Privacy Policy
PRIVACY POLICY OF ABANCA CORPORACION BANCARIA, S.A
Below we inform you about the data protection regime applicable to this Website, regardless of whether you are a client of ABANCA Corporación Bancaria, S.A. (hereinafter, “ABANCA”) or not. If you are already a client of ABANCA, or if you have provided your personal data during any contracting process or when requesting any of our products or services, there is another document containing the client data privacy policy that you should read carefully.
1. Who is responsible for processing your data?
The entity responsible for processing your personal data is ABANCA Corporación Bancaria, S.A. (hereinafter, “ABANCA”), with Tax ID A-70302039 and registered office in Betanzos (A Coruña - Spain), C/ Cantón Claudino Pita, nº 2, CP 15300.
At ABANCA, we have a Data Protection Officer (hereinafter also “DPO”), whom you can contact, if needed, to obtain more information about any of the points included in our Privacy Policy and to send your questions, inquiries, or complaints related to the processing of your personal data, via the email address privacidad@abanca.com.
2. What is the source of your personal data and what data do we process?
We must distinguish between the sources from which your personal data originate and the categories of personal data we process:
2.1. Sources of your personal data
-
Data provided directly by you through the access forms available on our website (e.g., access to the client area).
Additionally, when you visit this Website, our servers routinely store information such as, for example, the IP address and the domain from which access is obtained, as well as the date and time of the visit. On the other hand, certain functionalities of our Website require you to provide additional information through the corresponding form (e.g., to request personalized information about our products or services, to request an appointment at a branch, or to contact ABANCA’s Customer Service). These forms will be accompanied by the corresponding privacy policy applicable to the processing of the data required therein.
-
Data generated about you derived from the management, development, and maintenance of the pre-contractual or contractual relationship you have with ABANCA (including relationships arising from inquiries and/or requests you make through this Website).
Likewise, when you browse the Website, different cookies may be installed on your device, as explained in our Cookie Policy. Only those cookies that are technical or strictly necessary for the operation of the Website will be installed (other cookies will only be installed if you give your prior express consent through the corresponding cookie settings panel).
2.2. Categories of personal data
At ABANCA, we process different types of personal data for the purposes indicated in section 3. “For what purposes and on what legal basis do we process your personal data?” of this Privacy Policy.
To provide you with clear and detailed information, we have grouped the personal data we process into the following categories:
- Identification data: identity document (DNI, passport, or NIE).
- Browsing and online behavior data: IP address and behavioral habits on our web pages (e.g., which pages you visit or how you navigate through the different sections of the Website) if you have accepted the use of cookies and other similar technologies; data about the ISP (domain of the provider that gives access to the network) and the date-time linked to the access; as well as the codes or keys used to access/operate in Online Banking and the physical identification of the device or mobile device (e.g., IMEI).
Please note that not all the categories of data mentioned above are used for all the processing activities provided for in this Privacy Policy. In the following section 3. (“For what purposes and on what legal basis do we process your data?”), which describes the different data processing activities carried out by ABANCA, indicating their purposes and respective legal bases, it is detailed which specific categories of data are used for each of those processing activities.
Additionally, please note that when in the following section 3 a category of personal data is associated with a specific processing activity, it does not mean that all and every data included in that category will always be used whenever that processing is carried out. In fact, and in application of the legal principle of data minimization, such personal data will only be used to the extent that, depending on the circumstances of each specific case, they are adequate and relevant to fulfill the purpose assigned in this Privacy Policy to the corresponding processing.
3. For what purposes and on what legal basis do we process your data?
ABANCA may process your personal data for the following purposes:
-
To enable browsing on the Website. Therefore, this processing of your data is necessary to execute your browsing request when accessing this Website.
To achieve this purpose, we may process personal data corresponding to the following categories detailed in subsection 2.2. (“Categories of personal data”) of this Privacy Policy (without prejudice to the application of the principle of minimization of personal data as indicated in that same subsection 2.2): Browsing and online behavior data.
-
To allow your access as a client to ABANCA’s Online Banking, if you access the “Client Area” of the main portal (https://www.abanca.com), and to manage the relationships arising from your status as a registered user. In addition, as a client, the Client Privacy Policy applies to you, which details the different processing activities that ABANCA may carry out and the personal data that may be used for each purpose. The legal basis for processing your data will, therefore, be the processing and management of both your access request and the inquiries, requests, and/or operations you carry out through Online Banking as a registered user.
To achieve this purpose (client access to ABANCA’s Online Banking), we may process personal data corresponding to the following categories detailed in subsection 2.2. (“Categories of personal data”) of this Privacy Policy (without prejudice to the application of the principle of minimization of personal data as indicated in that same subsection 2.2): Identification data and Browsing and online behavior data.
-
If you have accepted the download of cookies as provided in our Cookie Policy, to: i) analyze your browsing; ii) personalize the content of the Website; and iii) carry out behavioral advertising.
To achieve this purpose, we may process personal data corresponding to the following categories detailed in subsection 2.2. (“Categories of personal data”) of this Privacy Policy (without prejudice to the application of the principle of minimization of personal data as indicated in that same subsection 2.2): Browsing and online behavior data.
-
To anonymize your browsing and online behavior data to generate anonymous statistical data. For this, we use advanced analytics tools that help us collect and anonymize information about key aspects of user interaction on the Website. This means that we convert such information into statistical data that cannot identify you in any way. To protect your privacy, we ensure that the advanced analytics tools we use comply with the applicable data protection regulations in force at any given time.
In this regard, the anonymized statistical data we obtain are processed on the basis of ABANCA’s legitimate interest and only for the following purposes: (i) to improve your experience on the Website by analyzing information to understand how you interact with the Website and thus optimize its design and operation; (ii) to measure the performance of the campaigns and online strategies we carry out to offer you a better service; and (iii) to provide an experience tailored to users’ needs. We do not use this information to identify you personally nor do we share this anonymous data with third parties.
-
For the purposes and with the legal basis indicated in the privacy policies of the respective web forms for collecting personal data. Prior to the collection of data, we will inform you about the processing that we may carry out on the data you provide through these forms, as well as the categories of data used.
Where applicable, through the aforementioned forms, ABANCA may obtain your consent to send you offers and promotions by any electronic or non-electronic means, either general or tailored to your profile, regarding products or services offered or marketed by ABANCA or by other companies in the ABANCA Economic Group—whose activities include financial, social, insurance, real estate, real estate investment, training, marketing, consulting, and advisory services—as well as partner companies offering financial, insurance, leisure, food, appliances, furniture, vehicles, footwear, textiles, optical, personal services and products, etc. You may revoke your consent at any time free of charge by sending a message to bajas@abanca.com or to atencioncliente@abanca.com.
4. With whom do we share your data?
The personal data you provide during your navigation on the Website or through data collection forms may be communicated to ABANCA’s service providers (referred to as data processors) for the provision of certain services on behalf of and for ABANCA. In this regard, we inform you that we follow strict criteria for selecting service providers and sign the corresponding data processing agreement with each of them, which sets out the confidentiality, security, and data processing conditions in accordance with the regulations in force at any given time.
Notwithstanding the above, we inform you that your data will not be disclosed to any third party to process your personal data for their own purposes, unless there is a legal obligation applicable to ABANCA requiring such disclosure to third parties or you expressly consent to it.
Regarding third-party cookies, our Cookie Policy lists the third parties who receive personal data via cookies through this Website.
5. Is any international transfer foreseen?
Certain companies providing services to ABANCA are located outside the European Union, which involves International Data Transfers. In this regard, ABANCA guarantees the application of technical, organizational, and legal security measures appropriate to the level of risk of the processing, regardless of the territory where it takes place.
Any data communication to third parties located in countries outside the European Economic Area (EEA) will be subject to an adequate level of protection that guarantees the security and legitimacy of the processing of your personal data, in accordance with the applicable regulations in force.
For more information about international data transfers and the guarantee mechanisms applied, you can contact ABANCA’s Data Protection Officer at the following email address: privacidad@abanca.com.
6. How long do you keep my data?
Personal data will be kept exclusively for the period necessary to: i) allow your navigation on the Website, either as a registered user or as a general user; ii) analyze your browsing, maintain Website personalization, or carry out behavioral advertising (only if you have accepted the corresponding category of cookies as provided in our Cookie Policy); iii) process requests for products, services, or information that you may make through the Website; and iv) maintain, develop, and manage business relationships that may arise as a result of your requests.
When the data are no longer necessary for the purposes for which they were collected, they will be blocked in accordance with the applicable regulations, which means the identification and reservation of the data, adopting technical and organizational measures to prevent their processing, except for the formulation, exercise, or defense of claims or for making them available to Judges and Courts, the Public Prosecutor’s Office, or the competent Public Administrations, for the purpose of attending to or demanding possible liabilities arising from the processing and only during the legal limitation periods thereof.
7. What are my rights?
Data protection regulations grant you a series of rights regarding the processing of your personal data:
- Right of access. You can find out what type of data we are processing and the characteristics of the processing we are carrying out.
- Right of rectification. You can request the modification of your data when they are inaccurate or incomplete.
- Right to portability. You can obtain a copy in an interoperable format of the data being processed.
- Right to restriction of processing. You can request the restriction of the processing of your personal data when any of the conditions set out in the law are met:
- When you contest the accuracy of your personal data, during the period in which ABANCA verifies their accuracy;
- When the processing is unlawful but you oppose the erasure of your data;
- When ABANCA no longer needs to process your data but you need them for the establishment, exercise, or defense of claims; and
- When you have objected to the processing of your data carried out for the fulfillment of a task in the public interest or for the satisfaction of a legitimate interest while it is verified whether the legitimate grounds for the processing prevail over yours.
- Right to erasure. You can request the deletion of your data when the processing is no longer necessary.
- Right to object. You can request that we do not process your personal data (e.g., to stop sending commercial communications about our products) and not to be subject to decisions based solely on automated processing. Likewise, you can request the cessation of processing based on ABANCA’s legitimate interest, in which case we will stop processing your data unless we demonstrate compelling legitimate grounds for the processing that may override your rights, or for the establishment, exercise, or defense of claims.
- Right to lodge a complaint with the supervisory authority (in Spain, the Spanish Data Protection Agency: https://www.aepd.es).
To exercise any of these rights, you must contact our Customer Service at the postal address: Rúa Nueva, 1 - Entreplanta, CP 15003, A Coruña; or by email at: atencioncliente@abanca.com.
On the website of the Spanish Data Protection Agency (AEPD), you can find a series of templates to help you exercise your rights.
We will process your request as soon as possible and, in any case, within the legal period of one (1) month from receipt of your request. This period may be extended by another two (2) months if necessary, taking into account the complexity and number of requests received. In this case, you will be informed of the extension within the first month from receipt of the request, indicating the reasons for the delay.