ABANCA

Purpose and Operation of the Service

This document regulates the terms and conditions for the enrollment and use of debit, prepaid, and credit cards issued by ABANCA (hereinafter, the "Entity") in the digital wallet application or "Wallet" (hereinafter, "Bizum Pay") installed on compatible devices (Smartphone, Smartwatch, etc.).

The service allows the device holder (hereinafter the "Holder") to carry out in-person payment transactions (via NFC technology) without the need to present the physical card, using instead a digital token stored on the device.

Link to the Card Framework Agreement

• No Novation: Card enrollment does not imply the issuance of a new card nor does it modify the main card contract signed with the Entity.
• Prevalence: In the event of a technical discrepancy regarding the use of mobile payment, these Terms and Conditions shall prevail. For all other matters (credit limits, usage limits, fees, interest), the card contract shall apply.

Enrollment and Verification Process

To enable the service, the Holder must:

1. Enter the card details manually, by image capture, or via contactless communication (NFC).
2. Pass the Strong Customer Authentication (SCA) protocols required by the Entity.
3. The Entity reserves the right to deny enrollment for security reasons or if the card is not operational.

Authorization of Transactions and Biometrics

• Consent: The payment will be considered authorized when the Holder validates the transaction on their device using biometric factors (fingerprint, facial recognition) or the device unlock code.
• Irrevocability: Once the transaction is validated by these means, the payment order is irrevocable in accordance with current regulations.

Custody and Security Obligations

The Holder assumes the following specific obligations:

• Safeguard the mobile device with the same diligence as a physical card.
• Keep the device locked with robust security measures.
• Do not share unlock codes or allow third-party biometric registration.
• Update the device's operating system to ensure security patches are applied.

Loss, Theft, and Emergency Measures

In case of loss, theft, or unauthorized use of the device, the Holder must:

1. Immediately notify the Entity via the phone number indicated in the card contract to proceed with blocking the token.
2. Notifying the device manufacturer or mobile operator does not replace the obligation to inform the Entity.
3. The Entity may block the service if it detects signs of fraud or risk of non-payment.

Data Protection

• Data processing carried out by the Entity. For the execution of payment orders using the cards in the Bizum Pay App, the Entity will process the following information:
  • Identification and financial data: Information about the debit, credit, or prepaid cards that the Holder enrolls in the App.
  • Transaction data: Data on payment transactions made through the mobile device with the enrolled cards.

  The purpose of processing this data will be the management, development, and control of the card contract that the Holder maintains with the Entity (including, therefore, payment transactions made with the card). Thus, the data protection regime that we will apply to the Holder will be as detailed both in the card contract itself and in the Privacy Policy included in the Holder's Client File, which is also published on our website (https://www.abanca.com/es/legal/politica-privacidad-clientes/informacion-adicional/).

  The Holder may exercise the rights of access, rectification, erasure, objection, restriction, and portability by writing to our Customer Service at Rúa Nueva, 1, Entreplanta, 15003 – A Coruña or by email to atencioncliente@abanca.com.

• Data processing carried out by Bizum, S.L., owner of the "Bizum Pay" App. The service of enrolling and using cards issued by the Entity in the Bizum Pay App also involves processing by Bizum, S.L., as the data controller, of the following information:
  • Identification and financial data: Information about the debit, credit, or prepaid cards that the Holder enrolls in the App.
  • Transaction data: Data on payment transactions made through the mobile device with the enrolled cards.

  If the Holder wishes to enroll cards from their Mobile Banking, the Entity will share the card tokens (the number or virtual code assigned to the card as a security measure) with Bizum, S.L.

  The purpose of processing the Holder's data by Bizum, S.L. will be to integrate the card into the App and process payment requests made by the Holder through the service regulated in these Conditions, bearing in mind that Bizum, S.L. is the owner of the App and also manages the payment and collection solution integrated into the service.

  The data protection regime that Bizum, S.L. will apply to the Holder is set out in its Privacy Policy, which the Holder must accept when installing the App on their device. The Holder undertakes to carefully read the General Conditions for the use and download of the "Bizum Pay" App, as well as the Privacy Policy of Bizum, S.L., in order to be aware of the conditions for the processing of their data by Bizum, S.L., as well as how to exercise their data protection rights with this company. The Entity assumes no responsibility for the data processing carried out by Bizum, S.L.

Modification and Termination

• Modifications: The Entity may modify these conditions with two months' prior notice, unless the improvements are beneficial to the client or are imposed by the App provider.
• Termination: The Holder may unsubscribe from the service by deleting the card from the App at any time.

Applicable Law and Jurisdiction

This agreement is governed by Spanish law. The competent jurisdiction will be that of the consumer's domicile.