Privacy policy2021-02-17T13:10:20+02:00
Privacy policy
  1. Identity of the data controller

    The information furnished by users via any forms on the WEBSITE will be processed by Bilbao Bizkaia Kutxa Fundación Bancaria – Bilbao Bizkaia Kutxa Banku Fundazioa and BBK Fundazioa, in their capacity as data controllers, hereinafter the ‘bank’, with respective tax number G-48412720 and G-48644371 and address Gran Vía 19-21, 48001 Bilbao (Bizkaia).

  2. Purpose of processing

    In general, the bank will process the information furnished by users for the following purposes:

    • To draw up statistical surveys that help make improvements to the services provided.
    • To send information required by the user.
    • Where applicable, to manage the contractual relationship established between the bank and the user.

    However, you may find forms on this website which compile personal data. Each form will provide you with specific information on the processing of any data you may furnish in this way.

  3. Recipients of information

    The bank will not disclose this information to any third parties, unless it is obliged to do so by current legislation (for example, an official request in relation to a police investigation) or in the case of suppliers providing services for the bank for the purposes of maintenance and management of this website.

  4. Mandatory or optional nature of the information requested

    Mandatory data on each form will be identified as such on the form.

    Refusal to supply this information will prevent provision of the service requested by the user.

  5. Exercise of rights

    Users may withdraw their consent and exercise their rights of access to, rectification and erasure of personal data, and may also limit or directly oppose processing or exercise their right to data portability, in an e-mail to or by regular post to the address shown in “Identity of the data controller” above, identifying themselves as users of the Website, along with a photocopy of their identity card or equivalent document and specifying their request.

    If they require further information or consider their right to personal data protection has been infringed, they may submit a claim to the Spanish Data Protection Agency (

  6. User’s commitments

    Users guarantee they are over 14 years of age, and that the information supplied is accurate and truthful.

    Users undertake to notify the bank of any modifications to the information provided in an e-mail to, identifying themselves as users of the WEBSITE and specifying the information to be modified.

  7. Third-party data supplied by users

    If users supply data of third parties for any reason, they guarantee they have previously notified the data subjects and have obtained their consent to send their data to the bank.

    Users guarantee that the data subjects are over 14 years of age, and that the information supplied is accurate and truthful.

    In the event of any liability arising from users’ failure to comply with these conditions, they must take responsibility for the consequences of such non-compliance.

  8. Cookies and monitoring files

    Users accept the use of cookies and files to monitor IP addresses, allowing the bank to compile data for statistical purposes such as: date of the first visit, number of visits made, date of the last visit, URL and domain it comes from, explorer tool used and screen resolution.

    Users have the option of preventing cookies by selecting the corresponding option on their browser programme. However, the bank takes no responsibility for prevention of the proper functioning of the page following disablement of the cookies.

    You will find further information on cookies in our COOKIE POLICY.

  9. Security measures

    The bank has taken the necessary technical and organisational measures to guarantee the security of personal data and prevent any alteration, loss, processing or unauthorised access, in due consideration of the status of technology, the nature of the data stored and the risks to which they are exposed, either through human action or as the result of physical or natural events.

    Users must in any case be aware that Internet security measures are not infallible.

    Should you have any queries concerning our Privacy Policy information, send an e-mail to