Policy on cookies and other similar technologies

This policy describes the use of cookies and other similar technologies that we use on the BBVA Website and App. You can check and configure cookies and similar technologies by going into the Settings Panel here.

What are cookies and similar technologies?

Any type of data storage and retrieval device used on a user's terminal equipment (e.g. computer, cell phone or tablet) to store information and retrieve stored information.

The term referred to here as “cookies” should be understood in a broad sense, including other similar technologies (with or without data storage), such as local shared objects or flash cookies, web beacons, bugs, APIs (software that enables communication between applications), etc. as well as the use of fingerprinting techniques, that is, techniques used to capture the digital fingerprint of the device, or any technology that allows us to access the unique identifier generated by the operating system of the device from which you access our App.

What are cookies used for?

We use our own and third-party cookies for a wide variety of purposes, such as recognizing you as a customer, obtaining information about your contracted products or interests, carrying out measurements and usage statistics of the BBVA Website/App and the results of advertising campaigns, personalizing the content shown to you, or improving the range of products or services we offer you.

Personal data protection

Some of the purposes for which cookies and similar technologies are used may involve the processing of personal data; that is, when the user is identified by a name or email address that identifies them (for example, as a registered user), through the IP address, or when unique identifiers are used through the encryption of your email address, as well as its sharing with advertising platforms and its use to single out users, this entails the processing of personal data.

In the Cookie Types section, we detail these purposes. You can also consult our Personal Data Protection Policy here to learn about how personal data is processed.

Based on the purpose of the cookie:

  • Technical cookies: Cookies that enable the user to browse the web page, platform or application and to use the available options or services, including those used by the editor to manage and operate the website and enable its functions and services, e.g. controlling traffic and data communication, identifying the session, defining the content's language, accessing restricted areas, remembering the elements in an order, completing the checkout process, managing payments, controlling fraud linked to the service’s security, asking to register for or participate in an event, counting visits to bill software licenses used in the service (website, platform or application), using security features while browsing, storing content to play videos or sound, enabling dynamic content (e.g. text/image loading animation) or sharing content on social media. Also included in this category are cookies or similar technologies used to obtain anonymous statistics on the use and performance of the BBVA Website or App, which are essential for its proper management. These cookies or similar technologies are used exclusively to generate aggregated information, without in any case identifying users individually or tracking between different websites or applications. The information collected is kept for a maximum period of 25 months, and the useful life of these cookies or similar technologies is 13 months.
  • Preference or personalization cookies: Cookies that make it possible to remember information so that users may view the service with certain characteristics that may be different from those of other users, such as the products that may interest the user, the service's content depending on the type of browser used to access the service or the region from which it is accessed, etc.
  • Preference or personalization cookies: Cookies that make it possible to remember information so that users may view the service with certain characteristics that may be different from those of other users, such as the products that may interest the user, the service's content depending on the type of browser used to access the service or the region from which it is accessed, etc.
  • Analysis or measurement cookies: Cookies that allow their owner to monitor and analyze user behavior on the websites they are linked to, including quantification of the impact of advertising. Information gathered with this type of cookie is used to measure website, platform or application activity then make improvements based on these data.
  • Behavioral advertising cookies: Cookies that store information on user behavior from continued observation of user browsing habits, thus enabling the development of a specific profile to show advertising in other websites and apps outside BBVA's channels according to the behavior in question.
  • Cookies that allow for the creation and sharing of unique identifiers: These are those that allow us to share unique identifiers, obtained through the encryption of your email address or through the identifier assigned by cookies or by the operating system of your device if you access through our App, with advertising platforms, which will use them in accordance with their respective cookie policies, for the purpose of developing and improving our commercial activities within their environments.

Depending on their duration, cookies can be:

  • Session cookies: These types of cookies are designed to obtain and store details while the user is accessing a website. They are normally used to store information that is only useful to provide the service requested by the user on a single occasion (for example, a list of products purchased), and are deleted when the session ends.
  • Persistent cookies: Type of cookie in which the data is stored in the terminal and can be accessed and processed for a period set by the owner of the cookie, which can range from a few minutes to several years.

Based on the company that manages them:

  • Internal cookies: Those cookies that are sent to the user's terminal from a computer or domain managed by the owner of the website that provides the service requested by the user.
  • Third-party cookies: These cookies are sent to the user's terminal from a computer or domain that is not managed by the owner of the website, but by another company that processes the data obtained through the cookies. If the cookies are installed from a machine or domain managed by the website itself, but their information is managed by a third party, they cannot be regarded as first-party cookies if the third party uses them for its own purposes, such as improving the services it offers or to provide, for example, advertising services on behalf of other entities.

What identifiers are used on the BBVA Website or App?

1. Unique identifier

Within BBVA environments, we may use, if you have given us your consent, a unique identifier.
 
What is a “unique identifier”?
 
A unique identifier is a code that allows a user or device to be individually recognized over time and across different platforms. This identifier is key to personalizing ads, measuring their effectiveness, and performing precise targeting. We can obtain it in several ways:
  • We convert your email into an encrypted code (unique identifier) ​​and share it, if you have consented, securely with advertising platforms with which we have agreements. These platforms already have your email in their systems (e.g., because you used it when registering for their services), and they store it in a similar code form. If you have given that platform permission to use your information for advertising purposes, when it receives our code it compares it with the one it already has. If the code matches, the platform recognizes that it is also a BBVA user, which allows us to develop and improve our commercial actions on these advertising platforms. The email we use is the one you provide when you contract a BBVA product (even if you don't complete the purchase) or, if you are already a customer, the one we have in our database.
  • We can also create the unique identifier using the identifier assigned by the cookies installed on your device or, where applicable, using the App advertising identifier referred to in the next section.

For which purposes is the unique identifier used?

  • We use it to develop and improve our commercial activities on the advertising platforms with which we collaborate and share the identifiers. For example, sharing this unique identifier allows us to show you more relevant BBVA advertising (ads) when you browse the websites or apps of these platforms, prevent you from being shown advertising that is not of interest to you on advertising platforms, or measure the effectiveness of our commercial actions on advertising platforms.

With whom do we share your unique identifier?

  • If you have consented, we will share your unique identifier with the advertising platforms with which we collaborate.

How long is the unique identifier kept?

  • The unique identifiers that have been generated will be retained for the duration of the corresponding advertising campaign and, in any case, for a maximum of 90 days from the user’s last visit to the BBVA App or website. Once this period has elapsed, the aforementioned identifiers will be deleted, without prejudice to BBVA being able to keep the technical evidence of your consent duly blocked for a maximum of 3 years, in accordance with the legal limitation periods established in the personal data protection regulations.
  • The cookie or similar technology used to create the unique identifier will have a maximum lifespan of 13 months. After this period, your consent will be requested again in order to generate and use a new unique identifier.

2. Advertising identifier for Apps

In the BBVA App, we can use an “advertising identifier” (also known as “Advertising ID” on Android) for Apps.

What is the “App Advertising Identifier” and what is it used for?

  • The advertising identifier for Apps (also known as “Advertising ID” on Android) is a unique code that your mobile operating system assigns to your mobile device. It works similarly to a cookie, but in mobile environments (in Apps). Therefore, if, when accessing our App, you accept the use of cookies or similar tracking technologies, we will use the advertising identifier for Apps for analytical or behavioral advertising purposes, as appropriate.
  • Also, if you have consented to the creation and sharing of unique identifiers, the App advertising identifier may be used as a unique identifier as indicated in the previous section.

For which purposes is the advertising identifier for Apps used?

  • Advertising: It allows you to see ads in third-party apps that are more relevant to your activity and tailored to your interests. This identifier does not directly display your name or personal information, but it does help create an advertising profile based on your interests, such as the types of apps you use, your language preferences, or your approximate location.
  • Analytics and measurement: This identifier allows us to analyze how you interact with BBVA ads in order to improve advertising campaigns, personalize advertising that appears in other apps, and measure campaign effectiveness.

The advertising identifier for Apps may be used as a unique identifier as indicated in the previous section.

With whom do we share your Advertising Identifier for Apps?

  • If the advertising identifier for Apps is used as a unique identifier, we will share it with the advertising platforms with which we collaborate.

How long is the advertising identifier for Apps kept?

  • The advertising identifier for Apps is not permanent; you can reset or disable it from your device settings.
  • Notwithstanding the above, if the advertising identifier for Apps is used as a unique identifier, it will be retained for the duration of the corresponding advertising campaign and, in any case, for a maximum of 90 days from the user’s last interaction with the BBVA App. Once this period has elapsed, the aforementioned identifiers will be deleted, without prejudice to BBVA being able to keep the technical evidence of your consent duly blocked for a maximum of 3 years, in accordance with the legal limitation periods established in the personal data protection regulations.
  • The cookie or similar technology used to access the advertising identifier will have a maximum lifespan of 13 months, after which your consent will be requested again in order to access the identifier.

Consent

Through our Cookie Policy and other similar tracking technologies, we will ask for your specific consent to use cookies, your device's advertising identifier, and your encrypted unique identifier (your email address converted into an encrypted code) for advertising, analytics or measurement purposes. It is important to know that:

  • The above does not apply in cases where cookies are needed for browsing in the terminal equipment and/or for providing the service requested by the User (technical cookies).
  • Technical cookies are exempt from the information and consent requirements contained in Article 22 of the LSSI (see definition of technical cookies).

Regarding the advertising identifier, it is important to know that:

  • If you give us your consent for all or any of the purposes indicated above, we may process the advertising identifier (if you have activated it in your mobile device settings) and encrypted unique identifier (your email converted into an encrypted code, if you have provided it to us) for the purpose for which you have consented.
  • If you have disabled the advertising identifier in your device settings, even if you have given us your consent, we will not be able to access or process it, as the operating system itself blocks its use. In this case, we will not be able to personalize ads or perform ad tracking using this identifier on that device.

Withdraw consent

You can modify or revoke your consent at any time regarding the use of cookies or other similar technologies, as well as the creation and sharing of your unique identifier, from the “Privacy and Data” section, which is permanently available in the BBVA App menu, or through the Settings Panel, which is permanently available via the link at the beginning of the Cookie Policy. Additionally, you can activate or deactivate the use of the “advertising identifier for Apps” from your mobile settings. On Android, you can manage your advertising identifier on your device by following this path, either to reset it or prevent it from being shared: “Settings” > “Security and Privacy” > “Privacy Controls” > “Ads”. We will retain the selection you have authorized for a maximum of 24 months and, periodically after this period, we will request your consent to be updated again. Likewise, if after obtaining your consent there is a change in the cookies, in their purposes of use, or in the third parties involved, we will request your consent again. In the case of third-party cookies, please note that the revocation procedures are managed and controlled exclusively by each provider. You can delete them from the browser options or from the system offered by the third party itself. With respect to cookies:

In any case, you can, at any time, allow, block, or delete cookies, as well as delete all your browsing information (including cookies) from the browser installed on their terminal. Check the options and instructions that your browser provides for doing this:

Disabling all cookies does not prevent browsing the Website or App.

Advertising identifier for Apps:

  • You can activate or deactivate the use of the “advertising identifier” at any time from your mobile settings. Additionally, you can enable or disable the use of the “advertising identifier” from your mobile settings. On Android, you can manage your advertising identifier on your device by following this path, either to reset it or prevent it from being shared: “Settings” > “Security and Privacy” > “Privacy Controls” > “Ads”.

Unique identifier:

  • At any time, you can withdraw your consent for us to generate unique identifiers and share them with advertising platforms through the Settings Panel or from the “Privacy and Data” section, which is permanently available in the BBVA App menu.

Changes to the policy on cookies and other similar technologies

This Cookies Policy may be altered at any given time whenever required by current legislation or whenever there is a change to the type of cookie or similar technology used.

Latest version: January 2026.