Base On-line


Request for the exercise of the right to amend personal data

What does it allow?

Request for totally or partially removing inaccurate or incomplete personal data.

The right to amend is regulated by the articles 12 and 16 of the European general regulation 2016/679 of the 27th April, of data protection.

In the event that the personal data has already been communicated to third parties, the requested amendment will be communicated in case it is accepted as long as it is not impossible or it will not involve a disproportionate amount of effort.

Following exceptions to the exercise of right to be considered:

  • If there is a legal prohibition. 
  • If there is a risk of the State Defence. 
  • If the public security must be ensured. 
  • If the rights and freedoms of third parties must be protected. 
  • If there is a police intervention. 
  • If the tax obligation must be fulfilled. 
  • If the public finance inspects the affected party.

Who can apply?

The same data subject, properly identified or a representative, also identified, in the following cases: under the age of 14 years old, over the age of 14 if the Law requires it, disabled people or by individual decision.

When to request it?

At any time.

Documentation to be provided

  • Application form of request for the exercise of the right to amend personal data.

How to request it?

To start the process application you must fill in the application form and electronically process it, in person or by any other method established by the Law 39/2015, of 1st of October, of administrative procedure common at public administrations. 

  • Electronically: access at application form, and fill it in according to the instructions.
  • In person: fill in the application form *, print it and present it at the help desks in terms of Register of BASE- Gestió d’Ingressos (Income Management).

Application form

Request period to respond

As from the application form reception, there is a one-month period to answer, whether the data is available or not. Before the period finishes, the request period could be extended for two months if necessary, considering the complexity and amount of requests, providing the person concerned with the reason of the extension.

If after that time, there is no answer or you do not agree with it, you can address to where the person in charge of data protection will solve your doubts or concerns. Even if we believe you can solve your doubts this way, if you consider it appropriate, you can file a complain to the Autoritat Catalana de Protecció de Dades (APDCAT) through their website:

Does it have any cost?

It does not have any cost.

Nevertheless, in the case of excessive or unfounded requests, especially due to being repetitive, a reasonable price could be charged or acting according to the request could be refused (art. 12.5 RGPD).

Go to Protection of Personal Data

Related formalities