Valid since 01 January 2024
Additional Information on Data Protection
The only personal data to which Iberia Líneas Aéreas de España, S.A. Operadora, Sociedad Unipersonal (hereinafter “Iberia”) will have access is that which the interested party provides voluntarily. In cases and in the data where this is stated explicitly to the interested party, if such is not provided, we will be unable to offer the requested services.
In compliance with current regulations (primarily, General Data Protection Regulation EU 2016/679 and European and national law that compliments or develops it at any time), Iberia has taken the technical and organisational measures necessary to maintain the level of security required to deal with personal data. Furthermore, it has the precise mechanisms at its disposal to avoid, as far as possible, unauthorised access, data extraction and illicit modifications and loss of data.
I.- Who is the controller of processing your personal data?
The controller of processing your data is Iberia Líneas Aéreas de España, S.A. Operadora, Sociedad Unipersonal, having its registered offices in Madrid, Calle Martínez Villergas 49, 28027. You can contact the Iberia Data Protection Office by email at OficinaDPO@iberia.es or by mail at “Oficina de Protección de Datos de Iberia Líneas Aéreas de España, S.A. Operadora, Sociedad Unipersonal” at Calle Martínez Villergas 49, 28027 Madrid.
II.- For what purpose and with what legitimation do we process your data?
- Newsletter and form. To be able to manage, process and send information regarding your request, the personal data provided by the interested party through the available channels will be processed. Your consent shall constitute legitimation to carry out such processing.
- Access to this website may also imply the use of cookies. Cookies are small amounts of information that are stored on your browser in order for the server to remember certain information that only the server that created the cookie may subsequently read.
III.- How long do we keep your data?
We process your personal data for as long as it remains necessary for the purpose for which it was collected and while the interested party does not request its erasure and it must not be deleted because it is necessary for the fulfilment of a legal obligation or for the formulation, exercise and defence of claims.
If the interested party revokes their consent or exercises the right of erasure, their personal data will remain blocked at the disposal of competent Courts, Tribunals and Authorities, during the legally established limitation periods for meeting the possible responsibilities arising from the processing thereof.
IV.- To whom do we pass on your personal data?
If users have previously given their consent, we may forward their personal data to other companies from the IAG Group for the use of their data in the undertaking of commercial actions.
In particular, their data will be transferred to the following companies:
- Public Bodies, Judges and Courts and, in general, competent Authorities, when Iberia has a legal obligation to provide such data.
- Iberia works with third-party service providers who have access to your personal data and may process such data in the name of and on behalf of Iberia as a result of their service delivery.
Iberia follows strict criteria when selecting service providers in order to meet its obligations in relation to data protection, and undertakes to enter into the corresponding data processing agreement with them, whereby the following obligations, amongst others, are imposed thereon: to apply appropriate technical and organisational measures; to process personal data for the purposes agreed upon and solely on the basis of Iberia's documented instructions; and to erase or return the data to Iberia once the delivery of services has ended.
V.- What are your rights when you provide us with your data?
The interested party may, if they wish, exercise the right of access, rectification and erasure of data, as well as request that the processing of their personal data be limited, oppose thereto, request the portability of their data, and not be the subject of automated individual decisions, through the following channels:
- By email at oficinaDPO@iberia.es; or
- By mail to “Oficina de Protección de Datos”, at Calle Martínez Villergas 49, 28027 Madrid, Spain
In such cases, to allow us to deal with your request, you must provide us with the following information and documentation:
- Applicant's full name
- Identity document
- Contact details (at least email address)
- Data that is the subject of your request
- A photocopy of your identity document so we can verify your identity.
- If you submit the request on behalf of someone else, you will need to provide signed authorisation from the person along with their relevant identity document.
VI.- To which authority can you submit your claims?
Interested parties can, in any case, submit a claim to the Spanish Data Protection Agency, especially when they have not obtained satisfaction in the exercise of their rights, via the website www.agpd.es.