I. Data Controller

The data controllers responsible for processing the data of the data subject are:

  • Ferrocarrils de la Generalitat de Catalunya, with registered office in Barcelona, 08017, C. dels Vergós, 44, and Tax ID No. Q0801576J. Tel. +34 933 663 000 – www.fgc.cat
  • Vallter, S.A., with registered office in Setcases (Girona), 17869, Pla de Morens, s/n, and Tax ID No. A17015165. Tel. +34 972 136 057 – www.vallter.cat
  • Actius de Muntanya, S.A.U., with registered office in Barcelona, 08017, C. dels Vergós, 44, and Tax ID No. A08141897. Tel. +34 973 297 085 – www.boitaull.cat
  • FGC RAIL, S.A., with registered office in Barcelona, 08017, C. dels Vergós, 44, and Tax ID No. A66775701. Tel. +34 933 663 000 – fgc-rail-sa
  • FGC Mobilitat, S.A., with registered office in Barcelona, 08017, C. dels Vergós, 44, and Tax ID No. A05415583. Tel. +34 933 663 000 – fgc-mobilitat-sa

II. Data Protection Officer

Ferrocarrils de la Generalitat de Catalunya and its affiliated entities have appointed a Data Protection Officer (DPO), responsible for overseeing compliance with this policy and advising the organisation on data protection matters.

For any queries or complaints, the DPO may be contacted through the following channels:

  • Name: Elisenda Escoda Ruanes
  • Email address: [email protected]
  • Postal address: C. dels Vergós, 44, 08017 Barcelona
  • Telephone: +34 933 663 000 (Monday to Thursday, 9:30 a.m. to 2:00 p.m. and 3:00 p.m. to 5:30 p.m.; Friday, 9:00 a.m. to 2:00 p.m.)

III. Legal Basis for Processing

The data treatment is done in order to veil for the public interest and with full legal basis found in the following norm: Law 38/2015, of 29 September, on the railway sector; Royal Decree 2387/2004, of 30 December, approving the Railway Sector Regulation; Law 5/2014, of 4 April, on Private Security.

IV. Purposes of Processing

With this data treatment the following objectives are pursued:

  • Ensuring the safety of persons, property, and facilities.
  • To capture, record, store, and retain images for the detection and/or investigation of fraudulent conduct or conduct contrary to administrative or criminal regulations.

V. Categories of Data Subjects

Those who are subject to the data treatment are:

  • Employees.
  • Other categories: people who have to access, or who are present in the surroundings or within the facilities (workers, visitors, suppliers)
  • Vulnerable groups are not considered as such.

VI. Categories of Personal Data

You may access your personal data, request their rectification or erasure, object to their processing, and request restriction of processing by submitting your request to Ferrocarrils de la Generalitat de Catalunya at C. dels Vergós, 44, 08017 Barcelona, by email to [email protected], or via the following link (Tràmits i Gestions – Ferrocarrils de la Generalitat de Catalunya).

If you consider that your request has not been satisfactorily addressed, you may lodge a complaint with the Catalan Data Protection Authority (https://www.apdcat.gencat.cat).

VII. Categories of Recipients

The recipients may be (if the correct circumstances are given):

  • Law enforcement authorities
  • Courts and tribunals

VIII. International Transfers

None are envisaged.

IX. Retention Period

A period of 30 days is given to erase the collected data.

X. General Description of Technical and Organisational Security Measures

The processing activities carried out by Ferrocarrils de la Generalitat de Catalunya (FGC) are performed both by automated and non-automated means.

The technical and organisational security measures implemented are aimed at ensuring:

  • Control of physical access to the equipment where the data are processed.
  • Control of media that may contain personal data.
  • Control of data storage.
  • Control of authorised users accessing the data and the type of access they carry out.
  • Control of data transmission and transport.
  • Control of the availability and integrity of the data.

Furthermore, a process for the regular verification, evaluation, and review of the effectiveness of the implemented measures has been established.

XI. How can you exercise your rights before Ferrocarrils de la Generalitat de Catalunya?

You may access your personal data, request their rectification or erasure, object to their processing, and request restriction of processing by submitting your request to Ferrocarrils de la Generalitat de Catalunya at C. dels Vergós, 44, 08017 Barcelona, by email to [email protected], or via the following link (Tràmits i Gestions – Ferrocarrils de la Generalitat de Catalunya).

If you consider that your request has not been satisfactorily addressed, you may lodge a complaint with the Catalan Data Protection Authority (https://www.apdcat.gencat.cat).