What is the purpose of this Personal Data Protection Policy?

The aim of this “Personal Data Protection Policy" is to inform you about how we obtain, process and protect the personal data you provide or that we collect via BBVA's ".fr" websites (such as bbva.fr). ¹ and hereafter, the "Website/s") through forms and/or cookies so that you can decide freely and voluntarily if you would like them to be processed.

When you take out products or services with BBVA, your personal data will be processed in accordance with the corresponding contract.

The Website is owned by Banco Bilbao Vizcaya Argentaria, S.A. (“BBVA”). To obtain more information on BBVA and each site, verify their respective Terms and Conditions of Use: here

This document serves to inform you about the information that BBVA obtains through the Website. However, the information provided herein does not apply to data that may be obtained by third parties via other websites, even if such sites are linked to the Website. Please read this Personal Data Protection Policy each time you use the Website, as it may be amended.

Who is the data controller?

Banco Bilbao Vizcaya Argentaria, S.A. ("BBVA"), with registered office at Plaza de San Nicolás 4, Bilbao (Spain). Email address servicioatencioncliente@grupobbva.com

How do I contact the BBVA Personal Data Protection Officer?

You can contact the BBVA Data Protection Officer at the following email address: dpogrupobbva@bbva.com

For any request relating only to the BBVA subsidiary in France, you can contact it at servicedpofr@bbva.com

What do we use your personal data for? 

1.     To manage your browsing on each site in accordance with our cookies implementation policy, consult it here 

2.     For the purposes and with the authorization indicated in each of the forms used by the Website to collect personal data.

At BBVA we treat your personal data with absolute confidentiality. We undertake to keep it confidential and also guarantee that we will comply with our duty to store your data appropriately by adopting all the measures necessary to prevent it from being altered, lost, processed or accessed without authorization, in accordance with the legal obligations that apply to us as the controller of your personal data.  

At BBVA, we have implemented and maintain the highest levels of security required by legislation to protect personal data against accidental loss and unauthorized access, processing or disclosure, given the state of technology, the nature of the stored data and the risks to which it is exposed. You can view the BBVA Security Policy here

Will BBVA send you marketing communications?

 Using data collection forms, BBVA may ask for your consent to contact you via standard mail, email, SMS or any other equivalent means of electronic communication to send you sales-related communications about its products and/or those of third parties that are identified on the form.

If, at any time, you no longer wish to receive communications of this nature, you can withdraw your consent by sending a notification to the following address: derechosprotecciondatos@bbva.com or Servicio de Atención al Cliente Grupo BBVA, APDO: 1598 - 28080 Madrid (for the French subsidiary of BBVA, to the email address: servicedpofr@bbva.com) including a copy of a document to verify your identity, or by using the link provided in the marketing communications you receive.

How long will we keep your data?

We will keep your data for the period specified by the form which, where applicable, we will provide you so you can send your personal data to BBVA, and for the period specified in the Cookies Policy published on the Website.

Who will we disclose your data to?

We will only transfer your data to third parties if required to do so by law, or if you give us your consent to do so.

When your consent is required in order to disclose your personal data to third parties, the relevant data collection forms will indicate why it is necessary to process the data at issue, what data will be disclosed and the identity of the parties that might receive your personal data, or the industries in which they operate.

In order to offer you a suitable service and manage our relationship with you as a customer, at the following address: http://bbva.info/empresasdatos, you will find a categorized report on the companies that process your data on behalf of BBVA as part of the services they have been engaged to provide.

For the French subsidiary of BBVA, third party companies that can process personal data are BBVA subsidiaries in Spain and the rest of the world (provided the data at issue is transferred in accordance with the agreed purposes and is needed in order to analyze or perform a transaction), as well as the bank's subcontractors, partners, brokers and insurers, to the extent that the latter participate in managing the subsidiary's products and services, and only for the purposes of managing these products and services and ensuring that they function properly. These third-party companies are classified into the following categories: (i) printing and packaging services, and archiving and scanning services, (ii) postal and courier services, (iii) storage, receipt and forwarding of securities orders and payment processing services (iv) insurance and insurance brokerage services, (v) asset management services, (vi) audit and advisory services, (vii) communication services, (viii) collection services, (ix) computer services. Your personal data may also be transferred to the regulatory, judicial, administrative or tax authorities or to the Bank of France, in accordance with applicable legislation, or to regulated professionals such as lawyers, notaries and auditors.

You can check which third parties will receive personal data through this Website's cookies in the Cookies Policy.

Please also be aware that certain companies that provide services to BBVA may access your personal data for the same purpose as indicated in above (international data transfers). These transfers will be made to countries with a data protection level that is equivalent to that of the European Union (suitability decisions issued by the European Commission, standard contractual clauses and certification mechanisms). For more information, please contact the BBVA Data Protection Officer at the following email address: dpogrupobbva@bbva.com

Does BBVA use cookies on this website?

Our Website uses "cookie" technology. For more detailed information on how BBVA uses cookies, see the Cookies Policy here

Does BBVA use links to other websites?

The Website may contain links to other web pages. Please note that BBVA is not liable for the privacy and processing of personal data from other websites. This Personal Data Protection Policy document exclusively applies to information collected on the Websites by BBVA. You are advised to read the personal data processing policies of the other websites our Websites are linked to, or to visit them by any other means. You can also obtain information on our policy on links in the legal notices available here

What are your rights when you provide us with your data?

Vous pouvez de même retirer à tout moment votre consentement au traitement de vos données sans que cela affecte la légalité du traitement en envoyant votre demande à l’adresse e-mail derechosprotecciondatos@bbva.com ainsi qu’au Service d’Attention à la Clientèle du Groupe BBVA APDO: 1598 - 28080 Madrid or, if you have agreed to the processing of your personal data by the BBVA branch in France, at the address servicedpofr@bbva.com. Remember to attach a copy of your DNI or passport to your request.

Additional information for customers of the French subsidiary of BBVA

We may collect confidential data after obtaining your explicit consent: 

• health data (to take out an insurance contract, when necessary).

Information about how the personal data of legal representatives and contacts is protected

We will process your personal data in order to manage a contract between BBVA and the company, legal person or supplier of which you are a legal representative or contact.

Furthermore, BBVA will process your personal data to prevent money laundering and the financing of terrorism in order to comply with its information and identification obligations and to provide information on payment transactions with the authorities of other countries, both within and outside the European Union, on the basis of the legislation of certain countries and the agreements signed with them.

The legal basis that enables us to process your personal data is the performance of the agreement in which you feature as a representative or contact, as well as compliance with our legal obligations.

BBVA will retain your personal data during the term of the contractual relationship in which you participate as a legal representative or contact. Once these relationships have ended, BBVA will keep your data until the end of the longest retention period or the period prescribed by applicable law, which are, in general and subject to the strictest provisions and legislative changes, ten years for the data that will be kept in application of the legislation on the prevention of money laundering and the financing of terrorism and, in France, five years in accordance with the legal period of limitation for the obligations associated with our activities. When the retention and limitation periods that apply to them have ended, your personal data will be deleted.

Additional information for the legal representatives and contacts of corporate customers and suppliers of the French subsidiary of BBVA:

The personal data categories in question are as follows:

· identification and contact details (surnames, name, place and date of birth, photo, ID number and passport, postal and email address, telephone number, sex, age, signature);

· identification and authentication data, especially on the use of online banking services (technical logs, computer fingerprints, information on device security and use, IP address);

· tax details (including tax status and country of residence);

· family situation (civil status, marital status);

· information on qualifications and employment (level of studies, employment, name of the company).

We may also collect confidential data subject to your explicit consent:

· health data (to take out an insurance policy, for example "key person" when necessary).

The sources of the personal data collected are the company, legal person or supplier of which you are a legal representative or contact, or sources that are either public or accessible by subscription, such as directories or databases held by commercial information companies or official records (such as the Commercial Registry and Companies or beneficial owners).

Last update: May 2018.

1 And for the bbvanetcash.com website, for people who access it through the bbva.fr website and for customers (and potential customers) of the French subsidiary of BBVA users of the bbvanetcash.com site

Banco Bilbao Vizcaya Argentaria S.A. ("BBVA") S.A. incorporated as a public limited company under Spanish law, with a capital of €3,267,264,424.20 and registered office in Bilbao (Spain), Plaza San Nicolás, 4 R.M. M. Vizcaya T 2083 L 155, Sec 3a F 183 H 14741 BBVA Central Management in France (1º) 29, Avenue de l'Opéra RCS Paris 349358887-Tel. + 33 (0) 1 44 86 83 00. serviceclients@bbva.com www.bbva.fr . Contact DPO dpogrupobbva@bbva.com or in France servicedpofr@bbva.com Contact broker: M. le Médiateur FBF B.P. n ° 151 75422 Paris Cedex 09 mediateur@fbf.fr. Insurance agent No ORIAS n ° 07207869 available at www.orias.fr. May 2018 edition