Aeronautical Security Study Coordination for RPAS operations


Identity: ENAIRE – Tax ID number: Q2822001J
Postal address: Avda. de Aragón, 330 - Edificio 2 - 28022 Madrid
Telephone: 913 21 02 11
Data Protection Officer (DPO):

Purpose of the processing

Purpose: The data collected, as well as the provided documentation, will be processed for the purpose of analysing and coordinating the Aeronautical Security Study presented in accordance with Royal Decree 1036/2017 of 15 December, which governs the civil use of aircraft piloted via remote control.

Storage periods: The data will be stored for a maximum period of 1 year.

Legitimate interest

The legal basis for ENAIRE processing the data is based on article 6.1.c) of the GDPR: processing is necessary for compliance with a legal obligation to which the controller is subject:

Royal Decree 1036/2017 of 15 December, which governs the civil use of aircraft piloted via remote control


The transfer of data to the State Air Safety Agency (Agencia Estatal de Seguridad Aérea, AESA) has been planned, but no other transfer of data to third parties has been considered, except when legally mandated.


Those interested have a right to:

  • Obtain confirmation on if ENAIRE is processing their personal data.
  • To consult their personal data, as well as  request amendment of inaccurate data, or, where appropriate, request its deletion in the case that, among other reasons, such data is no longer needed for the purposes for which it was collected.
  • Request under certain circumstances:
  • Data processing restriction, in which case it will only be stored by ENAIRE to exercise or defend claims.
  • Data processing objection, in which case ENAIRE will stop data processing, except for compelling legitimate grounds, or to exercise or defend possible claims. Including the processing of their data for automated individual decisions.

Rights may be exercised through ENAIRE’s Central Data Protection Unit (known as UCPD from its Spanish acronym) - Avda. de Aragón 330 - Edificio B - 28022, Madrid or via the Electronic Office (

You are informed that you have the right to withdraw your data processing consent at any time.

If you have not been duly attended to in the exercise of your rights, you may lodge a complaint with the Spanish Data Protection Agency - Address: C/Jorge Juan, 6 - 28001 MADRID – e-Office: