Personal data processing

What is the purpose of this Personal Data Protection Policy?

This personal data protection policy (“Personal Data Protection Policy") is intended to inform you of how we obtain, process and protect the personal details you provide or that we gather through our bbva.es website (the “Website”) through forms and/or cookies so that you can freely and willingly decide if you want us to process them. 

When you take out products or services with Banco Bilbao Vizcaya Argentaria, S.A. (“BBVA”), your personal data will be processed in accordance with the information provided in the corresponding document.

The Website is owned by Banco Bilbao Vizcaya Argentaria, S.A. (“BBVA”). For more information on BBVA and the Website, see the Legal Notice and Terms of Use.

This document serves to inform you about the information that BBVA obtains through the Website. However, the information provided herein does not apply to data that may be obtained by third parties via other websites, even if such sites are linked to the Website.

Please read this Personal Data Protection Policy each time you use the Website, as it may be amended.

Who is the controller of your personal data?

Banco Bilbao Vizcaya Argentaria, S.A. (“BBVA”), with its registered office at Plaza de San Nicolás 4, 48005, Bilbao, Spain. 

Email address: consultasgenerales@bbva.com

Contacting the BBVA Personal Data Protection Officer

You can contact the BBVA Data Protection Officer at the following link.

What do we use your personal data for?

  1. To manage how you browse the Website, in keeping with our Cookie Policy, which you can read here.
  2. For the purposes and with the authorization indicated in each of the forms used by the Website to collect personal data. 

At BBVA, we process your personal data in absolute confidentiality and undertake to keep them confidential. We also guarantee that we will comply with our duty to store your data appropriately by adopting all the measures necessary to prevent them from being altered, lost, processed or accessed without authorization, in accordance with the legal obligations that apply to us as the controller of your data. 

At BBVA, we have implemented and maintain the highest levels of security required by legislation to protect your personal data against accidental loss and unauthorized access, processing or disclosure, given the state of technology, the nature of the stored data and the risks to which they are exposed. You can view BBVA's security section here.

Will BBVA send you marketing communications?

Using data collection forms, BBVA may ask for your consent to contact you via standard mail, email, SMS or any other equivalent means of electronic communication to send you sales-related communications about its products and/or those of third parties that are identified on the form.

If, at any time, you no longer wish to receive communications of this nature, you can withdraw your consent by sending a notification to the following address: derechosprotecciondatos@bbva.com or Servicio Atención al Cliente Grupo BBVA, APDO: 1598 - 28080 Madrid, or by using the link provided in the sales-related communications that you receive.

How long will we keep your data for?

We will keep your data for the period specified by the form which, where applicable, we will provide you so you can send your personal data to BBVA, and for the period specified in the Cookie Policy. 

Who will we communicate your data to?

We will only transfer your personal data to third parties if legally obliged to do so, or if you give your consent.

When your consent is required in order to disclose your personal data to third parties, the relevant data collection forms will indicate why it is necessary to process the data at issue, what data will be disclosed and the identity of the parties that might receive your personal data, or the industries in which they operate.

You can view the BBVA Cookie Policy to check which third parties will receive personal data through this Website's cookies.

Please also be aware that certain companies that provide services to BBVA may access your personal data for the same purpose as indicated in the above paragraph (international data transfers). These transfers are made to countries with data protection levels that are equivalent to those of the European Union (suitability decisions issued by the European Commission, standard contractual clauses and certification mechanisms). For further information, please write to the BBVA Data Protection Officer at the following email address: dpogrupobbva@bbva.com.

Does BBVA use cookies on this website?

Our Website uses "cookie" technology. For more detailed information on how BBVA uses cookies, see the Cookie Policy here

Does BBVA use links to other websites?

The Website may contain links to other web pages. Please note that BBVA is not liable for the privacy and processing of personal data from other websites. This Personal Data Protection Policy document exclusively applies to information collected on the Website by BBVA. You are advised to read the personal data processing policies of the other websites this Website is linked to, or to visit them by any other means. You can find more information about our linking policy in our Legal Disclaimer here.

What are your rights when you submit data to us?

Right Contents Customer service channels
Right
Access
Contents
You can view your personal data included in BBVA files
Customer service channels

derechosprotecciondatos@bbva.com 

BBVA Group Customer Services Department: P.O. Box 1598 - 28080 Madrid. 

BBVA Branches

Right
Rectification
Contents
You can amend your personal data if it is inaccurate. 
Right
Erasure
Contents
You can request for your personal data not to be processed.
Right
Processing limitation
Contents

You can request that processing of your data be restricted under the following circumstances:

- While challenges about the accuracy of your data are being checked. 

- If it is illegal to process your data, but you object to it being erased. 

- If BBVA does not need to process your data, but you need it in order to file or defend claims. 

- If you have objected to your data being processed in order to perform an undertaking in the public interest or to satisfy a legitimate concern, while checks are being carried out as to whether the lawful grounds on which to process the data prevail over the ones you cite. 

Right
Portability
Contents
You may receive the personal data you have provided in electronic format and transfer it to another entity. 
Right

If you think we have failed to process your personal data in accordance with the regulations, you can contact the Data Processing Officer at the following link.

You may also file a claim with the Spanish Data Protection Agency (www.aepd.es).

Right
Exercising these rights is free.
The present document on personal data processing (“Personal Data Processing”) regulates handling of the personal information provided by the users (the “User” or “Users”) of the website www.bbva.es (the “Website”), which is owned by Banco Bilbao Vizcaya Argentaria, S.A. (“BBVA”). You can view information about BBVA in the Legal Notice and Terms of Use.

Who is the controller of your personal data?

The data controller will be Banco Bilbao Vizcaya Argentaria, S.A. ("BBVA"), with registered office at Plaza San Nicolás 4, 48005, Bilbao.

We will process the personal data you provide us while using online business banking to:

  • To manage how you browse the Website, in keeping with our Cookie Policy, which you can read here.
  • For the purposes and with the authorization indicated in each of the forms used by the Website to collect personal data. 
  • If you are a representative or authorized representative of a BBVA customer company, in order to manage the Online Services Agreement that allows the use of and access to BBVA online business banking, in which you act by way of your legal relationship with a BBVA customer.

The legal basis that enables us to process this data is compliance with this contract.

Furthermore, we will process your data to prevent money laundering and the financing of terrorism in order to comply with BBVA's obligations on information collection and identification, and the provision of information on payment transactions to the authorities of other countries, both within and outside the European Union, on the basis of legislation of some countries and agreements signed with them.

How long will we keep your data for?

We will keep your data while the contract is in force, as well as during the period indicated in the cookie policy. Once completed, they shall be suspended during the legal period, generally 10 years, in application of the regulations aimed at preventing the money laundering and the financing of terrorism. Once the statutory limitation period has elapsed, the data will be destroyed.

Who will we communicate your data to?

We will not assign them to third parties, except when legally obliged to do so.

What are your rights when you submit data to us?

You may exercise your rights over your personal data as explained below:
Right Contents Customer service channels
Right
Access
Contents
You can check your personal data that is contained in BBVA files
Customer service channels

derechosprotecciondatos@bbva.com 

BBVA Group Customer Services Department: P.O. Box 1598 - 28080 Madrid. 

BBVA Branches

Right
Rectification
Contents
You can amend your personal data if it is inaccurate. 
Right
Erasure
Contents
You can request for your personal data not to be processed.
Right
Opposition
Contents
You can request for your personal data not to be processed.
Right
Processing limitation
Contents

You can request that processing of your data be restricted under the following circumstances:

- While challenges about the accuracy of your data are being checked.

- If it is illegal to process your data, but you object to it being erased.

- If BBVA does not need to process your data, but you need it in order to file or defend claims.

- If you have objected to your data being processed in order to perform an undertaking in the public interest or to satisfy a legitimate concern, while checks are being carried out as to whether the lawful grounds on which to process the data prevail over the ones you cite.

Right
Portability
Contents
You may receive the personal data you have provided in electronic format and transfer it to another entity. 
Right

If you think that we haven't processed your personal data as required by law, you can contact the Data Protection Officer by writing to dpogrupobbva@bbva.com

You may also file a claim with the Spanish Data Protection Agency (www.agpd.es).

Right
In order to exercise your rights, please submit a copy of your national ID (DNI) or equivalent document proving your identity with your application.
Right
Exercising these rights is free.

You can also withdraw your consent at any time without affecting the legality of the data processing procedure by sending a request to the email address: derechosprotecciondatos@bbva.com, to Servicio Atención al Cliente Grupo BBVA, APDO: 1598-28080 Madrid, or by going to one of our branches. Remember to submit a copy of your national ID (DNI) or equivalent document proving your identity with your application.

Last updated: May 2018

  • For customers, non-customers and third parties

    You may exercise rights of access, rectification,
    deletion, opposition, restriction and/or portability.
  • For queries

    If you have any queries about BBVA's Data Protection Policy or how BBVA processes your data.
For queries or claims related to a product or service

If you need a certificate or document, or if you think you may have been subject to online banking or card fraud, you can contact the Customer Service department.