Privacy Policy

Effective as of 16.02.2024

Additional Information on Data Protection

The only personal data to which Iberia Líneas Aéreas de España, S.A. Operadora, Sociedad Unipersonal (hereinafter,”Iberia”) will have access to those that the interested party provides voluntarily. In the cases and with respect to the data in which this is expressly indicated to the interested party, if they do not provide them, we will not be able to offer the requested services.

In compliance with current regulations (fundamentally, the EU General Regulation 2016/679 for the Protection of Personal Data and the European or national regulations that supplement or develop it at all times), Iberia has adopted the necessary technical and organizational measures to maintain the required level of security in regard to the personal data processed. It is also equipped with the necessary mechanisms at its disposal to prevent, as far as possible, unauthorized access, theft and illegal modifications and the loss of data.

I.- Who is responsible for processing your data?

The person responsible for processing your data is Iberia Líneas Aéreas de España, S.A. Operadora, Unipersonal Company, with registered office in Madrid, Calle Martínez Villergas 49, 28027. You can contact the Iberia Data Protection Office by email addressed to OficinaDPO@iberia.es or by post to “Data Protection Office of Iberia Líneas Aéreas de España, S.A. Operadora, Unipersonal Company” at Calle Martínez Villergas 49, 28027 Madrid.

II.- For what purpose and legitimacy do we process your data?

  1. Reservation management. To be able to manage, process and send information related to your request to book experiences in our space. La The right to carry out this treatment will be your consent.

III.- When will we send you communications?

We will only send you communications when you have booked an experience in our space. We will not send you any news or communications of any other kind.

IV.- How long will we keep your data?

We will process your personal data as long as they are necessary for the purpose for which they were collected and as long as their deletion is not requested by the interested party and they should not be deleted because they are necessary for the fulfillment of a legal obligation or for the formulation, exercise and defense of claims.

If the interested party revokes their consent or exercises the right of deletion, their personal data will be kept blocked at the disposal of competent Courts, Courts and Authorities, for the statute of limitations established by law to meet the possible responsibilities arising from the processing of the same.

V.- To whom will we communicate your data?

In particular, your data will be transferred to the following entities:

  1. Public Bodies, Judges and Courts and, in general, competent Authorities, when Iberia has a legal obligation to provide them.
  2. Iberia has the collaboration of some third-party service providers who have access to your personal data and who process the said data in the name and on behalf of Iberia as a result of their provision of services.

Iberia follows strict criteria for selecting service providers in order to comply with its data protection obligations and undertakes to sign with them the corresponding data processing contract, which will impose on them, among others, the following obligations: to apply appropriate technical and organizational measures; to process personal data for the agreed purposes and following only Iberia's documented instructions; and to delete or return the data to Iberia once the provision of services.

VI.- What are your rights when you provide us with your data?

The interested party can exercise, if they wish, their rights of access, rectification and deletion of data, as well as request that the processing of their personal data be limited, oppose it, request the portability of their data, and not be subject to automated individual decisions, through the following means:

  • By email to oficinaDPO@iberia.es, or
  • By postal mail addressed to “Data Protection Office”. Iberia Communication Department”, at Calle Martínez Villergas 49, 28027 Madrid, Spain

In these cases, in order to fulfill your request, you must provide us with the following information and documentation:

  • Applicant's full name
  • Identity document
  • Contact details (at least, email)
  • Data subject to your request
  • Any data that helps us locate the data that is the subject of your request
  • A photocopy of your identity document, so that we can verify your identity.
  • If you apply on behalf of another person, you will need to provide an authorization signed by that person along with their corresponding identity document.

VIII.- To what authority can you exercise your claims?

Interested parties may in any case file a complaint with the Spanish Data Protection Agency, especially when they have not obtained satisfaction in the exercise of their rights, through the web www.aepd.es.