Personal data processing

The purpose of this data protection information is to let you know how we process the personal data we obtain through the Website, whether through forms, cookies or other mechanisms enabled on it.

If you take out a BBVA product or service, your personal data will be processed in accordance with the specific data protection information provided for that product or service.

This information only applies to processing carried out by BBVA through the Website. It does not apply to processing carried out by third parties through other websites, even if accessed through links included on the Website.

We recommend you check this section periodically, since we may update it.

Banco Bilbao Vizcaya Argentaria, S.A. (“BBVA”), with its registered office at Plaza de San Nicolás 4, 48005, Bilbao, Spain. 

Email address: consultasgenerales@bbva.com.

1. To manage how you browse the Website in accordance with the Cookies and Other Similar Technologies Policy.

2. To create profiles based on your browsing habits and digital behavior data obtained from platforms and media exchanges, as well as to provide you with personalized content when you consent to the use of cookies in accordance with our web and mobile cookie policy.

3. To develop commercial actions in online environments that allow us to show you personalized advertising on third-party advertising platforms about our products and services, in accordance with their own cookie policies, as well as to carry out the monitoring and optimization of said commercial actions at BBVA.

To achieve this purpose, the Bank will generate unique identifiers by encrypting your email address, the identifier assigned by cookies, or your device’s operating system (if you access our services through our app) when you provide your consent in accordance with our web and mobile cookie policy.

The legal basis for carrying out commercial activities in online environments is the consent you give when you accept the installation of personalized advertising cookies.

BBVA does not carry out personalized advertising actions on third-party platforms with respect to users under the age of 18. If, based on the available information, it is found that a user is a minor, BBVA will automatically exclude their personal data from such processing, even if consent has been given.

4. For the purposes and with the authorization indicated in each of the forms used by the Website to collect personal data.

Using data collection forms, BBVA may ask for your consent to contact you via standard mail, email, SMS or any other equivalent means of electronic communication to send you sales-related communications about its products and/or those of third parties that are identified on the form.

If, at any time, you no longer wish to receive communications of this nature, you can withdraw your consent by sending a notification using this form to Servicio de Atención al Cliente Grupo BBVA, APDO: 1598 - 28080 Madrid, or by using the link provided in the sales-related communications that you receive.

We will keep your data for the period specified by the form which, where applicable, we will provide you so you can send your personal data to BBVA, and for the period specified in the Cookie Policy. 

We will only transfer your personal data to third parties if legally obliged to do so, or if you give your consent.

When your consent is required in order to disclose your personal data to third parties, the relevant data collection forms will indicate why it is necessary to process the data at issue, what data will be disclosed and the identity of the parties that might receive your personal data, or the industries in which they operate.

You can view the BBVA Policy on Cookies and Similar Technologies to check which third parties will receive personal data through this Website's cookies and similar technologies.

Please also be aware that certain companies that provide services to BBVA may access your personal data for the same purpose as indicated in the above paragraph (international data transfers). These transfers are made to countries with data protection levels that are equivalent to those of the European Union (suitability decisions issued by the European Commission, standard contractual clauses and certification mechanisms). For further information, please write to the BBVA Data Protection Officer at the following email address: dpogrupobbva@bbva.com.

In addition, if you have given your consent, BBVA will share your unique identifiers with the advertising platforms we work with (these identifiers are generated by encrypting your email address or through the identifier assigned by cookies or your device’s operating system—if you access our services via our app).

We use cookies and other similar technologies on our Website. For more information, consult the Cookies and Other Similar Technologies Policy.

The Website may contain links to other web pages. Please note that BBVA is not liable for the privacy and processing of personal data from other websites. This Personal Data Protection Policy document exclusively applies to information collected on the Website by BBVA. You are advised to read the personal data processing policies of the other websites this Website is linked to, or to visit them by any other means. You can also find more information on our link policy in our Legal Notice.

• Access: you can view your personal data included in BBVA files.
• Rectification: you can amend your personal data if it is inaccurate.
• Deletion: you can request that your personal data be erased.
• Objection: you can ask that your personal data not be processed and/or not to be subject to automated decisions.
• Data processing restrictions: You can request that processing of your data be restricted under the following circumstances:
  • While challenges as to the accuracy of your data are being checked.
  • When the processing of your data is unlawful, but you object to it being erased.
  • If BBVA does not need to process your data, but you need it in order to file or defend claims.
  • If you have objected to your data being processed in order to comply with an undertaking in the public interest or to fulfill a legitimate interest, while it is considered if the legal grounds for processing the data prevail over the ones you cite. 
• Portability: You will be able to receive, in electronic format, the personal data you have provided to us and that obtained from your contractual relationship with BBVA, as well as transmit the same to another entity.
• Not to be subject to decisions based solely on automated processing: whenever BBVA carries out automated processing without human intervention, you also have the right to request an operator to explain the decision made, to take your comments on the matter, and to challenge the Bank's decision.

Remember:

In addition to what is indicated in this document, BBVA will also process your personal data in accordance with the personal data processing purposes you have previously accepted as a customer of BBVA.

Consult the latest updated version of BBVA's personal data protection policy. This policy is provided to you to keep you up to date at all times, but remember that it may not be the one you accepted (and which therefore applies to you) with BBVA, since yours may be older. For any questions or queries about the data protection policy you have accepted, please do not hesitate to contact your adviser. 

The present document on personal data processing (“Personal Data Processing”) regulates handling of the personal information provided by the users (the “User” or “Users”) of the website www.bbva.es (the “Website”), which is owned by Banco Bilbao Vizcaya Argentaria, S.A. (“BBVA”). You can view information about BBVA in the Legal Notice and Terms of Use.

The data controller will be Banco Bilbao Vizcaya Argentaria, S.A. ("BBVA"), with registered office at Plaza San Nicolás 4, 48005, Bilbao.

We will process the personal data you provide us while using online business banking to:

• To manage how you browse the Website in accordance with the Cookie Policy.
• For the purposes and with the authorization indicated in each of the forms used by the Website to collect personal data. 
• If you are a representative or authorized representative of a BBVA customer company, in order to manage the Online Services Agreement that allows the use of and access to BBVA online business banking, in which you act by way of your legal relationship with a BBVA customer.

The legal basis that enables us to process this data is compliance with this contract.

Furthermore, we will process your data to prevent money laundering and the financing of terrorism in order to comply with BBVA's obligations on information collection and identification, and the provision of information on payment transactions to the authorities of other countries, both within and outside the European Union, on the basis of legislation of some countries and agreements signed with them.

We will keep your data while the contract is in force, as well as during the period indicated in the cookie policy. Once completed, they shall be suspended during the legal period, generally 10 years, in application of the regulations aimed at preventing the money laundering and the financing of terrorism. Once the legal period has elapsed, the data will be destroyed.

We will not assign them to third parties, except when legally obliged to do so.

• Access: you can view your personal data contained in BBVA files
• Rectification: you can amend your personal data if it is inaccurate.
• Deletion: you can request that your personal data be erased.
• Objection: you can ask that your personal data not be processed and/or not to be subject to automated decisions.
• Data processing restrictions: You can request that processing of your data be restricted under the following circumstances:
  • While challenges as to the accuracy of your data are being checked.
  • When the processing of your data is unlawful, but you object to it being erased.
  • If BBVA does not need to process your data, but you need it in order to file or defend claims.
  • If you have objected to your data being processed in order to comply with an undertaking in the public interest or to fulfill a legitimate interest, while it is considered if the legal grounds for processing the data prevail over the ones you cite. 
• Portability: You will be able to receive, in electronic format, the personal data you have provided to us and that obtained from your contractual relationship with BBVA, as well as transmit the same to another entity.
• Not to be subject to decisions based solely on automated processing: whenever BBVA carries out automated processing without human intervention, you also have the right to request an operator to explain the decision made, to take your comments on the matter, and to challenge the Bank's decision.

Remember:

In addition to what is indicated in this document, BBVA will also process your personal data in accordance with the personal data processing purposes you have previously accepted as a customer of BBVA.

Consult the latest updated version of BBVA's personal data protection policy. This policy is provided to you to keep you up to date at all times, but remember that it may not be the one you accepted (and which therefore applies to you) with BBVA, since yours may be older. For any questions or queries about the data protection policy you have accepted, please do not hesitate to contact your adviser.

BANCO BILBAO VIZCAYA ARGENTARIA, S.A. (“BBVA”) with registered address at Plaza San Nicolás 4, 48005, Bilbao, Spain; email: central.alarmas@bbva.com.

The Data Protection Officer is responsible for protecting the fundamental right to personal data protection at BBVA and compliance with data protection regulations. You can contact the BBVA Data Protection Officer through the website www.bbva.es, Personal Data/Contact DPO section, or by sending an email to: dpogrupobbva@bbva.com.

If you visit a BBVA branch and/or use BBVA ATMs, BBVA informs you that fixed and/or mobile camera systems connected to alarm centers are installed and may capture and record images. BBVA may process your image to ensure the safety of individuals, property, and the facilities themselves in response to potential criminal acts that may occur on the premises. Additionally, BBVA may process voice recordings to verify alarms triggered in protected properties. The legal basis allowing BBVA to process your personal data is compliance with a legal obligation.

We also inform you that the aforementioned video surveillance systems are in operation 24 hours a day. BBVA may capture and record images through systems connected to alarm centers outside public service hours based on BBVA's legitimate interest in ensuring, at all times, the safety of individuals, property, and the facilities themselves against potential criminal acts on the premises.

BBVA will retain your personal data for a period of 15 days from the time of recording. After that period, BBVA will destroy the data. However, this period may be extended if the data must be retained to provide evidence of acts that threaten the safety of individuals, property, or facilities, as required by judicial authorities or competent law enforcement agencies.

We will never pass on your data to third parties, unless required to do so by law. Notwithstanding the above, we inform you that in cases involving acts that threaten the safety of individuals, property, or facilities, the recorded images may be made available to the competent authority and/or law enforcement agencies.

You may exercise your rights to access, rectification, erasure, objection, limit processing and data portability by sending a written request to central.alarmas@bbva.com or to the following address: Calle Azul No. 4, 28050 Madrid, addressed to the Security Team. You can file a complaint with the Spanish Data Protection Agency (www.aepd.es)

You can also download and view all the details on the personal data protection policy.

Banco Bilbao Vizcaya Argentaria, S.A. with registered office at Plaza de San Nicolás 4, 48005 Bilbao, Spain. Email address: consultasgenerales@bbva.com

BBVA will record the call and process the data you provide during it (including your voice) in order to handle your query, respond to your request, or provide you with a financial service.

We will process your data on the basis of compliance with a legal obligation.

Your data will not be sent to third parties. However, our technology service providers will have access to your personal data. BBVA has adopted the necessary guarantees with these suppliers in accordance with personal data protection legislation. 

Your data will be retained for the time needed to fulfil the above purposes. Thereafter, they will remain blocked in order to address any liabilities arising from the processing and to comply with legal obligations. Once this period has ended, the data will be destroyed.

You may exercise your rights of access, rectification, objection, erasure, restriction of processing, or data portability by completing the following form or at any BBVA branch. You can contact BBVA’s Data Protection Officer via bbva.es (see “Personal Data / Contact DPO” at the bottom of the page) or at any BBVA branch. You may also seek the protection of the Spanish Data Protection Agency through its website www.aepd.es.

You can also download and view all the details on the personal data protection policy.