Security Services Contract Spain (Contrato de Servicios de Seguridad)

A Security Services Contract Spain (Contrato de Servicios de Seguridad Privada) is a written commercial agreement by which a licensed private security company (empresa de seguridad privada) undertakes to provide specific security activities and services to a client (cliente) in exchange for remuneration (precio), governed principally by Ley 5/2014, de 4 de abril, de Seguridad Privada (LSP) — the principal statute regulating the private security sector in Spain — and its implementing regulation, Real Decreto 2364/1994 (Reglamento de Seguridad Privada), as supplemented by Real Decreto 816/2021, de 28 de septiembre, por el que se aprueba el Reglamento de Seguridad Privada.

Ley 5/2014 establishes that private security services in Spain may only be provided by empresas de seguridad privada inscribed in the Registro Nacional de Empresas de Seguridad maintained by the Dirección General de la Policía (under the Secretaría de Estado de Seguridad of the Ministerio del Interior), and only through personnel holding the corresponding habilitación profesional — the security guard licence (tarjeta de identidad profesional) issued by the Comisaría General de Seguridad Ciudadana. Article 5 of Ley 5/2014 lists the security activities that may only be carried out by licensed private security companies, which include: vigilancia y protección de bienes, establecimientos, espectáculos, certámenes o convenciones; acompañamiento y protección de personas (bodyguard services); transporte y distribución de objetos valiosos o peligrosos; instalación y mantenimiento de aparatos, dispositivos y sistemas de seguridad; explotación de centrales para la recepción, verificación y transmisión de alarmas; and servicios de respuesta ante alarmas.

Article 24 of Ley 5/2014 regulates the contract between the security company and the client — establishing that such contracts must be in writing, must identify the specific security activities to be provided, the premises or persons to be protected, the number and category of security personnel assigned, and the contractual period. Article 24 also requires that a copy of the contract be communicated to the Delegación del Gobierno (or Subdelegación del Gobierno) of the province where the services are provided, within 10 days of contract execution, for registration purposes in the Registro de Contratos de Seguridad.

Private security personnel in Spain operate under a dual supervision framework: they are employees of the empresa de seguridad (governed by the Convenio Colectivo Estatal de Empresas de Seguridad, most recently updated in 2022) and they operate in coordination with the Fuerzas y Cuerpos de Seguridad del Estado — the Cuerpo Nacional de Policía and the Guardia Civil — under Articles 8 and 9 of Ley 5/2014. Security guards (vigilantes de seguridad) may carry firearms (armas de fuego) only if the contract specifically requires armed services and the empresa is authorised for armed services by the Ministerio del Interior.

Data protection obligations are particularly important in security services contracts involving CCTV (videovigilancia) or alarm systems. The installation and operation of CCTV systems by private security companies in Spain is regulated by Ley Orgánica 4/1997 (de videovigilancia), Instrucción 1/2006 of the Agencia Española de Protección de Datos (AEPD), and the General Data Protection Regulation (Reglamento (UE) 2016/679 — GDPR) as implemented by Ley Orgánica 3/2018 (LOPDGDD). The client (as data controller — responsable del tratamiento) and the security company (as data processor — encargado del tratamiento) must execute a data processing agreement (acuerdo de encargado de tratamiento) under Article 28 GDPR as an annex to the security services contract, regulating the processing of personal data captured by the CCTV system.

A Security Services Contract Spain is required whenever a business, institution, or individual engages a licensed private security company (empresa de seguridad privada) to provide any of the regulated security activities listed in Article 5 of Ley 5/2014 de Seguridad Privada.

A Contrato de Servicios de Seguridad is needed when a commercial establishment — retail store, shopping centre, hotel, bank, or logistics warehouse — contracts a security company for static guarding (vigilancia estática) with uniformed vigilantes de seguridad stationed at entry points, carrying out access control and deterrence functions.

The contract is required when a promoter of public events — concerts, sporting events, exhibitions, or trade fairs — hires a security company to provide crowd management, access control, and incident response at the venue, in accordance with Article 35.1 of Ley 5/2014 and the applicable Autonomous Community regulations for public spectacles and events.

A Security Services Contract is needed when a business installs a connected alarm system (sistema de alarma conectado a central receptora de alarmas — CRA) through a licensed empresa de seguridad. Under Real Decreto 816/2021, connected alarm systems must be operated by a CRA licensed by the Ministerio del Interior, and the maintenance and monitoring contract must be in writing and registered with the Delegación del Gobierno.

The contract is required when a company or individual hires a security company for escolta (personal protection / bodyguard) services for senior executives, public figures, or high-net-worth individuals under Article 5.1(b) of Ley 5/2014.

A Security Services Contract is needed when a financial institution, jeweller, or other entity requires transporte de fondos (cash-in-transit) or valuable goods transport services, which under Article 5.1(c) of Ley 5/2014 may only be provided by empresas de seguridad specifically authorised for this activity and using purpose-built armoured vehicles.

The contract is also required when a public authority (Administración Pública) — central government, Autonomous Community, or local Ayuntamiento — procures security services for public buildings, museums, courthouses, or other public premises through the public procurement framework of Ley 9/2017 de Contratos del Sector Público (LCSP), which requires written contracts and registration with the Delegación del Gobierno under Article 24 Ley 5/2014.

A security services agreement is needed for residential communities (comunidades de propietarios) that contract a security company for portería de seguridad (security concierge) or patrol services — the comunidad's administrador de fincas typically negotiates and manages such contracts on behalf of the community.

A valid Security Services Contract Spain under Ley 5/2014 de Seguridad Privada Article 24 must contain the following elements to comply with registration obligations and to be enforceable between the parties.

Identification of Parties: Full legal name, NIF/CIF, registered address (domicilio social), and Registro Mercantil data of the empresa de seguridad privada. Critically, the empresa's licence number (número de autorización) in the Registro Nacional de Empresas de Seguridad of the Dirección General de la Policía must be stated — contracting with an unlicensed provider violates Ley 5/2014 and exposes the client to administrative liability. Full legal name, NIF/CIF, and address of the client (cliente) must also be included.

Description of Security Services: A precise description of the security activities to be provided, referencing the specific activity categories of Article 5 Ley 5/2014: static guarding (vigilancia y protección de bienes); access control; CCTV monitoring; alarm system installation and monitoring (central receptora de alarmas); escort or personal protection; cash-in-transit. Vague descriptions create enforcement and insurance problems.

Premises and Personnel: Identification of the specific premises (inmuebles) or persons to be protected, including address and physical description. The number of vigilantes de seguridad (or other licensed personnel) to be deployed, their professional category under the Convenio Colectivo Estatal de Empresas de Seguridad, their scheduled shifts (turnos), and whether armed services (armados) or unarmed services (no armados) are provided.

ServiceLevels and Response Times: Agreed response times for alarm activations, patrol frequency, and incident reporting obligations. Article 24.2 Ley 5/2014 requires the contract to establish communication protocols with the Fuerzas y Cuerpos de Seguridad del Estado when a criminal incident is detected during service provision.

Contract Duration and Termination: The contract term (plazo del contrato) — typically one year, renewable annually — and termination provisions. Under commercial law (Código de Comercio and general contract law) and the specific requirements of Ley 5/2014, early termination by the client typically requires advance notice (preaviso) of 30 to 90 days. Renewal and price adjustment provisions (typically linked to the IPC — Índice de Precios de Consumo published by the Instituto Nacional de Estadística) should be stated.

Price and Payment: The monthly or annual service fee (precio del servicio) expressed in euros excluding IVA (at the 21% general IVA rate under Ley 37/1992), payment terms (typically 30 to 60 days from invoice under Ley 3/2004 de lucha contra la morosidad), and invoicing frequency. Any costs for additional services — alarm system maintenance, equipment rental, additional personnel for events — should be separately itemised.

Registration Obligation: The contract must include a clause acknowledging the empresa de seguridad's obligation to communicate the contract to the Delegación del Gobierno (or Subdelegación del Gobierno) of the relevant province within 10 days of execution, for registration in the Registro de Contratos de Seguridad under Article 24.3 Ley 5/2014.

Data Protection (CCTV): Where CCTV or alarm monitoring services are provided, the contract must include or annex a data processing agreement (acuerdo de encargado del tratamiento) under Article 28 of Reglamento (UE) 2016/679 (GDPR) and Article 28 of Ley Orgánica 3/2018 (LOPDGDD), specifying the nature of personal data processed, the purposes and duration of processing, the technical and organisational security measures applied, and data deletion obligations. The AEPD's guides on videovigilancia provide the applicable standards.

Liability and Insurance: The empresa de seguridad must maintain professional liability insurance (seguro de responsabilidad civil) as required by the Reglamento de Seguridad Privada. The contract should state the minimum coverage amount and require evidence of insurance upon request.

Forms-legal.com provides this Security Services Contract Spain template as a practical starting point. All security services contracts must be reviewed to confirm the empresa's current Registro Nacional de Empresas de Seguridad status, the applicable Autonomous Community regulations, and GDPR compliance for any data processing elements.

Ley 5/2014 de Seguridad Privada governs private security activities in Spain. The Dirección General de la Policía (Ministerio del Interior) licenses and supervises empresas de seguridad. The Convenio Colectivo Estatal de Empresas de Seguridad regulates security sector employment. The Agencia Española de Protección de Datos (AEPD) oversees CCTV and data processing in security contexts. The Cuerpo Nacional de Policía and Guardia Civil coordinate with private security personnel under Articles 8 and 9 Ley 5/2014.