Privacy policy

Privacy policy

This Privacy Policy will help you to make decisions on the data you may provide through the website www.bde.esOpens in a new window and/or any other data accessed through that domain (henceforth, the "Website"), as well as through any other medium or form provided for such purpose.

We therefore recommend you read it carefully.

Who is responsible for processing your personal data?

The legal person responsible for processing the data provided will be BANCO DE ESPAÑA, with Tax Identification Code (NIF) Q2802472G, registered office at Calle Alcalá nº 48, 28014, Madrid, Spain and telephone 913 385 000.

The User can contact the Data Protection Officer of Banco de Españ at the following address: Sending an e-mail: Opens in a new window, or by writing to the address of Banco de Españ, for the attention of the "Data Protection Officer".

Information and consent

By reading this Privacy Policy, the User is informed of the way in which Banco de Españ collects, processes and protects the personal data that it is provided with through the forms available on its Website, as well as data from the User's browsing and any other data that the User may provide through any other format or medium.

The User must carefully read this Privacy Policy, which has been drafted in a clear and simple style so it can be easily understood, and determine freely and voluntarily whether they wish to provide their personal data to Banco de Españ, through the various channels created for such purposes.

Where the User provides data from a third party, the User must state that they have the third party's consent and undertake to transfer the information contained in this Privacy Policy to the party concerned, the owner of those data, while exempting Banco de Españ from any responsibility in this regard. Notwithstanding the above, Banco de Españ may carry out the necessary checks to verify those circumstance, by adopting the corresponding due-diligence measures, under the data-protection regulations.

Obligation to provide data

The data requested in the forms on the Website are generally mandatory (unless specified otherwise in the required field) to meet the stated purposes. Therefore, where such data are not provided or are provided incorrectly, it will be impossible to meet the above-mentioned purposes, without prejudice to the possibility that the content of the Website may be freely displayed.
The User shall accordingly assume any possible liabilities and responsibilities that may arise from any excessive or inappropriate data that they voluntarily decide to provide Banco de Españ with.

Why will the user's personal data be processed and for how long?

Personal data that Banco de Españ is provided with will be processed for the following purposes:

  • Processing requests for starting procedures through the forms provided on the website, as well as processing applications submitted via the Electronic Register.
  • Processing claims, complaints and consultations made against banks supervised by Banco de Españ over transparency and customer protection.
  • Processing requests for access to public information.
  • Managing the selection processes of Banco de España, or its affiliated bodies.
  • Managing the Banco de España's awarding of scholarships, research studies, grants and Programmes of Excellence in Education and Research.
  • Managing the Banco de España's Library service.
  • Managing subscriptions to the various newsletters, publications, calls, regulations, services and, in general, any new content published on the website of Banco de España, as well as on the other related portals.
  • Managing relations with Banco de España's suppliers.
  • Preparing statistical reports on the access habits and activities carried out by users on the Website.
  • Complying with the legally established obligations.

The User's data will be kept by Banco de Españ for as long as necessary to meet the above purposes or until the User challenges or revokes their consent, in which case the data shall be deleted, except where they have to be kept, duly blocked, for the purposes of bringing or defending legal actions, during their respective limitation periods.

What is the lawful basis for processing user data?

The User's data are processed by Banco de Españ based on the consent they give and which they can withdraw at any time. Notwithstanding the above, if the User withdraws their consent, this will not affect the lawfulness of any processing carried out previously.

The types of consent obtained for the above-mentioned purposes are independent, which means that the User may revoke only one of them without affecting the others.

What recipients will the user's data be communicated to?

The User's personal data may only be communicated to companies that provide services to Banco de Españ and solely for the purposes stated above.

The recipients stated in this section may be located within or without the European Economic Area, and international data transfers will be duly lawful in the latter case.

Responsability and liability of the user

The User:

  • Guarantees that they are over 16 years old and that the data that Banco de Españ is provided with are true, accurate, complete and up to date. For these purposes, the User shall be responsible for the truthfulness of all the data communicated and keep the information they duly provide up to date, so as to reflect their actual situation.
  • The User shall be responsible and liable for any false or inaccurate information that they provide through the Website and for any damage and loss, direct or indirect, that they cause Banco de Españ or third parties.

Exercise of rights

The User may send a written document signed by the owner of the data, attaching in all cases a copy of their Spanish National Identity Document (DNI) or equivalent document proving their identity and specifying the right or rights they wish to exercise, to Sending an e-mail: Opens in a new window or Calle Alcalá nº 48, 28014, Madrid, Spain, to:

  • Revoking the consent given.
  • Obtaining confirmation as to whether or not Banco de Españ is processing personal data concerning the User.
  • Accessing their personal data.
  • Correcting inaccurate or incomplete data.
  • Requesting the deletion of their data when, among other reasons, the data are no longer necessary for the purposes they were collected for.
  • Obtaining from Banco de Españ the limitation of data processing when any of the conditions provided for in the data protection regulations are met.
  • Requesting the transferability of their data.

The party concerned may also bring a claim before the Spanish Data Protection Agency, should they consider that Banco de Españ has violated rights of theirs recognised by the applicable data protection regulations.

Without prejudice to the above, the party concerned may contact Banco de Españ data protection officer whose contact details are: Sending an e-mail: Opens in a new window

Security measures

The User's data shall be processed in absolute confidence at all times, in compliance with the mandatory duty of secrecy and under the provisions set out in the applicable regulations, with the necessary technical and organisational measures adopted for these purposes for guaranteeing the security of those data and preventing them from being subject to any alteration or loss or unauthorised processing or access, taking into account the latest technology, the nature of the stored data and the risks to which they are exposed.

Last update: May 2018.