Managing physical entries at Lantik premises

• What is the purpose of this processing?

  Purpose	Control and management of the physical security of Lantik's premises, for employees, visitors, and suppliers. Control of access to Data Processing Centres (DPCs) by authorised personnel.

  Purpose

  • Control and management of the physical security of Lantik's premises, for employees, visitors, and suppliers.
  • Control of access to Data Processing Centres (DPCs) by authorised personnel.

• What type of data do we handle?

  Category of personal data	Identification and contact (name and surnames, ID No., image and voice). Job details
  Category of data subject	Employees Suppliers. Visitors and/or companions

  Category of personal data

  • Identification and contact (name and surnames, ID No., image and voice).
  • Job details

  Category of data subject

  • Employees
  • Suppliers.
  • Visitors and/or companions

• Where does the data come from?

  Origin of data	The data subject and/or their representative.

  Origin of data

  The data subject and/or their representative.

• Do we assign your data to third parties?

  Recipient natural or legal persons	State Security Forces and Corps. Judicial bodies.
  International transfers	No international transfers of data are made

  Recipient natural or legal persons

  • State Security Forces and Corps.
  • Judicial bodies.

  International transfers

  No international transfers of data are made

• What authorises us to process your data?

  Lawfulness

  Article 6.1.a) of the GDPR. Consent of the data subject. Fingerprinting. Article 6.1.e) of the GDPR. Processing required for the completion of a task carried out in the public interest or in the exercise of public powers conferred upon the controller. Video surveillance. Article 6.1.f) of the GDPR. Processing necessary for the satisfaction of the data controller's legitimate interests. ID card scanning. Article 6.1.b) of the GDPR. Processing necessary in order to satisfy legitimate interests pursued by the controller or by a third party Other situations.

  Lawfulness

  • Article 6.1.a) of the GDPR. Consent of the data subject.

    Fingerprinting.

  • Article 6.1.e) of the GDPR. Processing required for the completion of a task carried out in the public interest or in the exercise of public powers conferred upon the controller.

    Video surveillance.

  • Article 6.1.f) of the GDPR. Processing necessary for the satisfaction of the data controller's legitimate interests.

    ID card scanning.

  • Article 6.1.b) of the GDPR. Processing necessary in order to satisfy legitimate interests pursued by the controller or by a third party

    Other situations.

• HOW LONG DO WE STORE YOUR DATA?

  Place of storage	Access control data: Data on visits and suppliers: 1 month. Fingerprint to access CPD-2: One month after the end of the contractual relationship. Internal personnel log data: four years or when the employee loses employee status. Video surveillance data: One month.

  Place of storage

  • Access control data:

    • Data on visits and suppliers: 1 month.

      Fingerprint to access CPD-2: One month after the end of the contractual relationship.

    • Internal personnel log data: four years or when the employee loses employee status.
  • Video surveillance data: One month.

• What personal rights can you exercise in Lantik?

  Face-to-face channel:

  The data subject may exercise their rights to access, rectification and the erasure of data, and the limitation and opposition to the treatment of said data, as well as the portability by presenting a written document at Avenida Sabino Arana, 44 - Bilbao, for the attention of the Security Department. The data subject must substantiate their identity by showing their ID card or equivalent identification document.

  Electronic channel:

  By sending a written document to the email address: ARSOLP lantik rights

  Take into account that to make your application through the electronic channel enabled to this end, you must substantiate your identity by making use of one of the following authentication mechanisms: B@k, B@kQ or by using digital certificates (such as the izenpe citizen certificate or an electronic ID)

  You are also entitled to waive said action by withdrawing your consent to the treatment of personal data.

  The data subject is also entitled to make a claim to the pertinent control authority – Spanish Data Protection Agency.

  What personal rights can you exercise in Lantik?

  Face-to-face channel:

  The data subject may exercise their rights to access, rectification and the erasure of data, and the limitation and opposition to the treatment of said data, as well as the portability by presenting a written document at Avenida Sabino Arana, 44 - Bilbao, for the attention of the Security Department. The data subject must substantiate their identity by showing their ID card or equivalent identification document.

  Electronic channel:

  By sending a written document to the email address: ARSOLP lantik rights

  Take into account that to make your application through the electronic channel enabled to this end, you must substantiate your identity by making use of one of the following authentication mechanisms: B@k, B@kQ or by using digital certificates (such as the izenpe citizen certificate or an electronic ID)

  You are also entitled to waive said action by withdrawing your consent to the treatment of personal data.

  The data subject is also entitled to make a claim to the pertinent control authority – Spanish Data Protection Agency.

• Who is the Data Protection Officer of the provincial public sector?

  The Data Protection Officer at Lantik is the Head of the Legal Advice and Data Protection Department of the Provincial Council of Biscay.

  The creation, appointment and regulation of the DPO of the Provincial Council of Biscay and provincial public sector agencies were approved through the Resolution of the Governing Council on 15 May 2018. The publication of this appointment was performed through the Official Gazette of Biscay in Gazette number 99, of 24 May 2018, and officially notified to the Basque Data Protection Agency (AVPD).

  Any enquiries you may have on data protection relating to the processing by the Provincial Council of Biscay and its provincial agencies can be made HERE

  Who is the Data Protection Officer of the provincial public sector?

  The Data Protection Officer at Lantik is the Head of the Legal Advice and Data Protection Department of the Provincial Council of Biscay.

  The creation, appointment and regulation of the DPO of the Provincial Council of Biscay and provincial public sector agencies were approved through the Resolution of the Governing Council on 15 May 2018. The publication of this appointment was performed through the Official Gazette of Biscay in Gazette number 99, of 24 May 2018, and officially notified to the Basque Data Protection Agency (AVPD).

  Any enquiries you may have on data protection relating to the processing by the Provincial Council of Biscay and its provincial agencies can be made HERE