The personal data of individual representatives will be processed by thanX by CaixaBank as the data controller, through its branch (CaixaBank S.A., Branch in Morocco) (hereinafter, “CaixaBank”), for the purposes of management and contractual execution, as well as compliance, where applicable, with regulatory obligations imposed on CaixaBank during the term of the relationship (for example, tax and commercial obligations, fraud prevention, and anti-money laundering). Likewise, CaixaBank will share this personal data with the relevant local authorities and bodies to comply with legal obligations such as fraud prevention and anti-money laundering under local legislation.

Personal data will be retained for the duration of the business relationship. Once this period has expired, the data will be kept (as indicated by regulations) solely for the purpose of complying with required legal obligations and for preparing, exercising, or defending possible claims, during the statute of limitations for any actions arising from this agreement.

The data subject may exercise their rights (such as rights of access, rectification, erasure, data portability, or restriction of processing) at the registered office of CaixaBank’s branch at 179, Boulevard d’Anfa, Casablanca, Morocco, or at any other CaixaBank, S.A. branch, or at the Spanish headquarters located at Calle Pintor Sorolla 2-4, 46002 Valencia (Spain), or via www.caixabank.com/ejerciciodederechos.

Likewise, the interested party has the right to lodge a complaint with the supervisory authority in Morocco, the National Commission for the Control of Personal Data Protection, www.cndp.ma, or with the main supervisory authority of the CaixaBank Group, the Spanish Data Protection Agency www.aepd.es.

Finally, the contact details of CaixaBank’s Data Protection Officer are: www.caixabank.com/delegadoprotecciondedatos.