Telefónica IoT & Big Data Tech, S.A.U. (“Telefónica”), as owner of this web site (“Web Site”), hereby informs you that the companies of the Telefónica Group are committed to respecting the privacy of users as well as the confidentiality and security of personal data, in compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation), as well as with the Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (in Spanish, Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y garantía de los derechos digitales) and other regulations in force.
Our principles are:
TRANSPARENCY
We will not process your data in an unexpected, obscure, or abusive way.
When we collect your personal data through our Web Site you will be properly informed about: who is processing your data, the purpose of the processing, on what is based the legitimacy of the treatment, the possibility of exercising your rights and other information of interest. In addition, your data will be cancelled, according to the defined retention policy about which you will be informed and, in any case, when you request it by exercising your right of cancellation.
CONTROL
We will request your consent whenever necessary and will provide you with the necessary tools to access and update your personal information as well as to decide how to manage your data, selecting the purposes for which we will process them.
SECURITY
We are concerned with ensuring the security, secrecy, and confidentiality of your data. Therefore, as part of our commitment and in compliance with current legislation, we have adopted the most rigorous and robust security measures and technical means to prevent their loss, misuse or unauthorized access, committing ourselves to keeping them secret and guaranteeing the duty to safeguard them by adopting all necessary and reasonable measures to prevent their alteration, loss and unauthorized processing or access, in accordance with the provisions of relevant legislation.
For all these reasons, Telefónica considers your privacy a priority. That is why we protect your information pursuant to the privacy policy that you can read below. If you have any questions, please contact us via aiofthings.protecciondedatos@telefonica.com and we will be pleased to help you.
Telefónica IoT & Big Data Tech, S.A.U., company with ID number A28015865 and registered office at Gran Vía 28, C.P. 28013, Madrid (Spain), will be the data controller for the processing of your data in accordance with what we inform you in this Privacy Policy.
Notwithstanding the foregoing, exceptionally with regard to the provision of certain online platforms such as managed connectivity platform “Kite”, Telefónica may act as Data Processor or Sub-Processor for the purposes of the applicable data protection regulations, especially in those cases in which it processes personal data on behalf of and for the account of other Operators of the Telefónica Group to which it belongs and/or its B2B customers.
We also have appointed a Data Protection Officer who ensures compliance with applicable data protection legislation at Telefónica, and who can be contacted for any questions, doubts and/or complaints you may have when we process your data, by writing to DPO_telefonicasa@telefonica.com.
Depending on the section of the Web Site, the data collection channel or the means by which you interact with Telefónica, your data may be processed for the following purposes:
What for? – Purposes of processing: the purpose of the processing we are pursuing is to deal with and respond to enquiries made by users of the Web Site and/or, in general, data subjects contacting Telefónica through the other channels provided for this purpose. Please note that your data may also be provided, when needed, to the Telefónica Group company that markets the products and services in your territory.
Why? – Applicable legal basis: the legal basis on which we rely to carry out that purpose is the consent given when you voluntarily contact us.
What data? – Type of data: the data we process for this purpose are your identification and professional data (e.g. name and surname, email, contact telephone number and/or company you work for), voice in the case of the telephone channel as incoming calls may be recorded, as well as the information contained in the query submitted, the processing of which is necessary to provide you with a response.
Where is it obtained from? – Source: the data we process for this purpose is obtained from you when you complete the contact forms included on the Web Site, call our Customer Service channel and/or send us an email at the contact addresses we make available to users, including those mentioned in this Privacy Policy.
Who does it belong to? – Categories of data subjects: the data we process for this purpose relates to Web Site users or in general, data subjects who submit enquiries.
For how long is it processed? – Retention period: the data we process for this purpose will be subject to the general retention criteria set out in the section 3 of this Policy and in any case, will not be retained for longer than is necessary to deal with queries and, where appropriate, to meet Telefónica's potential liabilities in relation thereto.
What for? – Purposes of processing: the purpose of the processing we are pursuing is to send periodic newsletters by e-mail, upon request by the data subject, on the activities carried out by the Telefónica Group and the content generated by the Group through its different areas. Depending on the newsletter you have asked to subscribe to, your data may be shared with the Telefónica Group companies responsible for it in order to process your subscription request and/or management of associated mailings.
Why? – Applicable legal basis: the legal basis on which we rely to carry out this purpose is the consent given when you subscribe to the newsletters.
What data? – Type of data: the data we process for this purpose are your identification, professional and contact details necessary to send you the newsletter.
Where is it obtained from? – Source: the data we process for this purpose is obtained mainly from the newsletter subscription forms included on the Web Site, as well as the rest of the contact channels provided by Telefónica for this purpose.
Who does it belong to? – Categories of data subjects: the data we process for this purpose relates to the users of the Web Site and data subjects in general who subscribe to the newsletters.
For how long is it processed? – Retention period: the data we process for this purpose will be subject to the general retention criteria set out in the section 3 of this Policy.
What for? – Purposes of processing: the purpose of the processing that we are pursuing is to maintain active and technically manage the Web Site owned by Telefónica that is visited by the user and to which this Policy is applicableand any applicable Particular Conditions, to protect it against security incidents and malicious attacks that it may suffer and, in general, to enable free and continuous access to it by all internet users. Users can find further information on the scope of this purpose in the Cookies Policy applicable to the website owned by Telefónica.
Why? – Applicable legal basis: the legal basis on which we base this purpose is the legitimate interest of Telefónica, as the owner, in guaranteeing the availability and security of its Web Sites for all internet users who visit them, in accordance with the relevant legal and user conditions notices.
What data? – Type of data: the data we process for this purpose are those, generally pseudonymised, which are obtained directly from the devices with which the user accesses and browses the Web Site owned by Telefónica, the processing of which is strictly necessary for the fulfilment of the aforementioned purpose.
This website browsing data may include the user's IP address; the date and time of connection; aggregate data on the type of audience browsing the website, such as geographical information, the device used for browsing, technology, etc.; browsing behaviour on the Web Site, such as the number of pages viewed, average time on the page, bounce rate, whether content is shared via social networks, etc.; as well as aggregate data on the channels from which the audience arrives: organic search, direct search, social networks or referrals.
Where is it obtained from? – Source: the data we process for this purpose is obtained from the devices with which the user accesses and browses the Web Site owned by Telefónica.
Who does it belong to? – Categories of data subjects: the data we process for this purpose relates to users who access and browse the Web Site owned by Telefónica.
For how long is it processed? – Retention period: the data we process for this purpose will be subject to the general retention criteria set out in the section 3 of this Policy.
What for? – Purposes of processing: the purpose of the processing that we are pursuing is to maintain active and technically manage the services, platforms and/or, in general, private áreas that may be accesible from time to time through the Web Site owned by Telefónica and to which, in addition to this Policy, the conditions expressly accepted or agreed to that effect Will be aplicable in the framework of collaboration contracts and/or provision of services sucha as those related to Internet of Things (IoT), Big Data, Artificial Intelligence and/or Blockchain signed with third parties (Telefónica´s customer companies); as well as through the cookies generated in private areas when users authorised by said third parties browse the Web Site.
Why? – Applicable legal basis: the legal basis on which we base the processing of data users authorised to Access certain Telefónica services and/or online platforms, in their role as employees of a Telefónica customer company, is the appropriate fulfilment of the contractual relationship between Telefónica and the company in which the authorised user carries out their activity.
What data? – Type of data: the data we process for this purpose are all those necessary to create, manage and maintain the authorised user`s account on the Telefónica service or platform accesible through the Web Site, as well as those obtained directly from the devices with which the user accesses and browses the Web Site.
Where is it obtained from? – Source: the data we process for this purpose is usually provided either by the users and/or by the B2B customers in which these users carry out their professional activity, as well as from the devices with which the user accesses and browses the Web Site owned by Telefónica, the processing of which is strictly necessary for the fulfilment of the aforementioned purpose.
Who does it belong to? – Categories of data subjects: the data we process for this purpose refers to users authorised by Telefónica´s customer or colaborators to Access and browse the private áreas of the Website.
For how long is it processed? – Retention period: the data we process for this purpose will be subject to the general retention criteria set out in the section 3 of this Policy.
What for? – Purposes of processing: the purpose of the processing that we are pursuing is to interact and maintain contact with users who interact with Telefónica through the different social networks in which the Telefónica has created an official account. This includes the public response to messages or public comments made by said users, appointments, attention and response to private messages through said networks, processing of the request to the Telefónica area or to the Telefónica Group company competent to deal with it, etc. If strictly necessary, your data may be shared with the relevant Telefónica Group companies in order to process and respond to your request.
Why? – Applicable legal basis: the legal basis on which we rely to carry out this purpose is the consent you give when you interact with Telefónica through the social network on which Telefónica has an official account.
What data? – Type of data: the data we process for this purpose are your public data in your profile on the social network, identification data, contact data and other data voluntarily shared during contact through the social network or data necessary to resolve the request made.
Where is it obtained from? – Source: the data we process for this purpose is obtained from the social network through which you contact us and those that we obtain directly from you in that contact.
Who does it belong to? – Categories of data subjects: the data we process for this purpose relates to users who contact Telefónica through the social network and any other data subjects whose data the user of the social network has been informed of when contacting Telefónica.
For how long is it processed? – Retention period: the data we process for this purpose will be subject to the general retention criteria set out in the section 3 of this Policy.
What for? – Purposes of processing: the purpose of the processing we are pursuing is to manage attendance and enable access to the events premises for those data subjects who decide to register voluntarily for the event. In addition, we may send evaluation surveys of the events in which you decide to register.
Why? – Applicable legal basis: the legal basis on which we rely to carry out that purpose is the consent given when you voluntarily apply to attend or participate in the relevant event.
What data? – Type of data: the data we process for this purpose are your identification, professional and contact data necessary to manage your registration for the event.
Where is it obtained from? – Source: the data we process for this purpose is obtained from the registration forms for the events provided for this purpose, whether they belong to Telefónica and/or, where appropriate, to the other co-organisers of the events.
Who does it belong to? – Categories of data subjects: the data we process for this purpose refers to data subjets who contact Telefónica showing interés in attending or participatin in events.
For how long is it processed? – Retention period: the data we process for this purpose will be subject to the general retention criteria set out in the section 3 of this Policy.
What for? – Purposes of processing: the purpose of the processing we are pursuing is to send comercial information, including by electronic means, about Telefónica producto and services.
Why? – Applicable legal basis: the legal basis on which we rely to carry out that purpose is the express consent of the recipient as general rule, all in accordance with the aplicable regulations.
What data? – Type of data: the data we process for this purpose are your identification, profesional and contact data necessary to manage the mailing.
Where is it obtained from? – Source: the data we process for this purpose is obtained from the forms and/or other means of data collection provided for this purpose by Telefónica.
Who does it belong to? – Categories of data subjects: the data we process for this purpose refers to data subjects or users who contact Telefónica showing interest in receiving commercial information.
For how long is it processed? – Retention period: the data we process for this purpose will be subject to the general retention criteria set out in the following of this Policy.
In general, we will keep your data for the period necessary to comply with the purposes described in each processing activity and to determine the possible liabilities that may arise from that purpose.
For example, Telefónica has established retention periods that will be aplicable depending on the purpose and the legitimate basis aplicable to each processing activity, unless a different period has been specified in this Policy and/or in the participar conditions or conditions for the provision of each of Telefónica´s products and services:
In any case, your data will be kept in accordance with the retention criteria or specific periods described in each processing activity and, where appropriate, until you withdraw your consent and/or object to the processing of your data. In this regard, we will make our best efforts to provide you with an automatic and simple mechanism so that you can withdraw the consent granted and/or object to the processing and, in any case, we are at your disposal at the e-mail address for exercising your rights as indicated in section 5 of this Privacy Policy.
Finally, please not that after the aforementioned deadlines, the data processed may be destroyed, blocked or anonymised, as appropriate, and in accordance with the provisions of the law aplicable. Accordingly, we also inform you that the data processed may be subject to an irreversible anonymisation process in compliance, in any case, with the Code of Good practices in data protection for Big Data projects, as well as the Guidelines and guarantees in personal data anonymisation procedures publised by the Spanish Data Protection Agency in order to use all the guarantees esthablished in the legislation, as well as any other measures permitted by the market and tecnology. In this regard, it should be noted that the prínciples of personal data protection are not aplicable to anonymised information.
In order to carry out the processing purposes described above, we may make use of authorised subcontractors acting on behalf of Telefónica, as data processors (e.g. internet service providers, data hosting and technical support providers, platform providers, e-mail providers, security service providers, etc.) and contractually subject to our instructions, only for the lawful purposes described above and only for the period of time strictly necessary for that purpose.
In particular, this involves giving access to your data to:
According to the above, we also inform you that, to the extent strictly necessary to comply with the purposes stated, your data may be shared with other companies or entities belonging to or linked to the Telefónica Group, for processing under their responsibility and always for the same purposes stated in this Policy. The companies or entities belonging to or linked to the Telefónica Group to which your data may be shared can be consulted in the section “about Telefónica”, “about the Company” or the equivalent section that replaces it available on the website www.telefonica.com.
In addition, in the event that there is a legal obligation or requirement to do so, we may communicate your data to the competent public authorities in accordance with such obligation or legal requirement.
Where authorised subcontractors acting on behalf of Telefónica or such recipients are located or process your data outside the European Economic Area, we will be making an international transfer of your data in accordance with applicable data protection legislation. In general, we will avoid international transfers of data and your data will be processed within the European Economic Area. However, in the event that such international transfers are necessary, we will take the necessary organisational, technical and contractual measures to ensure the protection and security of your data, such as, for example, signing the European Commission’s Standard Contractual Clauses with the authorised subcontractor or third party recipient, carrying out impact assessments on the relevant international transfer to assess the risk and adopt measures to mitigate it, encryption of data in transit or at rest, pseudonymisation of the data transferred, the possibility for the data subject to claim damages directly against the authorised subcontractor or third party recipient, etc.
As a data subject, applicable data protection legislation grants you certain rights over your data which, depending on how they apply, you may exercise against Telefónica. Below you will find details of these rights and how you can exercise them. We also inform you that on the website of the Spanish supervisory authority (www.aepd.es) you can find further information on the characteristics of these rights and download templates for exercising each of them.
In general, you may exercise these rights at any time and free of charge by contacting Telefónica at aiofthings.protecciondedatos@telefonica.com. Likewise, in general, mechanisms for the automated unsubscribe of communications and other options for the withdrawal of consent and opposition shall be made available to the user.
It is important to bear in mind that when you exercise a right, in most cases, you must clearly specify which right you are exercising and provide a copy of a document proving your identity.
Any exercise of rights shall be answered within a maximum period of one month, which may be extended by two months if necessary, taking into account the complexity of the request and the number of requests.
Finally, in the event that you do not agree with the way in which your data is handled by Telefónica, you have the right to lodge a complaint with the national supervisory authority by contacting the Agencia Española de Protección de Datos, whose contact details are as follows:
Agencia Española de Protección de Datos
C/ Jorge Juan, 6 – C.P. 28001, Madrid (España)
www.aepd.es
Telefónica reserves the right to update this Privacy Policy at any time. Such update will be made public by Telefónica, in any case, with the legally required notice prior to its entry into force. In addition, it will be communicated directly to the data subject in the event that it affects their rights or freedoms or when, for example, the inclusion of a new processing activity requires the consent of the data subject or modifies the scope of the legitimate interest that enables the processing.
For more information, please note that you can also view Telefónica's Global Privacy Policy which also apply generally to our company as part of the Telefónica Group.
Privacy Policy updated as of February 2022.