{"id":230,"date":"2026-06-10T19:39:15","date_gmt":"2026-06-10T19:39:15","guid":{"rendered":"https:\/\/sms.es\/?page_id=230"},"modified":"2026-07-16T21:25:21","modified_gmt":"2026-07-16T21:25:21","slug":"aviso-de-cumplimiento-del-rgpd","status":"publish","type":"page","link":"https:\/\/sms.es\/en\/aviso-de-cumplimiento-del-rgpd\/","title":{"rendered":"Notice of compliance with the RGPD"},"content":{"rendered":"<h1 class=\"wp-block-heading has-text-align-left\" style=\"font-size:64px;font-style:normal;font-weight:800\">Notice of compliance with the RGPD<\/h1>\n\n\n\n<h1 class=\"wp-block-heading\">Notice of Compliance with the RGPD<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">This page describes the framework of compliance in the area of data protection <strong>G729, SL<\/strong>, operator of electronic communications and holder of the trademark SMS.es.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">1 \u00b7 regulatory Framework<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">As a telecommunications operator, G729, SL is subject to a regulatory framework that is broader than that of a provider of services of the information society ordinary:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Standard<\/th><th>Scope<\/th><\/tr><\/thead><tbody><tr><td><strong>Regulation (EU) 2016\/679 (RGPD)<\/strong><\/td><td>General system of protection of data<\/td><\/tr><tr><td><strong>Organic law 3\/2018 (LOPDGDD)<\/strong><\/td><td>National development, including the regime of appointment of DPD (art. 34)<\/td><\/tr><tr><td><strong>Law 34\/2002 (LSSI-CE)<\/strong><\/td><td>Storage devices (art. 22.2) and commercial communications (art. 21)<\/td><\/tr><tr><td><strong>Law 11\/2022, General of Telecommunications<\/strong><\/td><td>Obligations as a registered trader, secrecy of communications<\/td><\/tr><tr><td><strong>Law 25\/2007<\/strong><\/td><td>Retention of data relating to electronic communications<\/td><\/tr><tr><td><strong>Regulation (EU) 910\/2014 (eIDAS)<\/strong><\/td><td>Trust services are applicable to the SMS Certificate<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">2 \u00b7 Government data<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Data Protection officer:<\/strong> Designation communicated to the AEPD in accordance with art. 37.7 RGPD.<\/li>\n\n\n\n<li><strong>Record of processing activities<\/strong> (art. 30 RGPD), maintained and updated both in our condition responsible for as a manager.<\/li>\n\n\n\n<li><strong>Domestic policy of protection of data<\/strong>, which is mandatory for all staff.<\/li>\n\n\n\n<li><strong>Commitments of confidentiality<\/strong> signed by all persons with access to personal data (art. 28.3.b and 32.4 RGPD).<\/li>\n\n\n\n<li><strong>Periodic training<\/strong> staff with access to personal data.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">3 \u00b7 Privacy by design and by default<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We apply the principles of the <strong>art. 25 RGPD<\/strong> in the development and evolution of the platform: data minimisation, purpose limitation, default configuration, more protective, and access control based on the principle of need-to-know.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">4 \u00b7 impact Assessments<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We <strong>Impact assessments relating to the Protection of Data (art. 35 RGPD)<\/strong> when a treatment may result in a high risk to the rights and freedoms of data subjects, taking into account the criteria of the Guidelines of the European Committee for Data Protection and to the list published by the AEPD.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">5 \u00b7 security Measures<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We apply technical and organisational measures in accordance with the <strong>art. 32 RGPD<\/strong>, evaluated according to the risk, including access control, encryption in transit, activity log, segregation of environments and procedures of continuity.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">6 \u00b7 Management of safety violations<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We have a procedure documented detection, assessment and response to violations of the security of the personal data:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Responsible for:<\/strong> notification to the AEPD without undue delay and, if possible, within a maximum period of <strong>72 hours<\/strong> (art. 33 RGPD), and communication to stakeholders when the violation involves a high risk to your rights and freedoms (art. 34).<\/li>\n\n\n\n<li><strong>As a manager:<\/strong> notice to the responsible customer <strong>without undue delay<\/strong> since we have knowledge (art. 33.2 RGPD), with the necessary information so that it can fulfil its own obligations.<\/li>\n\n\n\n<li><strong>Internal register<\/strong> of all violations, regardless of whether they are reportable.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">7 \u00b7 Chain of treatment<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The provision of courier services requires a chain of participants. Our position in each link is defined contractually:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Our customers<\/strong> they are responsible for the processing of the data, their recipients.<\/li>\n\n\n\n<li><strong>G729, SL<\/strong> it acts as the person in charge of the processing of this data, in virtue of the <strong>Agreement in Charge of the Treatment<\/strong>.<\/li>\n\n\n\n<li><strong>Our subencargados<\/strong> are subject to contracts that impose the same obligations (art. 28.4 RGPD), a prior assessment of their warranties.<\/li>\n\n\n\n<li><strong>Telecom operators<\/strong> involved in the routing, acting as a responsible independent of the traffic data required for the delivery, in accordance with the industry regulations.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">8 \u00b7 international Transfers<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">When there are transfers outside the European Economic area, under the mechanisms of the <strong>Chapter V of the RGPD<\/strong>. The detail of the mechanisms applicable to each recipient contained in the <a href=\"https:\/\/sms.es\/en\/politica-de-privacidad\/\">Privacy policy<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">9 \u00b7 Rights of the interested<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The rights recognized in the <strong>arts. 15 to 22 of the RGPD<\/strong> and the channel to exercise them-are detailed in the <a href=\"https:\/\/sms.es\/en\/politica-de-privacidad\/\">Privacy policy<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When the request relates to data processed on behalf of a client of ours, will be transferred to the responsible without delay and we will assist you in your response, according to the <strong>art. 28.3.and RGPD<\/strong>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">10 \u00b7 * Authority control<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Spanish agency of Data Protection (AEPD)<\/strong> \u2014 C\/ Jorge Juan, 6, 28001 Madrid \u2014 <a href=\"http:\/\/www.aepd.es\" target=\"_blank\" rel=\"noopener\">www.aepd.es<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">11 \u00b7 Documentation of compliance to customers and bidders<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Current customers, potential customers and contracting authorities may request:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Agreement in Charge of Treatment for your signature<\/li>\n\n\n\n<li>Updated list of subencargados<\/li>\n\n\n\n<li>Certificate ISO\/IEC 27001:2022, and statement of applicability<\/li>\n\n\n\n<li>Summary of technical and organizational measures<\/li>\n\n\n\n<li>Questionnaires security completed<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>G729, SL \u2014 SMS.es<\/strong> <strong>Last update:<\/strong> <code>July 17, 2026.<\/code><\/p>","protected":false},"excerpt":{"rendered":"<p>Aviso de cumplimiento del RGPD Aviso de Cumplimiento del RGPD Esta p\u00e1gina describe el marco de cumplimiento en materia de protecci\u00f3n de datos de G729, S.L., operador de comunicaciones electr\u00f3nicas y titular de la marca SMS.es. 1 \u00b7 Marco normativo aplicable Como operador de telecomunicaciones, G729, S.L. est\u00e1 sujeta a un marco normativo m\u00e1s amplio&#8230;<\/p>","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_kadence_starter_templates_imported_post":false,"_kad_post_transparent":"disable","_kad_post_title":"hide","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"hide","_kad_post_feature_position":"","_kad_post_header":true,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"class_list":["post-230","page","type-page","status-publish","hentry"],"_hostinger_reach_plugin_has_subscription_block":false,"_hostinger_reach_plugin_is_elementor":false,"_links":{"self":[{"href":"https:\/\/sms.es\/en\/wp-json\/wp\/v2\/pages\/230","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sms.es\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/sms.es\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/sms.es\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sms.es\/en\/wp-json\/wp\/v2\/comments?post=230"}],"version-history":[{"count":2,"href":"https:\/\/sms.es\/en\/wp-json\/wp\/v2\/pages\/230\/revisions"}],"predecessor-version":[{"id":301,"href":"https:\/\/sms.es\/en\/wp-json\/wp\/v2\/pages\/230\/revisions\/301"}],"wp:attachment":[{"href":"https:\/\/sms.es\/en\/wp-json\/wp\/v2\/media?parent=230"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}