What is in the new GDPR regulation?
1. What are personal data?
Personal data are all the information that allows you to be identified with “reasonable effort”. Therefore, personal data includes not just your name, but other information like your email address, etc.
Data protection is a fundamental right.
2. Why does Correos process my data? How does it use them?
Your data may be used by Correos for different purposes, but always for one of the following reasons:
If needed to provide you with the contracted service or respond to a request: e.g.: Sending a communication or responding to a question you asked us through our web form.
If required by law. e.g.: Responding to requests for information from judges and courts.
If you have given your consent. e.g.: Sending you offers and promotions related to our products and services.
If they are of legitimate interest. e.g.: Conducting surveys to find out how we can improve.
Our Data Protection Policy lists all the intended purposes. Remember that any processing requiring your consent will only be done if you have clearly and affirmatively authorised it: You have to have said “YES”, otherwise it will not be done.
3. If I give my consent can I withdraw it?
Of course. Your data are yours. You can withdraw your consent for free at any time by writing to our postal address or by sending an email to firstname.lastname@example.org. Moreover, we remind you of this option in every commercial communication we send you.
4. What other rights do I have?
Apart from the right to withdraw your consent and the traditional ARCO rights (access, rectification, cancellation, now called suppression, and opposition), starting 25 May you will be able to request:
To be sent a copy of all the data you have provided (right to portability)
That certain processing not be carried out or that your data be blocked for a period of time (right to limitation of processing).
Moreover, if automated decisions are made (this is not currently planned for Correos) you may request for them to be reviewed by a person.
Finally, if you understand that we have misused your data you can contact your data protection officer or file a claim with the Spanish Data Protection Agency.
5. How long are my data kept?
They are only kept for the time necessary to carry out the intended processing. After this time they are deleted.
6. Does Correos share my data with other people?
In general Correos does not share your data, but situations may arise where it does. e.g.:
If we are required to do so by law.
If you make a request to Correos that should really be directed to another company in Correos Group.
If you authorise us to share your data with other companies in Correos Group or with third-party companies so they can send you commercial information
Our Data Protection Policy lists all the intended communications.
7. Who is the data protection officer?
The data protection officer is the person responsible for ensuring that Correos complies with data protection regulations. Their email address is email@example.com
For more information, please consult our Data Protection Policy.
Thank you for trusting in us