Philately Data Protection Policy

1.Data controller

 The data controller is “Sociedad Estatal Correos y Telégrafos, S.A., S.M.E” (“Correos”), with Spanish Tax ID No. A-83052407 and registered address at Conde de Peñalver, nº 19, 28006 Madrid (Spain).

To ensure the proper management of this data processing, Correos has appointed a Data Protection Officer (DPO or DPD) who can be contacted at the following email address regarding any matters related to this issue: dpdgrupocorreos@correos.com

2.Purpose and legitimacy of processing

Your data is processed for the following purposes:

A. Provision of the service requested

Your data will be processed to formalise your philately product order.

B. Complying with legal obligations

Your data will be processed to comply with different legal obligations arising from the provision of the service, for example, tax obligations.

In compliance with these obligations, Correos may communicate your data to Public Administrations and courts whenever said information is required for established legal proceedings.

C. Statistical information and customer-satisfaction surveys.

Correos has a legitimate interest in knowing the opinion of its customers regarding its products and services, as well as their consumption habits (e.g. the frequency/recurrence of contracting different services), in order to be able to offer products and services that are better in line with their needs, and to improve its current products and services and contracting process.

To achieve the purpose detailed above, Correos may process your data and:

Conduct satisfaction surveys, either by telephone or electronic means, even after you are no longer a customer, in the latter case to find out why you left.

If, during the satisfaction survey, a customer states their opinion of the products and services of any of the Correos Group companies, the result of the survey and the identifying information of the participant may be communicated to the Correos Group company in question.

Anonymise it, so that the information concerning your consumer habits cannot subsequently be linked to your person, and then carry out statistical and econometric studies (e.g. to know the customer’s life cycle and/or identify models of propensity to abandonment).

D. Sending philately product offers and promotions

If you give your consent, Correos may send you commercial information related to the provision, improvement and updating of our products and services, new rates, and discounts, through any electronic or non-electronic channel.

This commercial information may be generic or personalised. In the latter case it will imply the prior processing of your data in order to profile and characterise you and determine your tastes, preferences and needs, and, based on them, identify the offers that may be of most interest to you.

You may revoke your consent for free at any time and stop receiving new offers and promotions by indicating this via post to the address indicated above or by sending an email to filatelia.crm.datos@correos.com. Additionally, you will be reminded of your right to revoke your consent in every commercial email you receive.

E. Sending offers and promotions about other Correos products and services

If you give your consent, Correos may send you commercial information related to the provision, improvement and updating of our products and services, new rates, and discounts, through any electronic or non-electronic channel.

This commercial information may be generic or personalised. In the latter case it will imply the prior processing of your data in order to profile and characterise you and determine your tastes, preferences and needs, and, based on them, identify the offers that may be of most interest to you.

You may revoke your consent for free at any time and stop receiving new offers and promotions by indicating this via post to the address indicated above or by sending an email to bajas-comunicaciones@correos.com. Additionally, you will be reminded of your right to revoke your consent in every commercial email you receive.

F. Sending offers and promotions from Correos Group companies and third-party companies

If you give your consent, Correos may send you, through any electronic or non-electronic channel, offers and promotions from:

Other Correos Group companies that provide services related to the sectors of package delivery, added-value postal services, logistics, marketing and telecommunications.

Other companies with which Correos has entered into partnership agreements and that may belong to sectors such as telecommunications, finance, wholesale, healthcare or NGOs.

This commercial information may be generic or personalised. In the latter case it will imply the prior processing of your data in order to profile and characterise you and determine your tastes, preferences and needs, and, based on them, identify the offers that may be of most interest to you.

You may revoke your consent for free at any time and stop receiving new offers and promotions by indicating this via post to the address indicated above or by sending an email to bajas-comunicaciones@correos.com. Additionally, you will be reminded of your right to revoke your consent in every commercial email you receive.

G. Sharing data with other Correos Group companies and third-party companies

If you give your consent, Correos may communicate your data to Correos Group companies and other companies whose sectors are detailed above so that these companies can send you offers and promotions related to their products and services directly without Correos intervening.

You may revoke your consent for free at any time by indicating this via post to the address indicated above or by sending an email to bajas-comunicaciones@correos.com.

H. Enriching your information

If you give your consent, Correos may obtain more information about your characteristics, tastes and needs through the information provided by different external sources like public records, land registry, social networks, geomarketing tools, economic information databases like INFORMA, credit histories like ASNEF, BADEXCUG, etc. in order to make improvements to our products and services and/or adapt or choose the offers for these products and services that best fit your specific profile.

 You may revoke your consent for free at any time by indicating this via post to the address indicated above or by sending an email to bajas-comunicaciones@correos.com.

3.Type of data processed

For the purposes detailed above, a set of personal data is processed that can be divided into the following sources and categories:

A. Data provided directly:

When registering and/or requesting service, through filling out the forms provided for such purpose.

The customer ensures that the data given to Correos for the provision of the requested services are accurate and shall communicate any change that may affect them. As a result, the customer is liable to Correos and third parties for any damage or harm caused as a result of not complying with the obligations assumed in this clause.

B. Data collected indirectly:

All data that, having received your consent, Correos collects from the external sources listed above in 2.H.

C. Data stemming from provision of the service:

Including information such as a list of products and services contracted in the past and their characteristics, claims or requests for information.

D. Data storage time

Your personal data will be kept as long as necessary to carry out the contractual relationship. For individuals or legal entities who are not Correos customers but have provided express consent to receiving commercial communications by electronic or other means, personal data will be stored while consent is not revoked.

Once that period has expired, the data will be erased in accordance with data protection regulations, which involves blocking them; they will only be available at the request of judges and courts of law, the Public Prosecutor and competent Public Administrations during the limitation period for the actions that could arise. They will subsequently be eliminated. Limitation periods vary depending on the type of service; for example, in general the limitation period for most personal civil actions is 5 years.

E. Your rights

Our data protection regulations provide you with a series of rights relating to the data processing involved in our services, and they can be summarised as follows:

  • Right to access: Knowing what type of data we are processing and the type of processing we are carrying out.
  • Right to rectification: Being able to request the modification of your data if they are inaccurate or false.
  • Right to data portability: Being able to obtain a copy of the data being processed in an interoperable format.
  • Right to restrict processing, in those cases provided for by law. 
  • Right to erasure: Requesting the deletion of your data when the processing is no longer necessary.
  • Right to oppose: Requesting the cessation of commercial communications under the terms cited above.
  • Right to withdraw the consent given.

 

You may exercise your rights through any of the following channels, indicating the right being exercised and attaching a copy of your Spanish Identification Document or similar document as well as any other documentation you deem to be necessary:

Postal address: Conde de Peñalver, nº 19, 28006 Madrid (Spain)

Email address: derechos.protecciondatos.correos@correos.com

You can find a set of forms that will help you exercise your rights on the website of the Spanish Data Protection Agency (AEPD). Moreover, we inform you that you have the right to file a claim with the control authority (in Spain, the AEPD) if you feel that your rights have been breached.