Result of the resolution: Warning
The use of a facial and fingerprint recognition system to control student attendance must be based on one of the exceptions provided for in article 9.2 RGPD. On the other hand, at the time of data collection, the right to information must become effective. In turn, when entrusting the provision of a service to a third party that involves access to personal data, it is necessary to sign the contract of data controller.