Who is responsible for processing your personal data?
The personal information and/or data you provide to us will be included in a file that is controlled by:
- Identity: MAPFRE SA, CIF A-08055741
- Address: Carretera de Pozuelo de Alarcón, nº52. Majadahonda 28222 Madrid (Spain).
- Data Protection Officer Contact Information: DataProtectionOfficer.MAPFRE@mapfre.com
To what end are we using your personal data?
MAPFRE SA will use the personal information voluntarily provided by concerned persons for the following purposes:
- Managing our relationship with shareholders.
- Providing information to shareholders about sociocultural activities and news of interest about MAPFRE, and invitations to events.
All the data collected, as well as the above-indicated uses and purposes are necessary or related to the proper maintenance, development and control of the shareholder relationship the concerned party has with MAPFRE.
Only as long as it has not been expressly opposed, the following are included in the accepted purposes: sending information and publicity, including electronically, about special offers, products, recommendations, services, promotional articles and loyalty campaigns for MAPFRE SA and the different companies in MAPFRE Group (www.mapfre.com) or those third party companies with which MAPFRE Group has collaboration agreements; retrieval, storage of information and marketing studies aimed at better adapting our sales offers to your particular profile.
With the aim of adequately carrying out the relationship with the shareholder and offering products and services in line with the shareholder’s interests, based on the information provided, we will prepare different profiles according to the shareholder’s interests and needs and MAPFRE Group’s business strategy, and as a result automated decisions will be made based on said profiles.
How long will we store your personal data?
The personal information provided will be stored for a period of time determined by the following criteria: (i) legal obligation of storage; (ii) duration of the relationship the concerned party has with MAPFRE and attending to any other responsibilities deriving from said relationship; and, (iii) request for elimination on behalf of the concerned party in the appropriate circumstances.
What is the legitimization for processing your data?
The legal base for the use of your information for the purposes included in the section “To what end are we using your personal data?” is the concerned party’s consent.
The prospective offer of products and services included in the section “To what end are we using your personal data?” is based on the consent that, where relevant, has been given, without in any case the withdrawal of this consent conditioning the proper development of the relationship with the shareholder.
You are obligated to provide us with personal information to manage the relationship with the shareholder and provide you with information about sociocultural activities and news of interest about MAPFRE and invitations to events. If this is not done, MAPFRE SA reserves the right to not manage the relationship with the shareholder and not inform about sociocultural activities and news of interest about MAPFRE and invitations to events.
Who will we share your information with?
MAPFRE SA can share your information, including health-related information, exclusively for the purposes indicated in the section “To what end are we using your personal data?”, with other insurance, reinsurance, insurance mediation, financial, or real estate undertakings, or undertaking that provides services related to their area of activity, belonging to MAPFRE Group (www.mapfre.com), its subsidiaries and investees, Fundación MAPFRE, public administrations and other natural persons or legal entities which, as such, develop any of the above-mentioned activities and with which the different undertakings of MAPFRE Group have collaboration agreements. All of this is valid whether an operation is formalized or not as well as, where relevant, once the existing relationship ends, and without it being necessary to inform of each first sharing of information with the above-mentioned end users.
Additionally, any undertaking belonging to MAPFRE Group (www.mapfre.com), subsidiaries and investees, can share personal information with any of the previously mentioned undertakings, with the aim of maintaining a complete, centralized management of the concerned party’s relationship with the various undertakings of MAPFRE Group, and ensuring that the concerned parties benefit as much as possible from any of these undertakings’ use of their data, always respecting the applicable legislation regarding personal data protection and without it being necessary to inform the concerned parties of each first sharing of information. The sharing of personal data between MAPFRE Group undertakings is necessary to maintain a complete and centralized management of their relationship with MAPFRE SA, to apply premium discounts and other benefits obtained from the circumstances and loyalty program management in the case of signing up for them.
In the framework of the data sharing indicated in the above paragraph, personal data can be transferred internationally to third countries or international organizations, both with and without European Commission adequacy decisions. International transfers to countries that cannot guarantee an adequate level of protection will be exceptional in nature and will only be carried out when absolutely imperative for the proper development of the relationship.
What are your rights when you give us your information?
In the terms and within the scope set out in the legislation in force, any person has the right to:
- Confirm if MAPFRE SA is processing personal data related to him or her, access said data and the information regarding its processing.
- Request rectification of incorrect data.
- Request erasure of data when, among other reasons, it is no longer needed for the established purposes, in which case MAPFRE SA will stop processing the data except in the case of exercising or defending possible legal claims.
- Request restriction of the processing the concerned party’s data, in which case it can only be processed with his or her consent, with the exception of storing and processing it for the exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
- Object to the processing of his or her data, in which case MAPFRE SA will stop processing the data except in the case of defending possible legal claims.
- Receive personal data concerning him or her which he or she has provided to MAPFRE SA in a structured, commonly used, machine-readable and interoperable format, or request that MAPFRE SA directly send this information to another controller when this is technically possible.
- Withdraw the consent granted, where relevant, for the purposes indicated in the section “To what end are we using your personal data?”, without affecting the lawfulness of processing based on consent before its withdrawal.
The above rights regarding the access, rectification, erasure, restriction, objection and portability can be exercised directly by the owner of the data or through a legal representative or volunteer, in writing and to the Corporate Office for Privacy and Data Protection. Carretera de Pozuelo, 52, 28222 Majadahonda, Madrid.
The concerned party can file a complaint with the Spanish Agency for Data Protection, especially when he or she considers that his or her rights have not been fulfilled, through the website established for this purpose by the corresponding Supervisory Authority.
