4. Information on data processing
4.1 Data controller
The data controller is Imagin:
ImaginersGen S.A.
Tax code: A61363339
Address: Calle Estany 11, 08038 – Barcelona
4.2 Legal basis of the processing
Your consent to the use of cookies allows us to process your browsing data for the purposes indicated in "Purposes of own and third-party cookies/configuration and rejection of cookies".
You can configure and reject cookies, and therefore exercise your right to withdraw consent, in "Purposes of own and third-party cookies/configuration and rejection of cookies". You can also disable or delete cookies as indicated in "Disabling or deleting cookies".
4.3 Data processed
If you accept the use of cookies, the following data will be processed:
With regard to first-party cookies for analytical purposes, Imagin will process the following data: data obtained from your browsing of web pages, in particular: browsing history (pages visited and clicks on content), device ID and IP address.
With regard to the third parties identified in "Purposes of own and third-party cookies/configuration and rejection of cookies", read their respective policies, indicated in this section, for information about the categories of data processed.
4.4. Use of your browsing data and the creation of profiling
Customers of Imagin (the trade name of CaixaBank)
If you are a CaixaBank S. A. customer and have consented to the use of cookies, we remind you that we may process your browsing data for purposes additional to those set out in this cookie policy and which are identified in the CaixaBank Privacy Policy.
In CaixaBank's Privacy Policy you will find details of the processing in which CaixaBank may use your browsing data, with the bases of legitimacy.
In this regard, CaixaBank will only carry out such processing if both bases of legitimisation are present, i.e. if you have accepted the use of cookies reported in this Cookies Policy (we will only use the browsing data corresponding to the cookies whose purpose you have accepted) and the basis of legitimisation indicated in the CaixaBank Privacy Policy is also present (such as your consent).
In particular, we consider it important to remind you of the following processing included in the Privacy Policy, by which we may use your browsing data if the above-mentioned circumstances apply:
- Customisation of product offerings based on the analysis of your data (Processing 6.1.A of the Privacy Policy).
- Sending commercial communications based on a basic commercial profile (Processing 6.4. of the Privacy Policy).
Any user (customer or not)
With regard to the third parties identified in section 2 (“Purposes of own and third-party cookies/configuration and rejection of cookies”) that use behavioural advertising cookies, please refer to their respective policies indicated in that same section in order to obtain information about the profiling they carry out.
4.5 Data recipients
Imagin may send data collected to public authorities and organisations, for compliance with a legal obligation, and to necessary service suppliers and third parties for the management and execution of cookies.
With regard to the third parties identified in "Purposes of own and third-party cookies/configuration and rejection of cookies", read their respective policies, indicated in this section, for more information on their profiling activities.
4.6 Retention period
The data obtained by using cookies accepted by the user will be kept for a period of 13 months.
With regard to the third parties identified in "Purposes of own and third-party cookies/configuration and rejection of cookies", read their respective policies, indicated in this section, for more information on their storage periods.
4.7 Data transfers outside the European Economic Area
At Imagin, we process your data within the European Economic Area and generally we have service providers located within the European Economic Area or in countries deemed to have an adequate level of data protection.
If we need to use service providers which carry out processing outside the European Economic Area or in countries not determined to have an adequate level of data protection, we will ensure that your data is processed in a secure and legitimate manner.
For this purpose, we require these service providers to apply suitable guarantees in accordance with the General Data Protection Regulation, such as binding corporate standards guaranteeing information protection in a similar way to European standards or to subscribe to the standard clauses of the European Union. You may request a copy of the proper guarantees required by Imagin from these suppliers by contacting the Data Protection Officer at www.caixabank.cat/particular/general/dpo_ca.html.
With regard to the third parties listed in section "Purposes of own and third-party cookies/configuration and rejection of cookies", you can view their respective policies in this section, for more information about any transfers they carry out, where applicable.
4.8 Data protection representative
Imagin has appointed a Data Protection Officer, who will deal with any matters related to the processing of your personal data and the exercising of your rights.
You can contact the Data Protection Officer to send your suggestions, queries or claims by going to: www.caixabank.es/particular/general/dpo_en.html.
4.9 Exercise of rights
You can exercise your rights to access, rectification, object to processing, erasure, restriction, data portability, withdraw consent and not be subject to automated decision-making in accordance with the law.
You can request to exercise these rights at our offices, in your digital banking and/or mobile application, at the e-mail address www.caixabank.com/exerciseofrights, at ejerciciodederechos@imagin.com, or by writing to Apartado de Correos n.º 209 de Valencia, post code 46080.
Additionally, if you have any complaints related to the processing of your data, you may address them to the Spanish Data Protection Authority www.aepd.es.
