CLUB ATLÉTICO OSASUNA has implemented the requirements and measures demanded by REGULATION (EU) 2016/679 of April 27, 2016, of the European Parliament and of the Council concerning the protection of natural persons with regard to the processing of personal data and on the free movement of such data, hereinafter referred to as (the GDPR), and Organic Law 3/2018 of December 5, on the Protection of Personal Data and guarantee of digital rights, hereinafter referred to as (the LOPDPGDD), in relation to the obligation established by Article 35 of GDPR EU 2016/679, to carry out a Data Protection Impact Assessment (DPIA) regarding the processing of biometric data, in this case, data processing for access through facial recognition.