1.- Data Controller:
-
Corporate Name: Sociedad Conjunta para la Emisión y Gestión de Medios de Pago, E.F.C., S.A., Tax ID: A83289819; hereinafter "Iberia Cards".
-
Address: Calle O’Donnell 12, 28009 - Madrid.
-
Data Protection Officer ("DPO") contact details: privacidad@Iberiacards.com.
2.- Purposes of processing and legal basis.
Presentation to the customer of the financing offer that best suits their request: Iberia Cards, as the data controller, will process the personal identification and contact data collected during the ticket purchase process, together with the data corresponding to the financed flight and those belonging to the Iberia Plus Program, in order to be able to offer you financing for purchases made at Iberia. Consequently, the purpose is to manage the request for financing requested by you, as well as the study, evaluation, management and control of the operation requested.
Para ello, una vez Iberia Cards cuente con todos los datos necesarios, los mismos serán comunicados a las entidades encargadas de prestar el servicio de financiación con la finalidad de que las mismas puedan evaluar la solvencia para tramitar la solicitud de financiación, con quienes el cliente deberá formalizar el acuerdo correspondiente, aceptando en ese momento la política de privacidad propia la entidad que conceda la financiación. Para evaluar la solvencia, las instituciones financieras colaboradoras (Kueski yAtrato) verificarán sus datos en el Buró de Crédito del Banco de México
For this purpose, once Iberia Cards has all the necessary data, the same will be communicated to the entities in charge of providing the financing service so that they can evaluate the solvency to process the financing request, with whom the client must formalize the corresponding agreement, accepting at that moment the privacy policy of the entity granting the financing. In order to evaluate the creditworthiness, the collaborating financial institutions (Kueski and Atrato) will verify your data in the Credit Bureau of the Bank of Mexico.
If you wish to obtain a financing offer from any of the financial institutions that have agreements with Iberia Cards for this purpose, you must complete all the information requested during the purchase and financing application process. If you do not provide the required data, you may not be able to obtain the financing requested.
We do not collect, nor request, sensitive personal data, so please do not send us such information.
Management of the financing contracted by the customer: Iberia Cards will keep the data provided throughout the purchase process, as well as those corresponding to the flight and the Iberia Plus program in order to manage the necessary exchange of information for Iberia LAE and the entity that has granted the financing for the execution of the transaction.
Market analysis with anonymized data: Finally, after prior dissociation, Iberia Cards may use your personal data to conduct market analysis to show trends on user behavior in order to anticipate strategic decisions.
3.- Time Periods and Criteria for Data Retention.
Iberia Cards will retain your personal data for the time strictly necessary for the intermediation in the granting of the requested financing and the subsequent management of the same.
Once the financing contract has been concluded, Iberia Cards will keep your data blocked until the end of the statute of limitations period for possible legal actions. This implies that your data will only be accessed for the purpose of making it available to the Public Administrations, Judges and Courts, or the Public Prosecutor's Office in response to the legal requirements made by them, as well as, if applicable, for the exercise by Iberia Cards of the rights to which it is entitled by virtue of its intervention as intermediary in the credit agreement granted. Once the aforementioned periods have elapsed, your personal data will be completely deleted.
4.- Transfers and Their Possible Recipients
Your personal data will be transferred by Iberia to Iberia Cards, in order to manage the application for the financing requested by you, and to the financial institutions with whom Iberia Cards has agreements at any given time for the granting of the financing requested. Find out which financial institutions Iberia Cards collaborates with: Kueski and Atrato. When you apply for a loan you agree to the transfer of your personal data to the financial institutions described here.
This will necessarily involve the transfer of your identification and contact information to the financial institution so that it can evaluate your creditworthiness and process your application for financing. As part of this process, the financial institution will compare your data with the Banco de México's Credit Bureau or similar institutions.
This management necessarily consists of the transfer of your data to the entity to which the financing is to be granted so that it can carry out the necessary risk analysis to determine the viability of the operation.
We also inform you that the financial institutions and other providers of related technological services to which the data are transmitted in order to carry out the monetary transactions under this Agreement, may be obliged by the legislation of the State where they are located or by agreements concluded by the latter, to provide information on monetary transactions to the authorities or official bodies of other countries, located both inside and outside the European Union, within the framework of the fight against the financing of terrorism and serious forms of organized crime and the prevention of money laundering, in accordance with the provisions of the Mexican Federal Law for the Prevention and Identification of Operations with Resources of Illicit Origin (LFPIORPI).
Iberia Cards may forward all or part of your personal data to service providers who support us in some process. These providers include, for example: (i) companies that provide us with some recruitment and selection service; (ii) accounting or IT companies that support us to perform payroll; (iii) companies or laboratories that perform psychometric, psychological tests, medical, clinical studies, among others; (iv) law firms that support us in accounting, legal tax and immigration matters; and (v) insurance agents and insurers; before transferring information to these providers, we make sure to sign contracts that allow these companies to commit to protect the personal data of our employees and collaborators.
5.- Data Subject Rights.
- All individuals have the right to obtain information on whether Iberia Cards is processing personal data concerning them.
- Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
- In certain circumstances, data subjects may request that we restrict the processing of their information, in which case we will only retain it for the purpose of asserting or defending claims. You may at some point wish to explore whether there are ways to limit how we use or disclose your personal data in any particular way. In these cases, or in any other case where you wish to explore ways in which we may not process your data for a particular purpose, please contact us at the above email address. Our DPO will let you know what options are available to you.
- In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. Iberia Cards will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.
- Where applicable, you may request the portability of your data.
In relation to your data used in the provision of the intermediation service for the financing of purchases made at Iberia LAE, in order to exercise your rights, you must send your request, together with a copy of your official identification, by email to atencionalcliente@Iberiacards.com.
You are hereby informed that you may request additional information about our Personal Data Protection Policy from the Iberia Cards Data Protection Officer (DPO) through the e-mail address detailed in the first paragraph of this clause.
In all cases, and in particular if you are not satisfied with the exercise of your rights, you may file a complaint with the National Institute for Transparency, Access to Information and Protection of Personal Data (INAI), http://www.inai.org.mx/.
6.- Data Origin
The data processed come from Iberia Líneas Aéreas de España and have been collected throughout the purchase process carried out in said Company, as well as from the Iberia Plus program in the event that you are a member of the same, Iberia LAE having obtained your consent to provide the same to Iberia Cards as a financial intermediary for the granting of the financing requested by you.
Identifying Data: the data that will be subject to processing under this clause will be identifying personal data, as well as the specific data of the flight to be financed and its Iberia Plus program data.
Contact Data: Information that allows us to keep in touch with you. This data may include your home address, work address, tax address, email address, home phone number or other contact phone number, such as cell phone number.
Iberia Cards reserves the right to modify or update this privacy notice at any time. The modified privacy notice will be published on our website, on our intranet or will be sent to you by e-mail or any other means of communication. You will be able to verify that the privacy notice has been modified as we will always note the date of the last update. In case Iberia Cards makes any substantial change in the processing of your personal data; we will let you know through a notification to your e-mail or by posting these changes on our website. Any changes made to our privacy notice will become effective the next day after it is posted on our website. If you do not agree to the changes, please contact our DPO.
Continuing with the financing process initiated by you implies acceptance of this privacy policy which I declare to have read.