*The translation is done automatically. The document has legal validity only in Spanish.

Update: May 27, 2021

Data protection policy “Correos Market”

Responsible for the treatment

The controller is "Sociedad Estatal Correos y Telégrafos, S.A., S.M.E" (hereinafter referred to as"Correos"),with CIF A-83052407 and registered office in Via Dublin No. 7 (Campo de las Naciones) 28070 Madrid (Spain).

To ensure the proper management of such processing, Correos has designated a Data Protection Officer (DPD or DPO), to whom you can contact for any issues you need regarding them through the following email address: dpdgrupocorreos@correos.com

Purpose of treatment and legitimizing bases

The processing of your data pursues the following purposes:

A. User registration and online order management

Your data will be processed to: (i) process your registration as a user/customer; (ii) en-order online and develop the sales process that includes everything from receipt of the order to its delivery and, where appropriate, the management of guarantees; (iii) process and respond to your questions, inquiries or complaints.

The products and services marketed through the Platform www.market.correos.es belongs to:

Third companies with which Correos has signed a marketing agreement for its products.

The basis on which this processing is eded is the performance of a contract or the application of pre-contractual measures at the request of the data subject.

B. Sending offers and promotions of Postal products and services

If you give your consent, Correos may send you commercial information related to the provision, improvement and updating of our products and services, new rates and discounts by any electronic or non-electronic channel.

This business information may be generic or personalized. In the latter case it will involve the prior processing of your data in order to be able to proceed to its profiling and carterization, determine tastes, preferences and needs and, based on them, identify the offers that may be most interesting.

At any time, you may revoke your consent free of charge and not receive new offers and promotions by indicating it by mail to the address above or by email to the derechos.protecciondatos.correos@correos.com address or through our customer service. In addition, in any electronic commercial communication you will be informed, again, of your right to revoke your consent.

C. Sending offers and promotions from other postal group companies and third-party companies

If you give your consent, Correos may send you offers and promotions of:

Other companies of the Postal Group that provide services related to the sectors of: belonging to the activities of parcel services, value added to the postal service, logistics, marketing and telecommunications.

Other companies with which Correos has signed different collaboration agreements and that may belong to sectors such as telecommunications, finance, high consumption, healthcare and NGOs.

D. Communication of data to other companies of the Postal Group and to third parties

If you consent, Correos may communicate your data to the companies of the Postal Group and to third parties whose sectors are detailed in the previous purpose in order that these companies can send you, directly and without the intermediation of Correos, by any electronic or non-electronic channel, offers and promotions related to their products and services.

E. Enrich your information

Correos may send Christmas greetings to those users who have a prior contractual relationship with the Company, in order to consolidate the relationship with the recipients of the communications, sending a Christmas greeting through an electronic communication, on an annual basis and during the Christmas campaign. The data used to carry out for this processing will be, only, contact details and, possibly, identifying data.

It is the legitimate interest of Correos to promote, reinforce and strengthen the corporate image of Correos by sending such communications in the form of congratulations. Congratulations shall be corporate in nature and shall in no case include a reference to any service or contract. The receiver will have the possibility of not receiving any more similar commercial communications by unsubscribed in the same email. You can request additional information about how we have valued our legitimate interest and your own interests by contacting dpdgrupocorreos@correos.com.

F. Complying with legal obligations

Among the various legal obligations assumed by Correos are those arising from the application of postal regulations (Law 43/2010 of the universal postal service, the rights of users and the postal market) and the duty of secrecy of communications (art. 18 of the Constitution), as well as tax regulations.

In fulfilling these obligations, Correos may communicate your data to public administrations and courts, provided that such information is required in accordance with established legal processes.

G. Statistical information and satisfaction surveys

Correos has a legitimate interest in knowing both the opinion of its customers regarding its products and services and their consumption habits (e.g. the frequency/recurrence in the contracting of the different services) in order to be able to offer products and services more adjusted to their needs and improve both current products and services and their contracting process.

To achieve the objective set out in the previous paragraph, Correos may process your data and:

Conduct satisfaction surveys both telephone and electronically, even once you cease to be a customer, in the latter case to know the reasons for your progress.

In the event that during the customer satisfaction survey the customer expresses his opinion on the products and services of any of the companies of the Postal Group, the result of the survey and the identification data of the participant may be communicated to the company of the Postal Group whose services are valued.

Proceed to their anonymization, so that information about their consumption habits cannot be relinked with their person and, after that, perform statistical and econometric studies (e.g. knowing the customer's life cycle and/or identifying models of propensity to abandon).

H. Evaluation of the quality of the products purchased.

Correos aims to know the opinion of its customers regarding the products purchased in order to improve the service and help other users in the purchase of a product.

To achieve the objective set out in the previous paragraph, Correos may request registered customers to make an assessment of the purchased product, being able to make comments on them.

The ratings, and opinions about the products, will be made by you voluntarily, and will be visible next to your identifying data for any user who visits the Platform. If you prefer that your identifying data, first and last name, are not visible on the Platform, you can make your ratings and comments anonymously by checking the option called "hide my identifying data"

Correos performs this processing based on the consent given by you by checking the box enabled for this purpose.

Type of data processed

For the purposes set out in the previous section, a set of personal data is discussed which we can divide into the following sources and categories:

A. Customer-provided data directly:

At the time of registration on the web portal, or when making the purchase of a product, through the completion of the forms for this purpose enabled. This data is:

Identification data (e.g. name, email, telephone number, address, NIF, etc.)
Employment details (e.g. company)

At the time of a product evaluation;

Comments made by the customer; including first and last name in case you have not selected the option called "hide my identifying data".

The customer guarantees that, the data provided to Correos for the provision of the requested services, and the acquisition of the products offered, respond truthfully to the actual situation and that it will communicate any modification that affects them. Accordingly, the customer will be liable to Correos and third parties for any damages caused as a result of the breach of the obligations assumed in this clause.

B. Data collected indirectly:

All data that, if you have given your consent, Correos collects from the typology of external sources listed in purpose 2.E.

C. Data derived from the provision of the service itself and the relationship entered into with the customer:

Including information such as the history of products purchased, as well as their characteristics, claims or requests for information and any other data generated in the legal relationship with the interested party.

Data retention period

Your personal data will be kept as long as it is necessary for the development of the contractual relationship. After this period the data will be deleted in accordance with the provisions of the data protection regulations which implies its blocking, being available only at the request of Judges and courts, the Public Prosecutor's Office or the competent Public Administrations during the limitation period of the actions that may arise to be subsequently deleted. Limitation periods vary depending on the type of service, for exemplifictive purposes, in general the limitation period for most personal civil actions is 5 years.

In addition, Correos will block customers who are inactive for a period of 6 years. Users registered with the Post Market Platform will be considered as an inactive customer, but who have not made any transactions there for more than 5 years.

Data communications

If you give your consent, Correos may communicate your data to third parties in sectors such as marketing or telecommunications in order that these companies can offer their products or provide additional services to those contracted. In addition, it is informed that for the correct execution of the contract and the fulfillment of the purposes indicated above, it will be necessary to share information related to you with companies providing some of the services.

In fulfilling these obligations, and within the purpose described as "online order management", Correos may communicate your data to public administrations and courts, provided that such information is required in accordance with established legal processes.

In addition, and in relation also to the purpose of managing the online order, whenever requested, your data may be transferred to the third party companies marketing products to proceed with the issuance of the corresponding invoice.

Your rights

Our data protection regulations give you a number of rights in relation to the processing of data involving our services that we can summarize in the following:

Right of access: Know what type of data we are processing and the characteristics of the processing we are carrying out.
Right of rectification: To be able to request the modification of your data because it is inaccurate or not truthful.
Right of portability: To be able to obtain a copy in an interoperable format of the data being processed.
Right to restriction of processing in cases eded in the Law.
Right of deletion: Request the deletion of your data when processing is no longer necessary.
Right to object: Request cessation of the sending of commercial communications in the a number of terms indicated above.
Right to revoke consent given.

You can exercise your rights through one of the following channels, indicating the right to exercise and accompanying a copy of the National Identity Document or equivalent document in addition to any other documentation you deem appropriate:

Postal Address: Via Dublin No. 7 (Field of Nations) 28070 Madrid (Spain)
Email: derechos.protecciondatos.correos@correos.com

On the website of the Spanish Data Protection Agency (AEPD) you can find a series of models that will help you in the exercise of your rights. We also inform you that you have the right to lodge a complaint with the supervisory authority (in Spain, the AEPD) if you consider that your rights are infringed.

Third-party data

For the provision of certain services, you may need to provide us with the personal and contact details of third parties, such as the name, surname, postal address, email address, contact telephone number and other equivalent contact details or means of contact of the recipient of a communication or shipment.

Correos will exclusively process this data to proceed with the delivery of the communication or the shipment. In addition, in order to best provide the service, the telephone number or email address may be used in order to inform the recipient about the estimated delivery dates and to deal with any incident that could affect it.

In this sense, the client guarantees the veracity and updating of the recipient's data and, where appropriate, ensures that he has fulfilled all those obligations that, in terms of data protection, are attributable to him, having obtained the consent of the recipient to carry out the processing set out in the preceding paragraphs, if such necessary consent.

*The translation is done automatically. The document has legal validity only in Spanish.