WHO IS THE DATA CONTROLLER FOR THE PROCESSING OF MY PERSONAL DATA? 

Banco Bilbao Vizcaya Argentaria, S.A. ("BBVA") with registered office at Plaza de San Nicolás 4, 48005, Bilbao (Vizcaya) and e-mail address dpogrupobbva@bbva.com is the data controller with regard to the personal data you provide when filling in the form.

 

WHAT DATA DOES BBVA NEED TO PROCESS?

BBVA needs to process the following personal data: name, surname and e-mail address.

 

WHY AND FOR WHAT PURPOSE (BASIS OF LEGITIMACY) DOES BBVA NEED TO PROCESS MY DATA?

In case you decide to include your personal data within the form, BBVA will process them in order to process your request when you fill in the form. The basis of legitimacy is the legitimate interest in properly managing the vulnerabilities identified by you and following up on your report.

 

HOW LONG WILL MY DATA BE KEPT?

We will retain your personal data related to your vulnerability report during the processing of your vulnerability report. After this period, the personal data will be destroyed with the exception of the acceptance of the registration form and this accompanying document, as well as evidence of traceability, which will be retained for the sole purpose of handling data protection and similar claims.

 

WILL MY DATA BE ASSIGNED TO THIRD PARTIES?

We will not disclose your personal data to third parties, unless we are required to do so by law or you consent.

When your consent is necessary to communicate your personal data to third parties, we will inform you on the data collection forms about the purpose of the processing, the data to be assigned and the identity or activity sectors of the possible assignees of your personal data.

 

WHAT ARE MY RIGHTS IN RELATION TO THE PROCESSING OF PERSONAL DATA?

You may exercise your rights of access, rectification, deletion, opposition, limitation of processing and portability, by writing to derechosprotecciondatos@bbva.com If you consider that we have not processed your personal data in accordance with the regulations, you may contact the BBVA Data Protection Officer at the following address dpogrupobbva@bbva.com. In any case, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es).