Privacy policy of the website edenred.es

ABOUT THIS PRIVACY POLICY
Privacy is very important to EDENRED ESPAÑA, S.A. Therefore, we guarantee compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (General Data Protection Regulation) and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights.

This Privacy Policy regulates the treatment of private data and information that may be collected and/or treated during browsing and contracting or adherence to the products included and/or accessible through the website. www.edenred.es and (hereinafter, “Web”) owned by EDENRED ESPAÑA, S.A. (hereinafter, “EDENRED”).

In some cases of contracting by associated businesses or end customers, personal data will be collected from the employees of the company you represent, or from your own employees if you are self-employed, for which EDENRED undertakes to ensure strict compliance with Spanish legislation on the protection of personal data, in accordance with the provisions of the General Data Protection Regulation.

DATA CONTROLLER
EDENRED ESPAÑA, S.A. (hereinafter, “EDENRED ESPAÑA” or “We”) is responsible for the processing of the data processed for the purposes described in this Privacy Policy. Our contact details are:
VAT ID NO: A-78881190
▪ Entry in the Madrid Trade Register; Volume 8982 Book 7824 Section 3ª, Folio 10 Page 85.352
Postal Address: Juan Esplandiú, 11-13, portal 13, pl. 1 - 28007 Madrid (Spain)
▪ Telephone: +34 91 125 45 00
▪ Email: info-es@edenred.com
▪ Data Protection Officer: dpo.spain@edenred.com

ORIGIN OF THE DATA
In general, we process the personal data you provide directly to us when you contact us, fill in any of our forms, and/or use our website. In the event that you have not provided us with your data directly, we have obtained them from your company, entity or organisation in order to manage or implement our solutions. These are your identification data, professional data, and contact data. In some cases of contracting by affiliated businesses or end customers, personal data will be collected from the employees of the company you represent, or from your own employees if you are self-employed, for which EDENRED undertakes to ensure strict compliance with Spanish legislation on the protection of personal data, in accordance with the provisions of the General Data Protection Regulation.

TYPES OF DATA
We collect and process the following information:
▪ Identification data (Name, surname(s), DNI, NIE, employee number, date of birth)
▪ Contact details (e-mail address, telephone number)
▪ Professional data (Company and/or position)
Web account related information (login credentials, type of account, account status, reason for account closure)
Information related to web activity (IP address, date of connection, date of registration, activity logs, device ID, operating system)
Information on the products purchased (product type, product status, serial number, recharge amount, available balance, transactions made, expiry date, request date, centre).
▪ Information related to requests and customer service (Date of request, type of request, request made)
▪ Information related to the satisfaction of the User of our Website

PURPOSE OF PROCESSING AND LEGAL BASIS
Account creation and management: To create and manage your account on our site. This purpose also includes sending you service communications relating to that account (for example, in the event that you forget your password) and managing the security of your account on the Site.

In the event that the user (whether a company or an employee of the company) fills in the form provided in the Flexible Compensation Plan - My Plan located on the website, the personal data will be processed in order to process the registration in the “Flexible Compensation Plan”, as well as for its development, correct operation and to carry out basic administration tasks of the aforementioned Plan.

▪ Customer service: Manage and follow up on cases (in particular through Customer Service activity and Sales Department support).

▪ Services: To manage, process and maintain the services related to our products, which the user, on behalf of the company he/she represents or, in his/her own name, as a self-employed person, has contracted through the acceptance of the respective General and Particular Conditions of Contract. To manage and execute the contractual relationship maintained with the companies and Affiliated Merchants and to carry out the administrative tasks derived from the same.

▪ Consultations and requests for information: To deal with the queries you make to us and to manage the sending of the information you request through the various contact forms on the Web or by any other means.

▪ Commercial communications about third party products and services: Send offers of third-party products and services available to you as an Edenred User, information about Edenred's network of affiliates, and information about the associations with which Edenred collaborates in the area of Corporate Social Responsibility, including by electronic means when we are authorised to do so. Satisfaction surveys: Send satisfaction surveys on our products and/or services, as well as on the attention received from our customer service.

▪ Satisfaction surveys: Send satisfaction surveys about our products and/or services, as well as about the attention received from our customer service.

▪ Communications of information related to our products and services: In compliance with the provisions of article 21 of Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI), if you do not wish to receive such commercial, advertising or promotional communications, whatever the channel used for this purpose (post, email or SMS), you can communicate your decision free of charge by filling in the following form http://rgpd.edenred.es We also inform you that in each commercial communication that you receive from Us, you will be informed of the procedures enabled so that you can unsubscribe from these commercial communications.

▪ Legal and regulatory obligations: To comply with our regulatory and legal obligations (e.g. in the event that you exercise your rights of access, rectification, etc.).

All data requested through the Web and marked in red are mandatory, as they are necessary for the provision of an optimal service to the user. If they are not provided, we will not be able to serve you properly.

CATEGORIES OF PERSONAL DATA
The categories of personal data that EDENRED processes are those that appear in the various forms located on the Website, as well as those informed at the time of registration as a User of the Website. The personal data of the Beneficiaries that appear at the time of registration as Users of the WEBSITE have been previously informed by EDENRED's CUSTOMERS after signing the corresponding contract.

TARGET
Your personal data will be accessible by our authorised personnel, each in accordance with the access rights to which they are entitled.

Your personal data will not be disclosed to third parties, except to the following categories of recipients where necessary:

▪ Public Administrations, Law Enforcement Agencies, Courts and/or Tribunals to comply with legal obligations or to defend ourselves against claims.

▪ Suppliers who need access to your data for the provision of services that we have contracted with these suppliers, and with whom we have signed the confidentiality and personal data processing contracts required by data protection regulations.

o If you are a beneficiary of Edenred Crèche Direct, your details will be communicated to the school in question.

o In order to contract the flexible health insurance compensation product, your data will be communicated to ISALUD HEALTH SERVICES, SL. An external collaborating company that carries out the activity of insurance mediation and distribution between the interested party and the insurance companies with which ISALUD has signed an agency contract.

o For the purpose of contracting the flexible training compensation product, your details will be communicated to the training centre where you will receive the training.

INTERNATIONAL DATA TRANSFERS
We guarantee that personal data collected for the above purposes will not be transferred outside the European Economic Area in the absence of an adequacy decision by the European Commission or the establishment of appropriate and adequate safeguards to ensure the security and protection of your personal data.

PRESERVATION OF DATA
The personal data of Customers and Associated Businesses shall be kept for as long as the contractual relationship with EDENRED is maintained and, in any case, until the period for claiming responsibilities or filing claims linked to the pre-existing contractual relationship has elapsed. In all other cases, the personal data provided will be kept for as long as the data subject does not request its deletion.

YOUR RIGHTS
In accordance with applicable law, you have the right to access, rectify and erase your data (unless the personal data is necessary to comply with a legal obligation). Under certain circumstances and in accordance with the conditions set out in the applicable law, you also have the right to object to and obtain the restriction of data processing, to withdraw your consent where the processing of your data is based on your consent, and the right to data portability. You can exercise these rights by clicking on the link http://rgpd.edenred.es For any other type of request or complaint related to the processing of your personal data, you can contact Us by sending us an e-mail to dpo.spain@edenred.com. We also remind you that you can lodge a complaint about the processing of your personal data with your local personal data protection authority, such as the Spanish Data Protection Agency (https://www.aepd.es/es) in Spain.

SECURITY MEASURES
EDENRED informs you that it has implemented the necessary technical and organisational security measures to guarantee the security of your personal data and to avoid its alteration, loss, processing and/or unauthorised access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed, whether from human action or from the physical or natural environment.

COOKIE POLICY“
This website uses cookies, small data files that are generated in the user's/client's computer and that allow us to know the frequency of visits and the most selected contents. The user has the option to prevent the generation of cookies by selecting the corresponding option in their browser. For more information, you can consult our Cookies Policy.

MODIFICATION OF THE PRIVACY POLICY
EDENRED reserves the right to modify this Privacy Policy, according to its own criteria, motivated by a legislative, jurisprudential or doctrinal change of the Spanish Data Protection Agency. We will inform you of such changes by publishing the modified Privacy and Data Protection Policy on the Page itself as well as by means of the corresponding notice that will be placed on the home page.

APPLICABLE LAW AND JURISDICTION
All disputes or claims arising from the interpretation or execution of this privacy policy shall be governed by Spanish law and shall be subject to the jurisdiction of the Courts and Tribunals of Barcelona.