Additional information on data protection – Video-surveillance system

FABRICACIÓN Y MANTENIMIENTO, S.A.U. (“FAYMASA”) will process images of people accessing its facilities, captured by video-surveillance systems, in the following terms:

  1. Identification and contact details of the Data Controller

The Data Controller for such data is:


TIN: A34101212

Postal Address:  C/ Francia, nº 2, P 68/69, P.I. Villalobón – 34004 Palencia

Telephone: (+34) 979 711 714

General e-mail:

Data Protection Delegate:

  1. Purpose of the processing.

At FAYMASA we will process the images captured by the video-surveillance systems in order to guarantee the security of our facilities and of all people and equipment in them.

  1. Legitimation of processing.

FAYMASA’s legitimate interest provides the legal basis to process the images for the purpose of guaranteeing access to our facilities and the safety of all people and equipment found there.

  1. Retention period.

The images will be retained for one (1) month from the time of access to FAYMASA’s facilities, save for the occurrence during this period of any act that may constitute an administrative, civil or criminal breach that requires the images to be retained for the purpose of evidence.

  1. Recipients.

Whenever there is a legal obligation or such communication is necessary in order to defend the rights and interests of FAYMASA or companies in MECAMEPAL Group that have staff or equipment at FAYMASA’s facilities, these data may be communicated to the aforementioned companies, to Courts and Tribunals, to the Public Administrations and to Law Enforcement Agencies.

Although we have hired security and video-surveillance companies to ensure security at our facilities, and these companies will be able to access the images found on our video-surveillance system, we have signed a contractual agreement with them which covers all GDPR requirements. Data subjects may request further details about recipients by sending an e-mail to

  1. Rights.

All persons in the images are entitled to obtain confirmation as to whether or not we are processing their personal data.

They are entitled to access their personal data and to request the rectification of any inaccurate data or, where appropriate, to ask for them to be deleted whenever, among other reasons, the data are no longer necessary for the purposes they were originally collected for. They will also be entitled, where appropriate and under certain circumstances, to oppose processing or to request its limitation, as well as the right to portability. These rights can only be exercised by sending a written communication to the postal or e-mail address of the Data Protection Delegate (DPD) indicated in section (1) above.

In any case, they are entitled to file a complaint with the Spanish Data Protection Agency (