Logical access security and control

• What is the purpose of this processing?

  Purpose	Security features for logical Access to T1 infrastructure and handling of cyber-incidents

  Purpose

  Security features for logical Access to T1 infrastructure and handling of cyber-incidents

• What type of data do we handle?

  Category of personal data	Identification and contact Job details Identification of the device and geopositioning. Others: log-in times, connection points, IPs, successful and failed access attempts, URLs visited, e-mail headers, e-mail source and destination. Social circumstances
  Category of data subject	Public sector employees (civil servants, non-tenured staff and temporary staff) Suppliers

  Category of personal data

  • Identification and contact
  • Job details
  • Identification of the device and geopositioning.
  • Others: log-in times, connection points, IPs, successful and failed access attempts, URLs visited, e-mail headers, e-mail source and destination.
  • Social circumstances

  Category of data subject

  • Public sector employees (civil servants, non-tenured staff and temporary staff)
  • Suppliers

• Where does the data come from?

  Origin of data	The data subject and/or their representative.

  Origin of data

  The data subject and/or their representative.

• Do we assign your data to third parties?

  Recipient natural or legal persons	Collaborating public or private entities: Izenpe: for the creation of a digital certificate. State security forces and corps: for cases involving claims and/or court injunctions. Judicial Bodies.
  International transfers	No international transfers of data are made

  Recipient natural or legal persons

  • Collaborating public or private entities: Izenpe: for the creation of a digital certificate.
  • State security forces and corps: for cases involving claims and/or court injunctions.
  • Judicial Bodies.

  International transfers

  No international transfers of data are made

• What authorises us to process your data?

  Lawfulness	Article 6.1.b) of the GDPR. Performance of a contract (that of the employee or the supplying company, if applicable). Article 6.1.c) of the GDPR. Compliance with legal obligations: Royal Decree 311/2022, of 3 May, regulating the National Security Framework.

  Lawfulness

  • Article 6.1.b) of the GDPR. Performance of a contract (that of the employee or the supplying company, if applicable).
  • Article 6.1.c) of the GDPR. Compliance with legal obligations:

    Royal Decree 311/2022, of 3 May, regulating the National Security Framework.

• HOW LONG DO WE STORE YOUR DATA?

  Place of storage	Three years.

  Place of storage

  Three years.

• What personal rights can you exercise in Lantik?

  Face-to-face channel:

  The data subject may exercise their rights to access, rectification and the erasure of data, and the limitation and opposition to the treatment of said data, as well as the portability by presenting a written document at Avenida Sabino Arana, 44 - Bilbao, for the attention of the Security Department. The data subject must substantiate their identity by showing their ID card or equivalent identification document.

  Electronic channel:

  By sending a written document to the email address: ARSOLP lantik rights

  Take into account that to make your application through the electronic channel enabled to this end, you must substantiate your identity by making use of one of the following authentication mechanisms: B@k, B@kQ or by using digital certificates (such as the izenpe citizen certificate or an electronic ID)

  You are also entitled to waive said action by withdrawing your consent to the treatment of personal data.

  The data subject is also entitled to make a claim to the pertinent control authority – Spanish Data Protection Agency.

  What personal rights can you exercise in Lantik?

  Face-to-face channel:

  The data subject may exercise their rights to access, rectification and the erasure of data, and the limitation and opposition to the treatment of said data, as well as the portability by presenting a written document at Avenida Sabino Arana, 44 - Bilbao, for the attention of the Security Department. The data subject must substantiate their identity by showing their ID card or equivalent identification document.

  Electronic channel:

  By sending a written document to the email address: ARSOLP lantik rights

  Take into account that to make your application through the electronic channel enabled to this end, you must substantiate your identity by making use of one of the following authentication mechanisms: B@k, B@kQ or by using digital certificates (such as the izenpe citizen certificate or an electronic ID)

  You are also entitled to waive said action by withdrawing your consent to the treatment of personal data.

  The data subject is also entitled to make a claim to the pertinent control authority – Spanish Data Protection Agency.

• Who is the Data Protection Officer of the provincial public sector?

  The Data Protection Officer at Lantik is the Head of the Legal Advice and Data Protection Department of the Provincial Council of Biscay.

  The creation, appointment and regulation of the DPO of the Provincial Council of Biscay and provincial public sector agencies were approved through the Resolution of the Governing Council on 15 May 2018. The publication of this appointment was performed through the Official Gazette of Biscay in Gazette number 99, of 24 May 2018, and officially notified to the Basque Data Protection Agency (AVPD).

  Any enquiries you may have on data protection relating to the processing by the Provincial Council of Biscay and its provincial agencies can be made HERE

  Who is the Data Protection Officer of the provincial public sector?

  The Data Protection Officer at Lantik is the Head of the Legal Advice and Data Protection Department of the Provincial Council of Biscay.

  The creation, appointment and regulation of the DPO of the Provincial Council of Biscay and provincial public sector agencies were approved through the Resolution of the Governing Council on 15 May 2018. The publication of this appointment was performed through the Official Gazette of Biscay in Gazette number 99, of 24 May 2018, and officially notified to the Basque Data Protection Agency (AVPD).

  Any enquiries you may have on data protection relating to the processing by the Provincial Council of Biscay and its provincial agencies can be made HERE