PRIVACY POLICY
Introduction
At El Corte Inglés Group Companies, we are committed to safeguarding your personal information and protecting it from misuse.
This document identifies the Data Controller, what your personal information will be used for, the legal grounds for processing data, how and why we collect it, how we use it, your rights in this regard and also the processes put in place to ensure your privacy.
We assume that by providing us with your personal information and using our websites, you have read and understood the terms and conditions set out relating to personal data protection. El Corte Inglés Group Companies undertake to comply with prevailing Spanish and European law regarding data protection. As such, they endeavour to process your data lawfully, honestly and with transparency.
Scope of Application
This document is valid for all companies in the El Corte Inglés Group.
Considerations to bear in mind
What is a Data Controller?
A Data Controllers is defined in the General Data Protection Regulation as follows:
“Data Controller” or “Controller”: the individual or corporation, public authority, service or other body which, acting alone or in conjunction with others, specifies the purposes of processing and means by which this is performed.
In other words, the El Corte Inglés Group companies are the co-data controllers. This means that we have jointly defined the objectives or purposes of processing and have established the necessary measures to protect your personal data during processing.
If you have any enquiry, comment or concern, or would like to comment on how we use personal information, you can email the El Corte Inglés Group Data Protection Officer at delegado.protecciondatos@elcorteingles.es.
Information on the El Corte Inglés Group companies:
Business name El Corte Inglés
Corporate address: Calle Hermosilla, 112. 28009 - Madrid
Email: servicio_clientes@elcorteingles.es
Telephone: + 34 901 122 122
Tax ID A-28017895
Madrid Commercial Register: Volume 519, Folio 1, Section 8, Page M-9,880, Entry 197
Website: www.elcorteingles.es
Company name: Seguros El Corte Inglés, Vida, Pensiones y Reaseguros, S.A.U.
Corporate address: Hermosilla, 112. 28009 Madrid
Email: atencionalcliente@seguroseci.es
Telephone: +34 91 266 87 53
Tax ID A - 79346839
Madrid Commercial Register: Volume 3,863, Folio 54, Page M-64,854, Entry 13
Website: www.elcorteingles.es/eciseguros
Company name: Centro de Seguros y Servicios. Correduría de Seguros, S.A.U, Grupo de Seguros El Corte Inglés
Corporate address: Hermosilla, 112. 28009 Madrid
Email: atcliente@cess.elcorteingles.com
Telephone: +34 91 266 87 56
Tax ID A - 28128189
Madrid Commercial Register: Volume 945, Folio 1, Page M-18,707, Entry 32
Website: www.seguros.elcorteingles.es
Company name: Supercor, S.A.
Corporate address: Hermosilla, 112. 28009 Madrid
Email: servicio_clientes@elcorteingles.es
Telephone: + 34 901 122 122
Tax ID A - 78476397
Madrid Commercial Register: Volume 3,099, Folio 189, Section 8, Page M-52,978, Entry 3
Website: www.supercor.es
Company name: Viajes El Corte Inglés, S.A.
Corporate address: Hermosilla, 112. 28009 Madrid
Email: viajeseci@elcorteingles.es, servicio_clientes@elcorteingles.es
Telephone: + 34 901 122 122
Tax ID A - 28229813
Madrid Commercial Register: Volume 896, Folio 1, Page M-11,385, Entry 23
Website: www.viajeselcorteingles.es
For what purpose do we collect your personal information?
The main purpose for collecting your personal information is to provide an improved service, which is what you as a customer expect of us.
We collect your personal information so that we can process your purchases, orders or requests, whether it be in one of our shopping centres, warehouses, agencies, supermarkets, or via our websites or applications, by telephone or by completing a form.
Below, we've included the main purposes for collecting data at El Corte Inglés Group companies:
How do we collect information about you?
We collect information about you through different means. In some cases, you will contact us to share personal information; in other cases, we collect your personal data using other means. Below, we've outlined the different methods we use for collecting your personal information, along with a few examples of how the information is used.
Information provided by you
We collect personal information that you provide us through one of the El Corte Inglés Group websites, email, mobile phone, when you purchase a service, when you fill out a form and others. In any case, when we collect your information, we will inform you of the Data Controller, the purpose for collection, the recipients, as well as how to exercise your rights granted by prevailing law on data protection.
For instance, it is likely that you provide us with information when you contact our customer service, place an order, register with our websites, update your preferences and account details, fill out a questionnaire, or take part in a competition, etc.
Generally, the personal information you provide us with is: first name and surname(s), address, ID, date of birth, email address, contact telephone number and payment details. In isolated cases, depending on how we anticipate using your data and to what end, data may be collected about you as a person, your education and career, employment details, commercial information, social circumstances, finances and insurance, and transfers of goods and services.
If you have never requested that we send you commercial correspondence, you can sign up for the various newsletters we provide or you can email us at servicio_clientes@elcorteingles.es
Information we collect when you visit our websites
We collect and store limited personal information and anonymous overall statistics for all users visiting our websites, either because you have actively provided us with that information or because you are merely browsing our websites. The information we collect includes the IP address of the device you are using, the browser used, your operating system, the date and time our website was accessed, the web address via which you accessed our websites, as well as information about how you use our websites.
We use this information to give us an idea of how long it takes our websites to load, how the websites are used, the number of hits on the different sections and the type of information that draws most hits. It also helps to ascertain whether the website is working as it should. If we detect functional faults or errors, if helps us to fix them and improve our websites’ performance, so that we can offer a better service for all users.
This information is collected using cookies. For further details, please refer to the cookies policy available on each El Corte Inglés Group company website.
Social networks
The use of social networks is becoming increasingly widespread. As a result, the El Corte Inglés Group has a presence on most of them and may use them to contact you.
The information we collect via social networks sometimes includes personal information that is publicly available online. We always ensure that all information used by us correctly acknowledges its source or is made anonymous.
It is likely that these social networks have their own privacy policies explaining how your personal information is used and shared. We recommend you carefully read the privacy policies before using social networks so that you can be certain you agree with how your personal information is collected and shared.
Mobile phone
The El Corte Inglés Group APPs have a geolocation feature for pinpointing your whereabouts to show you the nearest establishment. Enabling the geolocation feature on your mobile device means you can make the most of the applications’ full range of functionalities. If it is not enabled, we will remind you to turn on geolocation by sending you a message requesting permission beforehand.
This geolocation service will not be used to inform third parties of your location, except where this is a legal requirement.
Most mobile devices offer users the option of disabling location services. This option is likely to be found in the settings menu of your device. If you have any questions regarding how to disable your device’s location services, we recommend that you contact your mobile service provider or the manufacturer of your device.
If you wish to disable location services on an Android device, go to Location services in your mobile phone’s Settings menu. Most Android devices allow location services to be disabled for the entire mobile phone, such as GPS services and other companies’ location services. Generally, location services will not be enabled unless you check the box to enable them.
If you wish to disable location services on your iPhone, you can do this for all models from the Settings menu by selecting Location Services. In order to disable location services for the whole device, slide the bar until the Off option appears. In order to disable location services for a certain application, slide the bar next to each application until the Off option appears.
What are the legal grounds for processing personal information?
There are a number of reasons why we are legally entitled to process your personal details:
To whom can we disclose your personal information?
If you have given us your consent, the information you provide will be communicated to El Corte Inglés Group companies (see URL: https://www.elcorteingles.es/informacioncorporativa), which will process it for the purposes described above. Not all the purposes described above involve the transfer of data, especially considering that the data are collected directly by each of the Group companies.
There are cases where we have to disclose the data you have provided us to third parties in order to carry out the requested service. These include travel and hotel bookings, logistics, transport and delivery companies, installation and/or assembly companies, home refurbishments, etc.
In addition, there are companies that provide us with other kinds of services, such as information technology (information storage and processing), security services, financial services, audit services, etc.
These third parties may only access personal information required for providing said services. They are required to keep your personal information confidential and may not use it in any way other than as requested by us.
El Corte Inglés Group companies accept liability at all times for personal information provided to us. We request that companies with which we share your personal information protect it to the same extent as we do.
In addition, your personal information will be accessible by Public authorities, Judges and Courts for addressing any liabilities arising as a result of processing your personal data.
International transfers
The personal information we collect is held in Spain. Nevertheless, it is possible that some Group companies operate in other countries, in which case your personal information would be held in that company's country of operation.
For efficiency's sake, we sometimes work with technological service providers that are located outside of the European Economic Area, and international data transfers occur. In these cases, we apply the appropriate safeguards to protect your information, such as signing Standard Contractual Clauses approved by the European Commission. You can obtain additional information about these clauses by writing to delegado.protecciondatos@elcorteingles.es.
Links to third-party websites
Where we provide links to websites not operated or monitored by El Corte Inglés Group companies, you will be notified without delay, since the El Corte Inglés Group exercises no control over said websites, nor is it responsible for their content, and it exercises no control over how third parties collect and use your personal information. It is likewise not responsible for third-party websites and makes no claim in this respect.
These websites must have their own privacy policies explaining how your personal information is used and shared. We recommend you carefully read the privacy policies before using these websites so that you can be certain you agree with how your personal information is collected and shared.
Furthermore, we work with eShopWorld to sell and deliver our products in certain international destinations. If a delivery is going to be made to a country where eShopWorld provides this service, you will leave our Services and be redirected to a site linked to our brand in order to check out using a system “supported by eShopWorld.” eShopWorld’s privacy policy, and not ours, will apply to the information you provide directly on said site, such as your payment information. Additionally, when you are redirected to the site to check out using the eShopWorld service, we will share information about you and your order with eShopWorld to facilitate the purchase of our products through eShopWorld.
How long do we store your personal information?
We only store your personal information for as long as is necessary to use it in accordance with the purpose for which it was collected, and in compliance with the legal basis for processing as per applicable law. We will hold your personal information for as long as there is a contractual and/or commercial relationship with you, or until such time as you exercise your right to erasure and/or limitation of the processing of your data.
In such cases, we will duly block the information as instructed, and we will not use it. However, it may be necessary for making or disputing claims, or its processing may result in legal or contractual liability issues to be addressed. In these instances, the data would have to be recovered.
How to exercise your rights
Data protection regulations allow you to exercise your rights of access, rectification, objection, erasure, limitation of processing, portability and of not being subject to individual decision-making before the data controller.
These rights are characterised as follows:
• They are exercised free-of-charge
• If the requests are manifestly unfounded or excessive (for example, they are of a repetitive nature) the data controller may:
o Charge a fee proportional to the administrative costs incurred.
o Refuse to act.
• Requests must be answered within one month, although, if the complexity and number of requests are significant, the term can be extended for an additional two months.
• The data controller must notify you of the means by which you can exercise these rights. These channels must be accessible; additionally, this right cannot be denied for the sole reason of selecting another means.
• If the request is submitted electronically, the information will be provided by these means whenever possible, unless the data subject requests otherwise.
• If the data controller does not process the request, it will notify you within one month of the reasons for its non-action and of the option of filing a claim before a Supervisory Authority.
• You may exercise your rights directly or through legal representation.
• It is possible that the data processor will respond to your request on behalf of the data controller, if the two parties have so established in the contract or legal document governing their relationship.
You may exercise your rights in any of the following ways:
You can file a claim with the Spanish Data Protection Agency (AEPD, for its initials in Spanish), especially if you are not satisfied with the way in which your request to exercise your rights was handled. For more information please visit www.agpd.es
How do we protect your personal information?
We are committed to protecting your personal information. We use appropriate technical and organisational measures for protecting your personal information and privacy. We review said measures regularly. We protect your personal information using a combination of security checks. These are both physical and IT- or logic-based and include access checks restricting and managing how your personal information and data are processed, managed and handled. We also make sure that our employees are properly trained to protect your personal information. In accordance with our procedures, we may request proof of identity from you before sharing your personal information with you.
Pursuant to our guarantee of confidentiality and security, we are particularly intent on offering you the highest possible level of security and protecting the confidentiality of the personal information you provide us. As a result, commercial transactions are carried out in a secure server environment using SSL (Secure Socket Layer) protocol.
If you are having trouble accessing any part of our website, it could be due to the model or version of your browser or its configuration. If you need help finding a solution or if you have any questions regarding how our purchasing system works, write to us at customer_support@elcorteingles.com. We will be more than happy to help.
The Internet is a means of communication that enables commercial transactions to be made online. In this regard, one of the main concerns of Internet users is the online security of their data.
An E-commerce transaction is understood as the entire process of reaching a commercial agreement, including contact between the two parties: customer and company. Aspects that all commercial transactions must share are:
Do we process the data of minors?
El Corte Inglés Group websites, applications and products are not usually intended for minors. However, there are occasions when we run a campaign, such as the launch of consoles or video games, which may appeal to minors. Nevertheless, we do not intentionally collect any personal information on minors without the authorisation of their parent(s) or guardian(s).
If you are a minor, please do not attempt to register as a user of our website, applications or products. If it comes to our attention that we have mistakenly obtained personal information from a minor, we will delete said information as soon as possible.
What precautions must be taken?
These are some of the precautionary measures that we recommend our customers take:
Amendments to this data protection information
We will review and update data protection information when changes are made to the law or to any procedures for processing your personal information.
This data protection information was last revised and updated in October 2020. The reason for the revision was a change in the structure of the El Corte Inglés Group companies due to the merger of Sfera Joven, S.A. with El Corte Inglés.