PRIVACY POLICY

Introduction

At El Corte Inglés Group Companies, we are committed to safeguarding your personal information and protecting it from misuse.

This document identifies the Data Controller, what your personal information will be used for, the legal grounds for processing data, how and why we collect it, how we use it, your rights in this regard and also the processes put in place to ensure your privacy.

We assume that by providing us with your personal information and using our websites, you have read and understood the terms and conditions set out relating to personal data protection. El Corte Inglés Group Companies undertake to comply with prevailing Spanish and European law regarding data protection. As such, they endeavour to process your data lawfully, honestly and with transparency.

Scope of Application

This document is valid for all companies in the El Corte Inglés Group.

Considerations to bear in mind

What is a Data Controller?

A Data Controllers is defined in the General Data Protection Regulation as follows:

“Data Controller” or “Controller”: the individual or corporation, public authority, service or other body which, acting alone or in conjunction with others, specifies the purposes of processing and means by which this is performed.

In other words, the El Corte Inglés Group companies are the co-data controllers. This means that we have jointly defined the objectives or purposes of processing and have established the necessary measures to protect your personal data during processing.

If you have any enquiry, comment or concern, or would like to comment on how we use personal information, you can email the El Corte Inglés Group Data Protection Officer at delegado.protecciondatos@elcorteingles.es.


Information on the El Corte Inglés Group companies:

Business name El Corte Inglés

Corporate address: Calle Hermosilla, 112. 28009 - Madrid

Email: servicio_clientes@elcorteingles.es

Telephone: + 34 901 122 122

Tax ID A-28017895

Madrid Commercial Register: Volume 519, Folio 1, Section 8, Page M-9,880, Entry 197

Website: www.elcorteingles.es


Company name: Seguros El Corte Inglés, Vida, Pensiones y Reaseguros, S.A.U.

Corporate address: Hermosilla, 112. 28009 Madrid

Email: atencionalcliente@seguroseci.es

Telephone: +34 91 266 87 53

Tax ID A - 79346839

Madrid Commercial Register: Volume 3,863, Folio 54, Page M-64,854, Entry 13

Website: www.elcorteingles.es/eciseguros


Company name: Centro de Seguros y Servicios. Correduría de Seguros, S.A.U, Grupo de Seguros El Corte Inglés

Corporate address: Hermosilla, 112. 28009 Madrid

Email: atcliente@cess.elcorteingles.com

Telephone: +34 91 266 87 56

Tax ID A - 28128189

Madrid Commercial Register: Volume 945, Folio 1, Page M-18,707, Entry 32

Website: www.seguros.elcorteingles.es


Company name: Supercor, S.A.

Corporate address: Hermosilla, 112. 28009 Madrid

Email: servicio_clientes@elcorteingles.es

Telephone: + 34 901 122 122

Tax ID A - 78476397

Madrid Commercial Register: Volume 3,099, Folio 189, Section 8, Page M-52,978, Entry 3

Website: www.supercor.es


Company name: Viajes El Corte Inglés, S.A.

Corporate address: Hermosilla, 112. 28009 Madrid 

Email: viajeseci@elcorteingles.es, servicio_clientes@elcorteingles.es

Telephone: + 34 901 122 122

Tax ID A - 28229813

Madrid Commercial Register: Volume 896, Folio 1, Page M-11,385, Entry 23

Website: www.viajeselcorteingles.es


For what purpose do we collect your personal information?

The main purpose for collecting your personal information is to provide an improved service, which is what you as a customer expect of us.

We collect your personal information so that we can process your purchases, orders or requests, whether it be in one of our shopping centres, warehouses, agencies, supermarkets, or via our websites or applications, by telephone or by completing a form. 

Below, we've included the main purposes for collecting data at El Corte Inglés Group companies:

  • Compliance with legal obligations, including but not limited to Law 10/2010 on the Prevention of Money Laundering and Terrorist Financing.
  • To manage the purchase of products or services sold by one of the El Corte Inglés Group Companies, including distance selling and handling of shipments and returns.
  • To manage a personal account with a single file, allowing it to be used to purchase products and services available on any El Corte Inglés Group company’s website.
  • To hold customer requests for information, suggestions and complaints in one place so that they are easier to process and resolve.
  • To manage events lists (weddings, communions, birthdays, etc.).
  • To manage bookings and ticket sales to events distributed by El Corte Inglés.
  • To perform service improvement surveys.
  • To carry out market research and commercial research, compile reports on consumption habits, statistical data and market trends in order to provide products and services that might be appealing to customers.
  • To create profiles and perform analyses on our customers’ behaviour when using our websites or applications, but only if you give your consent.
  • To provide information on our latest products, offers, opportunities, etc. The channels we use most frequently are: email, regular post, telephone, SMS, and Push messaging, but only if you have given your consent.
  • To capture images of persons and vehicles for security reasons and to assist with planning for emergencies and evacuating buildings.
  • To manage VAT refunds on purchases by tourists who are non-EU residents.
  • To manage hiring.
  • To analyse orders made by users/customers in order to prevent fraud.


How do we collect information about you?

We collect information about you through different means. In some cases, you will contact us to share personal information; in other cases, we collect your personal data using other means. Below, we've outlined the different methods we use for collecting your personal information, along with a few examples of how the information is used. 

Information provided by you

We collect personal information that you provide us through one of the El Corte Inglés Group websites, email, mobile phone, when you purchase a service, when you fill out a form and others. In any case, when we collect your information, we will inform you of the Data Controller, the purpose for collection, the recipients, as well as how to exercise your rights granted by prevailing law on data protection. 

For instance, it is likely that you provide us with information when you contact our customer service, place an order, register with our websites, update your preferences and account details, fill out a questionnaire, or take part in a competition, etc.

Generally, the personal information you provide us with is: first name and surname(s), address, ID, date of birth, email address, contact telephone number and payment details. In isolated cases, depending on how we anticipate using your data and to what end, data may be collected about you as a person, your education and career, employment details, commercial information, social circumstances, finances and insurance, and transfers of goods and services.

If you have never requested that we send you commercial correspondence, you can sign up for the various newsletters we provide or you can email us at servicio_clientes@elcorteingles.es

Information we collect when you visit our websites

We collect and store limited personal information and anonymous overall statistics for all users visiting our websites, either because you have actively provided us with that information or because you are merely browsing our websites. The information we collect includes the IP address of the device you are using, the browser used, your operating system, the date and time our website was accessed, the web address via which you accessed our websites, as well as information about how you use our websites.

We use this information to give us an idea of how long it takes our websites to load, how the websites are used, the number of hits on the different sections and the type of information that draws most hits. It also helps to ascertain whether the website is working as it should. If we detect functional faults or errors, if helps us to fix them and improve our websites’ performance, so that we can offer a better service for all users.

This information is collected using cookies. For further details, please refer to the cookies policy available on each El Corte Inglés Group company website.

Social networks

The use of social networks is becoming increasingly widespread. As a result, the El Corte Inglés Group has a presence on most of them and may use them to contact you. 

The information we collect via social networks sometimes includes personal information that is publicly available online. We always ensure that all information used by us correctly acknowledges its source or is made anonymous.

It is likely that these social networks have their own privacy policies explaining how your personal information is used and shared. We recommend you carefully read the privacy policies before using social networks so that you can be certain you agree with how your personal information is collected and shared.

Mobile phone

The El Corte Inglés Group APPs have a geolocation feature for pinpointing your whereabouts to show you the nearest establishment. Enabling the geolocation feature on your mobile device means you can make the most of the applications’ full range of functionalities. If it is not enabled, we will remind you to turn on geolocation by sending you a message requesting permission beforehand.

This geolocation service will not be used to inform third parties of your location, except where this is a legal requirement.

Most mobile devices offer users the option of disabling location services. This option is likely to be found in the settings menu of your device. If you have any questions regarding how to disable your device’s location services, we recommend that you contact your mobile service provider or the manufacturer of your device.

If you wish to disable location services on an Android device, go to Location services in your mobile phone’s Settings menu. Most Android devices allow location services to be disabled for the entire mobile phone, such as GPS services and other companies’ location services. Generally, location services will not be enabled unless you check the box to enable them.

If you wish to disable location services on your iPhone, you can do this for all models from the Settings menu by selecting Location Services. In order to disable location services for the whole device, slide the bar until the Off option appears. In order to disable location services for a certain application, slide the bar next to each application until the Off option appears.

What are the legal grounds for processing personal information?

There are a number of reasons why we are legally entitled to process your personal details:

  • In order to fulfil a contract and/or commercial relationship
  • In order to comply with the various legal obligations.
  • For legitimate interest, including security, fraud prevention, improving services and products through market research or in order to handle requests, enquiries or any complaints.
  • For sending customised offers by El Corte Inglés Group, having first obtained your consent.


To whom can we disclose your personal information?

If you have given us your consent, the information you provide will be communicated to El Corte Inglés Group companies (see URL: https://www.elcorteingles.es/informacioncorporativa), which will process it for the purposes described above. Not all the purposes described above involve the transfer of data, especially considering that the data are collected directly by each of the Group companies. 

There are cases where we have to disclose the data you have provided us to third parties in order to carry out the requested service. These include travel and hotel bookings, logistics, transport and delivery companies, installation and/or assembly companies, home refurbishments, etc. 

In addition, there are companies that provide us with other kinds of services, such as information technology (information storage and processing), security services, financial services, audit services, etc.

These third parties may only access personal information required for providing said services. They are required to keep your personal information confidential and may not use it in any way other than as requested by us.

El Corte Inglés Group companies accept liability at all times for personal information provided to us. We request that companies with which we share your personal information protect it to the same extent as we do. 

In addition, your personal information will be accessible by Public authorities, Judges and Courts for addressing any liabilities arising as a result of processing your personal data. 


International transfers

The personal information we collect is held in Spain. Nevertheless, it is possible that some Group companies operate in other countries, in which case your personal information would be held in that company's country of operation. 

For efficiency's sake, we sometimes work with technological service providers that are located outside of the European Economic Area, and international data transfers occur. In these cases, we apply the appropriate safeguards to protect your information, such as signing Standard Contractual Clauses approved by the European Commission. You can obtain additional information about these clauses by writing to delegado.protecciondatos@elcorteingles.es.


Links to third-party websites

Where we provide links to websites not operated or monitored by El Corte Inglés Group companies, you will be notified without delay, since the El Corte Inglés Group exercises no control over said websites, nor is it responsible for their content, and it exercises no control over how third parties collect and use your personal information. It is likewise not responsible for third-party websites and makes no claim in this respect.

These websites must have their own privacy policies explaining how your personal information is used and shared. We recommend you carefully read the privacy policies before using these websites so that you can be certain you agree with how your personal information is collected and shared.  

Furthermore, we work with eShopWorld to sell and deliver our products in certain international destinations. If a delivery is going to be made to a country where eShopWorld provides this service, you will leave our Services and be redirected to a site linked to our brand in order to check out using a system “supported by eShopWorld.” eShopWorld’s privacy policy, and not ours, will apply to the information you provide directly on said site, such as your payment information. Additionally, when you are redirected to the site to check out using the eShopWorld service, we will share information about you and your order with eShopWorld to facilitate the purchase of our products through eShopWorld.


How long do we store your personal information?

We only store your personal information for as long as is necessary to use it in accordance with the purpose for which it was collected, and in compliance with the legal basis for processing as per applicable law. We will hold your personal information for as long as there is a contractual and/or commercial relationship with you, or until such time as you exercise your right to erasure and/or limitation of the processing of your data.

In such cases, we will duly block the information as instructed, and we will not use it. However, it may be necessary for making or disputing claims, or its processing may result in legal or contractual liability issues to be addressed. In these instances, the data would have to be recovered.


How to exercise your rights

Data protection regulations allow you to exercise your rights of access, rectification, objection, erasure, limitation of processing, portability and of not being subject to individual decision-making before the data controller.

These rights are characterised as follows:

•    They are exercised free-of-charge

•    If the requests are manifestly unfounded or excessive (for example, they are of a repetitive nature) the data controller may:

o    Charge a fee proportional to the administrative costs incurred.

o    Refuse to act.

•    Requests must be answered within one month, although, if the complexity and number of requests are significant, the term can be extended for an additional two months.

•    The data controller must notify you of the means by which you can exercise these rights. These channels must be accessible; additionally, this right cannot be denied for the sole reason of selecting another means.

•    If the request is submitted electronically, the information will be provided by these means whenever possible, unless the data subject requests otherwise.

•    If the data controller does not process the request, it will notify you within one month of the reasons for its non-action and of the option of filing a claim before a Supervisory Authority.

•    You may exercise your rights directly or through legal representation.

•    It is possible that the data processor will respond to your request on behalf of the data controller, if the two parties have so established in the contract or legal document governing their relationship.

You may exercise your rights in any of the following ways:

  • By post to El Corte Inglés or any of the data controllers at the address: Calle Hermosilla, 112 · 28009 Madrid (Ref. LOPD).
  • By email to customer_support@elcorteingles.com.
  • By calling Customer Service at (+34) 901 122 122.

You can file a claim with the Spanish Data Protection Agency (AEPD, for its initials in Spanish), especially if you are not satisfied with the way in which your request to exercise your rights was handled. For more information please visit www.agpd.es

How do we protect your personal information?

We are committed to protecting your personal information. We use appropriate technical and organisational measures for protecting your personal information and privacy. We review said measures regularly. We protect your personal information using a combination of security checks. These are both physical and IT- or logic-based and include access checks restricting and managing how your personal information and data are processed, managed and handled. We also make sure that our employees are properly trained to protect your personal information. In accordance with our procedures, we may request proof of identity from you before sharing your personal information with you.

Pursuant to our guarantee of confidentiality and security, we are particularly intent on offering you the highest possible level of security and protecting the confidentiality of the personal information you provide us. As a result, commercial transactions are carried out in a secure server environment using SSL (Secure Socket Layer) protocol.

If you are having trouble accessing any part of our website, it could be due to the model or version of your browser or its configuration. If you need help finding a solution or if you have any questions regarding how our purchasing system works, write to us at customer_support@elcorteingles.com. We will be more than happy to help.

The Internet is a means of communication that enables commercial transactions to be made online. In this regard, one of the main concerns of Internet users is the online security of their data.

An E-commerce transaction is understood as the entire process of reaching a commercial agreement, including contact between the two parties: customer and company. Aspects that all commercial transactions must share are:

  • Authentication that guarantees the legal or physical personality with whom we are communicating.
  • Integrity, in other words, that alterations cannot be made to the content of the communication between the two parties.
  • Confidentiality, or guaranteeing that no unauthorised person may be privy to the content of the communication.


Do we process the data of minors?

El Corte Inglés Group websites, applications and products are not usually intended for minors. However, there are occasions when we run a campaign, such as the launch of consoles or video games, which may appeal to minors. Nevertheless, we do not intentionally collect any personal information on minors without the authorisation of their parent(s) or guardian(s).

If you are a minor, please do not attempt to register as a user of our website, applications or products. If it comes to our attention that we have mistakenly obtained personal information from a minor, we will delete said information as soon as possible. 


What precautions must be taken?

These are some of the precautionary measures that we recommend our customers take:

  • Do not give anyone your user id or password.
  • Do not make note of these in readily accessible places, such as a computer, diary, etc.
  • Always use our SSL security system.
  • Always close the browser session after having accessed a secure area or after entering your user id or password into the system.


Amendments to this data protection information

We will review and update data protection information when changes are made to the law or to any procedures for processing your personal information.

This data protection information was last revised and updated in October 2020. The reason for the revision was a change in the structure of the El Corte Inglés Group companies due to the merger of Sfera Joven, S.A. with El Corte Inglés.