FINANCING REQUEST PERSONAL DATA PROCESSING

 

The party or parties signing this document (hereinafter, the "Applicant") request CaixaBank Payments & Consumer, E.F.C., E.P., S.A.U., sole proprietorship, (hereinafter "CaixaBank Payments & Consumer”) the study and, if applicable, the granting of financing.

For this purpose:

(i) The Applicant declares, under his/her own responsibility, that compliance with the different sections of the application procedure is required in order for it to be processed, that the details he/she provides are certain, updated and correspond to his/her person, and that the conditions and guarantees established at the time of granting may not adapt to those requested. The legal basis for the processing of their personal data is their financing request.

(ii) CaixaBank Payments & Consumer informs the Applicant that the application regulations on solvency of credit institutions (Directive 2013/36/EU of the European Parliament and of the Council of 26 June 2013 on access to the activity of credit institutions and the prudential supervision of credit institutions and investment companies, and the corresponding transposition of the community regulations under Law 10/2014, of 26 June, on Organization, Supervision and Solvency of Credit institutions) requires CaixaBank Payments & Consumer to assess the solvency of the Applicant, in accordance with the information obtained, as well as their ability to fulfil the obligations derived from the requested product, in accordance with the information obtained, its policies and procedures.

For the purposes of complying with this regulation, the assessment of solvency and ability to comply with the obligations derived from the requested product will be carried out with regard to all the Applicant's personal data held by the following credit institutions or credit entities, belonging to the consolidated group comprising CaixaBank, S.A. (“ CaixaBank ”) and its subsidiaries for prudential consolidation purposes:

CaixaBank, S.A.; Nuevo MicroBank, S.A.U.; CaixaBank Equipment Finance, S.A.U.; Telefónica Consumer Finance, E.F.C., S.A.; Banco BPI, S.A.; Corporación Hipotecaria Mutual, E.F.C. S.A.; HipoteCaixa2, S.L.; and Credifimo, S.A.U.

(iii) If the Applicant is a consumer, CaixaBank Payments & Consumer will study their application in accordance with the responsible lending policy. CaixaBank Payments & Consumer does not accept any commitment for the granting of the transaction. CaixaBank Payments & Consumer may grant the transaction, under the terms proposed or others that it deems more appropriate, or refuse it, in accordance with its commercial and risk policy in force at any given time.

(iv) CaixaBank Payments & Consumer informs the Applicant that they may verify if they are included in the list of specifically designated people or entities included in laws, regulations, guidelines, resolutions, programmes or restrictive measures regarding international economic and financial sanctions that CaixaBank Payments & Consumer applies at any time, imposed by the United Nations, European Union, Spain, the Office of Financial Sanctions Implementation (OFSI) of His Majesty's Treasury (HMT) of the United Kingdom and/or the US. Department of the Treasury’s Office of Foreign Assets Control (OFAC).

(v) Likewise, CaixaBank Payments & Consumer informs the Applicant that they can transfer their data to CONFIRMA SISTEMAS DE INFORMACIÓN, S.L. (“CONFIRMA”), for the purpose of preventing fraud; all entities adhered to the Regulations that govern this data processing, all of which are identified in www.confirmasistemas.es, are liable to it and its data controller is CONFIRMA, before which the owners of the personal data may exercise their rights to access, rectification, opposition, erasure, limitation and data portability, foreseen un Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital, in writing addressed to Avda. Industria, 18, (28760) Tres Cantos (Madrid).

(vi) Bank of Spain Credit Reporting Agency (CIRBE)

With the presentation of this application, CaixaBank Payments & Consumer is authorised to obtain reports from CIR on risks that the Applicant may hold. If the financing operation is finally approved, CaixaBank Payments & Consumer is required to declare the necessary details to identify the persons with whom they hold credit risks, either directly or indirectly, as well as the nature of these persons and credit risks, particularly their amount and recoverability. 

If the holder of the risk declared to the CIR considers that the data declared in their name are inaccurate or incomplete, they may contact the reporting entity directly, requiring their rectification or cancellation or request the Bank of Spain to send their claim. Personal data holders may exercise their rights indicated in the regulations for data protection in accordance with the terms and conditions set out in the law, in writing to the Bank of Spain at Calle Alcalá, 48, de (28014) Madrid.

Consult Credit information system

Upon submission of the financing application, CaixaBank Payments & Consumer is authorised to access the data held in the following Common Credit Information Systems:

ASNEF DATABASE
Asnef Equifax Servicios de Información sobre Solvencia y Crédito
Ap. Correos 10546 28080 Madrid (sac@equifax.es)

BADEXCUG DATABASE
Ap. Correos 1188 28108 Alcobendas (badexcug@experian.com)

CaixaBank Payments & Consumer does not base the refusal of a financing application exclusively on the information consulted in Credit Information Systems.

Preparation of profiles and automated decisions

To study the feasibility of the application, CaixaBank Payments & Consumer may process the applicant's personal data using scoring, rating and any other similar models, which involve performing statistical analyses of economic and socio-demographic variables relating to the Applicant.

Specifically, CaixaBank Payments & Consumer will prepare a profile of the Applicant that will include:

  • The type of transaction requested (payment, term, purpose).
  • Socio-economic information on the Applicant (residence, age and commercial segment to which the applicant belongs).
  • The Applicant's overall financial status (balances, income, expenses).
  • Information obtained from external databases documenting failures to comply with monetary obligations, as well as risk assessments provided by other financial institutions.

CaixaBank Payments & Consumer assigns a specific value to each of these aspects involving the Applicant and their request, the sum of which provides a score indicative of the probability of a non-performing loan or non-fulfilment of a financial obligation, should the requested transaction be approved. The importance of each variable and its influence on the final result is calculated in advance by CaixaBank Payments & Consumer using mathematical models and is included in the institution's internal risk policies.

Based on this numerical result, CaixaBank Payments & Consumer will accept or reject your application automatically based on the degree of risk that the bank decides to assume at any given time according to its internal risk policies.

The Applicant is informed that they may exercise their right not to be subject to a decision based solely on automated processing by contacting CaixaBank Payments & Consumer directly on 900 460 402.

Data Controller and Data Protection Office

CaixaBank Payments & Consumer is financial institution and payment entity, an affiliate of the company CaixaBank, S.A., with NIF A08980153 and address at Avenida de Manoteras, n.º 20. Edificio París (28050 Madrid).

You can contact the Data Protection Officer at www.caixabank.com/delegadoprotecciondedatos

Purposes of the data processing

The personal data of the Applicant and which is obtained while processing this application will be added to and processed in files owned by CaixaBank Payments & Consumer in order to assess the Applicant's solvency and the feasibility of the transaction.

Data disclosures

These details may be passed on to public authorities for the purposes of complying with a legal obligation, as well as to suppliers of services and to third parties where necessary to handle and carry out your request.

Processing of third-party data

Third-party personal data received by CaixaBank Payments & Consumer from the Applicant to process the application shall be solely and exclusively processed for such purposes, and shall not be disclosed to third parties unless the nature of the service requires it, in which case it shall be limited to the purpose specified. CaixaBank Payments & Consumer will keep such data confidential and will apply the security measures that are legally required.

Data storage period

CaixaBank Payments & Consumer shall process the Applicant's personal data for as long as the relevant contractual or business relationships remains in place. If you have authorised the use of your data for marketing purposes, it will be used until you revoke such authorisation or until 12 (twelve) months have elapsed after the contractual or business relationship established with CaixaBank Payments & Consumer ends.

In accordance with the regulations, your personal data shall be kept for the sole purposes of complying with the legal obligations that CaixaBank Payments & Consumer must adhere to, and for preparing, exercising or defending complaints, during the limitation period of the actions derived from the contractual or business relations that have been entered into.

Exercising your rights

The Applicant may exercise their rights of access, consent revocation, correction, objection, deletion, limitation and portability, in accordance with the Law, by filing a request through any of the following channels provided:

  • At a CaixaBank branch.
  • By post, by writing to Post Office box nº 209, Valencia (46080).
  • By email, at www.caixabank.com/ejerciciodederechos.
  • By using the options provided in their private space on the website and in the CaixaBank Payments & Consumer mobile applications.

Claims with the Spanish Data Protection Agency

If the Applicant does not agree with the processing of his/her personal data, he/she can go to the Spanish Data Protection Agency and file a claim through the following URL: https://www.aepd.es/.