ENAIRE's facilities are equipped with video surveillance and access control systems. Below, we provide the necessary information regarding these data processing activities, in compliance with Article 13 of the GDPR:
Controller
Identity: ENAIRE – Tax ID number: Q2822001J
Postal address: Avda. de Aragón, 330 - Edificio 2 - 28022 Madrid
Telephone: 900 929 220
Email: info@enaire.es
Data Protection Officer (DPO): ucpd@enaire.es
Purpose of the data processing and storage periods
Image recording by video surveillance systems, issue of identification cards and access control to specific facilities and control areas in order to ensure the safety of ENAIRE's personnel, property and facilities, and comply with the rules and measures in place involving physical security. In the case of routine video surveillance and access control, personal data will be stored for one month, unless we are required by law to extend this period. When issuing cards to ENAIRE employees or contractors, the personal data will be stored, respectively, for the duration of the employment or legal contract that underpins the relationship. When processing personal data collected to access areas of the European EGNOS Service, Galileo GSC Service Center or other areas integrated into the European Union's EUSPA Space Programme, it will be stored for one year. Laws on databases of public interest maintained by government agencies may be applicable.
Legal basis
The legal basis for ENAIRE to process the personal data is articles 6.1.c and 6.1.e of the General Data Protection Regulation 2016/679 of 27 April: compliance with a legal obligation and task carried out in the public interest. The above is in compliance with the National Safety Plan for Civil Aviation, updated via the Resolutions of 9 July 2019 and 21 January 2021, Act 8/2011 of 28 April, laying out measures to protect critical infrastructures, and Air Safety Act 21/2003 of 7 July.
Recipients
Your data may be provided to courts, tribunals, law enforcement agencies, GO Propco Benz SL, AENA. SME and judicial bodies.
When processing personal data collected to access areas of the European EGNOS Service, Galileo GSC Service Center or other areas integrated into the European Union's EUSPA Space Programme, the data may be disclosed to the EUSPA Space Programme Agency and the European Satellite Services Provider (ESSP). Your data is not expected to be transferred internationally.
Rights
Those interested have a right to:
- Be informed if their personal data is being processed by ENAIRE
- Access your personal data, as well as request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary to achieve the stated purpose.
Request under certain circumstances:
- Data processing restriction, in which case it will only be stored by ENAIRE to exercise or defend claims.
- You have the right to object to the processing of your data, in which case ENAIRE will cease processing the data, except for compelling legitimate grounds, or for the exercise or defense of potential claims. This includes the processing of your data for automated individual decision-making.
Rights may be exercised through ENAIRE’s Central Data Protection Unit (known as UCPD from its Spanish acronym) - Avda. de Aragón 330 - Edificio B - 28022, Madrid, ucpd@enaire.es or via the Electronic Office (enaire.sede.gob.es).
If you have not been duly attended to in the exercise of your rights, you may lodge a complaint with the Spanish Data Protection Agency - Address: C/Jorge Juan, 6 - 28001, Madrid – E-Office: sedeagpd.gob.es.