Página web de Enaire

Controller Identity

ENAIRE – Tax ID: Q2822001J
Postal address: Avda. de Aragón, 330 - Edificio 2 - 28022 Madrid
Telephone: 900 929 220
Email: informacion@enaire.es
Data Protection Officer (DPO): ucpd@enaire.es

Purpose of the data processing and storage periods

To manage the applicable obligations with regard to the National Security Framework and Certification Frameworks in the field of privacy. To manage and resolve enquiries and claims regarding data protection, relations with AEPD and other agencies, investigation of security breaches.

The data will be held for the time required to comply with the purpose for which they were obtained and to determine any potential associated liabilities. The contents of the archiving and documentation regulations applicable to ENAIRE shall apply.

Legal basis

The legal basis for ENAIRE to process the personal data is articles 6.1.c and 6.1.e of General Data Protection Regulation 2016/679 of 27 April: compliance with a legal obligation and task carried out in the public interest. Namely, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data; Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights; Law 40/2015 of 1 October on the Legal Regime of the Public Sector; and Royal Decree 3/2010 of 8 January, which regulates the National Security Framework in the field of electronic administration.

Recipients

The data may be disclosed to courts, law enforcement agencies, control authorities within the EU and to the National Cryptological Centre (CCN).

Rights

Those interested have a right to:

• Obtain confirmation on if ENAIRE is processing their personal data.
• To consult their personal data, as well as  request amendment of inaccurate data, or, where appropriate, request its deletion in the case that, among other reasons, such data is no longer needed for the purposes for which it was collected.
• Request under certain circumstances:

• Data processing restriction, in which case it will only be stored by ENAIRE to exercise or defend claims.
• Data processing objection, in which case ENAIRE will stop data processing, except for compelling legitimate grounds, or to exercise or defend possible claims. Including the processing of their data for automated individual decisions.

Rights may be exercised through ENAIRE’s Central Data Protection Unit (known as UCPD from its Spanish acronym) - Avda. de Aragón 330 - Edificio B - 28022, Madrid or via the Electronic Office (enaire.sede.gob.es)

If you have not been duly attended to in the exercise of your rights, you may lodge a complaint with the Spanish Data Protection Agency - Address: C/Jorge Juan, 6 - 28001, Madrid – E-Office: sedeagpd.gob.es.