Security and privacy

Bankinter ha sido el primer banco en incorporar la tecnología para facilitar la gestión a sus clientes. También trabajamos para ofrecerle una alta protección y privacidad de sus datos y operaciones, por ello:

• Se implementan y desarrollan elevados estándares de seguridad destinados a proteger la autenticidad, confidencialidad, integridad y disponibilidad de los sistemas de información a través de sus vertientes organizativas y técnicas.
• Los servidores web Banca Online utilizan un Certificado de Validación extendida emitido por la entidad certificadora de confianza Entrust.
• Toda la información transmitida se cifra con algoritmos estándares  complejos y con claves establecidas en cada conexión mediante protocolo seguro. Nuestros sistemas conectados a Internet se hallan protegidos mediante "cortafuegos" y sistemas detectores de intrusiones, que evitarían un posible ataque protegiendo nuestra Banca Online.
• Sometemos a nuestros sistemas de información a test periódicos de intrusión, tanto internos como externos.

Bankinter fue la primera entidad financiera, a nivel internacional, en certificarse simultáneamente en las normativas ISO 22301:2019 e ISO/IEC 27001:2022 por la certificadora British Standards Institution (BSI). Posteriormente, la entidad también obtuvo por BSI la certificación ISO/IEC 27017:2015. Estas certificaciones avalan la calidad, operatividad y cumplimiento de los requisitos que tiene el banco con respecto al Sistema de Gestión de la Continuidad de Negocio, el Sistema de Gestión de Seguridad de la Información y el Sistema de Gestión de Seguridad en Servicios Cloud.

Consulta aquí el extracto de nuestras políticas de seguridad de la información, continuidad del negocio y seguridad en servicios cloud.

1. La introducción de coordenadas de tu tarjeta de claves, cada vez que firmes una operación, se realiza mediante un panel gráfico (sistema que permite eludir el riesgo de programas maliciosos denominados "KeyLogger", que intentan capturar la información mediante los pulsos del teclado).
2. Te desconectamos de forma automática de la sesión a los 20 minutos de ausencia de uso (30 minutos en el Broker). Esta medida evita que, ante un descuido o abandono por tu parte (si no utilizas la opción de Desconectar), otra persona pueda acceder a tus datos en tu ordenador.
3. Contamos con sistemas de control de límites operativos personalizados, de forma que un cliente no pueda realizar operaciones a partir de determinado importe; y límites operativos generales, que limitan el importe total de operaciones que se pueden realizar a través de nuestras páginas web. Esta medida implica que el riesgo de quebranto está limitado.
4. Te obligamos a cambiar la contraseña en tu primera conexión para prevenir una suplantación, de este modo, nos aseguramos que sólo tú la conoces.
5. Tu usuario y contraseña de Banca Online deben tener como mínimo 6 caracteres, lo que hace más difícil la posibilidad de que alguien las pueda deducir probando opciones.
6. Tienes la opción de no recibir extractos ni correo ordinario sobre tus operaciones bancarias. Esto limita la posibilidad de que alguien pueda conocer tu situación financiera revisando tu buzón de correo. Todos los extractos y justificantes de operaciones se encuentran disponibles y consultables en la página web.

Login Biométrico: Touch ID/Face ID en iOS y Huella dactilar en Android.

Apoyándonos en la tecnología TouchID, FaceID de Apple y el Fingerprint de Android 6.0 es posible utilizar el Login Biométrico como método de acceso. Dicha tecnología permite almacenar de forma segura ciertos datos que sólo son accesibles mediante la huella dactilar. Estos datos se almacenan localmente en el dispositivo, en un único lugar seguro protegidos bajo la huella del usuario, no se sincronizan en iCloud ni se propagan en los backups del dispositivo que se pudieran hacer.

El Touch ID sólo está accesible en teléfonos Apple desde el iPhone 5S con iOS8 o superior y en los iPads con TouchID. El mecanismo FaceID sólo está disponible en iPhone X.

La autenticación por huella en Android sólo está disponible para aquellos dispositivos que soportan huella dactilar y Android 6 o superior.

El proceso de autenticación aplicado a la nueva banca online se basa en habilitar este contenedor seguro tras un login "manual" satisfactorio a través de la nueva App ofreciéndole al usuario guardar de forma segura una clave única para dicho terminal bajo su huella dactilar o cara (FaceID). Para posteriores procesos de autenticación, solo será necesario poner la huella en el botón-sensor para que sin necesidad de teclear ninguna credencial acceda directamente al área privada; en el caso de FaceID la autenticación se realiza de forma aún más transparente para el usuario, sólo es necesario que esté en frente del teléfono.

The volume of attempted fraud against us and other banks is increasing every year. These attempts are designed to steal your login credentials and are carried out through different means:

• Phishing (fraudulent emails)
• Vishings (fraudulent calls)
• Smishings (fraudulent SMS)
• Identity theft
• QR hacks (modified QR codes)
• Baiting (fraudulent external devices)
• BIZUM (unexpected payment request attempts)

If you think you have been the victim of a scam or fraud, or you suspect any movement in your account or on your card, contact our Fraud Assistance Service (900 81 00 62) immediately. The line is open 24/7. If you prefer, you can also go to the nearest branch to receive help.

Remember, you can block your card directly on the Bankinter website or app, or cancel it by calling VISA (900 991 124).

Some important recommendations:

1. Change your username and password regularly. Your username and password should contain a combination of numbers, letters and special characters. Avoid using real names or things associated with you.
2. Never reveal your password, particularly by email or phone.
3. Don't forget to disconnect from the website once you have finished with it.
4. Keep your browser version updated.
5. Keep your operating system up to date with the latest updates.
6. Avoid downloading from unknown web sites.
7. Always keep your antivirus up to date.

Check the FREE PROTECTION TOOLS.

Privacy and Data

The processing of your personal data by Bankinter is governed by compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (hereinafter, the LOPDyGDD). Therefore, we inform you that Bankinter, S.A. (hereinafter, "Bankinter") is responsible for the processing of your data.

As the data controller, Bankinter has the technical, organisational and human resources necessary to guarantee the security and protection of its information systems, as well as the data and information that are stored in them.

Your personal data will not be transferred to third parties unless legally required or when you give us your consent to do so. However, the service providers that Bankinter uses (or may use in the future) to process data may be able to access your personal data. In these cases, Bankinter guarantees the confidentiality of personal data provided to third parties and that they implement appropriate security measures.

We remind you that your personal data will be processed to comply with both applicable legal obligations and the rights and obligations set forth in the contracts you have with us.

Please note that Bankinter has a legitimate interest in processing your data to prevent and avoid fraud related to the products and/or Services you acquire, as well as to contact you to assist you with any pending processes. In addition and unless you have indicated otherwise, your personal data will be processed to: (i) Inform you, through any channel (including electronic and digital channels), about products and/or services similar to those you have acquired from us and that the Bank is interested in marketing (ii) Analyse aspects of your personal and financial situation, based on data provided by you and/or derived from the products and/or services you have with Bankinter or in which you are involved (including aggregated transactional data such as, for example, average balances or receipt numbers), in order to understand your habits and preferences, create a basic commercial profile and offer you products and/or services that may be of interest to you. In addition, it will also allow us to create and/or improve our portfolio of products and services.

Additionally and provided you have given your consent, your personal data may be processed for the following purposes: (i) Bankinter may send you commercial communications, through any channel (including electronic and digital channels), about products and/or services of Bankinter, the Bankinter Group and its subsidiaries or companies with which we have collaboration agreements, which have no similarity with those you have already acquired, (ii) analyse aspects of your personal and financial situation based on data provided by you, data derived from the products and/or services that you have with Bankinter or in which you are involved (including all transactional data) and data incorporated in our files obtained from external sources, in order to understand your habits and preferences and create an advanced commercial profile. This will allow us to offer you products and/or services specifically designed for you, as well as create and/or improve our portfolio of products and services. Data from public registers, credit information systems, the CIRBE, social networks and Informa, among other sources, will be accessed for this processing. (iii) to share your personal data with companies in the Bankinter Group and its subsidiaries so that they can offer you products and/or services through different channels (including electronic and digital channels); (iv) to share your personal data with companies in the Bankinter Group and its subsidiaries so they can evaluate and predict personal aspects about your financial situation, preferences, interests and behaviour, so they can prepare a commercial profile for you.

The personal data subject to processing refers to: (i) that provided by you when becoming a Bankinter customer and when acquiring different products and/or services (ii) data derived from the provision of the products and/or services you have acquired, (iii) Data obtained from third parties when you have given your consent or when permitted by regulations.

You may exercise your rights of access, rectification, cancellation, opposition, restriction of processing and portability in the cases and within the scope specified in the applicable legislation at any time by calling Telephone Banking on 900 80 20 81, in person by visiting your branch or Bankinter agent, or by writing to: Bankinter, S.A. Operations "Data Protection", Pico de San Pedro, 1 Tres Cantos CP 28760, Madrid.

You can obtain more information about how Bankinter processes your data, in particular the legal bases that legitimise it, in Section "Additional Information on Data Protection", which you can find in Section 3 of the legal notice on the Bankinter website.

If you have any additional questions, you can contact our Data Protection Officer by sending an email to [email protected].

Use of personal data

You can find information on how the bank obtains your data, the purposes for which it processes your data, the legal basis for this, the recipients of the data and your rights with regard to personal data processing at Information on the use of personal data.