Operations with Remotely Piloted Aircraft Systems (RPAS)

Controller

Identity: ENAIRE – Tax ID number: Q2822001J
Postal address: Avda. de Aragón, 330 - Edificio 2 - 28022 Madrid
Telephone: 900 929 220
Email: info@enaire.es
Data Protection Officer (DPO): ucpd@enaire.es

Purpose of the processing

Purpose: The data collected, as well as the provided documentation, will be processed for the purpose of processing operations conducted by Drones or RPAS (Remotely Piloted Aircraft Systems) and managed by ENAIRE in accordance with Royal Decrees 1036/2017 and 552/2014.

Storage periods: The data will be stored for a maximum period of 3 years, and it will be subsequently anonymised and stored for statistical and auditory purposes.

  • Legitimate interest
  • The legal basis for ENAIRE processing the data is based on article 6.1.c) of the GDPR: processing is necessary for compliance with a legal obligation to which the controller is subject:

    Royal Decree 1036/2017 of 15 December, which governs the civil use of aircraft piloted via remote control

  • Royal Decree 552/2014 of 27 June, which extends air Regulations and common operational provisions for air navigation services and procedures

Recipients

Data will not be transferred to third parties, unless legally mandated.

Rights

Those interested have a right to:

  • Obtain confirmation on if ENAIRE is processing their personal data.
  • To consult their personal data, as well as  request amendment of inaccurate data, or, where appropriate, request its deletion in the case that, among other reasons, such data is no longer needed for the purposes for which it was collected.
  • Request under certain circumstances:
  • Data processing restriction, in which case it will only be stored by ENAIRE to exercise or defend claims.
  • Data processing objection, in which case ENAIRE will stop data processing, except for compelling legitimate grounds, or to exercise or defend possible claims. Including the processing of their data for automated individual decisions.
  • Rights may be exercised through ENAIRE’s Central Data Protection Unit (known as UCPD from its Spanish acronym) - Avda. de Aragón 330 - Edificio B - 28022, Madrid or via the Electronic Office (sede.enaire.gob.es).

You are informed that you have the right to withdraw your data processing consent at any time.

If you have not been duly attended to in the exercise of your rights, you may lodge a complaint with the Spanish Data Protection Agency - Address: C/Jorge Juan, 6 - 28001 MADRID – e-Office: sedeagpd.gob.es