The public company for Urban Transport in Seville, TUSSAMThe tendering process for the Data Protection Officer (DPO) service has recently concluded. As a result, SOLTEL has been selected as the winning bidder and will seek to ensure compliance with the General Data Protection Regulation (GDPR) and the Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD).

What does this contract entail?

SOLTEL, as TUSSAM's Data Protection Officer, will directly participate in the strategic commitment of this public company to Strengthen security and privacy in the handling of information from employees, users, and collaborators, treating them with the highest level of diligence and confidentiality..

Having assumed the fundamental role as guarantor of that all processes related to the processing of personal data are aligned with the General Data Protection Regulation (GDPR) and the Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD)Several services will be carried out, starting with an audit of current systems and progressing to the implementation of continuous improvement measures.

The contract also entails the effective integration of international security standards, such as National Security Scheme (ENS) and the ISO 27001 standard, ensuring that TUSSAM operates under the most advanced parameters in risk management and information protection.

Data Protection Services

Among the functions and responsibilities that SOLTEL will assume as Data Protection Officer (DPO) of TUSSAM, the following stand out in general:

1. Monitoring regulatory compliance

1. • Ensure that personal data processing is carried out in accordance with the GDPR and the LOPDGDD.
   • Review internal data protection policies and procedures.

2. Advice and training

1. • Inform and advise TUSSAM staff on their data protection obligations and monitor their application in accordance with Article 35 of the GDPR.
   • Design training and awareness programs for employees on the importance of privacy and information security.

3. Risk management and impact analysis

1. • Conduct periodic audits on the processing of personal data.
   • Identify risks associated with treatment operations and propose corrective measures.
   • Prepare impact assessments when new systems or data processing are introduced.

4. Relationship with the supervisory authorities

1. • Act as a point of contact between TUSSAM and the Spanish Data Protection Agency (AEPD).
   • Manage queries, complaints and incidents related to data protection.
   • To act as the contact point for the supervisory authority on matters relating to processing, including the prior consultation referred to in Article 36 of the GDPR and to make inquiries, where appropriate, on any other matter

5. Security breach management

1. • Establish procedures for the detection, notification, and management of security breaches.
   • Report the incidents to the relevant authorities and the affected individuals, if necessary.

6. Continuous Improvement

1. • Promote the review and constant improvement of the data protection management system.
   • Ensure the integration of GDPR guidelines with other relevant standards, such as the National Security Scheme (ENS).

Other projects related to Data Protection

With this contract, SOLTEL ensures that this public company, TUSSAM, belonging to the Seville City Council, will have the support of a highly qualified team with proven experience in services like this. Examples of the above are some of the projects listed below:

1. Soltel will provide Data Protection services and implement the Cetursa Sierra Nevada whistleblowing channel: recently, Cetursa Sierra Nevada awarded SOLTEL the provision of this service, which aims to ensure compliance with Regulation (EU) 2016/679 and Organic Law 3/2018, as well as to establish an internal information system for reporting irregularities, in line with Law 2/2023.
2. The Seville City Council awards Soltel the service for regulatory compliance in Data Protection: This project also guarantees compliance with current data protection regulations, specifically the General Data Protection Regulation (GDPR), and the Organic Law 3/2018, of Personal Data Protection and guarantee of digital rights.
3. Soltel develops the Case Management System for the Transparency and Data Protection Council of Andalusia: This time, it involves the creation of the agency's new file management system, which aims to digitize the work done in the agency, covering 75% of its employees.
4. Data Protection Officer for Mercasevilla: In this case, SOLTEL was awarded the contract to perform functions in the consolidation of data security for Mercasevilla, the well-known food distribution company.

Finally, it is worth mentioning SOLTEL's entry into the share capital of Youforget.me, a platform dedicated to the management and control of citizens' digital privacy, as it represents a further step by the company in its expertise on the subject of data protection.