Controller Identity
ENAIRE – Tax ID: Q2822001J
Postal address: Avda. de Aragón, 330 - Edificio 2 - 28022 Madrid
Telephone: 900 929 220
Email: informacion@enaire.es
Data Protection Officer (DPO): ucpd@enaire.es
Purpose of the data processing and storage periods
To manage the applicable obligations with regard to the National Security Framework and Certification Frameworks in the field of privacy. To manage and resolve enquiries and claims regarding data protection, relations with AEPD and other agencies, investigation of security breaches.
The data will be held for the time required to comply with the purpose for which they were obtained and to determine any potential associated liabilities. The contents of the archiving and documentation regulations applicable to ENAIRE shall apply.
Legal basis
The legal basis for ENAIRE to process the personal data is articles 6.1.c and 6.1.e of General Data Protection Regulation 2016/679 of 27 April: compliance with a legal obligation and task carried out in the public interest. Namely, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data; Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights; Law 40/2015 of 1 October on the Legal Regime of the Public Sector; and Royal Decree 3/2010 of 8 January, which regulates the National Security Framework in the field of electronic administration.
Recipients
The data may be disclosed to courts, law enforcement agencies, control authorities within the EU and to the National Cryptological Centre (CCN).
Rights
Those interested have a right to:
- Be informed if their personal data is being processed by ENAIRE
- Access your personal data, as well as request the rectification of inaccurate data or, where appropriate, request its erasure when, among other reasons, the data is no longer necessary to achieve the stated purpose.
Request under certain circumstances:
- Data processing restriction, in which case it will only be retained by ENAIRE for the establishment, exercise, or defense of legal claims.
- You have the right to object to the processing of your data, in which case ENAIRE will cease processing it, except for compelling legitimate grounds or for the establishment, exercise, or defense of possible legal claims, as well as object to the processing of their data for the purpose of automated individual decision-making.
Rights may be exercised through ENAIRE’s Central Data Protection Unit (known as UCPD from its Spanish acronym) - Avda. de Aragón 330 - Edificio B - 28022, Madrid, ucpd@enaire.es or via the Electronic Office (enaire.sede.gob.es).