Iupay

Introduction

At Bankia, we know how important the privacy and protection of your personal information is. That is why we employ high security standards in our applications and systems, and we apply the most advanced protective measures to ensure the confidentiality and integrity of the information.

The purpose of this Policy is to inform you about how we obtain, process and protect the personal data that customers or users provide us, either directly or through a third party. This includes both where they provide us their data in forms or web tools owned by Bankia and where they do so by browsing Bankia's websites or web tools (cookies). For example, (i) when a user registers to use services or web applications, to acquire products, to receive news bulletins, to take part in programmes or events or to use Bankia's official social media channels; or (ii) when a user voluntarily provides Bankia their contact details as a means of contact for dealing with enquiries sent to customer services or social media platforms, in accordance with the current regulations regarding data protection, as well as their consent where necessary, all of which will be referred to hereinafter as “Bankia's communication channels”.

This Policy shall only apply to personal data obtained through Bankia's own websites and web tools, and shall not apply to information collected by third parties through other channels or in any contracts which users enter into with Bankia, even if they are linked or related to “Bankia's communication channels”.

The User declares that the information and details they provide are accurate and truthful.

�

Data controller

· Bankia, S.A.

· Tax ID code (CIF): A14010342

· Registered address: C/ Pintor Sorolla 8, 46002 Valencia.

· Telephone: +34-657 15 13 77, +34-917 91 160 00

· Contact details for the Data Protection Officer: oficinadpo@bankia.com

�

Purposes of the data processing

Data provided by users is collected via “Bankia's communication channels”, and/or any data collection forms that are included in these channels, to be used for the purposes indicated in each form by obtaining users' consent.

Any personal data that is provided by users (including the image contained in their identification document, their mobile phone number and email address), as well as any data to which Bankia has access as a result of users browsing on its websites, acquiring any product or service, or carrying out any transaction or other procedure, will be processed by Bankia for various purposes, including:

1. Attend, manage and reply the enquiries, questions and applications made by the users via the service channels of attention or communication enabled by Bankia;

2. Maintain, fulfill and control the relationship (pre) contractual between the users and Bankia;

3. Improve the pages or tools website owned by Bankia, as well as its products and services, with such of offering a better service to the user;

4. Send commercial communications on products and services, own or third-party;

5. Carry out studies with statistical ends; and

6. Comply with the legal obligations of Bankia.

At the moment of data collection the voluntary or compulsory nature of the data being collected will be indicated. The refusal to give data described as compulsory will mean that it will be impossible to access the service for which the data were requested. Similarly, data may be provided voluntarily in order to allow the services on offer to be provided in the best possible way.

If users of “Bankia's communication channels” are required to provide their email address to access some of the services on offer at any given time, they will be able to state that they do not wish to receive any communications of any kind from Bankia, provided that they are not strictly related to the purpose for which the service was requested. Bankia will offer users who have been included in any mailing list within “Bankia's communication channels” the suitable means to remove themselves from those lists in an easily accessible manner.

�

Legitimate basis for the data processing

Bankia will only obtain personal data which users wish to provide voluntarily and in accordance with the current regulations regarding personal data protection, as well as those regarding information society services.

It may be necessary to process users' personal data to maintain, fulfil and control the relationship established between the user and Bankia, as well as for Bankia to meet its legal obligations. In all other cases, and provided it is appropriate and necessary, Bankia will ask users for their consent to process their personal data.

�

Disclosure of data

Personal data will only be provided to third parties if the user has given their prior consent by checking the corresponding box, unless the provision of their data is necessary to maintain the relationship with the user. In such cases, the user will be informed of the provision of their data beforehand.

Users are also informed that if the provision of their data is not necessary for the maintenance of their relationship with Bankia, Bankia will separately request users' consent in the corresponding data collection forms and will inform users of the purpose for which their data will be processed, as well as informing them of the identity or activity sectors of any possible recipients of their personal data.

If the user is asked for their consent for their personal data to be provided to companies of the Bankia Group for marketing purposes, they will be offered the possibility to either grant or not grant their consent, by marking the corresponding box. The updated list of companies of the Bankia Group and those that collaborate with it, to which data can be provided for marketing purposes, can be viewed in the following link (PDF, 198 KB).

�

Data storage

The data will be kept for the period necessary for the purpose it was collected for. Once it is not longer needed for this purpose, the data will be blocked and will be exclusively available to Judges and Courts, the Tax Ministry or the relevant Public Administrations, particularly the data protection authorities, for the purposes of covering any responsibilities that might arise from the processing of the data during the prescription period. After this period has passed, Bankia will proceed to delete your data.

�

Exercising of rights

At any time, the user may:

1. Access their personal data which Bankia holds (right of access).

2. Modify any of their personal data which is inaccurate or incorrect (right of correction).

3. Cancel their personal data under certain circumstances, such as when it is not longer required (right of deletion).

4. Request the limitation to Bankia's use of their personal data, in which case the data will only be kept for the purposes of exercising requests (right of limitation).

5. Object to their personal data being used for purposes other than for maintaining the institution's relationship with the user (right of objection).

6. Obtain their personal data in a computer file in order to use it or provide it to a third party (right of portability).

The above rights of access, correction, deletion, limitation, objection and portability can be exercised directly by the holder of the data or through a legal representative or volunteer, by sending a written communication, with proof of their identity, to protecciondedatos@bankia.com or to the section of mails 61076, Madrid 28080.

�

Marketing communications

Users are informed that Bankia may obtain their consent, through data collection forms, to send them marketing communications.

By giving their consent, Bankia may contact the user by post, email, SMS, or by any other equivalent electronic means, to send them marketing communications regarding its products and/or services; or, where applicable, to send them marketing communications regarding products and/or services of particular third-parties or of third parties which belong to sectors indicated in the corresponding box.

In any case, the user is not obliged to receive this marketing material. If, at any given time, the User no longer wishes to continue receiving communications of this nature, they may revoke their consent by sending a written communication, with proof of their identity, either to the email address protecciondedatos@bankia.com, or to the P.O. box address Apartado de Correos 61076, 28080 Madrid, or by using the link provided for this purpose in the electronic marketing communications they receive.

�

Links

“Bankia's communication channels” may contain links to other websites. Users should bear in mind that Bankia is not responsible for the privacy and processing of data provided through other websites or channels. This document applies exclusively to information that is collected through “Bankia's communication channels”. We recommend that you read the data processing policy of other websites which are linked to from “Bankia's communication channels” or which you otherwise visit.

�

Social networks

Users have the opportunity to sign up on Bankia's pages or groups on various social networks. In these cases, users must take into account that, unless Bankia requests their data from them directly (for example, to respond to enquiries in a private environment), their data will belong to the corresponding social network. Therefore, users are recommended to carefully read the terms and conditions of use and the privacy policies of the corresponding social network, as well as to ensure that they set their preferences in relation to data processing.

�

Security

Protecting our client's data is one of Bankia's top priorities. In order to achieve this, Bankia uses high security standards in its applications and systems, and the most advanced protective measures are implemented in order to guarantee the confidentiality and integrity of the information. Bankia maintain the highest levels of security required by Law to protect users' personal data against accidental loss and unauthorised access, processing or disclosures, in light of the state of technology, the nature of the information stored and the risks the information is exposed to.

Take a closer look at the security measures with which the Company protects its information and that him will help to improve its enquiries' protection and operations in the Bank and in Internet.

�

Confidentiality

Any personal data that Bankia obtains via “Bankia's communication channels” or through the various communications it maintains with the user will be processed with absolute confidentiality. Bankia undertakes to keep such data secret and guarantees that it will fulfil its duty to adopt all the necessary actions in storing them, in order to protect them against any alteration, loss, authorised processing or access, in accordance with the applicable law at any given time.

So that the information provided is always updated and it does not contain errors, the user should communicate, shortly, the modifications and rectifications of its personal data that they leave producing.

�

Cookies

Accessing “Bankia's communication channels” can involve the use of cookies. Cookies are files downloaded to the user's device in order to collect data. They are essential for the proper operation of the Bankia Group's web pages, applications and other websites, providing benefits to users and making it easier for them to browse and use these facilities. They can be updated and recovered by the Bankia Group institutions responsible for installing them. Cookies have, in general, a limited time duration.

No cookie permits the possibility of contact via the phone number of the user, their e-mail address or with any other means of contact. No cookie can extract information from the hard disk of the user or steal personal information. The only way by which the private information of a user forms part of the cookie file is if the user personally gives that information to the server. Those users who do not wish to receive cookies or who want to be informed of their presence can configure their web browser for this purpose.

You can view detailed and up-to-date information regarding cookies in the Policy of cookies of the group Bankia.

�

Review of the Privacy Policy

Bankia will perform an annual review of its Privacy Policy, unless regulations or other requirements make it necessary to adapt the Policy more frequently. Therefore, users are advised to consult the Policy each time they view or use websites or web tools owned by Bankia or, at least, to consult its content periodically.

�

Last update: 25/05/2018