Home > Stakeholder Area INFORMATION ON PERSONAL DATA PROCESSING (GDPR)


Processing of your personal data


En Cecabank tratamos sus datos personales con la exclusiva finalidad para la que fueron recabados. En concreto, para gestionar los contratos/operativas/actividades solicitados o contratados. In Cecabank we process your personal data with the only purpose for which they were requested for. We therefore process them in order to maintain the pre-existing relationship between the bank and the client/supplier/collaborator.

We therefore process them in order to maintain the pre-existing relationship between the bank and the client/supplier/collaborator.

The processing of your personal data with other purposes is not planned and will not be possible without the necessary legitimisation.

Lawfulness of processing


El tratamiento sólo será lícito si se cumple al menos una de las siguientes condiciones: Processing shall be lawful only if and to the extent that at least one of the following applies:

Cecabank’s Data Protection Officer (DPO)


Cecabank’s DPO is the Compliance Head. You may directly contact him/her through the following email address arco@cecabank.es

Rights in relation with you personal data


If desired you may exercise the rights pointed out in GDPR (General Data Protection Regulation) in respect of the personal data already under processing by Cecabank. We specifically refer to the right of access, to rectification and erasure, to restriction (in respect to the purposes they were requested), to data portability (sending to other entity), and to object automated individual decision-making (not being used to adopt decisions just based on automated processing, including profiling).

Asimismo podrá solicitar que se limite el tratamiento de sus datos personales (respecto de las finalidades para los que estén siendo tratados), solicitar la portabilidad de sus datos (envío de los mismos a otra entidad), así como a no ser objeto de decisiones individuales automatizadas (no ser objeto de una decisión basada únicamente en el tratamiento automatizado, incluida la elaboración de perfiles, que produzca efectos jurídicos o le afecte significativamente de forma similar). Moreover yo may also exercise the right to restriction (in respect to the purposes they were requested for), to data portability (sending them to other entity), and to object to automated individual decision-making (not being used to adopt decisions just based on automated processing, including profiling, which may produce legal effects or significantly affect you in a similar way).

You can exercise your rights by sending a written request to arco@cecabank.es and enclosing a copy of your ID document.

We provide forms to enable you to exercise your rights:

Data keeping


We will keep your personal data during the relationship. Once ended, Cecabank will have them blocked until the deadlines applicable for legal claims and, in general terms, during the ten years required by the laws on anti money laundering and terrorism financing. As soon as such deadlines are exceeded Cecabank will erase the data.

Data disclosure


Data will not be disclosed to third parties unless a legal obligation is applicable or a previous agreement legitimates the entity to do so.

Finally, we inform you that you may withdraw the given consent at any time, without affecting the lawfulness of the processing, by sending a request to the following e-mail address arco@cecabank.es. Please remember to enclose a copy of your ID card or of any similar document proving you identity.