Data Protection Policy Luggage Storage
1. Data Controller
The entity responsible for processing your personal data is Sociedad Estatal Correos y Telégrafos, S.A., S.M.E. (hereinafter referred to as 'Correos'), with NIF [Tax ID] No. A-83052407 and registered office at Conde de Peñalver, 19 - 28006 Madrid (Spain).
To ensure proper management of your data, Correos has appointed a Data Protection Officer (DPO), who can be contacted for any queries related to data processing at: dpdgrupocorreos@correos.com.
2. Purposes of Data Processing, Legal Bases, and Types of Data Processed.
Correos will process your personal data for the following purposes:
A. Provision of the Left-Luggage Service.
Purpose Description: Your data will be processed to: (i) Provide the left-luggage service in accordance with the General Conditions of the Left-Luggage Service, which includes sending the receipt to your email address if requested and issuing an invoice if required; (ii) Address and respond to your questions, queries, or complaints.
Data Processed:
- When the contract is made at the post office in Santiago de Compostela, and the required documentation is completed, the data processed will include the name and surname.
- When the contract is made through the Platform, the data processed will include the name, surname, and email address, the latter being required to send the corresponding booking code.
In both cases, when checking in luggage at the office, your ID card or passport number will be requested to verify your identity. Additionally, if you opt to receive the receipt via email, your email address will be processed. For invoice requests, your ID card/passport number and address will also be processed. In this case, if not already provided, the depositor must supply their email address so that Correos can send them the receipt.
If the customer requests an invoice for the service, the data related to their ID/passport and address will be processed.
Legal Basis: The processing is based on the execution of a contract or the application of pre-contractual measures at your request.
Sending the receipt by email is based on your consent.
B. Sending Offers and Promotions of 'El Camino con Correos’.
Description of the purpose: With your consent, Correos may send you electronic commercial information about offers and promotions related to 'El Camino con Correos'.
Data Processed: Identification data (name and surname) and contact details (postal address, email, and telephone).
Legal Basis: Your consent.
C. Sending Offers and Promotions for Other Correos Products and Services.
Purpose Description: With your consent, Correos may send you commercial information, through electronic or non-electronic channels, related to the provision, improvement, and updating of our products and services, including new rates and discounts.
Data Processed: Identification data (name and surname) and contact details (postal address, email, and telephone number).
Legal Basis: Your consent.
D. Sending Offers and Promotions from Other Correos Group Companies and Third Parties.
Purpose Description: With your consent, Correos may send you offers and promotions from:
- Other Correos Group companies providing services in sectors such as parcel services, value-added postal services, transport, logistics, insurance, marketing, and telecommunications.
- Third-party companies with which Correos has collaboration agreements, potentially in sectors like telecommunications, finance, insurance, consumer goods, health, and NGOs.
Data Processed: Identification data (name and surname) and contact details (postal address, email, and telephone).
Legal Basis: Your consent.
E. Sending Christmas Greetings to Correos Customers.
Purpose Description: Correos has a legitimate interest in promoting, reinforcing, and enhancing its corporate image. To support this objective, Correos may send Christmas greetings to Customers who have an existing contractual relationship with the Company, with the aim of strengthening the relationship through annual electronic communications during the Christmas campaign. These greetings will be corporate in nature and will not, under any circumstances, include any reference to a contract.
Data Processed: Identification data (name and surname) and contact details (postal address, email, and telephone).
Legal Basis: The basis for legitimacy is the legitimate interest of Correos. Further information regarding Correos' legitimate interest can be requested via email at dpdgrupocorreos@correos.com. Notwithstanding the above, the Customer may object to the processing by selecting the option provided in the preferences and consent panel. Additionally, they may express their objection through the website: https://www.elcaminoconcorreos.com/es/consigna-santiago or via email at: derechos.protecciondatos.correos@correos.com
F. Communication of Data to Other Correos Group Companies and Third Parties.
Description of the purpose: If you have contracted the Left-Luggage service via the website and provided your consent, Correos may share your data with companies in the Correos Group and third-party companies, as outlined in the previous purpose. This allows these companies to send you offers and promotions related to their products and services directly, without the intermediation of Correos.
Data Processed: Identification data (name and surname) and contact details (postal address, email, and telephone).
Legal Basis: Your consent.
G. Enriching Your Information.
Description of the purpose: In the event that you have contracted the Left-Luggage service via the website and provided your consent, Correos may consult external sources, such as website publishers offering commercial and fiscal information on legal entities and self-employed individuals (e.g., Axesor, Iberinform), as well as Public Registers (e.g., the Commercial Register, Land Registry), Social Networks (e.g., Meta, X), geomarketing tools (e.g., RegioGraph, NetGeomarketing), economic information databases (e.g., INFORMA), and credit information files (e.g., ASNEF, BADEXCUG). This enables Correos to obtain additional information beyond what has already been processed, and to carry out segmentation and profiling actions aimed at studying preferences, understanding the profiles of legal entities and freelancers interested in our products and services, and identifying consumption patterns, to deliver personalised commercial communications based on this segmentation and profiling. This would include, for example, viewing your transaction history. These commercial communications and offers in accordance with your preferences will be made only when you have given your consent to Correos to send marketing communications and offers.
Data Processed: The data processed includes identification information (such as the name and surname of representatives of legal entities), job title, and, in the case of self-employed individuals, identification data (ID card, name, and surname) and contact details (postal code), as well as data related to consumption and transaction history with Correos or other companies, including information regarding preferences and interactions with Correos or other entities.
Legal Basis: Your consent.
H. Compliance with Legal Obligations.
Description of the purpose: To fulfil the various legal obligations imposed upon it, Correos may communicate your data to Public Authorities and courts, where such information is required in accordance with established legal procedures.
Data processed for this purpose: For this purpose, the data required to ensure compliance with legal obligations, in accordance with the applicable regulations, will be processed.
Legal Basis: The basis for the legitimacy of this processing is the fulfilment of a legal obligation.
The customer guarantees that the data provided to Correos for the provision of the requested services accurately reflects their current situation and that they will notify any changes that may affect them. As a result, the customer will be liable to Correos and third parties for any damages arising from a breach of the obligations set forth in this clause.
3. Data Retention Period.
Your personal data will be processed for the duration necessary to provide the requested service. After this period, the data will be blocked and only available to judges, courts, the Public Prosecutor's Office, or competent public administrations during the limitation period of any actions that may arise, after which they will be deleted.
4. Your rights
Our data protection regulations give you several rights in relation to the data processing involved in our services which can be summarised as follows:
- Right of Access: To know what data we are processing and the characteristics of the processing.
- Right of Rectification: To request modification of your data if it is inaccurate or untrue.
- Right of Portability: To obtain a copy of your data in a structured, commonly used, and machine-readable format.
- Right to restriction of processing in the cases specified by law.
- Right to erasure (right to be forgotten): To request the deletion of your data when it is no longer necessary for the purposes of processing.
- Right to object: To request, for instance, the cessation of commercial communications.
- The right to withdraw the consent, if applicable.
You can exercise your rights through any of the following channels:
- Postal Address: Conde de Peñalver,19 - 28006 Madrid (Spain).
- Email: protecciondatos.correos@correos.com
Additionally, all electronic commercial communications will include an unsubscribe mechanism or similar option, allowing you to opt out of receiving further communications, should you wish to do so.
On the website of the Spanish Data Protection Agency (AEPD), you can find a range of templates to assist you in exercising your rights. Furthermore, we inform you that you have the right to file a complaint with the supervisory authority (in Spain, the AEPD) if you believe your rights have been violated, as well as to contact the Data Protection Officer (DPO) of Correos via the following email address: dpdgrupocorreos@correos.com.