Once the processing activity is identified, the controller will enable the data subject to exercise their rights in light of articles 15 to 22 of  REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND COUNCIL of 27 April 2016, according to the established procedure (response within a month, extendible by another two months as applicable)

1) The catalogue of recognised rights:

• Access Request            →    Access
• Correction Request      →    Correction
• Deletion Request         →   Deletion
• Opposition Request     →   Opposition
• Limitation Request       →   Limitation
• Portability Request       →   Portability

The request to the controller may be sent to the General Archive and Data Protection, Faculty of Law, Av. Complutense s/n, 28040-Madrid by the following means:

• General Register or auxiliary registers at the centres of the Complutense University
• Valid registers. According to Art. 16 of Law 39/2015, of 1 October, on the Common Administrative Procedure of Public Administrations
• By email with digital certificate, electronic signature and copy of DNI/NIE to confirm your identification to: dpd@ucm.es

2) The right to submit a claim to a control authority. Any person may claim their rights or breach of the REGULATION (EU) 2016/679,  and the Organic Law 3/2018, of 5 December, Personal Data Protections and guarantee of digital rights, via the following link: https://www.aepd.es.