in his relationship with public administrations.

The OWNER does not assume any responsibility derived from the existence of
links between the contents of MI CARPETA CIUDADANA and content located
outside of them or from any other mention of external contents to this site,
except for those responsibilities established in the data protection regulations.
Such links or mentions are exclusively for the purpose of facilitating the USER's
relationship with public administrations.

7. Hyperlinks

The web portals and / or electronic offices that establish a hyperlink with MI
CARPETA CIUDADANA must consider:

 The existence of a hyperlink between a web page and MI CARPETA

CIUDADANA does not imply the existence of relations between the OWNER and
the owner of that page, nor the acceptance and approval of its contents and
services.

 In no case may it be implied that the OWNER authorizes the hyperlink or

that he has supervised or assumed in any way the services or contents offered
by the website from which the hyperlink is produced.

 No false, incorrect, or inaccurate statements or references may be made on

the OWNER's pages and services.

 Content that is contrary to the rights of third parties, contrary to morality

and accepted good customs, or illegal content or information, may not be
included on the web page from which the hyperlink is established.
The creation of any type of web browser, program, browser, or border
environment on the MI CARPETA CIUDADANA pages is explicitly prohibited.

8. Browsers, cookies and JavaScript

For security reasons, the OWNER only guarantees the correct functioning of MI
CARPETA CIUDADANA with HTML5-compatible browsers whose versions are
supported by their own manufacturers at that time.

The use of HTML5 non-compatible browsers or versions not supported by their

own manufacturers could allow access to MI CARPETA CIUDADANA, but the
visualization of all the content or the availability of all the functionalities are not
guaranteed. Browser updates can be downloaded from the websites of these
programs’ providers.

For the correct functioning of MI CARPETA CIUDADANA it is required that the

browser has enabled the use of Javascript and cookies (see privacy policy,
https://masinformacioncarpeta.carpetaciudadana.gob.es/infocc/en/
masInformacion.html?tabId=16 ).

9. Applicable Law and Jurisdiction

These conditions of use will be governed and interpreted in all and each of its
extremes by Spanish Law. In those cases in which current regulations do not
provide for the obligation to submit to a specific jurisdiction or legislation, the
OWNER and the USERS, waiving any other jurisdiction that may correspond to
them, submit to the courts and tribunals of Madrid (Spain).

10. Corporate information and contact

Address: Calle de Manuel Cortina, 2, 28010 Madrid.

The support to the USER in case of incidents and / or claims will be online and
attended as soon as possible through the specific form created for this purpose
(https://centrodeservicios.redsara.es/ayuda/consulta/CarpetaCiudadana ).

Privacy Policy of the service "Mi Carpeta Ciudadana"

Please read thoroughly this privacy policy for users of the “Mi Carpeta
Ciudadana” service (hereinafter MI CARPETA CIUDADANA), where you can find
all information regarding your data that is collected, how it is used, and what
control you possess over this data.

1. Who is responsible for processing your user data in the MI CARPETA

CIUDADANA?
The entity responsible for processing your user data in the MI CARPETA
CIUDADANA is:

 Name: Ministerio de Asuntos Economicos y Transformación Digital

 Data Protection Officer. [email protected]
 Address: Paseo de la Castellana, 162 - 28046 Madrid.
The body in charge of the MI CARPETA CIUDADANA will be the Secretaría
General de Administración Digital, the managing body of the Secretaría de
Estado de Digitalización e Inteligencia of the Ministerio de Asuntos Económicos
y Transformación Digital.

2. What data do we deal with about you?

The information about you that we process comes from sources outside the MI
CARPETA CIUDADANA, with the exception of the information that you may
provide to us through the Preferences section or information that may be
needed to obtain your data for issuing a certificate. The data may vary
depending on what information you consult from the MI CARPETA CIUDADANA.

As a result of these queries, the data that may be processed in the MI CARPETA
CIUDADANA may belong to one or more of the following types:

 Identification or contact data such as, for example: name, surname, DNI,
postal address or email, among others.

 Identification data of your device.

 Data related to your citizenship and residence: which is your Autonomous
Region, province or town, data from the municipal register, etc.

 Data on forthcoming events and appointments booked with the Public

Bodies integrated in the MI CARPETA CIUDADANA.

 Educational data such as, for example: degrees awarded, scholarships and
grants, etc.

 Health and social services data such as, for example: disability certificates,
degree, situation of dependency, benefits, grants, etc.

 Professional and retirement data such as, for example: employment

situation, job searches, employment history, funds, retirement application, etc.

 Housing data such as, for example: rural or urban real estate assets, land
registry, etc.
 Vehicles and transportation data such as, for example: vehicles owned
driver’s license, license points, etc.

 Data regarding the delivery or non-delivery of notifications, data from the

Single Bulletin Board (TEU in Spanish) of the Official State Gazette (BOE in
Spanish) such as, for example: department and date of publication.

 Data regarding a public registration, such as, for example: number, origin/
destination office, date of registration, data of the involved party, status, etc.

Additionally, to facilitate access to the mobile app, the user can optionally
enable the biometric authentication mechanisms provided by the different
mobile platforms (iOS, Android...) that manage and store your biometric
identification data on your mobile device, such as facial recognition or
fingerprint.

3. How does MI CARPETA CIUDADANA get your data and where does it come
from?

The data is obtained by consulting Public Administrations and Public Bodies

integrated in the Mi CARPETA CIUDADANA service. Under no circumstance shall
we obtain your data without your consent.

 Once you access the application and accept the privacy policy and legal
conditions, a series of queries to Public Bodies are made in order to search if
notifications are available as well as “Forthcoming Events”.

 With regard to the section “Personal Summary” before viewing

information you must explicitly accept that the MI CARPETA CIUDADANA will
store your data. Once accepted, the data will be displayed and updated similar
to those in “Forthcoming Events”.

 The information displayed in the “Forthcoming Events” section is stored in

the system, but it may be updated (by requesting new information from Public
Bodies) when the user renews the information of their own will (up to three
times daily) or if they access the application after three or more days since the
last update.

 In the "My Files" section of the mobile application, the information is

stored in the system and will be automatically updated when you check them
again the next day, as long as you have biometrics activated.
 In the section “Edit Preferences”, you can also provide additional
information such as your email address to received notifications on topics that
interest you. In this case, please remember to only include data that is real,
truthful, and updated.

 The services in “My Topics” or “My Folder” in the mobile app, as well as
“My Files” are obtained by consulting the relevant Public Body.

 For the "Favourites" section, those services that you select voluntarily are
stored, and in the case of "Most Recent" the last consulted. The information
returned by the services is not stored.

 Regarding the “My Notifications” section, the information displayed is

obtained from the Enabled Single Electronic Address (DEHú in Spanish).

 The information in “My Submitted Statements and Forms” is obtained by

consulting the System for the Interconnection of Registries” (SIR) which permits
the exchange of electronic registration documents between Public
Administrations.

These services, except for “My Submitted Statements and Forms” are available
both in the mobile APP and in the website version.

4. What is the legal basis for processing your data?

The personal data processing that may be conducted through the MI CARPETA
CIUDADANA is based on the fulfilment of a mission carried out in the public
interest or in the exercise of public powers conferred on the data controller,
pursuant to article 6.1e) of the RGPD. Specifically for the consultation of
information in the administrations integrated in "Mi Carpeta Ciudadana", as well
as consent to the following data:

 Data of an identifying nature

 E-mail address.
 Information on the services consulted and the citizen's favourites.
 Profile photo.
Additionally, we inform you that the legislation applicable to services offered by
the MI CARPETA CIUDADANA consists of the following:

 Organic Law 3/2018, of 5 December, on Personal Data Protection and

guarantee of digital rights.
 Law 39/2015 of 1 October, on the Common Administrative Procedure for
Public Bodies.

 Law 40/2015, of 1 October, on the Legal System for the Public Sector.
 Regulation (EU) 2016/679, of 27 April 2016, on the protection of natural
persons regarding the processing of personal data and on the free movement of
such data (General Data Protection Regulation).

 Royal Decree 203/2021, of 30 March, approving the Regulation for public

sector activity and functioning by digital means.

 Royal Decree 311/2022, of May 3, which regulates the National Security

(ENS).

5. What for and why do we use your data?

The objective of the MI CARPETA CIUDADANA is to facilitate your relationship

with Public Administrations by giving you a personalized single access point for
different Public Administrations and their linked or dependent public bodies and
entities.

The information and data collected in the MI CARPETA CIUDADANA shall only
be processed to offer you a personalized service and information that is to your
interest. To do so, we use your data to provide you with the following services:

 Provided you have consented in advance, you will receive email

notifications or PUSH notifications (when using the mobile APP) if you have an
upcoming appointment at any Public Administration or any event that is to your
interest. The information used to send your notifications will only be updated as
defined in Section 3 “How are they obtained and where does your data come
from?” of this document, therefore, as indicated in that section, it is possible
that if you do not periodically access it, the notifications you receive may not be
updated.

 The possibility of adapting the presentation of the MI CARPETA

CIUDADANA according to your preferences.

 To directly present your data, without having to consult them every time you
access the MI CARPETA CIUDADANA.

In the event that you decide to use the chatbot, we will process your data in
order to provide you with the ability to quickly search for information,
notifications, certificates or any other data that you request, and which are
available through the MI CARPETA CIUDADANA service.
6. For how long do we store your data?

The storage period will depend on the type of data:

 The information stored in the “Personal Summary” section will be

automatically deleted if you do not access the MI CARPETA CIUDADANA for a
period of three months. However, you can withdraw your consent at any time and
this information will not be stored. The APP performs a query every time you
access the MI CARPETA CIUDADANA, however the website will not display this
information.

 The data processed in “Forthcoming Events” will be stored for a maximum

period of two years from when you last accessed the service.

 With regard to the data in the rest of the sections: “My Topics”, “My Files”,
“My Notifications”, and “My Submitted Statements and Forms”, they are not
stored, only displayed when you consult or request them (by clicking on each
section).

 The data processed when using the chatbot, it shall be automatically

deleted at the end of your sessions or when the chat is idle for at least 30
minutes.

 With regard to the information related to the notification settings, recents,

favourites and the personal photo, the data provided will be stored for a
maximum period of two years from your last access to the service.

7. Who has access to your data?

Only you can access your data.

Notwithstanding the foregoing, in certain cases (for example, to resolve an

incident or query that you raise with us) we may need to access the strictly
necessary data in order to resolve the incident or respond to your query.

8. What are your rights and how can you control your data?

The law grants you a series of rights in relation to the data and information that
we process about you. Specifically, the rights of access, rectification, deletion,
and portability of data as well as limitation and opposition to its processing.

For those data in which the SGAD is responsible for the processing
(identification data, e-mail, information on the services consulted and favourites,
profile photo) these rights will be exercised with the SGAD.

For information obtained from consultations in the administrations integrated in

"Mi Carpeta Ciudadana" these rights will be exercised with the body responsible
for each case.

You can consult the scope and full details of these rights on the website of the
Agencia Española de Protección de Datos (AEPD).

You can exercise all these rights at any time and free of charge. You can contact
the data controller in person at any of the offices of the registry assistance
network (https://administracion.gob.es), or or online at the website of the
Ministerio de Asuntos Económicos y Transformación Digital (https://
sede.mineco.gob.es/portal/site/sede/).

You also have the right to claim before the Data Protection Officer, in advance
and optionally, through the link https://serviciosede.mineco.gob.es/FB/
Home.aspx?control=161_IG.

Apart from the above, it is our duty to inform you that you have the right at all
times to register a complaint with the Agencia Española de Protección de Datos.

9. How do we protect your data?

The Secretaría General de Administración Digital guarantees the security,

secrecy and confidentiality of your data, communications and personal
information and has adopted the most demanding and robust security measures
and technical means to prevent loss, misuse, or unauthorized access.

The implemented security measures correspond to those listed in the Annex II

(Security Measures) of Royal Decree 311/2022, May 3rd, regulating the National
Security (ENS).

We also commit to responding promptly and responsibly in the event that the
safety of your data is at risk and to inform you as appropriate. There are
protocols for handling security incidents which include notifying the
supervising authorities and users in the cases considered in the legislation.

Finally, we inform you that both storage and the rest of the data processing
activities will always be conducted within the European Union.

10. Cookie policy

You can consult all the information related to the cookies used in this service in
our Cookies Policy (link to the Cookies Policy).

By accepting, you confirm that you have read and accept these terms of use and
privacy policy and consent to the processing of your personal data.