Personal data processing

What is the purpose of this Personal Data Protection Policy?

This personal data protection policy (“Personal Data Protection Policy") is intended to inform you of how we obtain, process and protect the personal details you provide or that we gather through our bbva.es website (the “Website”) through forms and/or cookies so that you can freely and willingly decide if you want us to process them. 

When you take out products or services with Banco Bilbao Vizcaya Argentaria, S.A. (“BBVA”), your personal data will be processed in accordance with the information provided in the corresponding document.

The Website is owned by Banco Bilbao Vizcaya Argentaria, S.A. (“BBVA”). For more information on BBVA and the Website, see the Legal Notice and Terms of Use.

This document serves to inform you about the information that BBVA obtains through the Website. However, the information provided herein does not apply to data that may be obtained by third parties via other websites, even if such sites are linked to the Website.

Please read this Personal Data Protection Policy each time you use the Website, as it may be amended.

Who is the controller of your personal data?

Banco Bilbao Vizcaya Argentaria, S.A. (“BBVA”), with its registered office at Plaza de San Nicolás 4, 48005, Bilbao, Spain. 

Email address: consultasgenerales@bbva.com.

What do we use your personal data for?

1. Para gestionar tu navegación a través del Sitio Web conforme a la Política de cookies y otras tecnologías similares.

2. Para elaborar perfiles basados en tus hábitos de navegación y datos de comportamiento digital obtenidos de plataformas y centrales de medios, así como ofrecerte contenido personalizado cuando nos das tu consentimiento a la instalación de cookies conforme a nuestra política de cookies en web y móvil.

3. Para desarrollar acciones comerciales en entornos online que nos permitan mostrarte publicidad personalizada en plataformas publicitarias de terceros sobre nuestros productos y servicios, conforme a sus propias políticas de cookies, así como llevar a cabo, por parte de BBVA, el seguimiento y la optimización de dichas acciones comerciales.

Para alcanzar esta finalidad, el Banco elaborará identificadores únicos generados mediante la encriptación de tu correo electrónico, el identificador asignado por cookies o el sistema operativo de tu dispositivo (si accedes a través de nuestra App) cuando nos das tu consentimiento conforme a nuestra política de cookies en web y móvil.

La base de legitimación para el desarrollo de acciones comerciales en entornos online es el consentimiento que prestas al aceptar la instalación de cookies de publicidad personalizada.

BBVA no realiza acciones de publicidad personalizada en plataformas de terceros respecto de usuarios menores de edad. En caso de que, a partir de la información disponible, se identifique que un usuario es menor de edad, BBVA excluirá automáticamente sus datos personales de dicho tratamiento, aun cuando se hubiera prestado consentimiento.

4. For the purposes and with the authorization indicated in each of the forms used by the Website to collect personal data.

Will BBVA send you marketing communications?

Using data collection forms, BBVA may ask for your consent to contact you via standard mail, email, SMS or any other equivalent means of electronic communication to send you sales-related communications about its products and/or those of third parties that are identified on the form.

If, at any time, you no longer wish to receive communications of this nature, you can withdraw your consent by sending a notification using this form to Servicio de Atención al Cliente Grupo BBVA, APDO: 1598 - 28080 Madrid, or by using the link provided in the sales-related communications that you receive.

How long will we keep your data for?

We will keep your data for the period specified by the form which, where applicable, we will provide you so you can send your personal data to BBVA, and for the period specified in the Cookie Policy. 

Who will we communicate your data to?

We will only transfer your personal data to third parties if legally obliged to do so, or if you give your consent.

When your consent is required in order to disclose your personal data to third parties, the relevant data collection forms will indicate why it is necessary to process the data at issue, what data will be disclosed and the identity of the parties that might receive your personal data, or the industries in which they operate.

Puedes consultar en la Política de cookies y otras tecnologías similares de BBVA los terceros que reciben datos personales mediante cookies y otras tecnologías similares a partir de este Sitio Web.

Please also be aware that certain companies that provide services to BBVA may access your personal data for the same purpose as indicated in the above paragraph (international data transfers). These transfers are made to countries with data protection levels that are equivalent to those of the European Union (suitability decisions issued by the European Commission, standard contractual clauses and certification mechanisms). For further information, please write to the BBVA Data Protection Officer at the following email address: dpogrupobbva@bbva.com.

Asimismo, si has prestado tu consentimiento BBVA comunicará a las plataformas publicitarias con las que colaboramos tus identificadores únicos (que han sido generados cifrando tu correo electrónico o mediante el identificador asignado por cookies o el sistema operativo de tu dispositivo -si accedes a través de nuestra App-).

¿BBVA utiliza cookies y otras tecnologías similares en este website?

En nuestro Sitio Web utilizamos “cookies" y otras tecnologías similares. Para más información consulta la Política de Cookies y otras tecnologías similares.

Does BBVA use links to other websites?

The Website may contain links to other web pages. Please note that BBVA is not liable for the privacy and processing of personal data from other websites. This Personal Data Protection Policy document exclusively applies to information collected on the Website by BBVA. You are advised to read the personal data processing policies of the other websites this Website is linked to, or to visit them by any other means. You can also find more information on our link policy in our Legal Notice.

What are your rights when you submit data to us?

  • Access: you can view your personal data included in BBVA files.
  • Rectification: you can amend your personal data if it is inaccurate.
  • Deletion: you can request that your personal data be erased.
  • Objection: you can ask that your personal data not be processed and/or not to be subject to automated decisions.
  • Data processing restrictions: You can request that processing of your data be restricted under the following circumstances:
    • While challenges as to the accuracy of your data are being checked.
    • When the processing of your data is unlawful, but you object to it being erased.
    • If BBVA does not need to process your data, but you need it in order to file or defend claims.
    • If you have objected to your data being processed in order to comply with an undertaking in the public interest or to fulfill a legitimate interest, while it is considered if the legal grounds for processing the data prevail over the ones you cite. 
  • Portability: You will be able to receive, in electronic format, the personal data you have provided to us and that obtained from your contractual relationship with BBVA, as well as transmit the same to another entity.
  • Not to be subject to decisions based solely on automated processing: whenever BBVA carries out automated processing without human intervention, you also have the right to request an operator to explain the decision made, to take your comments on the matter, and to challenge the Bank's decision.

Remember:

In addition to what is indicated in this document, BBVA will also process your personal data in accordance with the personal data processing purposes you have previously accepted as a customer of BBVA.

Consult the latest updated version of BBVA's personal data protection policy. This policy is provided to you to keep you up to date at all times, but remember that it may not be the one you accepted (and which therefore applies to you) with BBVA, since yours may be older. For any questions or queries about the data protection policy you have accepted, please do not hesitate to contact your adviser. 

The present document on personal data processing (“Personal Data Processing”) regulates handling of the personal information provided by the users (the “User” or “Users”) of the website www.bbva.es (the “Website”), which is owned by Banco Bilbao Vizcaya Argentaria, S.A. (“BBVA”). You can view information about BBVA in the Legal Notice and Terms of Use.

Who is the controller of your personal data?

The data controller will be Banco Bilbao Vizcaya Argentaria, S.A. ("BBVA"), with registered office at Plaza San Nicolás 4, 48005, Bilbao.

We will process the personal data you provide us while using online business banking to:

  • To manage how you browse the Website in accordance with the Cookie Policy.
  • For the purposes and with the authorization indicated in each of the forms used by the Website to collect personal data. 
  • If you are a representative or authorized representative of a BBVA customer company, in order to manage the Online Services Agreement that allows the use of and access to BBVA online business banking, in which you act by way of your legal relationship with a BBVA customer.

The legal basis that enables us to process this data is compliance with this contract.

Furthermore, we will process your data to prevent money laundering and the financing of terrorism in order to comply with BBVA's obligations on information collection and identification, and the provision of information on payment transactions to the authorities of other countries, both within and outside the European Union, on the basis of legislation of some countries and agreements signed with them.

How long will we keep your data for?

We will keep your data while the contract is in force, as well as during the period indicated in the cookie policy. Once completed, they shall be suspended during the legal period, generally 10 years, in application of the regulations aimed at preventing the money laundering and the financing of terrorism. Once the legal period has elapsed, the data will be destroyed.

Who will we communicate your data to?

We will not assign them to third parties, except when legally obliged to do so.

What are your rights when you submit data to us?

  • Access: you can view your personal data contained in BBVA files
  • Rectification: you can amend your personal data if it is inaccurate.
  • Deletion: you can request that your personal data be erased.
  • Objection: you can ask that your personal data not be processed and/or not to be subject to automated decisions.
  • Data processing restrictions: You can request that processing of your data be restricted under the following circumstances:
    • While challenges as to the accuracy of your data are being checked.
    • When the processing of your data is unlawful, but you object to it being erased.
    • If BBVA does not need to process your data, but you need it in order to file or defend claims.
    • If you have objected to your data being processed in order to comply with an undertaking in the public interest or to fulfill a legitimate interest, while it is considered if the legal grounds for processing the data prevail over the ones you cite. 
  • Portability: You will be able to receive, in electronic format, the personal data you have provided to us and that obtained from your contractual relationship with BBVA, as well as transmit the same to another entity.
  • Not to be subject to decisions based solely on automated processing: whenever BBVA carries out automated processing without human intervention, you also have the right to request an operator to explain the decision made, to take your comments on the matter, and to challenge the Bank's decision.

Remember:

In addition to what is indicated in this document, BBVA will also process your personal data in accordance with the personal data processing purposes you have previously accepted as a customer of BBVA.

Consult the latest updated version of BBVA's personal data protection policy. This policy is provided to you to keep you up to date at all times, but remember that it may not be the one you accepted (and which therefore applies to you) with BBVA, since yours may be older. For any questions or queries about the data protection policy you have accepted, please do not hesitate to contact your adviser.

Who is responsible for processing my personal data?

BANCO BILBAO VIZCAYA ARGENTARIA, S.A. (“BBVA”) with registered address at Plaza San Nicolás 4, 48005, Bilbao, Spain; email: central.alarmas@bbva.com.

Who is the BBVA Data Protection Officer, and how can you contact him/her?

The Data Protection Officer is responsible for protecting the fundamental right to personal data protection at BBVA and compliance with data protection regulations. You can contact the BBVA Data Protection Officer through the website www.bbva.es, Personal Data/Contact DPO section, or by sending an email to: dpogrupobbva@bbva.com.

What personal data will be processed, for what purpose, and why does BBVA need to process my personal data?

If you visit a BBVA branch and/or use BBVA ATMs, BBVA informs you that fixed and/or mobile camera systems connected to alarm centers are installed and may capture and record images. BBVA may process your image to ensure the safety of individuals, property, and the facilities themselves in response to potential criminal acts that may occur on the premises. Additionally, BBVA may process voice recordings to verify alarms triggered in protected properties. The legal basis allowing BBVA to process your personal data is compliance with a legal obligation.

We also inform you that the aforementioned video surveillance systems are in operation 24 hours a day. BBVA may capture and record images through systems connected to alarm centers outside public service hours based on BBVA's legitimate interest in ensuring, at all times, the safety of individuals, property, and the facilities themselves against potential criminal acts on the premises.

How long will your data be kept?

BBVA will retain your personal data for a period of 15 days from the time of recording. After that period, BBVA will destroy the data. However, this period may be extended if the data must be retained to provide evidence of acts that threaten the safety of individuals, property, or facilities, as required by judicial authorities or competent law enforcement agencies.

Will my data be disclosed to another party?

We will never pass on your data to third parties, unless required to do so by law. Notwithstanding the above, we inform you that in cases involving acts that threaten the safety of individuals, property, or facilities, the recorded images may be made available to the competent authority and/or law enforcement agencies.

What are my rights in connection to personal data processing?

You may exercise your rights to access, rectification, erasure, objection, limit processing and data portability by sending a written request to central.alarmas@bbva.com or to the following address: Calle Azul No. 4, 28050 Madrid, addressed to the Security Team. You can file a complaint with the Spanish Data Protection Agency (www.aepd.es)
You can also download and view all the details on the personal data protection policy.

Who is responsible for processing my personal data?

Banco Bilbao Vizcaya Argentaria, S.A. with registered office at Plaza de San Nicolás 4, 48005 Bilbao, Spain. Email address: consultasgenerales@bbva.com

Why is data processed?

BBVA will record the call and process the data you provide during it (including your voice) in order to handle your query, respond to your request, or provide you with a financial service.

Legal basis

We will process your data on the basis of compliance with a legal obligation.

Will your data be transferred to third parties?

Your data will not be sent to third parties. However, our technology service providers will have access to your personal data. BBVA has adopted the necessary guarantees with these suppliers in accordance with personal data protection legislation. 

How long will we keep your data for?

Your data will be retained for the time needed to fulfil the above purposes. Thereafter, they will remain blocked in order to address any liabilities arising from the processing and to comply with legal obligations. Once this period has ended, the data will be destroyed.

What are your rights with respect to the processing of your personal data?

You may exercise your rights of access, rectification, objection, erasure, restriction of processing, or data portability by completing the following form or at any BBVA branch. You can contact BBVA’s Data Protection Officer via bbva.es (see “Personal Data / Contact DPO” at the bottom of the page) or at any BBVA branch. You may also seek the protection of the Spanish Data Protection Agency through its website www.aepd.es.
You can also download and view all the details on the personal data protection policy.
For queries or claims related to a product or service

If you need a certificate or document, or if you think you may have been subject to online banking or card fraud, you can contact the Customer Service department.