Controller
Identity: ENAIRE – Tax ID number: Q2822001J
Postal address: Avda. de Aragón, 330 - Edificio 2 - 28022 Madrid
Telephone: 900 929 220
Email: info@enaire.es
Data Protection Officer (DPO): ucpd@enaire.es
Purpose of the data processing and storage periods
Recording of images by video surveillance systems, issuing of identification cards and control of access to facilities and specific control areas, monitoring and control of Personnel Security Clearances (HPS), in order to protect people and property at ENAIRE’s facilities and to ensure compliance with the physical security rules and measures in place.
In the case of routine video surveillance and access control, personal data will be stored for one month, unless we are required by law to extend this period. When issuing cards to ENAIRE employees or contractors, the personal data will be stored, respectively, for the duration of the employment or legal contract that underpins the relationship.
When processing personal data collected to access areas of the European EGNOS Service, Galileo GSC Service Center or other areas integrated into the European Union's EUSPA Space Programme, it will be stored for one year.
In cases involving the processing of personal data collected for the purpose of monitoring general access or access to specific areas such as the European EGNOS Service, the Galileo Services Centre (GSC), or any other areas integrated into the European Union’s EUSPA Space Programme, the retention period shall be one year.
Laws on databases of public interest maintained by government agencies may be applicable.
Legal basis
The legal basis for ENAIRE’s processing of personal data is set out in points (c) and (e) of Article 6(1) of Regulation (EU) 2016/679 of 27 April 2016 (General Data Protection Regulation): compliance with a legal obligation and performance of a task carried out in the public interest, in accordance with the National Civil Aviation Security Programme as updated by the Resolutions of 9 July 2019 and 21 January 2021, Law 8/2011 of 28 April establishing measures for the protection of critical infrastructures, Law 21/2003 of 7 July on Air Safety, and Law 9/1968 of 5 April and Law 48/1978 on Official Secrets.
Recipients
Your data may be disclosed to courts and tribunals, law enforcement agencies, the National Security Office (ONS), GO Propco Benz SL and AENA. SME.
When processing personal data collected to access areas of the European EGNOS Service, Galileo GSC Service Center or other areas integrated into the European Union's EUSPA Space Programme, the data may be disclosed to the EUSPA Space Programme Agency and the European Satellite Services Provider (ESSP). Your data is not expected to be transferred internationally.
Rights
Those interested have a right to:
- Be informed if their personal data is being processed by ENAIRE
- Access your personal data, as well as request the rectification of inaccurate data or, where appropriate, request its erasure when, among other reasons, the data is no longer necessary to achieve the stated purpose.
Request under certain circumstances:
- Data processing restriction, in which case it will only be retained by ENAIRE for the establishment, exercise, or defense of legal claims.
- You have the right to object to the processing of your data, in which case ENAIRE will cease processing it, except for compelling legitimate grounds or for the establishment, exercise, or defense of possible legal claims, including the right to object to the processing of their data for the purposes of automated individual decision-making
Rights may be exercised through ENAIRE’s Central Data Protection Unit (known as UCPD from its Spanish acronym) - Avda. de Aragón 330 - Edificio B - 28022, Madrid, ucpd@enaire.es or via the Electronic Office (enaire.sede.gob.es). If, in exercising your rights, you have not been duly attended to, you may file a complaint with the Spanish Data Protection Agency – Address: C/Jorge Juan, 6, 28001 Madrid (Madrid) – Electronic Office: sedeagpd.gob.es.