This page summarises Labrax Soluciones, S.L.'s commitment to the protection of personal data in relation to the website ocr-id.com and the OCR-ID product, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).
1. Data controller
| Company name | Labrax Soluciones, S.L. |
| Tax ID | B-70334529 |
| Registered address | Calle Emilio González López 51, bajo, 15011 A Coruña (España) |
| info@ocr-id.com | |
| Phone | +34 981 928 655 |
| Company registration | Registered with the Commercial Registry of A Coruña. |
2. Special nature of the data processed by an ANPR system
OCR-ID captures license plates and, incidentally, images of the vehicle and its surroundings (public roads) via the onboard Lynet cameras. A vehicle's license plate is generally personal data when it can be linked to an identified or identifiable natural person through DGT records. For this reason, the system has been designed in accordance with the principle of data minimisation: it captures the minimum field of view necessary for ANPR reading and avoids, to the extent technically possible, framing people or the interior of vehicles.
3. Data controller and data processor in the operational use of OCR-ID
When OCR-ID is deployed by a Local Police force or local council, that administration acts as the data controller for the readings, images and alerts generated within its municipal boundaries, and Labrax acts as the data processor, under the corresponding agreement signed in accordance with Article 28 GDPR. The platform incorporates by design:
- Processing in accordance with Spain's National Security Framework (ENS), High category.
- Chain of custody of the evidence: video, photo, GPS coordinates and certified NTP timestamp, with a signed SHA-256 hash.
- An immutable activity log and full traceability of all access to the readings.
- Access restricted by officer profile and by the patrol's territorial scope.
- Synchronisation with DGT databases and municipal lists solely to check the vehicle's administrative status (theft, roadworthiness inspection (ITV), insurance, low-emission zone (ZBE)), without profiling the vehicle owners.
- Retention periods and automatic purging of readings that do not generate an alert, in accordance with the data controller's instructions.
4. Data hosting
Readings and evidence are stored in an ENS High-certified datacentre located on Spanish soil, with no international data transfers.
5. Exercising your rights
Data subjects may exercise their rights of access, rectification, erasure, restriction, objection and portability by contacting info@ocr-id.com. Where data is processed within the framework of a Local Police force or local council using OCR-ID, these rights must be exercised before that administration, as the data controller.
6. Supervisory authority
Data subjects may file a complaint with the Spanish Data Protection Agency (www.aepd.es) if they consider their rights to have been violated.