Data protection

Customers informed and protected. Bankinter, S.A. was a pioneering institution in its commitment to the protection of personal data and the confidentiality of information, and in offering its customers measures that ensure compliance at all times with Organic Law 15/1999 on the Protection of Personal Data and its implementing regulations, which came into force on 19 April 2008 with Royal Decree 1720/2007 of 21 December, adapting its systems accordingly.

Our personal data protection policy rests on two basic pillars: legal and technical compliance. All agreements signed by customers with Bankinter include a data protection clause not only requiring customers’ consent for the processing of their data, but also informing them in detail of the purpose for which their data is to be processed. Also, customers are given the opportunity, from the outset, to object to the processing of their data for marketing purposes by ticking a box to indicate their wishes.

The data protection clause also informs customers of their right to consult, correct, erase and object to the processing of their personal data, and how to exercise this right, thereby guaranteeing their power of control over their personal data. Simple and rapid channels of communication have been set up for this purpose, through Telephone Banking or in writing to the address provided for the purpose, in addition to the possibility of visiting a branch.

With regard to the confidentiality and security of the data, the Bank’s security policy guarantees at all times that the data are transmitted by appropriate, secure and reliable channels, guaranteeing the integrity and confidentiality of transactions generated by customers. The Bank has also undertaken to supervise these security measures periodically by auditing its own systems and those of the suppliers with which it has commercial relations and who may have access to customers’ personal data.

In the field of training, there is an online course which is mandatory for all employees.

As at the end of 2014, the Bankinter Group has received four sanctions from the Data Protection Agency for processing data without the consent of the owner, fines being imposed on the Bankinter Group in a total amount of €33,300.

In short, year after year Bankinter continues to fulfil its commitment to give customers the assurance of the protection, integrity and confidentiality of their data by strengthening and innovating strict internal measures of protection.