Surveillance, access and permanence control to Banco de España premises


  • Security management, control of access and appointments in the buildings of Banco de España for the prevention and investigation of crimes against persons or property.
  • Management of the prevention and investigation of misconducts by Banco de España as an employer.
  • Registration of vehicle plates and access authorizations for safety purposes.

Legal basis

  • Performance of a task carried out in the public interest or in the exercise of official authority vested in the controller pursuant to:
    • (i) Organic Law 3/2018, of 5 December, on Data Protection and guarantee of digital rights.
    • (ii) Law 13/1994, of 1 June, on the Autonomy of Banco de España.
  • Performance of a contract to which the data subject is party.

Categories of data subjects

  • Employees
  • Citizens
  • Providers
  • Partners
  • Sub-contracted staff

Categories of personal data

  • Identification data: Name, surname, ID number and vehicle plate
  • Contact data: Phone number
  • Professional: Organization for which the data subject is working, number of employee and number of card registration
  • Data related to the commission of criminal offences
  • Special categories of data: Biometric data (fingerprint)
  • Other data: Image and voice

Retention period

Personal data shall be retained for the time necessary to fulfil the purpose for which they were collected and to allocate any liability arising from said purpose and from the processing of the data.

Security measures

Security measures provided for in Annex II of Royal Decree 3/2020, of 8 January, which regulates the National Security Scheme in the field of Electronic Administration.


  • Law enforcement authorities
  • Madrid Town Hall
  • Courts of Justice
  • Other competent public authorities

International transfer of data


Data controller

Banco de España
NIF: Q2802472G

Data Protection Officer

Division of Governance and Transparency
Contact formOpens in a new window

Exercise of rights and complaints

You can check whether it is mandatory for you to provide your personal data, as well as the procedure to exercise your rights, withdraw your consent if applicable and lodge a complaint before the Data Protection Officer or the Spanish Data Protection Agency at our Privacy Policy