Valid since 01 January 2024
Additional Information on Data Protection
The only personal data to which Iberia Líneas Aéreas de España, S.A. Operadora, Sociedad Unipersonal (hereinafter “Iberia”) will have access is that which the interested party provides voluntarily. In cases and in the data where this is stated explicitly to the interested party, if such is not provided, we will be unable to offer the requested services.
In compliance with current regulations (primarily, General Data Protection Regulation EU 2016/679 and European and national law that compliments or develops it at any time), Iberia has taken the technical and organisational measures necessary to maintain the level of security required to deal with personal data. Furthermore, it has the precise mechanisms at its disposal to avoid, as far as possible, unauthorised access, data extraction and illicit modifications and loss of data.
The controller of processing your data is Iberia Líneas Aéreas de España, S.A. Operadora, Sociedad Unipersonal, having its registered offices in Madrid, Calle Martínez Villergas 49, 28027. You can contact the Iberia Data Protection Office by email at OficinaDPO@iberia.es or by mail at “Oficina de Protección de Datos de Iberia Líneas Aéreas de España, S.A. Operadora, Sociedad Unipersonal” at Calle Martínez Villergas 49, 28027 Madrid.
We process your personal data for as long as it remains necessary for the purpose for which it was collected and while the interested party does not request its erasure and it must not be deleted because it is necessary for the fulfilment of a legal obligation or for the formulation, exercise and defence of claims.
If the interested party revokes their consent or exercises the right of erasure, their personal data will remain blocked at the disposal of competent Courts, Tribunals and Authorities, during the legally established limitation periods for meeting the possible responsibilities arising from the processing thereof.
If users have previously given their consent, we may forward their personal data to other companies from the IAG Group for the use of their data in the undertaking of commercial actions.
In particular, their data will be transferred to the following companies:
Iberia follows strict criteria when selecting service providers in order to meet its obligations in relation to data protection, and undertakes to enter into the corresponding data processing agreement with them, whereby the following obligations, amongst others, are imposed thereon: to apply appropriate technical and organisational measures; to process personal data for the purposes agreed upon and solely on the basis of Iberia's documented instructions; and to erase or return the data to Iberia once the delivery of services has ended.
The interested party may, if they wish, exercise the right of access, rectification and erasure of data, as well as request that the processing of their personal data be limited, oppose thereto, request the portability of their data, and not be the subject of automated individual decisions, through the following channels:
In such cases, to allow us to deal with your request, you must provide us with the following information and documentation:
Interested parties can, in any case, submit a claim to the Spanish Data Protection Agency, especially when they have not obtained satisfaction in the exercise of their rights, via the website www.agpd.es.