Incident or security incident report

Definitions:

  • Incident is any event or occurrence produced either by natural causes or by people´s intentional or unintentional behaviour that have caused or may cause a material loss or a personal damage or that may give rise to civil liability compensation .

  • Security incident is any event or occurrence that affects the security of the employees or assets of the company and which is motivated by antisocial or malicious behaviours such as theft, vandalism, threats, etc.

  • Data Security Incident any event or occurrence that affects the data security or that may lead to the loss of personal data or FCC confidential information.

  • Personal data is any piece of information that directly or indirectly allows to identify an individual (eg employees, customers, suppliers, etc. This does not apply to legal entities).

I would like to file an incident or to report a security incident:

  • Use this form to communicate to the insurance department any incident that affect the FCC premises or projects in Spain whether they are covered by an insurance policy or not and regardless of the amount of the deductible.

  • Use it also to communicate to the Corporate Security Department any relevant security incident that affect FCC personnel, premises or projects both in Spain and overseas.

  • To report the loss of personal data or confidential information follow the instructions provided below by the Information Security Department (see reporting of Data Security Incidents below). The former must be completed by the reporting of theft of computer equipment with the present form if it is the case.

  • Vehicle accident claims must be directly submitted to the car insurance company following the instructions of the FCC Insurance Department.

  • This report only will be send to Insurance Departament and Corporate Security Departament.

  • Click on the link below and fill in the reporting form. You can see the video tutorial if you need it.

 

I would like to submit additional information of an already reported incident or to know the status of an insurance claim:

  • Ask or send the additional information to the following mail address, indicating the incident reference number: reclamacionesseguros@fcc.es   

I would like to report a Data Security Incident:

  • In case of Data Security Incident you must urgently report it through Servicedesk (open a ticket) since there is a legal requirement to inform official instances within the first 72 hours

  • If you have any question about this matter please contact your Data Protection Coordinator. In the following link you can find further information: https://fccone.fcc.es/web/one-tiseguridad/gdpr.

  • In case of equipment theft or loss do not forget to communicate it with this form.

Additional information about the processing of Personal Data
Responsible party

Fomento de Construcciones y Contratas, S.A., with Spanish Tax ID (CIF) A28037224, Dept. of Information Security and Technological Risks. Avenida del Camino de Santiago, 40 28050. Madrid. Website www.fcc.es and email address of the DPO protecciondedatos@fcc.es
Purpose / legitimacy

Communicate accidents and incidents occurring at FCC Group offices to manage the investigation and assessment of the damages caused, in addition to the responsibilities deriving therefrom. This purpose is based on the processing required to satisfy the legitimate interests pursued by the Data Controller, pursuant to Article 6.1 f) of the GPDR
Assignments

i) Administrative/judicial/criminal bodies, security forces and law enforcement authorities, ii) insurance and reinsurance companies, iii) individuals at FCC in charge of managing and conducting the investigation of accidents and incidents, iv) the Human Resources Department of the Company at which the Employee works (if an event occurs for which action may be required, as well as other assignees whose intervention is required by law. For further information, contact protecciondedatos@fcc.es
Service provider

Generally speaking, the investigation and assessment of damages resulting from accidents and incidents will be performed by European suppliers. However, in certain circumstances, the intervention of a supplier located outside the European Economic Area may be necessary; in any case, such suppliers will have confirmed that they have the appropriate guarantees in terms of data protection. For further information, contact   protecciondedatos@fcc.es
Conservation

Two years for material damages and five years for material damage, effective their collection, as well as for the duration of any form of liability
Rights

Exercise of rights to access, rectification, erasure, opposition and the limitation to its processing. You must provide identification by means of your valid ID and specify the right exercised in writing, addressed to Fomento de Construcciones y Contratas, S.A., Dpto. Seguridad de la Información y Riesgos Tecnológicos. Avenida del Camino de Santiago, 40 28050, Madrid or by email to protecciondedatos@fcc.es.

If you do not believe that the response provided by DPO is adequate, you may file a claim directly before the Control Authority (Spanish Data Protection Agency).