If your company is on this list, you are required to have a Data Protection Officer

Sports federations when they process data of minors

Professional associations and their general councils

Educational centers that offer education at any level, both public and private ( children's centers , primary, professional training...)

Health centers legally obliged to maintain the medical records of patients

Companies that process data on a large scale of special categories of data ( health , ethnicity, gender violence , sexual orientation, union membership...)

Private security companies

Companies that perform regular and systematic observation of large-scale data subjects

→ The authorities or public bodies , except the courts that act in the exercise of their judicial function

Entities that operate networks and provide electronic communications services

→ The service providers of the information society when they elaborate on a large scale profiles of the users of the service

→ Organizations for the management, supervision and solvency of credit institutions

Financial credit establishments

Insurance and reinsurance entities

Investment service companies

→ Distributors and marketers of electricity and/or natural gas

→ The entities responsible for common files for the evaluation of financial solvency and credit and/or fraud prevention, including money laundering and terrorist financing

→ Entities that carry out advertising and commercial prospecting activities

→ The entities that have as one of their objects the issuance of commercial reports

→ Operators that carry out gambling activity through electronic channels