CaixaBank and the CaixaBank Group companies listed below are jointly responsible for processing your data for the purpose of compiling statistical information:
- CaixaBank, S.A.
- CaixaBank Payments & Consumer, E.F.C., E.P., S.A.U.
- Global Payments Moneytopay, EDE, S.L.
- Comercia Global Payments Entidad de Pago, S.L.
In accordance with the provisions of applicable regulations, the Co-Controllers have entered into a joint responsibility agreement for certain processing operations, the essential elements of which are as follows:
(i) For certain processing operations identified in the Privacy Policy, the Co-Controllers will act in a coordinated or joint manner.
(ii) They have determined the appropriate security, technical and organisational measures to ensure a level of security that corresponds with the risk inherent in the processing of personal data subject to joint responsibility.
(iii) They have a mechanism of a single point of contact for data subjects to exercise their rights and are committed to cooperating and assisting in cases where it is appropriate to do so.
(iv) They are in compliance with the obligation to respect the duty of secrecy and to maintain the confidentiality of personal data processed in the context of the data processing activities reported.
(v) Regardless of the terms of the joint responsibility agreement, data subjects may exercise their data protection rights against each of the data controllers.
The legal basis for such processing is the fulfilment of the legitimate interests of the co-controller companies, provided that on those interests do not prevail over your own interests, or your fundamental rights and freedoms, in accordance with the provisions of Article 6.1.f) of the General Data Protection Regulation (GDPR).
The performance of such processing entails that we will have carried out a weighting between your rights and our legitimate interest in which we will have concluded that the latter prevails. Otherwise, we would not carry out the processing. You can consult the analysis of the weighting of the legitimate interest of a processing operation at any time by sending your request to the email address delegado.proteccion.datos@caixabank.com
We also remind you that you have the right to object to data processing based on legitimate interest. You can do so easily and for free via the channels indicated in section 4.
Below, you will find detail of the legitimate interest of CaixaBank (Legitimate interest of CaixaBank) the description of the purpose (Purpose), the types of processed data (Types of processed data), where applicable, information on the use of profiles (Use of profiles), other necessary information about the processing (Other relevant information).
Legitimate interest of co-controller companies: The legitimate interest of the co-controller companies set out in this paragraph to perform this processing is to is to create a set of statistical information about their business processes.
Purpose: The purpose of this processing is to aggregate certain personal data in order to generate a fully anonymised and aggregated dataset on the business processes of the various co-controller companies.
Types of processed data: The types of data that we process for this purpose, whose content is detailed in section 5, are:
- Personal and contact details
- Contracting data
- Basic financial data
- Geographical data
Other relevant information: Below, you will find other relevant information on this processing:
- Right to object to processing: if you believe that the co-controller companies should take into account a certain situation or other reasons that may justify us ceasing to process your data, you may request this easily and free of charge through the channels indicated in section 4.
- Ancillary data processing: The processing of personal data is limited to the operations necessary for the creation of statistical information and is carried out using aggregation techniques until the data is fully anonymised.