Privacy policy for ABANCA Corporación Bancaria, S.A to manage an appointment with you at the branch

1. Who is responsible for processing my data?

The entity responsible for processing your data is ABANCA CORPORACIÓN BANCARIA, S.A., with Tax ID A-70302039 and registered address at Cantón Claudino Pita, 2, 15300, Betanzos (A Coruña). At ABANCA, we have a formally appointed Data Protection Officer whom you can contact if needed by writing to privacidad@abanca.com.

2. What type of data does ABANCA process?

You should know that the data we process in this case are the contact details you provide directly (that is, phone number, email address, ID number, and name) for the purposes indicated in section 3 below.

3. For what purpose does ABANCA process my data?

The aforementioned personal data will be used solely to:

• Schedule an appointment with you at the ABANCA branch of your choice and provide you with the relevant information about the product(s) or service(s) you are interested in.
• Send you, by email, information about your appointment, the documentation required to process your request, as well as information about the products or services you have shown interest in.

If applicable, you may object to receiving such information at any time and free of charge by sending us an email to bajas@abanca.com. In that email, you must identify yourself, state your objection, and indicate in the Subject: “Unsubscribe. Web Branch Appointment Form”.

4. To whom does ABANCA disclose my data?

The data you provide us to schedule your branch appointment or to send you information electronically about the appointment or the product or service you are interested in will not be disclosed to any third party, except where required by law.

5. Is any international transfer foreseen?

The transfer of data to third countries outside the European Union will only occur if necessary to execute the orders or requests you make to us, due to legal requirements, or if you have given us your explicit consent.

Additionally, if it is necessary for us to use service providers who process data in third countries outside the European Union, ABANCA will take appropriate measures to ensure the legitimacy of the international data transfer in accordance with Regulation (EU) 2016/679, General Data Protection Regulation, and in particular, in accordance with the requirements set out in Articles 45 to 47 of said regulation (i.e., transfers based on an adequacy decision, transfers with appropriate safeguards, or binding corporate rules).

ABANCA observes and requires the observance of technical, organizational, and legal security measures appropriate to the level of risk of the processing, regardless of the territory where it takes place.

Any international transfers planned at any given time will be reported in the Privacy Policy available on the Website.

Any international data transfer that occurs will also be subject to the regime provided for in the current regulations.

6. How long does ABANCA keep my data?

Personal data will be kept only for the period necessary to process and/or manage your request regarding the products or services you may request through the website. If, after three months from the last action we take with you regarding such products and services, the relevant product or service contract has not been formalized, the data will be blocked and deleted.

7. What are my rights?

Our data protection regulations grant you a series of rights regarding the processing of your personal data related to our services, which can be summarized as follows:

• Right of access. To know what type of data we are processing and the characteristics of the processing we are carrying out.
• Right of rectification. To request the modification of your data if it is inaccurate or untrue.
• Right to data portability. To obtain a copy in an interoperable format of the data being processed.
• Right to restriction of processing in the cases provided for by law.
• Right of erasure. To request the deletion of your data when processing is no longer necessary.
• Right to object: To request the cessation of commercial communications as previously indicated.

You can exercise your rights by writing to our Customer Service Department via email at atencioncliente@abanca.com or by postal mail to Rúa Nueva, 1 - Entreplanta, 15003, A Coruña. In your communication, you must identify yourself, specify the right you wish to exercise, indicate in the Subject: “GDPR Rights. Web Branch Appointment Form”, and include the required documentation.

On the website of the Spanish Data Protection Agency (AEPD)You will be redirected to another website you can find a series of templates to help you exercise your rights.

You also have the right to file a complaint with the supervisory authority (in Spain, the AEPD) if you believe your rights have been violated.