GRUPO IBERIA WEBSITE PRIVACY POLICY
Valid since 10 March 2022
Additional Information on Data Protection
The only personal data to which Iberia Líneas Aéreas de España, S.A. Operadora, Sociedad Unipersonal(hereinafter "Iberia") will have access is that which the interested party provides voluntarily. In cases and in the data where this is stated explicitly to the interested party, if such is not provided, we will be unable to offer the requested services.
In compliance with current regulations (primarily, General Data Protection Regulation EU 2016/679 and European and national law that compliments or develops it at any time), Iberia has taken the technical and organisational measures necessary to maintain the level of security required to deal with personal data. Furthermore, it has the precise mechanisms at its disposal to avoid, as far as possible, unauthorised access, data extraction and illicit modifications and loss of data.
I.- Who is the controller of processing your personal data?
The controller of processing your data is Iberia Líneas Aéreas de España, S.A. Operadora, Sociedad Unipersonal, having its registered offices in Madrid, Calle Martínez Villergas 49, 28027. You can contact the Iberia Data Protection Office by email at OficinaDPO@iberia.es or by mail at “Oficina de Protección de Datos de Iberia Líneas Aéreas de España, S.A. Operadora, Sociedad Unipersonal” at Calle Martínez Villergas 49, 28027 Madrid.
II.- For what purpose and with what legitimation do we process your data?
- Access to news and relevant information. To be able to manage, process and send information regarding our Group, the personal data provided by the interested party through the available channels will be processed. Your consent shall constitute legitimation to carry out such processing.
- Management of requests for sponsoring and similar activities. To be able to manage, process and reply to requests for sponsoring of events and/or other activities received via the online form available for this purpose in this website. Your explicit consent by submitting your request shall constitute our legitimation to carry out such processing. If you are submitting any third person’s personal or contact data in the online form, you must have obtained such person’s prior consent to do so.
III.- When will we send you communications?
We will only send you communications when you have registered with our Group news reception service. We will not send you news or communications of any other kind.
We may also get in touch with you, in relation to a sponsoring request you may have submitted, via the contact details you have provided in the online form,
IV.- How can you change the type of communications you receive and how you receive them?
If you decide that you no longer wish to receive communications, you can change your mind at any time. You can oppose the sending of such commercial communications by sending a communication by email from the email address where you are directly receiving our communications, to prensa@iberia.es , indicating “Stop comms” in the head of your message.
We strive to process requests to stop receiving commercial communications as quickly as possible, within 30 days of reception..
V.- How long do we keep your data?
We process your personal data for as long as it remains necessary for the purpose for which it was collected and while the interested party does not request its erasure and it must not be deleted because it is necessary for the fulfilment of a legal obligation or for the formulation, exercise and defence of claims.
In the case of sponsoring requests, we will only keep your data as long as needed to assess and respond to your request.
If the interested party revokes their consent or exercises the right of erasure, their personal data will remain blocked at the disposal of competent Courts, Tribunals and Authorities, during the legally established limitation periods for meeting the possible responsibilities arising from the processing thereof.
VI.- To whom do we pass on your personal data?
Your data will be transferred to the following companies:
- Public Bodies, Judges and Courts and, in general, competent Authorities, when Iberia has a legal obligation to provide such data.
-
Iberia works with third-party service providers who have access to your personal data and may process such data in the name of and on behalf of Iberia as a result of their service delivery.
Iberia follows strict criteria when selecting service providers in order to meet its obligations in relation to data protection, and undertakes to enter into the corresponding data processing agreement with them, whereby the following obligations, amongst others, are imposed thereon: to apply appropriate technical and organisational measures; to process personal data for the purposes agreed upon and solely on the basis of Iberia's documented instructions; and to erase or return the data to Iberia once the delivery of services has ended.
VII.- What are your rights when you provide us with your data?
The interested party may, if they wish, exercise the right of access, rectification and erasure of data, as well as request that the processing of their personal data be limited, oppose thereto, request the portability of their data, and not be the subject of automated individual decisions, through the following channels:
- By email at prensa@iberia.es; or
- By mail to "Oficina de Protección de Datos. Iberia Press Division", at Calle Martínez Villergas 49, 28027 Madrid, Spain
In such cases, to allow us to deal with your request, you must provide us with the following information and documentation:
- Applicant's full name
- Identity document
- Contact details (at least email address)
- Data that is the subject of your request
- Any details that help us locate the data that is the subject of your request
- A photocopy of your identity document so we can verify your identity.
- If your request is in relation to a sponsoring request you may have previously submitted, please state this fact in the text of your communication.
- If you submit the request on behalf of someone else, you will need to provide signed authorisation from the person along with their relevant identity document.
VIII.- To which authority can you submit your claims?
Interested parties can, in any case, submit a claim to the Spanish Data Protection Agency, especially when they have not obtained satisfaction in the exercise of their rights, via the website www.aepd.es.