Privacy Policy of the CNMC Speed Test Service

Please read this privacy and data protection policy carefully as a user of the CNMC Speed Test service, where you will find all the information about the data collected about you, how it is used, and what control you have over it, as established by the Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and the free movement of such data, and the Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights.

The privacy policy applies to the service on the following platforms:

1. Who is the data controller for your data as a user of the “CNMC Speed Test”?

The data controller for your data as a user of “CNMC Speed Test” is:

The CNMC Speed Test service is provided by the Comisión Nacional de los Mercados y la Competencia.

2. Acceptance of the Privacy Policy

The personal data that may be processed by CNMC Speed Test will be obtained after your acceptance of this privacy policy and the terms of use of the application, and will belong to the following categories:

The CNMC Speed Test service will show you the terms and conditions of use and the privacy policy before starting. Every time you accept a new version of the terms and conditions and the privacy policy, the CNMC Speed Test service will record your acceptance.

By accepting this policy, you agree to the publication of the geographic location where the user performs the test. A map is published with the locations where the measurements were taken. The publication of the location on the geographic map may allow the association of the measurements with specific locations.

You can disable location on the mobile app and in the browser to prevent the location of the measurements from being published.

3. What data do we process?

The following data is collected, processed, and published on the CNMC Speed Test website and mobile applications and is made available to the public for free as Open Data:

The following data is collected and processed in the various CNMC Speed Test platforms but is not published:

4. Loop Mode

In loop mode, the same data is processed as in the individual test. The first test starts immediately after the loop mode is activated. Further tests are performed after the waiting time has elapsed or the specified distance has been covered. Tests will be conducted until the configured number of tests is reached. Loop mode can be stopped manually or will stop after 48 hours.

It should be noted that in Loop Mode, due to its characteristics, it cannot be ruled out that the user may be identified. The user is informed when Loop Mode is activated. CNMC will not identify the user under any circumstances.

5. What is the legal basis for processing your data?

The processing of personal data that may be carried out by CNMC Speed Test is based on the fulfillment of a mission carried out in the public interest or in the exercise of public powers conferred on the data controller, in accordance with Article 6.1e) of the GDPR.

In addition, we inform you that the regulations applicable to the services offered by CNMC Speed Test are as follows:

6. Why and for what purposes do we use your data?

The processing of personal data in CNMC Speed Test has the following objectives:

The information and data collected in CNMC Speed Test will be processed solely for the purpose of providing you with a service that meets the functionalities of the application.

The IP address is only displayed to the user who performed the measurement and is used for the technical enabling of the map, to assign tests to individual operators, and to detect misuse.

The randomly generated client identifier Client UUID is used to present the user with the history of results, to identify misuse, and to guarantee the user's rights in relation to data protection.

WLAN network identifiers are processed to interpret user results and provide an overview of this information across all stored measurements.

7. How long do we store your data?

The personal data you provide us will be retained for as long as necessary to fulfill the purpose for which it is collected and to determine any responsibilities that may arise from the processing.

The IP address and WLAN network identifiers (SSID and BSSID) are stored for six months.

8. Do we share your data with third parties?

In general, your personal data will not be shared with other third parties, except for legal obligations, which may include communications to the Ombudsman, judges, courts, and persons involved in complaints-related proceedings.

The IP address may be transferred to other countries solely for the purpose of enabling the display of the map and determining the position. This data transfer, depending on the device used, to Google, Microsoft, and OpenStreetMap is based on European Commission decisions that guarantee an adequate level of protection, in accordance with Article 45 of the General Data Protection Regulation (GDPR). This guarantee is established to ensure that the IP address is not published.

9. Who has access to your personal data?

In certain cases (e.g., to resolve an issue or inquiry you raise), we may need access to the personal data that is strictly necessary in order to resolve the issue or respond to your inquiry. In no other case will your personal data be used, and CNMC will not identify users.

10. What are your rights, and how can you control your data?

The regulations grant you a number of rights regarding the data and information we process about you. Specifically, the rights of access, rectification, deletion, and limitation of processing.

For the data for which CNMC is the data controller, these rights will be exercised directly with CNMC.

You can consult the full scope and details of these rights on the Spanish Data Protection Agency (AEPD) website.

As for the exercise of your rights, you may do so at any time and free of charge by providing the Client UUID identifier, which appears in the options/configuration menu of the website and applications, and contacting the Data Controller, Comisión Nacional de los Mercados y la Competencia, at its physical office at c/ Barquillo 5, 28014 MADRID, or through its Electronic Headquarters.

You also have the right to file a complaint with the Data Protection Officer, either in advance or optionally, by sending an email to dpd@cnmc.es.

In addition to all of the above, you always have the right to file a complaint with the Spanish Data Protection Agency: https://www.aepd.es/.

11. How do we protect your data?

The Comisión Nacional de los Mercados y la Competencia guarantees the security, secrecy, and confidentiality of your data, communications, and personal information, and has adopted the most demanding and robust security measures and technical means to prevent its loss, misuse, or unauthorized access.

The security measures implemented correspond to those provided for in Annex II (Security Measures) of the Royal Decree 311/2022, of 3 May, regulating the National Security Framework.

Furthermore, we are committed to acting swiftly and responsibly in the event that the security of your data may be compromised, and to informing you if it is relevant. Incident management protocols are in place, including notifications to supervisory authorities and users where required by law.

Finally, we inform you that both the storage and all other activities related to the processing of your data will always be located within the European Union.