Cookies policy

When you access or download this Cookie Policy from the app, we will only use technical cookies.

I. Second layer of information – Cookies policy

The user is informed that this Site uses cookies and/or similar technologies (hereinafter referred to generically as "cookies"), which are used to store and retrieve data on the user's device (e.g. computer, mobile phone or tablet) when browsing. Hereinafter, the term "Site" shall be understood to mean any web page or section of a web page (Website) or computer application (App), owned by Banco Santander, S.A. (hereinafter, the "Bank") in which an information society service is provided.

What are cookies?

Cookies are files stored on the device of a user browsing the internet or other types of platforms and applications (for example, smartphone and tablet apps) that, in particular, contain a number, which allows the user's device to be unmistakably identified, even when the location or IP address of the device changes.

We may also use similar technologies used to store and retrieve data, such as local shared objects or flash cookies¹ , web beacons or bugs, or web pixels², as well as any device fingerprinting technique.

In general, these technologies can serve very diverse purposes, such as, for example, allowing browsing on the Site and enabling functions or services, recognising the user as a client or potential client of the Bank, obtaining information about their device, their browsing habits or behaviour on the Site, collecting information that the user provides through forms or simulators, or even showing the user personalised advertising based on the information obtained. The specific uses we make of these technologies are described below.

The Site is accessible without the need for cookies to be activated to allow the user to browse and use the different options or services that exist on it. However, if the user disables or does not enable certain cookies, some services and, therefore, some functions may be limited.

1. Local shared objects or flash cookies: these are a type of cookies that can store much more information than traditional cookies. They are browser-independent and, therefore, more difficult to locate, view or delete. They can be used, for example, to regenerate standard cookies.

2. Web beacons or bugs (also referred to as web pixels or beacons): inconspicuous images, in terms of size and colour, which are downloaded when visiting a website but stored on a secondary website, thus allowing the owner of the secondary website to record the user's visit based on the information provided by the user's browser when downloading the image (IP address, operating system, browser version, etc.).

How can you authorise the use of cookies?

According to this Cookies Policy, and provided that the user has consented to use them by clicking the banner or in Settings, the Bank will use cookies as described below.

The user of this Site may edit or reject the use of all cookies that are not for technical, analytical or statistical and/or preferential or personalisation purposes. The user selects the settings for personalisation cookies, which are only used for communicating between the user's system and the network, and are thus essential for basic Site operation and providing services that the user expressly requests. This type of cookies that the Site uses for the purpose of enabling the operation and provision of the services offered on it do not require your informed consent for their use and, therefore, cannot be deactivated as they are strictly necessary for browsing through the Site and the provision of the requested service.

These exempted cookies include cookies used to manage and run the Site, as well as to enable its functions and services, such as monitoring data traffic and communications, identifying sessions, accessing restricted areas, reminding users of items in an order, going through the process of making an order, managing payments, monitoring fraud associated with the security of the service, making a request to sign up or participate in an event, counting visitors when billing software licences for the software used to provide some services, using security components during browsing, storing content to disseminate videos or sound, enabling dynamic content (for example, animations to load a text or image) or sharing content via social media.

Also belonging to this category, due to their technical nature, are those cookies that allow this Site to manage, in the most efficient way possible, the advertising spaces that, as another element of design or "layout" of the service offered to the user, are included based on criteria such as the edited content, without collecting information from users for other purposes, such as personalising that advertising content or other content. Likewise, cookies are excepted if they have a purpose strictly limited to the statistical measurement of browsing on the Site and are used solely to produce anonymous statistical data.

Finally, included in this category of cookies, provided that the user themself chooses the characteristics, are those that allow the Site to remember information so that the user accesses the service with certain characteristics that can differentiate their experience from that of other users, such as, for example, the language, the number of results to display when the user performs a search, the appearance or content of the service depending on the type of browser through which the user accesses the service or the region from which the user accesses the service.

The Bank will not use cookies that require the user's consent if the banner requesting consent is no longer visible without the user having performed any of the actions required to obtain consent or reject it.

The user may manage their consents regarding the installation and use of Cookies at any time from the Settings Panel:

• On the Website, by clicking on the "Configure Cookies" button that we make available to you at the beginning of this Cookies Policy.
• In the App for private customers, from the "Cookie Management" section, which can be accessed from "Menu-Personal Area"; and in the App for corporate customers, which can be accessed from the "Cookie Settings" section, which can be accessed from "Menu-Security and Privacy".

The settings selected by the user vary depending on whether the user uses the Website or the App, so:

• If they use the Website, the selected settings will be saved by device and browser.
• If they use the App, the selected settings will be saved for the App, and linked to the client who accessed it, regardless of the device from which the user subsequently accesses it. Therefore, if the user accesses the App from a different device than the one they had initially used, the most recent settings they have set up will be kept.

What types of cookies do we use?

Who is responsible for data processing?

Banco Santander, S.A ("the Bank" or "Banco Santander").

Postal address: C/ Juan Ignacio Luca de Tena, 11-13, 28027 Madrid.

Contact for the data protection officer/Privacy Office: privacidad@gruposantander.es

Why do we process data?

In certain circumstances, the use of cookies involves the processing of personal data of users visiting the Site, when they identify themselves or provide certain identifying or contact data that make it possible to distinguish the browsing of some users from others, when the user is identified through an IP address or when unique identifiers are used that make it possible to distinguish some users from others and perform individual tracking of them (for example, an advertising ID or others obtained from their encrypted identifying or contact data). In particular, if the user is a customer of the Bank and has previously accessed its Online Banking (private area) or if the user is an unregistered user but has provided certain identifying or contact information through the forms on the Site (prospective customer), by using first-party cookies, the Bank can identify the user as a customer or prospective customer and collect information about the user's browsing or information that the user has provided through forms or simulators available on the Site and use it for the purposes described in the section Use of cookies and similar technologies on the Bank's website and app for "Customers" and "Prospective customers", accessible by clicking on the drop-down menu "For what purposes and on what lawful basis do we process your personal data?" at https://www.bancosantander.es/en/informacion-proteccion-datos.

How do we obtain your data?

1. Directly from you, through the information you provide us when you browse our websites and mobile phone applications, by using cookies or any other type of online identifier or through the digital fingerprint of your device or terminal.
2. From employees of the Bank whom you have given your consent to for the use of cookies that involve sending your information collected by these cookies to the Bank for analytical or advertising purposes.

Who will we share your data with?

We share your personal data with:

1. Bank service providers: The Bank collaborates with certain third-party service providers who have access to the personal data of users and who process said data, as data processors, in the name and on behalf of the Bank as part of the services they provide. For example, Google Ireland Limited (hereinafter "Google").

   The Bank follows strict criteria for selecting service providers in order to comply with its obligations regarding data protection and undertakes to sign the corresponding data processing contract with them, which will impose on them the following obligations, among others: to apply appropriate technical and organisational measures; to process personal data for the agreed purposes and only in accordance with the Bank's documented instructions; and to delete or return the data to the Bank once the provision of services has ended.

   Among the services that the Bank contracts from third-party providers are audience or advertisement measurement, analytical services, advertising services, etc.

2. Third parties with whom a unique identifier is shared (e.g. advertising platforms): when you provide us with your consent. You can access the full list of third parties with whom we will share your personal data at the following link.

   You can learn about the communications made by these third parties, including international data transfers, if applicable, in their corresponding cookie policies, which you can access via the link above.

Can data be transferred to other countries?

If the user consents to the installation of cookies, they should bear in mind that first-party cookies and other cookies will be installed, whose services are provided by our provider Google. The installation of Google cookies may involve the international transfer of data by Google to the United States, which could mean, in very isolated and specific cases, access to user data by the authorities of this country in carrying out investigation and national security tasks.

However, the Bank will only transfer data to other countries if there is an adequacy decision determining that it is a country with a comparable level of protection to that of the European Union, or failing that, applying adequate guarantees in accordance with data protection regulations, such as the signing of Standard Contractual Clauses or Binding Corporate Rules. The user may request additional information about such appropriate safeguards through the contact methods indicated in the section What rights do users have?

How long will we retain the data?

The personal data collected will be kept for the duration of the contractual relationship with the user or while it is necessary for the purpose for which it is collected, in accordance with the provisions of the section of the privacy policy titled "How long do we keep your data?"

What are the rights of users?

The user may exercise their rights of access, rectification, objection, restriction, portability and erasure before the Bank or consult any matter relating to the processing of their personal data by sending an email to  privacidad@gruposantander.es or by post to the following address: C/ Juan Ignacio Luca de Tena, 11-13, 28027 Madrid (Att. Data Protection Officer).

More information

The user may consult detailed information about the processing of their data on our website, accessible at  https://www.bancosantander.es/en/informacion-proteccion-datos or by contacting the Bank's Data Protection Officer. 

If the user accepts the use of third-party cookies, they must bear in mind that these are subject to their own specific conditions, including their data protection policies, which are beyond the control of Banco Santander. For example, in the case of Google, the user can read these policies at https://business.safety.google/privacy/.

How can you disable or delete cookies?

The user may revoke or adjust their consent regarding cookies at any time, through the Settings Panel that they can access according to the instructions in section 2, depending on whether the user is on the Website or App, as well as through common platforms available for this purpose or through their browser.

If the user wishes to revoke consent through the browsers they use, they must configure it as outlined below: (i) Microsoft Internet Explorer: under the "Tools" menu option, selecting "Internet Options" and accessing "Privacy".

(ii) Firefox, for Mac in the menu option "Preferences" > "Privacy" > "Show cookies"; and for Windows, in the menu option "Tools" > "Options" > "Privacy" > "Use custom settings for history".

(iii) Safari, in the Safari option, selecting "Preferences" > "Privacy".

(iv) Google Chrome, in the Tools menu option or Chrome tab (for Mac), selecting "Options" ("Preferences" on Mac) > "Advanced Settings" > "Privacy and security" > "Site Settings" and the checkbox "Cookies and Site Data".

(v) Microsoft Edge, in the "Settings and more" menu option, selecting "Settings" > "Cookies and site permissions" > "Manage and delete cookies and site data".

Keep in mind that, if you have accepted the third-party cookies, you must delete them from the browser's options. In this regard, the user is advised to consult their browser's help section or access the help web pages of major browsers, which can be found at the following links:

Keep in mind that, if you have accepted the third-party cookies, you must delete them from the browser's options. In this regard, the user is advised to consult their browser's help section or access the help web pages of major browsers, which can be found at the following links:

• Internet Explorer
• Firefox
• Safari
• Chrome
• Microsoft Edge

You can also use "do not track" cookie blocking tools. Users can read more about revoking consent given or about the procedure that must be followed to disable cookies and ask questions about the Site's Cookies Policy by contacting the addresses listed in section 4. Basic information on personal data protection.