Pursuant to Article of the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), and repealing Directive 95/46/EC) and to Article 11 of the Spanish Personal Data Protection and Guarantee of Digital Rights Act 3/2018 of 5 December (LOPDGDD), Euskotren S.A.U is the data controller allowed to collect and process the personal data by means of the app.
In the scope of the public interest mission of the entity’s public transport corporate purpose, personal data are gathered and processed as set out below :
| Data controller and data protection officer contact. |
Euskotren Ferrocarriles Vascos S.A.U.
|
| Purposes and legitimacy of the processing: | Managing complaints, suggestions, claims, lost objects and anti-social behaviour notifications. Legal basis: Article 8 LOPDGDD public interest mission based on the public transport corporate purpose of the publicly-owned company Euskotren. |
| Description of the categories of data subjects. |
Users who interact and/or through the app, social media and/or websites of the local council. |
| Personal data categories. |
|
| Categories of recipients to whom the personal data have been or will be disclosed including recipients in third countries or international organisations. |
|
| Where possible, the envisaged time limits for deletion of the different data categories. | Processing during the term of the legal relationship The data will be kept for the necessary time to comply with the purpose for which the data are gathered, to answer the requests made and to establish possible liabilities arising from that purpose. |
| Where possible, a general description of the security technical and organisational measures. | Those envisaged in security policies of the organisation. |