Personal data processing

This personal data protection policy (“Personal Data Protection Policy") is intended to inform you of how we obtain, process and protect the personal details you provide or that we gather through our bbva.es website (the “Website”) through forms and/or cookies so that you can freely and willingly decide if you want us to process them. 

When you take out products or services with Banco Bilbao Vizcaya Argentaria, S.A. (“BBVA”), your personal data will be processed in accordance with the information provided in the corresponding document.

The Website is owned by Banco Bilbao Vizcaya Argentaria, S.A. (“BBVA”). For more information on BBVA and the Website, see the Legal Notice and Terms of Use.

This document serves to inform you about the information that BBVA obtains through the Website. However, the information provided herein does not apply to data that may be obtained by third parties via other websites, even if such sites are linked to the Website.

Please read this Personal Data Protection Policy each time you use the Website, as it may be amended.

Banco Bilbao Vizcaya Argentaria, S.A. (“BBVA”), with its registered office at Plaza de San Nicolás 4, 48005, Bilbao, Spain. 

Email address: consultasgenerales@bbva.com

You can contact the BBVA Data Protection Officer at the following link.

1. To manage how you browse the Website in accordance with the Cookie Policy.
2. For the purposes and with the authorization indicated in each of the forms used by the Website to collect personal data. 

At BBVA, we process your personal data in absolute confidentiality and undertake to keep them confidential. We also guarantee that we will comply with our duty to store your data appropriately by adopting all the measures necessary to prevent them from being altered, lost, processed or accessed without authorization, in accordance with the legal obligations that apply to us as the controller of your data. 

At BBVA, we have implemented and maintain the highest levels of security required by legislation to protect your personal data against accidental loss and unauthorized access, processing or disclosure, given the state of technology, the nature of the stored data and the risks to which they are exposed. You can view BBVA's Security section.

Using data collection forms, BBVA may ask for your consent to contact you via standard mail, email, SMS or any other equivalent means of electronic communication to send you sales-related communications about its products and/or those of third parties that are identified on the form.

If, at any time, you no longer wish to receive communications of this nature, you can withdraw your consent by sending a notification using this form to Servicio de Atención al Cliente Grupo BBVA, APDO: 1598 - 28080 Madrid, or by using the link provided in the sales-related communications that you receive.

We will keep your data for the period specified by the form which, where applicable, we will provide you so you can send your personal data to BBVA, and for the period specified in the Cookie Policy. 

We will only transfer your personal data to third parties if legally obliged to do so, or if you give your consent.

When your consent is required in order to disclose your personal data to third parties, the relevant data collection forms will indicate why it is necessary to process the data at issue, what data will be disclosed and the identity of the parties that might receive your personal data, or the industries in which they operate.

You can view the BBVA Cookie Policy to check which third parties will receive personal data through this Website's cookies.

Please also be aware that certain companies that provide services to BBVA may access your personal data for the same purpose as indicated in the above paragraph (international data transfers). These transfers are made to countries with data protection levels that are equivalent to those of the European Union (suitability decisions issued by the European Commission, standard contractual clauses and certification mechanisms). For further information, please write to the BBVA Data Protection Officer at the following email address: dpogrupobbva@bbva.com.

Our Website uses "cookie" technology. For more detailed information on how BBVA uses cookies, see our Cookie Policy. 

The Website may contain links to other web pages. Please note that BBVA is not liable for the privacy and processing of personal data from other websites. This Personal Data Protection Policy document exclusively applies to information collected on the Website by BBVA. You are advised to read the personal data processing policies of the other websites this Website is linked to, or to visit them by any other means. You can also find more information on our link policy in our Legal Notice.

• Access: you can view your personal data contained in BBVA files
• Rectification: you can amend your personal data if it is inaccurate.
• Deletion: you can request that your personal data be erased.
• Objection: you can ask that your personal data not be processed and/or not to be subject to automated decisions.
• Data processing restrictions: You can request that processing of your data be restricted under the following circumstances:
  • While challenges as to the accuracy of your data are being checked.
  • When the processing of your data is unlawful, but you object to it being erased.
  • If BBVA does not need to process your data, but you need it in order to file or defend claims.
  • If you have objected to your data being processed in order to comply with an undertaking in the public interest or to fulfill a legitimate interest, while it is considered if the legal grounds for processing the data prevail over the ones you cite. 
• Portability: You will be able to receive, in electronic format, the personal data you have provided to us and that obtained from your contractual relationship with BBVA, as well as transmit the same to another entity.
• Not to be subject to decisions based solely on automated processing: whenever BBVA carries out automated processing without human intervention, you also have the right to request an operator to explain the decision made, to take your comments on the matter, and to challenge the Bank's decision.

If you want to exercise your rights to Object or Rectify, you can do so from your customer area on bbva.es by going to My Profile > Personal Data and Settings; and from the BBVA app by going to Menu > Profile > Personal details.

If you want to exercise your right to portability, you can do so from your customer area on bbva.es by going to My Profile > Security and privacy > Privacy and data > Portability; and from your customer area on the BBVA app by going to Menu > Privacy and details > Download your details.

In all cases, you can exercise your rights involving your data using this form or by sending a postal letter to Servicio Atención al Cliente Grupo BBVA, APDO: 1598 - 28080 Madrid, or by visiting one of our branches.

If you believe that we have not processed your personal data as required by law, you can contact the Data Protection Officer. You may also file a claim with the Spanish Data Protection Agency (www.aepd.es).

Exercising these rights is free.

The present document on personal data processing (“Personal Data Processing”) regulates handling of the personal information provided by the users (the “User” or “Users”) of the website www.bbva.es (the “Website”), which is owned by Banco Bilbao Vizcaya Argentaria, S.A. (“BBVA”). You can view information about BBVA in the Legal Notice and Terms of Use.

The data controller will be Banco Bilbao Vizcaya Argentaria, S.A. ("BBVA"), with registered office at Plaza San Nicolás 4, 48005, Bilbao.

We will process the personal data you provide us while using online business banking to:

• To manage how you browse the Website in accordance with the Cookie Policy.
• For the purposes and with the authorization indicated in each of the forms used by the Website to collect personal data. 
• If you are a representative or authorized representative of a BBVA customer company, in order to manage the Online Services Agreement that allows the use of and access to BBVA online business banking, in which you act by way of your legal relationship with a BBVA customer.

The legal basis that enables us to process this data is compliance with this contract.

Furthermore, we will process your data to prevent money laundering and the financing of terrorism in order to comply with BBVA's obligations on information collection and identification, and the provision of information on payment transactions to the authorities of other countries, both within and outside the European Union, on the basis of legislation of some countries and agreements signed with them.

We will keep your data while the contract is in force, as well as during the period indicated in the cookie policy. Once completed, they shall be suspended during the legal period, generally 10 years, in application of the regulations aimed at preventing the money laundering and the financing of terrorism. Once the statutory limitation period has elapsed, the data will be destroyed.

We will not assign them to third parties, except when legally obliged to do so.

• Access: you can view your personal data contained in BBVA files
• Rectification: you can amend your personal data if it is inaccurate.
• Deletion: you can request that your personal data be erased.
• Objection: you can ask that your personal data not be processed and/or not to be subject to automated decisions.
• Data processing restrictions: You can request that processing of your data be restricted under the following circumstances:
  • While challenges as to the accuracy of your data are being checked.
  • When the processing of your data is unlawful, but you object to it being erased.
  • If BBVA does not need to process your data, but you need it in order to file or defend claims.
  • If you have objected to your data being processed in order to comply with an undertaking in the public interest or to fulfill a legitimate interest, while it is considered if the legal grounds for processing the data prevail over the ones you cite. 
• Portability: You will be able to receive, in electronic format, the personal data you have provided to us and that obtained from your contractual relationship with BBVA, as well as transmit the same to another entity.
• Not to be subject to decisions based solely on automated processing: whenever BBVA carries out automated processing without human intervention, you also have the right to request an operator to explain the decision made, to take your comments on the matter, and to challenge the Bank's decision.

If you want to exercise your rights to Object or Rectify, you can do so from your customer area on bbva.es by going to My Profile > Personal Data and Settings; and from the BBVA app by going to Menu > Profile > Personal details.

If you want to exercise your right to portability, you can do so from your customer area on bbva.es by going to My Profile > Security and privacy > Privacy and data > Portability; and from your customer area on the BBVA app by going to Menu > Privacy and details > Download your details.

In all cases, you can exercise your rights involving your data using this form or by sending a postal letter to Servicio Atención al Cliente Grupo BBVA, APDO: 1598 - 28080 Madrid, or by visiting one of our branches.

If you believe that we have not processed your personal data as required by law, you can contact the Data Protection Officer. You may also file a claim with the Spanish Data Protection Agency (www.aepd.es).

In order to exercise your rights, please submit a copy of your national ID (DNI) or equivalent document proving your identity with your application.

Exercising these rights is free.

Remember:

In addition to what is indicated in this document, BBVA will also process your personal data in accordance with the personal data processing purposes you have previously accepted as a customer of BBVA.
You can view the latest updated version of BBVA's personal data protection policy at https://protecciondedatos.bbva.es /. This policy is provided to you to keep you up to date at all times, but remember that it may not be the one you accepted (and which therefore applies to you) with BBVA, since yours may be older. For any questions or queries about the data protection policy you have accepted, please do not hesitate to contact your adviser.

BANCO BILBAO VIZCAYA ARGENTARIA, S.A. (“BBVA”) with registered address at Plaza San Nicolás 4, 48005, Bilbao, Spain; email: central.alarmas@bbva.com.

The Data Protection Officer is responsible for protecting the fundamental right to personal data protection at BBVA and compliance with data protection regulations. You can contact the BBVA Data Protection Officer through the website www.bbva.es, Personal Data/Contact DPO section, or by sending an email to: dpogrupobbva@bbva.com.

If you visit a BBVA branch and/or use BBVA ATMs, BBVA informs you that fixed and/or mobile camera systems connected to alarm centers are installed and may capture and record images. BBVA may process your image to ensure the safety of individuals, property, and the facilities themselves in response to potential criminal acts that may occur on the premises. Additionally, BBVA may process voice recordings to verify alarms triggered in protected properties. The legal basis allowing BBVA to process your personal data is compliance with a legal obligation.

We also inform you that the aforementioned video surveillance systems are in operation 24 hours a day. BBVA may capture and record images through systems connected to alarm centers outside public service hours based on BBVA's legitimate interest in ensuring, at all times, the safety of individuals, property, and the facilities themselves against potential criminal acts on the premises.

BBVA will retain your personal data for a period of 15 days from the time of recording. After that period, BBVA will destroy the data. However, this period may be extended if the data must be retained to provide evidence of acts that threaten the safety of individuals, property, or facilities, as required by judicial authorities or competent law enforcement agencies.

We will never pass on your data to third parties, unless required to do so by law. Notwithstanding the above, we inform you that in cases involving acts that threaten the safety of individuals, property, or facilities, the recorded images may be made available to the competent authority and/or law enforcement agencies.

You may exercise your rights to access, rectify, erase, oppose, limit processing, and data portability by sending a written request to central.alarmas@bbva.com or to the following address: Calle Azul No. 4, 28050 Madrid, addressed to the Security Team. You can also file a complaint with the Spanish Data Protection Agency (www.aepd.es)

You can also download and view all the details on the personal data protection policy.