Below, we provide you with basic information regarding the processing of your personal data by Bankinter. You can find more information about each processing method listed here on our website: www.bankinter.com/banca/nav/seguridad-privacidad
1. Who is responsible for the processing of your personal data?
The data controller is Bankinter, S.A. (hereinafter “Bankinter” or the “Bank”), with Corporate Tax ID No. A28157360, registered office at Paseo de la Castellana, 29, 28046 (Madrid) and contact telephone number 91 657 88 00.
2. How can you contact Bankinter's data protection officer?
Bankinter has appointed a data protection officer, whom you can contact at the following address: [email protected]. You can send any questions or concerns regarding the processing of your personal data to this address.
3. For what purposes do we process your personal data and on what legal basis?
Below, we outline some of the main data processing activities carried out by Bankinter. Remember that you can obtain detailed information about each of the processing activities carried out by Bankinter at https://www.bankinter.com/file_source/nbol/nav/seguridad-privacidad/uso_datos_personales.pdf
-
Based on compliance with applicable legal obligations
Of these legal obligations we highlight, in particular:
- Those established in the regulations on the Prevention of Money Laundering.
- Consumer credit and responsible lending regulations require financial institutions to assess their customers' financial capacity to grant, control and monitor products and/or services that require financing (such as a mortgage loan). In order for us to comply with this obligation, it may be necessary to share your data between Bankinter Group companies.
-
Based on the development of the requested contractual relations or application of pre-contractual measures
Enable you to acquire the products and/or services you have requested and formalise, execute and monitor them.
-
Based on Bankinter's legitimate interest
- Consult your data in common credit information systems to assess your financial capacity when applying for products and/or services that require financing. Bankinter will also share your data with these systems when you have a certain, overdue and payable debt with the Bank.
- Prevent fraud situations related to the products and/or services you have acquired. To this end, Bankinter is a member of different fraud prevention files, such as Confirma or of the Spanish Society of Payment Systems (Iberpay). You can obtain more information about the processing method at https://www.bankinter.com/file_source/nbol/nav/seguridad-privacidad/uso_datos_personales.pdf , section C) point II) Fraud prevention.
- Contact you to assist you with any processes that you have not completed.
- Inform you, through any channel (including electronic and digital channels), about products and/or services marketed by the Bank that are similar to those you already have and that we think may be of interest to you.
- Analyse aspects of your personal and financial situation, based on data provided by you and/or derived from Bankinter products and/or services you have acquired or use (including aggregated transactional data such as, for example, average balances or receipt numbers). With this information, we can learn about your habits and preferences and create a basic commercial profile so we can offer you products and/or services that may be of interest to you. In addition, it will also allow us to create and/or improve our portfolio of products and services. You can obtain information about the reasoning followed and the categories of data used in profiling you at https://www.bankinter.com/file_source/nbol/nav/seguridad-privacidad/uso_datos_personales.pdf , section D), point V) Profiling with internal and external data.
You can consult the information about the weighting reports drawn up by Bankinter for the purposes of its legitimate interest by sending an e-mail to [email protected] . Weighting reports refer to data protection impact assessments conducted to determine whether the processing of personal data poses a significant risk to the rights and freedoms of individuals.
-
Based on the consent you have provided to us
- We may contact you to inform you, through any channel (including electronic and digital channels), about products and/or services of Bankinter, the Bankinter Group, some of its subsidiaries and/or third-party entities with which we have collaboration agreements and that are not similar to those you already have. If you have not acquired a product or service, we may send you information about any of them. This processing does not involve the communication of your data to third parties, including companies of the Bankinter Group and/or its subsidiaries.
- Analyse aspects of your personal and financial situation based on data provided by you, data derived from the Bankinter products and/or services you have acquired or use (including all transactional data) and data incorporated into our files obtained from external sources, in order to understand your habits and preferences and create an advanced commercial profile. This will allow us to offer you products and/or services specifically designed for you, as well as create and/or improve our portfolio of products and services.
To carry out this processing, we will have access to data obtained from public records, credit information systems, CIRBE or Informa, among other sources. You can obtain information about the reasoning followed and the data categories used to create your advanced commercial profile at https://www.bankinter.com/file_source/nbol/nav/seguridad-privacidad/uso_datos_personales.pdf , Section D), point V) Profiling with internal and external data.
- Share your personal data with Bankinter Group companies and some of its subsidiaries so that they can inform you about their products and/or services through any channel (including electronic and digital channels).
- Share your personal data with Bankinter Group companies and some of its subsidiaries, so that they can analyse aspects relating to your personal and financial situation, thus learning about your habits and preferences and creating a commercial profile of you. You can see the list of Bankinter Group companies and partners with which we may share your information at the following link: https://www.bankinter.com/file_source/nbol/estaticos/plataformas/banca_online/area_publica/proteccion_datos/empresas-del-grupo-bankinter.pdf
Bankinter's processing based on legitimate interest and/or consent will only be carried out if you have not objected and/or have given us your authorisation for such purposes. Remember that you can always consult this information on our website www.bankinter.com , profile and security section or through the channels indicated in the “Rights” section.
4. Who can we share your data with and who can access it?
Depending on the processing carried out, Bankinter may communicate your data to the following recipients:
- To the Administrations, authorities and public bodies.
- To Banco de España Spain's Risk Information Centre (CIRBE). In this case, the data necessary to identify the persons with whom credit risks are held, directly or indirectly, will be communicated, as well as the characteristics of said persons and risks, including, in particular, those affecting the amount and possibility of recovery of these risks. As the borrower of a risk position declared to the CIRBE, you may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability under the legal terms and conditions established by contacting Banco de España.
- If you have a verified, due and enforceable debt with the Bank, this debt may be reported to credit information systems: ASNEF-EQUIFAX, SOLVENCY AND CREDIT INFORMATION SERVICES and EXPERIAN, CREDIT BUREAU. - FILE BADEXCUG.
- To companies of the Bankinter Group in order to comply with our legal obligations and when we have your consent (for the purposes indicated above).
- To the common file for fraud prevention in banking operations, managed by the Spanish Society of Payment Systems (Iberpay).
- To the Confirma filing system, managed by Confirma Information Systems, S.L.
- Moreover, Bankinter's service providers, who are data processors, may also have access to your personal data. You can find more information about the categories of suppliers that may be contracted at the following link https://docs.bankinter.com//stf/plataformas/banca_online/area_publica/proteccion_datos/categorias_servicios.pdf ”.
5. Where do we get your data from?
Bankinter obtains your data from the following sources:
- Data you provided during the registration process as a Bankinter customer and data you provided for acquiring and/or using the Bank’s products and/or services.
- Data derived from the provision of the products and/or services you have acquired and/or those you use and which have been obtained within the framework of the execution of the contractual relationship.
- Data obtained from third parties, including data from the CIRBE (including reports on the risk positions that may be registered), credit reporting systems of which the Bank is a member (when a customer's financial solvency needs to be assessed), the General Social Security Revenue Office, Iberpay, Confirma, Bankinter Group companies, the Mercantile Registry, the Property Registry, Bankinter's aggregation service and financial assets service, Informa, the Land Registry, social media platforms and other virtual platforms.
6. What type of data do we process?
Bankinter processes different categories of data, mainly including, data, including, but not limited to, identification data, contact data, professional and socioeconomic data; financial and loan data, data relating to your personal characteristics, demographic data, data derived from products and/or services acquired from or in which the Bank has some type of intervention; browsing data, risk assessment or scoring data, data relating to situations of vulnerability; data on your status as a Bankinter shareholder; data from the aggregation service and the financial assets service of Bankinter; data on your special communication needs that you have communicated to the Bank to enable accessibility for interaction or the management of daily operations; your voice, your image and biometric and geolocation data (if we have your consent). All of this, in relation to the purposes described above and with the details available in the privacy policy https://www.bankinter.com/file_source/nbol/nav/seguridad-privacidad/uso_datos_personales.pdf .
7. General Treasury of the Social Security.
Applicable anti-money laundering legislation requires banking institutions to obtain and verify information from their customers on their economic activity. To this end, data subjects authorise Bankinter, S.A. to request all information related to their professional activities from the General Treasury of the Social Security on their behalf. The data obtained from the General Treasury of the Social Security will be solely used for this. If a financial institution and/or staff providing the services fails to comply with this obligation, all the actions provided for under prevailing personal data protection legislation will be pursued.
8. What are your rights and how can you exercise them?
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability in the circumstances and under the scope established by the applicable legislation currently in force. If you have given consent for the purposes described above, you may withdraw it at any time.
To exercise your rights, you can contact us through: (i) the Telephone Banking service (900 80 20 81); (ii) your usual branch; or (iii) in writing, via the following email address [email protected] or via the postal address Calle Pico San Pedro, 1, Tres Cantos, Madrid, 28760 (F.A.O. Bankinter, S.A. Operations - Data Protection). You can also exercise your rights on the website www.bankinter.com.
We also inform you of your right to file a complaint with the Spanish Data Protection Agency.