Internal Lantik, S.A.M.P. Information System referring to offences and breaches

• What is the purpose of this processing?

  Purpose	We process your data for the Lantik, S.A.M.P. Information System for the communication and investigation of information referring to a serious or very serious administrative or criminal infraction, or in the case of other code of conduct or regulatory breaches.

  Purpose

  We process your data for the Lantik, S.A.M.P. Information System for the communication and investigation of information referring to a serious or very serious administrative or criminal infraction, or in the case of other code of conduct or regulatory breaches.

• What type of data do we handle?

  Category of personal data	Employees
  Category of data subject	Identification data and contact information. Employment details. Others: personal data communicated as a result of the investigation of the informant and/or affected persons. Special categories of data in a narrow sense, and in strictly necessary cases.

  Category of personal data

  • Employees

  Category of data subject

  • Identification data and contact information.
  • Employment details.
  • Others: personal data communicated as a result of the investigation of the informant and/or affected persons.
  • Special categories of data in a narrow sense, and in strictly necessary cases.

• Where does the data come from?

  Origin of data	The data subject and/or their representative. Independent informer protection Authority Other bodies, authorities or external persons.

  Origin of data

  • The data subject and/or their representative.
  • Independent informer protection Authority
  • Other bodies, authorities or external persons.

• Do we assign your data to third parties?

  Recipient natural or legal persons	Websites (in particular, but not limited to, lantik.bizkaia.eus) Social Networks. Face-to-face visitors: attendees at events, conferences, and other venues where this material is displayed.
  International transfers	No international transfers take place.

  Recipient natural or legal persons

  • Websites (in particular, but not limited to, lantik.bizkaia.eus)
  • Social Networks.
  • Face-to-face visitors: attendees at events, conferences, and other venues where this material is displayed.

  International transfers

  No international transfers take place.

• What authorises us to process your data?

  Lawfulness

  Article 6.1.c) of the GDPR. Compliance with legal obligations: Law 2/2023, of 20 February, regulatory basis for the protection of individuals that report regulatory breaches and the fight against corruption. Organic Law 3/2018, of 5 December on Personal Data Protection and guaranteed digital rights. Organic Law 7/2021, of 26 May, on the protection of personal data processed for the purpose of preventing, detecting, investigating, and trying criminal offences and executing criminal sanctions. All other applicable sectoral regulations. Special category data: processing is necessary for reasons of essential public interest, on the basis of EU or Member State Law, which must be proportionate to the aim pursued, respect in essence the right to data protection and establish adequate and specific measures to protect the interests and fundamental rights of the data subject (article 9.2 g GDPR).

  Lawfulness

  Article 6.1.c) of the GDPR. Compliance with legal obligations:

  • Law 2/2023, of 20 February, regulatory basis for the protection of individuals that report regulatory breaches and the fight against corruption.
  • Organic Law 3/2018, of 5 December on Personal Data Protection and guaranteed digital rights.
  • Organic Law 7/2021, of 26 May, on the protection of personal data processed for the purpose of preventing, detecting, investigating, and trying criminal offences and executing criminal sanctions.
  • All other applicable sectoral regulations.
  • Special category data: processing is necessary for reasons of essential public interest, on the basis of EU or Member State Law, which must be proportionate to the aim pursued, respect in essence the right to data protection and establish adequate and specific measures to protect the interests and fundamental rights of the data subject (article 9.2 g GDPR).

• HOW LONG DO WE STORE YOUR DATA?

  Place of storage

  As a general rule, the processing of personal data must be carried out within a period of 3 months or 6 months depending on the complexity of the procedure in question, for the processing thereof and application of anonymisation or blocking, technical security measures deemed necessary and applicable where given, to guarantee confidentiality and security. If an investigation is not started, the personal data will be eliminated within a period of 3 months.

  Place of storage

  As a general rule, the processing of personal data must be carried out within a period of 3 months or 6 months depending on the complexity of the procedure in question, for the processing thereof and application of anonymisation or blocking, technical security measures deemed necessary and applicable where given, to guarantee confidentiality and security.

  If an investigation is not started, the personal data will be eliminated within a period of 3 months.

• What personal rights can you exercise in Lantik?

  Face-to-face channel:

  The data subject may exercise their rights to access, rectification and the erasure of data, and the limitation and opposition to the treatment of said data, as well as the portability by presenting a written document at Avenida Sabino Arana, 44 - Bilbao, for the attention of the Security Department. The data subject must substantiate their identity by showing their ID card or equivalent identification document.

  Electronic channel:

  By sending a written document to the email address: ARSOLP lantik rights

  Take into account that to make your application through the electronic channel enabled to this end, you must substantiate your identity by making use of one of the following authentication mechanisms: B@k, B@kQ or by using digital certificates (such as the izenpe citizen certificate or an electronic ID)

  You are also entitled to waive said action by withdrawing your consent to the treatment of personal data.

  The data subject is also entitled to make a claim to the pertinent control authority – Spanish Data Protection Agency.

  What personal rights can you exercise in Lantik?

  Face-to-face channel:

  The data subject may exercise their rights to access, rectification and the erasure of data, and the limitation and opposition to the treatment of said data, as well as the portability by presenting a written document at Avenida Sabino Arana, 44 - Bilbao, for the attention of the Security Department. The data subject must substantiate their identity by showing their ID card or equivalent identification document.

  Electronic channel:

  By sending a written document to the email address: ARSOLP lantik rights

  Take into account that to make your application through the electronic channel enabled to this end, you must substantiate your identity by making use of one of the following authentication mechanisms: B@k, B@kQ or by using digital certificates (such as the izenpe citizen certificate or an electronic ID)

  You are also entitled to waive said action by withdrawing your consent to the treatment of personal data.

  The data subject is also entitled to make a claim to the pertinent control authority – Spanish Data Protection Agency.

• Who is the Data Protection Officer of the provincial public sector?

  The Data Protection Officer at Lantik is the Head of the Legal Advice and Data Protection Department of the Provincial Council of Biscay.

  The creation, appointment and regulation of the DPO of the Provincial Council of Biscay and provincial public sector agencies were approved through the Resolution of the Governing Council on 15 May 2018. The publication of this appointment was performed through the Official Gazette of Biscay in Gazette number 99, of 24 May 2018, and officially notified to the Basque Data Protection Agency (AVPD).

  Any enquiries you may have on data protection relating to the processing by the Provincial Council of Biscay and its provincial agencies can be made HERE

  Who is the Data Protection Officer of the provincial public sector?

  The Data Protection Officer at Lantik is the Head of the Legal Advice and Data Protection Department of the Provincial Council of Biscay.

  The creation, appointment and regulation of the DPO of the Provincial Council of Biscay and provincial public sector agencies were approved through the Resolution of the Governing Council on 15 May 2018. The publication of this appointment was performed through the Official Gazette of Biscay in Gazette number 99, of 24 May 2018, and officially notified to the Basque Data Protection Agency (AVPD).

  Any enquiries you may have on data protection relating to the processing by the Provincial Council of Biscay and its provincial agencies can be made HERE