1. Data controller:
-
Name: Sociedad Conjunta para la Emisión y Gestión de Medios de Pago, E.F.C., S.A., with Tax ID No. A83289819 (“Iberia Cards”).
-
Address: Calle O’Donnell 12, 28009 - Madrid.
-
Contact details of the data protection officer: privacidad@Iberiacards.com.
2. Purposes and lawful basis of processing.
Presentation of financial proposals in response to customers' applications for financing: Iberia Cards, as the data controller, will process all personal data obtained throughout the ticket purchasing process, as well as those related to the financed flight and membership of the Iberia Plus programme, for the purpose of offering financing for the purchases made through Iberia. The main purpose of processing is therefore to manage your application for financing and to study, appraise, manage and control the financing operation.
To do this, Iberia Cards will collect all the necessary data and share them with the entities responsible for providing the financing service so that they can assess your solvency and process your financing application. You will therefore have to enter into the corresponding agreement with the entity in question and accept its privacy policy. To evaluate your solvency, the financial entities (SeQura, FLOA y Wizink Bank s.a.u ) will check your data in credit information systems and in the Bank of Spain Risk Information Centre (CIRBE).
If you wish to obtain a financing offer from any of the financing entities that maintain agreements with Iberia Cards for this purpose, you will have to fill in all the data requested during the purchasing and financing application process. If you do not supply the required data, you may not be able to obtain the financing requested.
Management of customer financing: Iberia Cards will keep the data supplied during the purchasing process, as well as those relating to the flight and the Iberia Plus programme, to be able to share data as required during the financing operation on behalf of Iberia LAE and the financing entity.
Preparation of market surveys with anonymised data: Lastly, Iberia Cards may anonymise your personal data to use them in market surveys conducted to identify trends in user behaviour and anticipate strategic decisions.
3. Data retention periods and storage criteria
Iberia Cards will keep your data for as long as strictly necessary to act as intermediary for your financing application and then manage the operation.
On termination of the financing agreement, Iberia Cards will block your data until the end of the statute of limitations for possible legal actions. This means that your data will only be accessed to share them with public administrations, judges and courts, or the public prosecutor if legally required to do so, or if Iberia Cards exercises its legal rights as intermediary in the financing operation. Your personal data will be completely erased when the aforementioned statute of limitations ends.
4. Recipients of data transfers
To manage your financing application, Iberia will share your personal data with Iberia Cards and the financial entities with which Iberia Cards maintains financing agreements. Find out the financing entities with which Iberia Cards collaborates: SeQura, FLOA y Wizink Bank s.a.u
This management process necessarily implies the transfer of your identification and contact data to the financial entity so that it can evaluate your solvency and process your financing application. As part of this process, the financing entity will check your data in the credit information systems and in the CIRBE to determine the viability of the transaction.
This management necessarily consists in transferring your data to the entity that it is going to grant the financing so that it can carry out the necessary risk analyses to determine the viability of the operation.
You are also hereby informed that the financial entities and other providers of related technology services with which your data are shared to carry out the financial transactions governed by this agreement may be obliged by the laws of the country in which they are located. or by virtue of agreements held with said country, to report financial transactions to the authorities or official bodies of other countries, whether members of the European Union or not, within the framework of the prevention of terrorism financing, money laundering and serious organised crime. In Spain this legislation is represented by Law 10/2010 of 28 April on the prevention of money laundering and terrorism financing and Royal Decree 304/2014 implementing the law.
5. Rights of data subjects
-
Everyone has the right to obtain information about whether Iberia Cards is processing their personal data.
-
As the data subject you have the right to access your personal data, request the rectification of any inaccurate data and, where appropriate, request their erasure when, for example, your data are no longer required for the purposes for which they were collected.
-
In these circumstances, you may ask us to restrict restriction of processing of your data, in which case we will only keep their data for the exercise or defence of any claims.
-
In certain circumstances and for reasons related to your particular situation, you may object to the processing of your data. Iberia Cards will then stop processing your data, except for compelling lawful reasons or the exercise or defence of possible claims.
-
If appropriate, you may also request the portability of your data.
In relation to your data used to provide the intermediation service related to the financing of purchases through Iberia LAE, to exercise your rights you must send your request and a copy of your DNI by email to atencionalcliente@Iberiacards.com.
For additional information about our personal data protection policy, you may write to the Iberia Cards Data Protection Officer (DPO) at the email address indicated in the first section of this clause.
In any case, and especially if you are not satisfied with the exercise of your rights, you may submit a claim to the Spanish Data Protection Agency. The address is C/ Jorge Juan 6, 28001 Madrid and you can the website at www.aepd.es.
6. Origin of data
The origin of the processed data is Iberia Líneas Aéreas de España. They were collected during the purchasing process made through this company, and through Iberia Plus if you are a member of the programme. Iberia LAE obtained your consent to share your data with Iberia Cards as the financial intermediary for your financing application.
Identification data: The data that will be processed by virtue of this clause are your personal identification and contact data, the specific data related to the flight for which you are applying for financing, and your Iberia Plus data.
Continuation of this financing process implies that you have read and accept this privacy policy.