Who will process your data?
Your data will be processed by Sociedad Estatal Correos y Telégrafos, S.A., S.M.E., with Tax ID No. (CIF) A-83052407 and registered office at Calle del Conde de Peñalver nº 19, 28006 Madrid (‘Correos’), acting:
i) As the data processor when your data has been provided by legal entities;
ii) As the data controller when the data has been provided by a natural person.
To ensure the proper management of such processing, Correos has appointed a Data Protection Officer (DPO), who can be contacted for any questions you may have at the following email address: dpdgrupocorreos@correos.com
What data will be processed?
To accredit the correct reception of the delivery, we must identify the recipient of the shipment, who may not correspond to the addressee, which implies registering their identification data (name, surname, Spanish ID (DNI) number, Foreigner ID (NIE) number, or another reliable identification document and signature).
Some senders ask Correos to verify the authenticity of the recipient’s reliable identification document, either to comply with regulations, to prevent fraud or because, due to the assessment made solely and exclusively by the sender, such validation is proportional and necessary. When providing this service, Correos will restrict itself to following the instructions provided by the sender and will therefore obtain a copy of the reliable identification document and check for any signs of forgery using mechanical reading methods or other verification techniques.
Finally, in order to be able to send you, if applicable, the simplified invoice by email, Correos must ask you for the email address where you wish to receive the invoice.
What are your data processed for and why?
(I) Proof of receipt of the delivery
Purpose of the processing: Personal data will be processed to prove receipt of delivery by capturing your signature.
Legal basis: Art. 6.1b): the processing is necessary for the performance of a contract.
Type of data processed: (name and surname, identification number and signature of the recipient).
(II) Sending the simplified invoice by email
Purpose of the processing: Sending the simplified invoice by email.
Legal basis: Art.6.1a) GDPR: the data subject has given their consent to the processing of the email for the indicated purpose.
Type of data processed: Contact details (email).ptor).
(III) Compliance with legal obligations
Purpose of the processing: Some of the various legal obligations assumed by Correos include those derived from applying the postal regulations (Law 43/2010 on the universal postal service, the rights of users and the postal market), the obligation of secrecy of communications (Article 18 of the Constitution), as well as tax law.
In compliance with these obligations, Correos may communicate your data to Public Administrations and courts whenever said information is required for established legal proceedings.
Legal basis: Art.6.1c) GDPR: the processing is necessary for compliance with a legal obligation.
Type of data processed: Identification data (name and surname, identification number and signature of the recipient).
Are your data communicated to third parties?
In general, we do not intend to communicate your data to people outside Correos. However, the following exceptions may occur:
How long will your data be processed?
The recipient’s personal data obtained in the delivery process will be retained for as long as it may be necessary for the purposes indicated above. Once that period has expired, the data will be erased in accordance with data protection regulations, which involves blocking them; they will only be available at the request of judges and courts of law, the Public Prosecutor and competent Public Administrations during the limitation period for the actions that could arise. They will subsequently be eliminated.
What are your rights?
Insofar as they are recognised in the data protection regulations applicable at any time, you may revoke your consent or exercise your rights of access, rectification, deletion, portability, limitation of processing through any of the following channels, indicating the right to exercise:
a) Postal address: Calle del Conde de Peñalver nº 19, 28006 Madrid
b) Email: derechos.protecciondatos.correos@correos.com
Proof of the identity of the person exercising their rights will be required in the event that Correos is unable to confirm it in the way the message is communicated.
You can find a set of forms that will help you exercise your rights on the website of the Spanish Data Protection Agency (AEPD). Moreover, we inform you that you have the right to file a claim with the control authority (in Spain, the AEPD) if you feel that your rights have been breached.