1. Controller
The data controller is "Sociedad Estatal Correos y Telégrafos, S.A., S.M.E." (hereinafter, "Correos"), with tax ID number A-83052407, and with registered office at calle del Conde de Peñalver, 19, 28006 Madrid (Spain).
For the purpose of guaranteeing the proper management of said data processing activity, Correos has appointed a Data Protection Officer (DPO or DPD) who can be contacted at the following email address regarding any matters related to this issue: dpdgrupocorreos@correos.com
2. Data processed, purpose of processing and legal basis
Your data is processed for the following purposes and on the following legitimate ground:
Purpose 1: Authorisation of the addressee of the shipment and Management of the delivery of the shipment to an authorised person.
Description of purpose: (i) Processing the authorisation of the addressee of the shipment (ii) Proceeding to the delivery of the shipment to the person authorised by the addressee of the shipment through the Correos Modify application.
Data processed for this purpose:
- Identification and contact details: Details of the addressee of the shipment: First name, surname of the recipient of the shipment and the shipment code, Telephone number and/or e-mail address of the addressee of the shipment.
- Authorised person data: In case of delivery to an authorised neighbour, name and address of the authorised neighbour.
Legal grounds: The legal basis for the processing of your data is the consent of the addressee.
Purpose 2: Compliance with legal obligations
Description of purpose: In compliance with its obligations, Correos may forward your data to Public Administrations and courts of law, provided that this information is required in accordance with established legal procedures.
Data processed for this purpose: For this purpose, the data necessary for the fulfilment of legal obligations will be processed in accordance with the applicable regulations.
Basis of legitimacy: The basis for this processing is compliance with a legal obligation.
3. Sources from which the personal data originates
Your contact details, e-mail and telephone and your identification details, name and surname have been provided to Correos by the sender of the shipment. In addition, Correos will process the additional data that you provide us with in order to process the authorisation and manage the delivery of the shipment to the person authorised by you.
The addressee will have to provide the required data indicated on the form. In the event of failure to provide such required data, Correos will not be able to process the authorisation and manage the delivery of the shipment to the authorised person.
4. Data communication
In general, we do not intend to communicate your data to people outside Correos. Nonetheless, to comply with the law, we may be required to share your data with third parties such as public authorities (e.g. law enforcement) or courts.
5. What guarantees do you have to give us when you provide your personal data?
The addressee guarantees that the data provided are true, accurate, complete and up to date, and shall be liable for any direct or indirect damage or harm that may be caused as a result of non-compliance with this obligation.
The addressee guarantees that the data of the authorised person communicated to Correos have been provided by the authorised person and that, where required, they have obtained the informed consent of the authorised person for the transfer of said data to Correos in accordance with the requirements established in current data protection legislation and shall hold Correos harmless from any damage that may arise from a claim or sanction deriving from non-compliance with the provisions of this clause.
6. International transfers
No international transfers of interested parties' personal data are foreseen. However, in the event of any international transfer, it will be carried out in accordance with the criteria and requirements demanded by current legislation, by means of the adoption of appropriate legal guarantees, which may consist of the formalisation with the recipient of the data of (i) Standard Contractual Clauses approved by the European Commission to legitimise the international transfer of data to third countries or (ii) another valid legal instrument that guarantees an adequate level of protection equivalent to that of the European Economic Area.
7. Data storage time
Your personal data will be kept for as long as it may be necessary to certify the delivery of the shipment to the sender, the Public Prosecutor's Office or the Courts.
Once that period has expired, the data will be erased in accordance with data protection regulations, which involves blocking them; it will only be available at the request of judges and courts of law, the Public Prosecutor and competent Public Administrations during the limitation period for the actions that could arise. It will subsequently be eliminated.
8. Your data protection rights
Our data protection regulations provide you with a series of rights relating to the data processing involved in our services, and they can be summarised as follows:
You can exercise your rights through any of the following channels:
You can find a set of forms that will help you exercise your rights on the website of the Spanish Data Protection Agency (AEPD). Moreover, we inform you that you have the right to file a claim with the control authority (in Spain, the AEPD) if you feel that your rights have been breached.