Your privacy matters to us
We are aware that you are concerned about how your data are used. Therefore, in the CaixaBank Group and CaixaBank Titulización in particular, we have always aimed for the highest standards regarding the fundamental right to personal data protection stipulated in the Charter of Fundamental Rights of the European Union. We strive to maintain the confidentiality of our customers’ information, this constituting an essential pillar on which one of our fundamental corporate values is based: trust.
We are now taking a further step and strengthening our commitment to your privacy by ensuring your data are processed in an honest, transparent and responsible way, and incorporating into our internal rules and procedures the principles included in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the General Data Protection Regulation).
This new regulation standardizes the protection of persons throughout Europe in relation to data processing and the free movement of their data and provides a framework for information and protection in which we would like you to feel comfortable, because we are a Group with values that works to build trust in its environment, always aiming to provide the best service to its customers according to proximity and transparency criteria.
PERSONAL DATA PROCESSING
Controller
CaixaBank Titulización, S.G.F.T., S.A.U.
CaixaBank Titulización is the securitization funds management company of the CaixaBank Group, the largest bank in Spain in terms of the number of customers.
Contact details of the data protection officer
As required by the data protection regulations, the companies in the CaixaBank Group have appointed a data protection officer who ensures all processing of your data is carried out by fully respecting your privacy and the regulations applicable from time to time.
The data protection officer is available to answer any queries you may have regarding processing your data and exercising your rights. You can contact the data protection officer online at: www.CaixaBank.es/delegadoprotecciondedatos
Purposes of the processing
Data processing for business purposes
The first and main reason for CaixaBank Titulización processing your data is to manage the institution’s funds; the legal basis for this processing being to execute our contractual relationship.
Data processing for legal, regulatory and statutory purposes
Your data will be processed to fulfil the legal, regulatory and statutory obligations imposed on CaixaBank Titulización (for example, tax obligations, measures for prevention of money laundering etc.).
Data processing for prevention of fraudulent conduct
Your data will be processed to prevent fraudulent conduct and to ensure the security of your data as well as our networks and information systems. This data processing is based on our legitimate interest in fulfilling our internal policies on information security, risk analysis and prevention and regulatory compliance, among others.
Data security
Your data security is essential for us and we undertake the obligation and commitment to protect such data at all times.
Therefore, in line with this maximum protection standard, we protect data from unauthorized or illegal processing, loss, destruction or accidental damage and we have implemented the most rigorous information security protocols, applying the best practices on this matter.
Notification of data
Notification of data for the fund’s management or to fulfil a legal obligation.
The data will be notified to technology and consulting service providers.
CaixaBank Titulización’s providers ensure there are suitable and sufficient safeguards related to data processing and specific obligations are required if the services imply personal data processing.
Moreover, the data may be notified to the authorities and public bodies in order to fulfil the legal obligations imposed on CaixaBank Titulización.
Notification of data to other third parties that have entered into agreements with CaixaBank Titulización, CaixaBank and the companies in the CaixaBank Group.
Your data may be notified to third party institutions providing you have expressly authorized this transfer.
Term for storing data
Your data will be processed for as long as the authorizations granted for use or the established contractual relationships remain in force.
Once the authorizations for use are revoked or the contractual relationship has been terminated, your data will no longer be processed since they will not be required for the purposes for which they were collected or processed.
In accordance with the regulations, the data will be stored (until the statute of limitations for the actions arising from such contractual relationship has expired) for the sole purpose of fulfilling the legal obligations applicable to CaixaBank Titulización and to file, exercise or defend claims.
Exercising rights and filing claims with the Data Protection Authorities.
The following rights may be exercised in relation to your data:
|
Right to access |
The right to know which of your data we are processing. |
|
Right to revoke consent |
The right to withdraw consent at any time when you have granted authorization to us to process your data. |
|
Right to rectification |
The right to rectify or complete your data if they are inaccurate. |
|
Right to object |
The right to object to data processing based on legitimate interest. |
|
Right to restriction |
The right to restrict the processing of your data (in certain cases, expressly stipulated in the regulations). |
|
Right to data portability
|
The right to receive your data (data processed for providing products and services and data that we process with your consent) so that you can transfer them to another controller. |
You can exercise your rights through any of the following channels available:
In addition, as you already know, if you still wish to make a claim regarding the processing of your data that we have not been able to settle, you can submit such claim to the Spanish Data Protection Agency (www.agpd.es).