Notice regarding the processing of personal data – CNAD

Notice on the Processing of Personal Data

The National Commission of Digital Assets of El Salvador (CNAD) is responsible for the processing of personal data provided by users, supervised entities, and the general public, in accordance with the Law for the Protection of Personal Data (LPDP).

The personal data collected by CNAD is used exclusively for the exercise of its legal functions: registration, authorization, supervision, and support of the digital asset ecosystem, as well as for responding to citizen requests and other institutional procedures established under applicable regulations.

The information stored in CNAD’s systems, records, and files is handled with strict confidentiality and is not shared with third parties, except in cases authorized by law or when the explicit consent of the data subject is obtained, in accordance with Articles 46 and 49 of the LPDP.

The personal data that may be subject to processing includes, among others: name, nationality, address, contact information, identification and tax documents, professional or technical information, and any other data necessary for fulfilling institutional functions. CNAD does not process sensitive data except in situations strictly permitted by law.

Exercise of ARCO-POL Rights

Data subjects may exercise their rights of Access, Rectification, Cancellation/Blocking, Opposition, Portability, Erasure, and Restriction (ARCO-POL) using the official form available at the following link:

https://www.transparencia.gob.sv/descarga_archivo.php?id=NjQ0MDM5&inst=644039

Requests may be submitted:

  • In physical form at the Public Information Access Unit – CNAD, or

  • By email to the Personal Data Protection Officer: uaip@cnad.gob.sv

Requests will be processed in accordance with the timeframes established in the LPDP.

Important Notes

  • Any changes or updates to this notice will be published through the same means.

  • The CNAD website uses cookies solely for technical and statistical purposes, without identifying users.

  • If CNAD requires the involvement of third parties for services that include personal data processing, confidentiality agreements and the corresponding legal instruments will be required, pursuant to Article 49 of the LPDP.