1. Who will process your data?

The data controller is “Sociedad Estatal Correos y Telégrafos, S.A., S.M.E” (hereinafter, “Correos”), with Spanish Tax ID A-83052407 and registered address at Calle del Conde de Peñalver 19, 28006 Madrid (Spain).

For the purpose of guaranteeing the proper management of said data processing activity, Correos has appointed a Data Protection Officer (DPO or DPD) who can be contacted at the following email address regarding any matters related to this issue: dpdgrupocorreos@correos.com

2. What are your data processed for and why?

A. Information request management

The personal data of the user will be processed for the purpose of managing your request and enabling us to contact you to inform you about Correos products and services related to Citypaq.

This information will be provided via the telephone number and, as the case may be, the e-mail address you provided.

Please also note that if you do not provide the necessary data (marked as required with an asterisk), Correos will be unable to provide the requested service.

The legitimate basis for such processing is the performance of a contract or the implementation of pre-contractual measures at the request of the data subject.

G. Compliance with legal obligations

In compliance with these obligations, Correos may communicate your data to Public Administrations and courts whenever said information is required for established legal proceedings.

The basis for this processing is compliance with a legal obligation.

3. What data will be processed?

The data provided in the registration form will be processed.

If you have given your consent, the data collected from the sources listed in purpose 2.E.

4. How long will your data be processed?

The personal data collected in the request for information will be kept for as long as they are necessary for the commercial management process you request.

Once this period has elapsed, they will be blocked, being available only at the request of judges and courts, the Public Prosecutor’s Office or the competent public administrations during the limitation period for any actions that may arise and, once the blocking period has elapsed, they will be fully erased. As an example, the limitation period will be 3 years in most cases derived from the data protection regulations.

5. What are your rights?

Users may exercise the following rights related to the processing of their data to the extent they are recognised in the data protection regulations applicable at any time:

• Right of access: if you exercise this right you will find out what type of data we are processing and the characteristics of the processing we are carrying out.
• Right to rectification: if you exercise this right you can request your data to be changed because they are inaccurate or untruthful.
• Right to portability: if you exercise this right you can obtain a copy of the data being processed in an interoperable format.
• Right to limitation of data processing: if you exercise this right you can limit the processing of your data in the cases defined by law.
• Right to oppose: if you exercise this right you can oppose the processing of your data and request to no longer be sent commercial communications.
• Right to erasure: if you exercise this right you can request the deletion of your data when the processing is no longer necessary.
• Right to withdraw the consent given.

You may exercise your rights through any of the following channels, indicating the right being exercised and attaching a copy of your Spanish Identification Document or similar document as well as any other documentation you deem to be necessary:

1. Postal address: Calle del Conde de Peñalver 19, 28006- Madrid (Spain)

2. Email address: derechos.protecciondatos.correos@correos.com

You can find a set of forms that will help you exercise your rights on the website of the Spanish Data Protection Agency (AEPD). Moreover, we inform you that you have the right to file a claim with the control authority (in Spain, the AEPD) if you feel that your rights have been breached.