This specific annex to our main Privacy Policy, provides an additional informative context on the processing of data we perform for the provision of electronic certification services.

ANF Certification Authority (ANF AC), is the owner of the Legal Snap Scan ® application, approved solution by Resolution of the Director of the Tax Computing Department of the AEAT dated 26.11.2007, with reference 0B1F56D5A8E90CBB and its update version 2.1 (23.10. 2017), in accordance with Order EHA 962/2007 and the Resolution of October 24, 2007 of AEAT.

The Legal Snap Scan® certified scanning system has the mandatory Quality Management Plan that has been approved by AEAT, said plan is prepared in accordance with the tax regulations to be accepted by users and entities that participate in the certified dematerialization process.

Legal Snap Scan® has been designed and developed in compliance with the requirements established in the General Data Protection Regulation (EU) 2016/679 and the Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights, having an Impact Evaluation in Data Protection. And, since the Legal Snap Scan ® system uses qualified electronic signature certificates, current legislation on identification, electronic signature and trusted services have been complied. ANF AC has the technical capacity and the official accreditation required for the issuance of qualified certificates of electronic signature, qualified electronic time stamps; it also manages and protects the signature creation data created, stored or processed with term signature creation devices that allow to perform long-term signatures. All this in accordance with ETSI EN standards, Regulation (EU) 910/2014 eIDAS, and Law 59/2003 of Electronic Signature of Spain.

ANF AC, in order to provide its Legal Snap Scan® service with a broader scope, has designed a method (patent pending) whose objective is to enable VAT deduction of simplified invoices that have initially been prepared by automated equipment which does not include all the data required to enable deduction. The method developed scrupulously complies with Law 37/1992, of December 28, on Value Added Tax and the Royal Decree 1619/2012, of November 30, BY APPROVING THE RULES FOR REGULATING billing obligations (articles 2, 6, 7, 8, 9).

The Legal Snap Scan® application includes the fiscal treatment of the data through a database that store the data in a structured manner in accordance with those established in Law 37/1992, and the mandatory platform for access to information for fiscal inspection purposes.

In any of the above cases, the simple dematerialization of documents, or complemented by the VAT deduction made by ANF AC, consists of a data processing managed by natural persons. Although said process does not include the name and surname of the interested party, and neither identity card, it does include employee identification of the contracting company; therefore, the contracting company can identify each expense of a specific individual.

ANF AC, provides this service as a processor, having formalized with each contracting company the corresponding contractual document as a processor

Prior to the collection of data, customers will be informed of their rights, the way to exercise them and the remaining information required by the current legislation, and other norms and standards whose compliance is required in terms of electronic certification.

ANF AC
has the obligation to carry out checks along with third-party sources in order to guarantee the reliability and accuracy of the information customers have provided. Through the development of these consultations, documentary and informative evidence are collected to prove the correct fulfillment of our obligations.

Storage period
The storage period is the duration of the service provision contract, besides the period ANF AC requires to prove the correct fulfillment of its services.

Recipients
Except in the cases established in the main Privacy Policy, ANF AC does not transfer the data to third parties.

Register of Data Processing Activities
For more details on the data processing ANF AC carries out, we offer the customers our RDPA in
https://www.anf.es/en/registro-de-actividades-tratamiento-de-datos/