Community of owners and Data Protection compliance

Post reply   Start new thread
:: New - Old :: Old - New

Pages: 1 |

Forum home :: Latest threads :: Search forums
The Comments
24 Jul 2018 14:16 by mariadecastro Star rating in Algeciras (Cadiz). 9336 posts Send private message

Legal Questions? Speak to Maria Direct

Legal tip 1458. Community of owners and General Data Protection Regulations 
24 July 2018 @ 14:14 

1. What are current regulations on Data Protection in Spain?

Since May 25, 2018, the European General Data Protection Regulation (GDPR) is the regulation governing use of data in Spain.

At the moment, the Congress of Deputies is drafting an Act (Ley Orgánica) with the purpose of adapting our national/ internal Law to community regulations.

2. Should Community of Owners adapt to the new General Data Protection Regulation?

 Yes, of course, as an entity with has personal data under administration.

3. What data should be subject to treatment within the scope of the Communities of Owners?

Current regulations establish no limits on what data the Community of Owners can treat, these are usually:

  • Name of owners
  • Identification documents
  • Telephone numbers
  • Addresses
  • Emails
  • Bank accounts

But any other data can be managed by Community of Owners if they are owners ‘data and are necessary for the usual activity of the Community

4. Should the files be notified to the Spanish Agency for Data Protection?

With the entry into force of the GDPR the indicated registration disappears, but there is an obligation to internally keep a record of the treatment activities.

5. Is the Community of Owners obliged to have it?

Community of owners is just obliged if the treatment that it carries out may entail a risk for the rights and freedoms of the interested parties, not be occasional, or include special categories of personal data. In any case it is highly advisable as it is a proof of "active responsibility" and facilitates the correct compliance with the regulations.

6. What is the record of treatment activities?

The record of treatments must have the following content:

 a) The name and contact details of the person responsible

b) The purposes of the treatment;

c) A description of the categories of stakeholders and the categories of personal data;

d) The categories of recipients to whom the personal data were communicated or communicated, including the recipients in third countries or international organizations;

e) Where applicable, the transfer of personal data to a third country or to an international organization, including the identification of said third country or international organization and, in some cases , the documentation of adequate guarantees;

f) Where possible, the deadlines set for the deletion of the different categories of data;

g) Whenever possible, a general description of the technical and organizational security measures

7. Should the Communities of Owners have the figure of the Delegate of Data Protection (DPO)?

They should not

8. Who is responsible of Data Protection according to current regulations?

The Community of Owners is responsible for the treatment of personal data, while the administrator acts as the manager, but the AEPD ( Spanish agency for Data Protection) establishes a series of conditions for the relationship Community-Administrator-Protection regarding community data is correct.

  • The Administrator must only access the data for the exclusive purpose of providing a service to the Community
  • . If the use of the data is for purposes not included in the Horizontal Property Law (LPH), the consent of all owners will be necessary, with the novelty of the GDPR that requires that the consent be express and unambiguous.
  • The relationship between the Community of Owners and the  Property Administrator, in accordance with the GDPR , must be in writing .

Please contact us if your Community of Owners is in need of advise for Data Protection compliance


Maria L. de Castro, JD, MA



El blog de Maria

Like 0      
24 Jul 2018 17:27 by Marksfish Star rating in Vera, Almeria. 2575 posts Send private message

Marksfish´s avatar

How will the new data protection laws work in relation to naming community debtors? After the AGM, the administrators send out the minutes with the debtor's name, address and outstanding amount. They also publish the quota for each property in the same document stating how much each property must pay in community fees. Will this have to stop?


Like 0      
30 Jul 2018 20:17 by hugh_man Star rating in Kent/Roda . 1593 posts Send private message

hugh_man´s avatar

Also interested in what effect this will have on information used by volunteer owners who make up an elected Board or Community Committee to assist the President in his very broad role.

Like 0      
30 Jul 2018 21:00 by mariadecastro Star rating in Algeciras (Cadiz). 9336 posts Send private message

Legal Questions? Speak to Maria Direct


Article 16.2 of the Horizontal Property Law establishes that the call to the Board of Owners will contain a list of the owners who are not up to date in the payment of the debts owed to the community and will warn of the deprivation of the right to vote, therefore if this information is included in the call to the meeting,  the meeting itself or or subsequent minutes, it does not violate, as both the Supreme Court and the Spanish Agency for Data Protection have affirmed, the rights to honor, privacy or own image or those related to the protection of data of personal  character.

In relation to the publication on the board, the AEPD accepts these if:

- Only the delinquency situation and the number of the flat are displayed on the board in a way that is not easily identifiable to a person outside the Community
- Personal communication was previously attempted at the address indicated by the owner
- The notice is exposed for the time required for communication : three days.


If these members have been allowed to help the president, they can also access this data in a way which serves the aims of the community.



Maria L. de Castro, JD, MA



El blog de Maria

Like 1      
31 Jul 2018 22:17 by Marksfish Star rating in Vera, Almeria. 2575 posts Send private message

Marksfish´s avatar

Thanks Maria yes

Like 0      
01 Aug 2018 14:58 by mariadecastro Star rating in Algeciras (Cadiz). 9336 posts Send private message

Legal Questions? Speak to Maria Direct

A pleasure, as always!


Maria L. de Castro, JD, MA



El blog de Maria

Like 0      

Pages: 1 |

Post reply    Start new thread

Previous Threads

Fears about buying a property in Spain - 6 posts
RATS - 1 posts
Bazza56 - 1 posts
model aircraft clubs - 0 posts
Buying Property - Protecting Myself (Ongoing Divorce) - 4 posts
help required with 3 main questions. thank you. - 1 posts
Northern Irish cast adrift once again - 17 posts
Ychristmas - 0 posts
New Tourism regulations for Holiday rentals in Valencia: Law 15/2018 - 6 posts
No tax if no gain when property selling: Supreme Court recent decission - 4 posts
Is airbnb permitted? - 2 posts
Denuncia - 6 posts
Recommendations for property manager - Quatretonda and surrounding areas - 10 posts
The very dark side of the Andalusian property buying p - 8 posts
Long term rental wanted - 1 posts
Inheritance tax - 24 posts
Rental Agents - 2 posts
where shall I go - 6 posts
Mulla old town housing - 3 posts
Disaster in Spain .. any help appreciated - 8 posts
Any help would be so helpful. - 5 posts
Costaluz lawyers - 8 posts
Driving licence - 2 posts
No need for dish if you have Virgin Media in U.K - 5 posts

Number of posts in this thread: 6

DISCLAIMER:  All opinions posted on these message boards are the opinion solely of the poster and do not necessarily reflect the opinion of Eye on Spain, its servants or agents.

1 |
Our Weekly Email Digest

This site uses cookies. By continuing to browse you are agreeing to our use of cookies. More information here. x