Apicultura LabRecord of processing
A summary of the observatory's personal data processing activities.
Version 1.1, of 28 September 2026. aGo Lab is the controller for all processing.
In progress
Rights requests
| Field | Detail |
|---|---|
| Purpose | To receive, handle and answer requests for access, rectification, erasure, objection, portability and blocking |
| Lawful basis | Compliance with a legal obligation of the controller |
| Data | Name, email address, the details of the request, and the dates and text of its handling |
| Recipients | None |
| Retention | Four years from when the reply is sent, the limitation period for legal action over a breach of the law |
API keys
| Field | Detail |
|---|---|
| Purpose | To issue a consortium institution with an API key with a higher quota, and to write to it about the key |
| Lawful basis | The written agreement with the institution |
| Data | The institutional email address and an optional label |
| Recipients | None |
| Retention | While the key is active |
Query limit
| Field | Detail |
|---|---|
| Purpose | To limit how many queries per minute the API receives and how many requests its forms receive |
| Lawful basis | The controller’s legitimate interest in keeping the service available |
| Data | A digest of the network address, computed with a key held only by the laboratory; the address itself is not stored |
| Recipients | None |
| Retention | Deleted every day |
Planned, not yet carried out
Export records by company
The National Customs Service export records by company, which may name a sole trader. They would be used only to calculate and check aggregates, without publishing or releasing any individual data, with the copy encrypted and the cells that cover very few companies suppressed. The laboratory does not capture them until their impact assessment is signed.
Institutional dashboard accounts
Account access for the consortium’s companies. It does not exist yet.
What the observatory does not process
From the SAG register of beekeepers, the observatory uses only the aggregates or anonymised data the agency itself publishes or supplies, never the data of individual beekeepers. News is published in Atom feeds, which anyone can follow from a feed reader without giving any data.