CORREOS DATA PROTECTION POLICY

1. Responsible for data processing

Your data will be processed by the company “Sociedad Estatal Correos y Telégrafos, S.A., S.M.E" (hereinafter, Correos), NIF: A83052407 with registered office at Via Dublin No. 7 (Campo de las Naciones) 28070 Madrid (Spain).

There is information on our website regarding the appointment of the Data Protection Delegate, who you can contact at dpdgrupocorreos@correos.com

2. Data treatment and legitimisation

The treatment of your data pursues the following purposes:

A. Provision of Correos services

Your data will be processed for the provision of services offered by Correos, as well as, where appropriate, to address all requests made by you for information, questions or queries and to file any claims or complaints.

B. Sending of Correos’ products and services’ offers and promotions

If you give your consent, Correos may send you via any electronic or non-electronic channel, commercial information related to the provision, improvement and updating of our products and services, new rates and discounts.

This commercial information may be generic or personalized. In the case of the latter it will involve the prior processing of your data in order to be able to proceed with profiling and allocation, determine tastes, preferences and needs and, based on these, identify the offers that may be more interesting.

At any time you may revoke your consent for free and not receive new offers and promotions by so indicating by mail to the above address or by email to derechos.protecciondatos@correos.com or through our customer service desk. Likewise, in all electronic commercial communication you will be informed again of your right to revoke your consent.

C. Sending of offers and promotions from other companies within the Correos Group and third-party companies

In the event that you give your consent, Correos may send you, through any electronic or non-electronic channel, offers and promotions to do with:

Other companies within the Correos Group that provide services related to the sectors that belong to the activities of parcel services, of added value postal services, logistics, marketing and telecommunications.

Other companies with which Correos has signed various collaboration agreements and which belong to sectors such as telecommunications, finance, consumer goods, healthcare and NGO's.

This commercial information may be generic or personalized. In the latter case, it will involve the prior processing of your data in order to be able to proceed with profiling and allocation, determine tastes, preferences and needs and, based on this, identify the offers that may be more interesting.

At any time you may revoke your consent for free and not receive new offers and promotions by sending it by mail to the above address or by email to derechos.protecciondatos@correos.com or through our customer service desk. Likewise, in all electronic commercial communication you will be informed again of your right to revoke your consent.

D. Communication of data to other companies within the Correos Group and to third-party companies

If you give your consent, Correos may communicate your data to the companies within the Correos Group and to third party companies whose sectors are detailed previously, so that these companies can send you, directly and without the intermediation of Correos, offers and promotions related to their products and services.

E. Enriching your information

In the event that you give your consent, Correos may obtain more information regarding your personal characteristics, tastes and needs through the information provided by different external sources such as Public Registries, Property Registries, Social Networks, geomarketing tools, financial information databases such as INFORMA, credit information files such as ASNEF, BADEXCUG ... with the purpose of introducing improvements in our products and services and / or adapting or choosing the offers of those products and services that best suit your specific profile.

F. Complying with legal obligations

Within the various legal obligations assumed by Correos are those derived from the application of postal regulations (Law 43/2010 of the universal postal service, the rights of users and the postal market) and the duty of secrecy of communications (Article 18 of the Constitution), as well as tax regulations.

In compliance with these obligations, Correos may communicate your data to the Public Administrations and courts, provided that such information is required in accordance with established legal procedures.

G. Statistical information and satisfaction surveys

Correos has a legitimate interest in better understanding both the opinion of its customers regarding its products and services and their consumption habits (e.g. the frequency / repetition in subscribing to the different services) in order to be able to offer products and services that are better suited to their needs and to improve both current products and services as well as the process of subscribing to them.

To achieve the objective stated in the previous paragraph, Correos will be able to process your data and:

Conduct satisfaction surveys both by telephone and electronically, even though you are no longer a client, in the latter case to determine the reasons why you left.

In the event that, during the satisfaction survey, the client expresses their opinion regarding the products and services of any of the companies within the Correos Group, the results of the survey and the identification data of the participant may be relayed to the company within the Correos Group whose services are being rated in the study.

Proceed with anonymization of your data, so that the information on your consumption habits cannot be linked back to you and, consequently, carry out statistical and econometric studies (e.g. getting information about the customer's life cycle and / or identify models of propensity for abandonment).

3. Type of data processed

For the purposes set out in the previous section we are dealing with a set of personal data that can be divided into the following sources and categories:

A. Data provided by the client directly:

At the time of registration and / or when filling in the relevant application forms for such purposes.

The client guarantees that the data provided to Correos for the provision of the services requested respond truthfully to their real situation and that they will communicate any changes made to that effect. As a result, the customer will be liable to Correos and third parties for any damages or losses caused as a result of the breach of the obligations assumed in this clause.

B. Data collected indirectly:

All data that, in the event of having given your consent, Correos collects from other external sources as listed in purpose 2.E.

C. Data derived from the provision of the service itself:

E.g.: History of products and services contracted and their characteristics, claims or requests for information ...

4. Data conservation period

Your personal data will be kept as long as it is necessary for the development of the contractual relationship. Once this period has elapsed, the data will be deleted in accordance with the provisions of the data protection regulations, which implies their blocking, being available only at the request of Judges and Courts, the Public Prosecutor's Office or the competent Public Administrations during the statute of limitations period.

For the purposes of the provisions of the previous paragraph, Correos will block all users who are inactive - that is to say, they do not access any of the Virtual Office's services - for a period of 5 years.

5. Your rights

Our data protection regulations confer a series of rights in relation to the processing of data that imply our services and that we can summarize in the following:

  • Right of access: To know the kind of data we are processing with and the characteristics of the data processing being undertaken.
  • Right of rectification: To be able to request the modification of your data because they are inaccurate or untrue.
  • Right to data portability: To obtain a copy in an interoperable format of the data that is being processed.
  • Right to restrict processing in the cases included in the Law.
  • Right of suppression: Request the deletion of your data when processing is no longer necessary.
  • Right of opposition: Request the cessation of commercial communications according to the terms indicated above.
  • Right to revoke the consent given.

You can exercise your rights through any of the following channels, indicating which right you wish to exercise, providing a copy of your National Identity Document or equivalent in addition to any other documentation you consider appropriate:

  • Postal Address: Via Dublin No. 7 (Campo de las Naciones) 28070 Madrid (Spain)
  • Email: derechos.protecciondatos@correos.com

On the website of the Spanish Data Protection Agency (AEPD) you can find a series of models that will help you in the exercise of your rights. Likewise, we inform you that you have the right to file a claim with the relevant authority (in Spain, the AEPD) in case you consider that your rights are infringed.

6. Access to third party data

For the provision of certain services you may need to provide us with personal and contact information of third parties, such as, name, surname, postal address, email address, contact telephone number and other information or equivalent means of the recipient of a communication or mailshot.

Correos will exclusively deal with this data in order to proceed with the delivery of the communication or mailshot. Additionally, in order to provide the best service, the telephone number or email address may be used to inform the recipient about the estimated delivery dates and address any incident that may affect it.

In this sense, the client guarantees the veracity and updating of the recipient's data and, if applicable, claims to have complied with all such obligations that, in terms of data protection, are attributable to them, having obtained the consent of the recipient for Correos to carry out the data processing described in the preceding paragraphs, in the event that such consent is deemed necessary.

For its part, if the user is a company or professional that allows Correos access to personal data under their responsibility for the provision of any of our services, Correos is committed to comply with all obligations inherent in its position as manager of data processing and, in this sense:

  • Will access and process the data to which it has access, subject to their instructions, not using them for purposes other than the provision of the service. To this end, it can count on the services of other third parties (sub-processed), if necessary for the provision of the service and contract operations and / or for its preservation and provided that (i) the new manager is subject to the same conditions (instructions , obligations, security measures ...) and with the same formal requirements, regarding the proper processing of personal data and the guarantee of the rights of the people affected; (ii) Correos, by express request, places at their disposal a list that identifies the sub-processed services as well as the identity of the sub-processers; (iii) In case of non-compliance by the sub-processer, Correos continues to hold full responsibility.
  • Will implement the appropriate legal, technical and organizational security measures to guarantee a level of security appropriate to the risk, in accordance with the provisions of art. 32 of the RGPD and, at your request, will inform you of the risk analysis methodology used.
  • Once the contractual provision has been fulfilled, it will destroy or return the processed data, as well as any platforms, outlets or documents that contain data subject to the processing procedure, without prejudice to the possibility of keeping this data, duly blocked, in the terms provided by our data protection regulations.
  • Will ensure compliance with the rest of the obligations included in the data protection regulations.