menu-iconCreated with Sketch.

App Privacy Policy

Last update4 November 2023
 
This Privacy Policy has been prepared in accordance with data protection regulations to explain how we treat your personal data.

About this privacy policy

This Privacy Policy applies only to the processing of the personal data of persons who voluntarily register an account in our mobile application “EDENRED ESPAÑA - MY EDENRED” (hereinafter, the “App”) owned by EDENRED ESPAÑA, S.A.

Data controller

EDENRED ESPAÑA, S.A. (hereinafter, “EDENRED ESPAÑA” or “We”) is responsible for the processing of the data processed for the purposes described in this Privacy Policy. Our contact details are:

Origin of the data

Generally, we process personal data that you provide directly to us when you contact us, fill in any of our forms, and/or use our APP.


In the event that you have not provided us with your data directly, we have obtained them from your company, entity or organisation in order to manage or implement our solutions. These are your identification data, professional data, and contact details.
In some cases of contracting by affiliated businesses or end customers, personal data will be collected from the employees of the company you represent, or from your own employees if you are self-employed, for which EDENRED undertakes to ensure strict compliance with Spanish legislation on the protection of personal data, in accordance with the provisions of the General Data Protection Regulation.

Data types

We collect and process the following information:

  • Identification data (Name, surname(s), DNI, NIE, employee number, date of birth)
  • Contact details (email address, telephone number)
  • Professional data (Company, and/or position)
  • Information related to the account in the App (Login credentials, account type, account status, reason for account closure)
  • Information related to App activity (IP address, date of connection, date of registration, activity logs, device ID, operating system)
  • Information on contracted products (product type, product status, serial number, recharge amount, available balance, completed transactions, expiry date, request date, centre).
  • Geolocation (real-time geolocation of the mobile device)
  • Information related to requests and customer service (Date of request, type of request, request made)
  • Information related to the User satisfaction of our APP

Purpose of processing and legal basis

CREATE AND MANAGE YOUR ACCOUNT
TYPES OF DATA
PURPOSE
LEGITIMACY

We deal with the following information:

  • Access credentials (Username, password)

We process your personal data to create and manage your account in our APP.

The processing of your personal data is necessary for the execution of the contract to which you are a party, by accepting the Terms of Use of the APP.

CUSTOMER SERVICE
TYPES OF DATA
PURPOSE
LEGITIMACY

We deal with the following information:

  • Identification data (First name, surname)
  • Contact details (Email address, and/or telephone number)
  • Professional data (Company, and/or position)
  • Information related to your query and/or complaint.

We process your personal data to dealing with and managing queries, proposals for improvement and complaints. that you send us through our contact forms or by any other means.

The processing of your personal data is necessary in order to comply with the legitimate interest to respond to your requests for information.

SATISFACTION SURVEYS
TYPES OF DATA
PURPOSE
LEGITIMACY

We deal with the following information:

  • Identification data (First name, surname)
  • Contact details (Email address)
  • Information about the products contracted and your satisfaction as a User of our APP.

We process your personal data to send you satisfaction surveys.

The processing of your personal data is necessary in order to comply with the legitimate interest to improve the services provided to the Users of our APP, and to improve their satisfaction.

SEARCH FOR ESTABLISHMENTS
TYPES OF DATA
PURPOSE
LEGITIMACY

We deal with the following information:

  • Geographical location (Real-time geolocation of the mobile device).
  • Device-related data (IP address, device ID, operating system).

We process your personal data to show you the EDENRED Network establishments closest to your location (if you activate geolocation).

Please note that you can also search for EDENRED Network establishments without activating geolocation. In this case, you can make this search by adding a postal address.

The processing of your geolocation data is based on your express consent.
You can revoke your consent to the activation of the location function at any time via the corresponding option on your device.

SERVICE NOTIFICATIONS
TYPES OF DATA
PURPOSE
LEGITIMACY

We deal with the following information:

  • Identification data (First name, surname)
  • Contact details (Email address, and/or telephone number)

We process your personal data to send you service notifications via the APP, email or electronic means of communication equivalent to the purpose of managing the account and on the management of EDENRED products associated with the APP.

The purpose of sending these notifications is to make the APP more useful and complete.

The processing of your personal data is necessary for the execution of the contract to which you are a party, by accepting the Terms of Use of the APP.

OFFERS, DISCOUNTS, PROMOTIONS
TYPES OF DATA
PURPOSE
LEGITIMACY

We deal with the following information:

  • Identification data (First name, surname)
  • Contact details (Email address)

We process your personal data to send you offers of products and services of interest to you, including by electronic means, as well as promotions and any other type of commercial activity service-related.

In each commercial communication you receive from us, you will be informed of the procedures that will enable you to unsubscribe from these communications free of charge.

The processing of your personal data is based on your express consent.

If you do not wish to receive such commercial, advertising or promotional communications, regardless of the channel used for this purpose (email, SMS, push, etc.), you can communicate your decision free of charge through the specific channel (If you receive a commercial email, you can unsubscribe by clicking on the link included in the email itself. If you receive an SMS, you can unsubscribe by clicking on the link included in the SMS itself). If you do not want to receive push notifications on your mobile phone, you can uncheck the option in the APP settings.

LEGAL AND REGULATORY OBLIGATIONS
TYPES OF DATA
PURPOSE
LEGITIMACY

We deal with the following information:

  • Identification data (First name, surname(s))
  • Contact details (Email address and/or telephone number)
  • Edenred Products (Product type, PIN, usage profile and card details (cardholder, activation date, expiry date, status, usage profile associated with the card and limitations, if any).

We process your personal data to comply with our fiscal and legal obligations.

The processing of your personal data is necessary in order to comply with legal obligations.

SECURITY
TYPES OF DATA
PURPOSE
LEGITIMACY

We deal with the following information:

  • Identification data (First name, surname(s))
  • Contact details (Email address and/or telephone number)
  • Access credentials (Username, password)
  • Activity logs (connection log)

We process your personal data to protect the security of our APP.

The processing of your personal data is necessary in order to comply with the legitimate interest to protect the security of our APP.

COOKIES
TYPES OF DATA
PURPOSE
LEGITIMACY

Cookies are small data files that store and retrieve information when you browse. In general, these technologies can be used for many different purposes, such as, for example, obtaining information on the frequency of visits, the most selected content, or personalising the way in which content is displayed. You can consult our Cookie Policy for more information about what cookies we use, what we use them for, and how you can give or withhold your consent to the use of cookies that require it.

We process your personal data to protect the security of our APP.

The processing of your personal data is necessary in order to comply with the legitimate interest to protect the security of our APP.

Mandatory fields

The provision of the data marked in the APP in red or with asterisks is mandatory for the correct provision of these services.

Addressees

Your personal data will be accessible by our authorised personnel, each in accordance with the access rights to which they are entitled.

Your personal data will not be disclosed to third parties, except to the following categories of recipients:

  • Public Administrations, Law Enforcement Agencies, Courts and/or Tribunals to comply with our legal obligations and/or to defend ourselves against claims.
  • Suppliers who need access to your data for the provision of services that we have contracted with these suppliers, and with whom we have signed the confidentiality and personal data processing contracts required by data protection regulations.

Transfers outside the European Union

We guarantee that personal data collected for the above purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission or the establishment of appropriate and adequate safeguards to ensure the security and protection of your personal data.

Data retention

Personal data related to your APP account will be retained until you request the deletion of your APP account. When you request the deletion of this account, your personal data will be classified and the remaining data will be kept only for legal purposes, in particular for accounting, fiscal or social reasons, until the time limit for liability has elapsed.

In the event that you request deletion of your APP account but have an active Edenred product, your personal data relating to that product will be retained as described in the terms of the product.

Rights of the data subject

In accordance with applicable law, you have the right to access, rectify and erase your data (unless the personal data is necessary to comply with a legal obligation). Under certain circumstances and in accordance with the conditions set out in applicable law, you also have the right to object to and obtain the restriction of data processing, to withdraw your consent where the processing of your data is based on your consent, and the right to data portability.

You can exercise these rights by clicking on the following link http://rgpd.edenred.es

For any other request or complaint related to the processing of your personal data, you can contact our Data Protection Correspondent by sending an email to dpo.spain@edenred.com

We also remind you that you can lodge a complaint about the processing of your personal data with your local personal data protection authority, such as the Spanish Data Protection Agency (https://www.aepd.es/es) in Spain.

Modification of the privacy policy

We will update this Privacy Policy from time to time, and will inform you of such changes and updates as required by data protection regulations.