1. Personal Data Protection Policy
The Bank shall process and store the personal data of natural persons acting as account holder(s), authorised persons and representatives under the agreement by automated means. The data processed shall include any information obtained in connection with requests for information prior to entering into the agreement, the execution of this agreement or any related transactions, as well as any data to which the Bank gains access as a result of the performance of the agreements, or which is generated through automated processing of data already recorded, insofar as such data is necessary for the development, administration and maintenance of the contractual relationship and for the execution and management of the transactions arising therefrom. The Bank is authorised to process such data in order to comply with its obligations under Spanish and European legislation.
The account holder(s) (hereinafter referred to as the Client) warrant that the information provided at all times is accurate and undertake to promptly inform the Bank of any changes thereto.
All personal data requested in connection with this document is mandatory. Therefore, if such data is not provided, the Bank may be unable to perform the purpose of this document and/or may terminate its relationship with the account holder(s).
2. Who Is Responsible for the Processing of Your Personal Data?
Banco Finantia S.A Sucursal en España (hereinafter referred to as “BFS” or the Bank), with its registered office at Avenida Menéndez Pelayo 67, 28009 Madrid, Spain.
Email address:
atencionalcliente@finantia.com
3. Who Is BFS’s Data Protection Officer and How Can You Contact Them?
The Data Protection Officer (DPO) is the person responsible for safeguarding the fundamental right to the protection of personal data within BFS and for ensuring compliance with data protection legislation.
You may contact BFS’s Data Protection Officer at the following email address:
dpobfs@finantia.com
Based on a pre-contractual or contractual relationship, to manage the products and services that you hold, request or contract with BFS.
Furthermore, BFS may share your data within the Finantia Group to which it belongs, for the management of the contractual relationship. Information regarding the Finantia Group companies is available on the corporate website www.finantia.com.
To comply with a legal obligation.
Based on the legitimate interests of Banco Finantia S.A Sucursal en España:
These legitimate interests respect your rights to personal data protection, honour, and personal and family privacy. At BFS, we consider that the legitimate business interest in promoting and expanding its activities through the offering of new banking products or services may never, under any circumstances, prevail over your rights.
You may object to any of the above processing activities based on legitimate interest and, where applicable, exercise your right not to be subject to a decision based solely on automated processing. To do so, you must contact the Data Protection Officer and explain the reasons for your objection.
Based on your explicit consent:
You may refuse the use of your data for these purposes at the time of entering into a relationship with the Bank or at any later time through the channels indicated in the section relating to the exercise of rights.
BFS informs you that, in the development, maintenance, performance, monitoring and control of the pre-contractual or contractual relationship between the account holder(s) and the Bank that may be established pursuant to this document, including, among others, transfer orders, payment service providers and related technology service providers to whom data may be disclosed in order to carry out transactions and fulfil legal obligations, the Bank may be required to provide certain tax-relevant information and anti-money laundering information to authorities or official bodies in other countries, whether inside or outside the European Union (and therefore, in the latter case, such countries may not always provide a level of protection equivalent to that established under Spanish legislation).
We will retain your personal data for the duration of the contractual relationship. Applications for transactions that are not ultimately completed, as well as data collected in recruitment and selection processes, will be retained by BFS for a maximum period of 12 months, unless a different period is agreed within the application itself, in order to avoid duplication in the event of future applications.
Where we have obtained your explicit consent, we will process your data for the period during which such data must be retained in accordance with Anti-Money Laundering regulations or, where applicable, until you exercise your rights, for the purpose of sending commercial information that may be of interest to you regarding banking products and services offered by the Bank. You may withdraw your consent at any time.
Once your contracts have ended, BFS will keep your personal data blocked for the legally required limitation periods. As a general rule, data will be retained for 10 years in accordance with regulations on the prevention of money laundering and terrorist financing. After this period has elapsed, your data will be securely deleted.
Services
Financial Services, Banking and Non-Banking Services, and Other Activities Auxiliary to Financial Services.
Audit and Consulting Services
Trusted Third-Party Services
Contact Centre Services
Back-Office Services
Postal, Distribution and Courier Services
Advertising and Communication Services
Direct Debit Collection Services
Debt Recovery and Litigation Services
Physical Security Services
Maintenance Services
Printing and Envelope Insertion Services
Archiving, Custody, Storage and Digitisation Services
Document Collection and Destruction Services
IT Services
Technology Platform Services, Hosting Services, Data Processing Services, Architecture and Engineering Services, Backup Services, Business Continuity Services, IT Consulting Services, Security and Cybersecurity Services, and Other Information Technology and Computing-Related Services.
Services Provided in Spain and, in Certain Cases, within the European Union.
Rights
Content
Acces
You may access your personal data contained in BFS’s files.
Rectification
You may update or correct your personal data when it is inaccurate.
Erasure
You may request the deletion of your personal data in the following circumstances:
The above shall not apply where processing is necessary:
Objection
You may request that your personal data not be processed, unless there are compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or where the processing is necessary for the establishment, exercise or defence of legal claims.
Restriction of Processing
You may request the restriction of the processing of your personal data in the following circumstances:
Portability
The data subject shall have the right to receive the personal data that he or she has provided in a structured, commonly used and machine-readable format, and to transmit those data to another controller where:
The data subject may request the controller to transmit the data directly to another controller where this is technically feasible.
This right shall not adversely affect the rights and freedoms of others.
Personal data directly provided by the Client, as well as data generated through the Client’s use of the service, may be transferred.
Data that has not been provided by the Client and has instead been inferred, derived or created by the controller on the basis of the analysis of raw data shall not be subject to portability.
The exercise of this right may be considered excessive or repetitive where it is exercised more than three times during the previous six-month period.
You may exercise your rights, which will be addressed following verification of your identity, by submitting a request together with a copy of your National Identity Document (DNI) (showing only the information strictly necessary for identification) or an equivalent identity document, a request signed with a qualified electronic signature, or from the email address designated in the contractual documentation, to any of the following:
You may withdraw your consent at any time without affecting the lawfulness of any processing carried out on the basis of the consent previously provided, nor any subsequent processing of such data that is based on another legal ground, such as the performance of a contract or compliance with a legal obligation applicable to BFS. To withdraw your consent, you must submit your request through the channels indicated above, together with the documentation required for identification as described previously, except in the case of advertising or promotional communications, for which a specific withdrawal mechanism will be provided.
If you consider that we have not processed your data in accordance with applicable legislation, you may submit a request to the Bank’s Data Protection Officer.
Data Protection Officer: Banco Finantia S.A Sucursal en España
Email contact: dpobfs@finantia.com
Notwithstanding the above, you may lodge a complaint with the Spanish Data Protection Agency.
Complaints to the Data Protection Officer / Supervisory Authorities
Before submitting a complaint to the Spanish Data Protection Agency, an Independent Administrative Authority, or where applicable to regional supervisory authorities (Supervisory Authority), the Client may first submit the complaint to the Data Protection Officer of Banco Finantia S.A Sucursal en España.
Spanish Data Protection Agency
C/ Jorge Juan, No. 6
28001 Madrid