This policy describes the processing carried out by the Agbar Foundation of personal data collected by closed circuit surveillance cameras and through the access points and access control devices at the Agbar Foundation’s facilities.
I. Who is the data controller for the personal data collected?
The data controller for personal data is the Agbar Foundation whose registered office is at carretera de Sant Joan Despí, 1, 08940 Cornellà de Llobregat.
If you have any query or question in relation to the processing of personal data, contact our data protection officer (DPO) at the email address dpofundacioagbar@agbar.es. The DPO is responsible for overseeing compliance with the law relating to the protection of personal data and privacy policies in relation to the processing carried out by the Agbar Foundation, including in relation to videosurveillance and the control of access to the facilities of the Agbar Foundation.
II. What do we use your personal data for?
We collect different types of personal data which are listed in the following paragraph for the purpose of ensuring the security of our facilities, in particular:
• Personal data collected via the videosurveillance system are processed to ensure the security of goods and people in our facilities.
• Personal data collected via our access control systems are processed to:
- Facilitate access to offices, working areas and restricted areas.
- To issue appropriate access passes.
- To monitor the entry and departure of external staff and visitors.
- To ensure the security of goods and people in our facilities.
III. What kinds of personal data do we process?
- Personal details (name, IDN, business with which you are affiliated, person visited, etc.). We will ask you for this personal data when you come to the Reception desk for the issue of a visitor’s pass to enable you to access the facilities.
- Personal data generated by your visitor’s pass. Each time that you pass your card over the access turnstile the time of entry or departure will be stored.
- Video recordings.. While you are within the area covered by the videosurveillance cameras installed at our building your image may be recorded. There are no hidden cameras. There are signs to identify all the cameras.
IV. Legal basis of processing
We process your personal data in accordance with the public interest of the Agbar Foundation in maintaining the security of its facilities and of the goods and people who may be at such facilities.
V. Who do we share personal data with?
Your personal data may be accessed by businesses with whom we have contracted for the provision of reception and security services and the technical maintenance of our videosurveillance cameras and access turnstiles. The Agbar Foundation ensures that all entities providing such services are in compliance with the law relating to the protection of personal data which applies to them in their capacity as data processors.
Personal data will not be disclosed to third parties except when required by legal obligation. In the event of the detection of the occurrence of a security incident or if we have reason to believe that an offence (theft, criminal damage, assault, etc.) has been committed, the personal data collected by our videosurveillance cameras and access control systems will be made available to the forces of law and order and competent judges and courts.
VI. For how long will we retain your personal data?
The personal data collected will be deleted within no more than 30 days (from the time of recording). By exception, the Agbar Foundation will keep a copy of the personal data for a longer period that there has been a security incident or we have reasons to believe that an offence (theft, for example) has been committed.
VII. Your rights
Current data protection law gives you a number of rights:
- Right of access to your personal data and to obtain a copy.
- Right of erasure or rectification.
- Right to restriction of processing.
- Right of objection.
- Right to portability of the personal data that you have provided.
Please note that although you may exercise any of the rights above, the particular nature of the processing regulated by this policy does not allow us to respond positively to your request in every case. For example, we cannot correct a videosurveillance recording or an access log that automatically shows the time of entry to our facilities.
The Agbar Foundation acknowledges in addition your right to make a complaint to the DPO if you feel that your personal data has been improperly processed. Your complaint will be investigated confidentially and you will receive a reply from the DPO.
To exercise your rights, contact us in the following ways:
- By sending a letter by post to the address carretera de Sant Joan Despí, 1, 08940 Cornellà de Llobregat or by email to the email address fundacioagbar@agbar.es.
In any event as data subject you can make such complaints as you consider appropriate to the Spanish Data Protection Agency (www.aepd.es).
