Close window

We use our own and third party cookies to improve your experience and our services. If you continue, we consider that you accept their use. You can get more information on our website at cookies policy.

Personal data protection policy

Entry into force: 20 September 2019

Iberia Privacy Policy for Customers and Passengers

Our Privacy Commitment

Iberia is committed to respecting your privacy and protecting your personal information.

  • We will be transparent about the information we are collecting and what we will do with it.

  • We will use the information you give us for the purposes described in our Privacy Policy, which include providing you with services you have requested and enhancing your experience with IBERIA.

  • We will also use the information to help us understand you better and so that we can give you relevant offers.

  • If you tell us you don’t want to receive marketing messages we will stop sending them. We will, of course, continue to send important information relating to a product or service you have purchased to keep you informed about your booking and travel itinerary.

  • We will put in place measures to protect your information and keep it secure.

  • We will respect your data protection rights and aim to give you control over your own information.

You can access our full Privacy Policy below to help you to understand better how we use your personal information. In it, we explain in more detail the types of personal information we collect, how we collect it, what we may use it for and who we may share it with.

Within our full Privacy Policy you can find some specific examples of why and how we use your personal information. If you have further questions please get in touch with us at our Data Protection Office by email at OficinaDPO@iberia.es .

Without prejudice of your rights under the relevant applicable laws, this Privacy Policy and the information above have no contractual nature and are not a part of your contract with us.

Controller of Personal Information

Any personal information processed by Iberia in connection with this Privacy Policy is controlled by Iberia Líneas Aéreas de España S.A. Operadora, Sociedad Unipersonal, holder of Spanish VAT no. ES-A85850394 (hereinafter “IBERIA”), which is considered the “data controller” under European Union data protection law. Our contact address for this purpose is “Data Protection Office of Iberia Líneas Aéreas de España S.A. Operadora, Sociedad Unipersonal” at Calle Martínez Villergas numero 49, 28027 – Madrid (SPAIN) or by email at OficinaDPO@iberia.es.

If you made a booking with us but one or more flights are operated by other air carriers, then each of these carriers will also be, independently, a data controller under European Union data protection law.

IBERIA is a legal entity pertaining to IAG Group, the parent company of which is the Spanish legal entity International Consolidated Airlines Group, S.A.. You may learn more about what companies are part of IAG Group below.

In addition, if you are a member of our loyalty scheme IBERIA PLUS then the company Avios Group Limited (AGL) –which is an IAG Group company, as well- will also be a “data controller” together with IBERIA of your personal information being processed within Iberia Plus Loyalty Program. Avios Group Limited’s address is Astral Towers, Betts Way, Crawley RH10 9XY – United Kingdom. Its webpage is at www.aviosgroup.com and its Data Protecction Office may be reached by ordinary mail to the aforementioned address or by email at data.protection@avios.com .

What do we mean by personal information?

Personal information means details which identify you or could be used to identify you, such as your name and contact details, your travel arrangements and purchase history. It may also include information about how you use our websites and mobile applications.

When does this policy apply?

This Privacy Policy applies to personal information about you that we collect, use and otherwise process in connection with your relationship with us as a customer or as a potential customer or as a member of our loyalty schemes IBERIA PLUS or ON BUSINESS, including when you travel with us or use our other services –such as our auction website or our gift cards service- , use our websites or mobile apps, contact our service agents or call centres and book to use our services through third parties -such as travel agents and other airlines.

When we refer to other entities being data controllers within Sections “Data Controller” or “Who do we share your personal information with?”, you should consult their own privacy policies for further information.

If you decide to hire additional services with us, such as making an on board purchase or using our in-flight entertainment devices or taking part in one of our contests organised by Iberia together with third party collaborators, please take into account that further terms and conditions may apply.

How can you protect your personal information?

We make serious efforts to care for and protect your personal information when you share it with us. Below you can find some recommendations on how to keep your personal data safe.

Do not share your booking code or locator

When you make a booking you will be furnished with a reservation code –also known as PNR or Passenger Record. This reference will be included in your booking confirmation email or within the ticket of each passenger within that reservation.

Please always keep your reservation code confidential. If you share it with a third person he/she may access your booking data in our systems.

If you travel with others and you do not want them to have access to your booking data it might be advisable that you carry out your reservation separately.

Do not share your Iberia Plus, Iberia Joven or On Business personal area log-in data

To make sure that access to your personal area in our webpage and mobile application is safe please do not share your Iberia Plus; Iberia Joven or On Business –the specialised companies for companies we sponsor together with British Airways Plc- log-in data with anyone. When you finish using our website, online services or mobile applications please make sure to end your session if someone else may access your computer or device. This is particularly relevant in the case that you are using a public access computer or device.

Be cautious and protect yourself from internet fraud and “Phishing”

There is a broadly spread type of internet fraud practice known as “Phishing” aimed to illegally obtaining your personal information by deception. Unsolicited emails are sent to individuals from a list that has been illegally obtained, and recipients are requested to insert or confirm their passwords or bank details in a false or cloned website.

When do we collect personal data?

We collect personal data about you every time you use our services (whether provided by us or by other companies or agents acting on our behalf), including when you travel with us, when you use our website and when you interact with us through electronic means or our customer service centres.

Some examples of when and how we collect information are as follows:

  • When you book or search for a flight or other products or services on our website or mobile app.

  • When you book a flight or any other product through other sales channels, such as a travel agency.

  • When you register with our loyalty programmes Iberia Plus, Iberia Joven or On Business, or our auction service, or when you buy one of our gift cards.

  • When you use one of our virtual assistants to check in for flights, request information about the status of your flights or book services related to them.

  • When you get in touch with us through our call centres and other customer service agents.

  • When you fill in a satisfaction survey and include complaints, compliments, recommendations and suggestions.

  • When you take part in our competitions or you register for one of our promotions, and when you decide to interact with us through your social media profile on Facebook or Twitter, for example.

  • When you travel with us and use the VIP lounges at the airports where we operate.

  • When you use our on-board entertainment services or our communications services.

  • When you click on any of our emails or browse our website. We may also receive information about how you found us on the internet or about the sites you have visited previously.

In all of the above cases and through you yourself, we may collect personal data about third parties, whether adults or minors. In these cases, when you supply data about these people you must have previously obtained their consent and/or necessary legal powers to provide their data for processing on the grounds indicated in this privacy policy. If you do not have their consent, kindly refrain from providing us with that information.

For further information, please refer to the section below “What type of personal data do we collect and keep?”

We may also receive personal data about you from third parties such as:

  • Companies to which we have outsourced the provision of specific services to you.

  • Companies involved in your travel plans, including airlines involved in your previous or subsequent journey, airport operators and customs and immigration authorities.

  • Companies involved in our loyalty programmes and other customer programmes (such as car hire companies and hotels).

  • Companies that provide us with data in accordance with privacy policies that include information that may be shared with Iberia.

What types of personal information do we collect and retain?

When you use our services you will need to provide us with your personal details or the details of those individual(s) who will be travelling.

We collect the following categories of personal information:

  • Information you provide in order for Iberia to complete and manage a booking you have made with us or a service you have requested from us.

    Examples: Your name, address, email, contact details, date of birth, gender, passport or other national ID number, your account details and payment information.

    If you buy tickets for someone else we may collect your billing information but may communicate with the passengers directly about their flight.

    We will know whether you have made your booking at iberia.com or in any other sales channel such as a travel agency or our contact centres.

  • Information collected during your travel with us

    Examples: We may collect information such as your interactions with our personnel and cabin crew before and during the flight.

    We may track location data from your devices where you have permitted us to use it.

    We collect information about your use of our services during travel, such as your use of our inflight entertainment system or our VIP lounge facilities.

  • Information about your travel arrangements
     

    Example: Details of your booking, travel itinerary, details of any additional assistance you require and other information related to your travel with us such as meal preferences or dietary requirements.

  • Information about the services we have provided to you in the past
     

    Example: Details of your previous travel arrangements, such as your previous flights and travel-related issues, including upgrades received, your baggage requirements, airport disruption, luggage incidents and your customer feedback.

  • Information about your online logins and other interactions.
     

    Examples We will retain your data to guarantee our correct interaction with you when you have joined our loyalty schemes Iberia Plus or Ob Business or when you have identified yourself as a member of our schemes or any other loyalty scheme we accept.

    We will retain your information when you have taken part in any of our contests or promotional initiatives, or when you have interacted with us through social networks such as Facebook or Twitter.

  • Information about your use of our websites, contact centres and mobile applications
     

    Examples: To help us customise your personal information and to improve our website we use “cookies” and other similar technologies and collect information about your searches and the contents you have visited on our website, such as what website you are surfing from, or the banner advertisements or links appearing in our marketing partners’ websites.

    We will use the information gathered in the cookie to better understand you as our customer. This information may include, if you have fed it into our website, information on a flight booking or a passenger name in the case these data were linked to your personal profile in Iberia Plus.

    From your use data we may learn that you have visited iberia.com and searched for a flight, but you have not made your reservation yet. We might use this information to contact you and offer you further information on this booking or the destination you might be interested in.

When and why do we collect 'sensitive personal data'?

Personal data related to racial origin, ethnic group, religion, health, sexual orientation and biometric data constitute special categories of personal data and are referred to as “sensitive personal data” requiring additional protection in line with European Union legislation. At Iberia we strive to limit the circumstances in which we collect and process these categories of data. The following are examples of cases in which we may collect and process sensitive personal data.

  • If you ask Iberia and/or an airport operator for specific medical assistance, such as a wheelchair or oxygen.
  • If you have requested permission to fly with us with a specific medical condition or if you are over 28 weeks pregnant.
  • If you have chosen to provide this information for any other reason and we have received it from a third party, such as the travel agency through which you booked your flight.
  • If you use the biometric boarding systems available at some of the airports where we operate flights.

Additionally, you may have requested a special service (such as a menu) which does not in itself constitute sensitive data but which may imply or suggest information about your religion, health or other data.

What do we use your personal information for and under what legal basis do we use it?

The main purposes for which we use your personal information are:

  • Based on our contractual relationship with you, to fulfil your travel arrangements and deliver the services you have asked for
     

    Example: We will need to use your name, address, email, contact details, date of birth, gender passport or national ID information, and payment data and information so that we can process your bookings, fulfil your travel arrangements, collect consideration for our services, provide information required by relevant authorities –such as tax, custom or immigration authorities- and so that Iberia knows who is booked on a flight.

  • Based on our contractual relationship with you, to manage the boarding process and to facilitate flight connections at the airport.
     

    Example: If you have not arrived at the gate to board your flight we may need to check whether you have passed through airport security or whether you were on a connecting flight in order to understand how to contact you about boarding the flight.

    Please also be aware that in some airports where we operate, facial recognition is used –although the use of this technology is voluntary unless mandated by law.

  • Based on our contractual relationship with you, to send status update and operational and servicing communications to you, no matter the channel you may have booked our services through –whether direct sales or through an agency or other airline, online or face to face.
     

    Example: You may receive a notice from us to inform you that check-in is already open, or that your flight is delayed or cancelled, or on any changes affecting the services you hired with Iberia or with other airlines that Iberia may have any type of transport agreement with.

    We may also use your contact information to transmit other kind of operational communications.

    If for example you have used your boarding pass to enter any of your VIP lounges we may offer you information and warnings about your flight such as changes in your boarding gate and/or time.

  • Based on the fulfilment of our legal obligations, to deal with migration and entry/exit requirements with a State territory and to help keep you safe when you fly with us and to meet certain legal and regulatory requirements which apply to Iberia as an airline.
     

    Example: As an airline there are regulatory obligations on Iberia to maintain a record of the names of passengers on our aircraft.

    The laws of certain countries, such as the EU and USA, require airlines to provide certain passenger information to the border and immigration authorities.

    Finally, fighting against fraud and major crimes such as terrorism or Arms, drugs, smuggling of people require that airlines respond to information requirements from the competent law enforcement and security corps within each State where we operate.

  • Based on our legitimate business interest, to provide services tailored to your requirements and to treat you in a more personal way.
     

    Example: We may personalise the experience you have while flying with us. For example, a member of our cabin crew may welcome you back on board an Iberia flight.

  • Based on our legitimate business interest, to carry out analysis and market research
     

    Example: We will analyse the way in which our sales channels, products and services are being used by customers so that we can understand how to improve the service we offer.

  • Based on our legitimate business interest, to carry out direct marketing and keep you informed of Iberia’s products and services that better suit your needs and preferences, in our understanding
     

    Example: We may send to you information on our products and services by email, push messages from our app or text messages.

    We may adapt our apps, websites, emails and other communications to guarantee they are of your highest interest –including, for example, promotions or services related to your recent or historic destinations or similar ones.

    To better understand your flying preferences and your needs when you travel with us and to offer information on special offers such as seat selection, additional luggage or class upgrades.

  • If you are a member of the IBERIA PLUS loyalty program, and based on your consent previously granted for such a purpose to carry out direct marketing by electronic means and to keep you informed on Iberia’s products and services that better suit your needs and preferences, in our understanding, as well as to send to you tailored electronic marketing communications on products and services from other IAG Group companies and/or from our Iberia Plus partner companies.
     
  • Based on your consent previously granted for such a purpose we may record telematic communications and instructions whenever you are using any customer centre or sales service from Iberia, Iberia Express or Iberia Regional/Air Nostrum, and in such cases we will process your personal information, including your voice when you address us through these channels, to provide evidence of the transactions performed for any relevant legal purposes.
     
  • • Based on your consent previously granted for such a purpose by explicitly consenting on hiring such services, to transmit your data to other IAG Group companies or to third companies we work with –such as, for example, third party companies whose products and services are offered or may be hired through our webpage, or our partners from Iberia Plus loyalty program-, in the cases where you are hiring such products and services. The information we transmit in these cases will be exclusively limited to that personal information you have made available to us and is strictly required to hire the product or service in question.
     

    You may acces the full list of Iberia Plus partners at this url address: https://www.iberia.com/es/iberiaplus/search-partner/

  • Based on our contractual relationship with you, to send updated information and operational communications to you
     

    Example: Even if you have opted-out of receiving marketing information from us, we may still send you communications about the services you have booked to use, such as your travel itinerary. These communications will help you get the most from the services we provide and may also contain options and other details about the services you will be using (e.g. advance seating requests, additional baggage and pre-booked meals).

  • Based on our legitimate business interest, to improve our website, products and services
     

    Examples: We may monitor how you and other clients browse our website so that we may identify ways to improve your browsing experience with us.

    We may also invite you to take part in surveys to learn more about your level of satisfaction with our service, your flying experience with Iberia and the use of our services.

    If you are a member of the IBERIA PLUS loyalty program, and based on your consent previously granted for such a purpose we may also send to you surveys to learn about your satisfaction with the program, its offers and promotions and/or the services and products offered by our partners.

  • Based on our contractual relationship with you, to manage transactions, operations, hiring or products and services by any means or channels, or to solve any type of query, complaint, claim or recommendation you may have posed.
     
  • Based on the fulfilment of our legal obligations, as applicable, we may use your personal information for management and administrative purposes
     

    Example: We may use and retain your personal information, including your purchase history, for administrative purposes, which may include for example, accounting and billing, auditing, credit or other payment card verification, anti-fraud screening (including the use of credit reference agency searches, crosschecking information with financial entities and other electronic payment entities, and payment card validation checks) and systems testing, maintenance and development.

  • Based on the fulfilment of our legal obligations, to properly manage emergency, wreck or force majeure situations we may need to transmit your personal information to different kind of people, companies or entities whose help is essential for Iberia in such cases.
     

When will we send marketing to you?

When we collect information directly from you we will ask you if you are happy to receive our marketing communications or to join our Iberia Plus loyalty program. Please note that these communications may refer to our own products and services and, sometimes, they may refer to products and services from other IAG Group companies or even from third party entities –such as, in the case of Iberia Plus, from our partners in this loyalty program where our avios currency may be obtained or redeemed.

Should our intention not be based on your consent previously granted for such a purpose, but on our legitimate business interest, we will inform you on this in a clear way and you will be granted the right to opt-out from receiving such communications.

How can you change what marketing communications you receive and how you receive them?

If you decide you would no longer like to receive marketing communications you can change your mind at any time. The ways to withdraw your consent are described below:

  • IF YOU ARE AN IBERIA PLUS MEMBER, you can change your marketing preferences at any time by amending your communication preferences on your membership profile online at www.iberia.com, accessing your Iberia Plus private area, section “My Profile / Preferences”; or by using online application form for Data Protection Individuals Rights Requests available at https://www.iberia.com/es/management-of-personal-data/
  • IF YOU ARE AN ON BUSINESS MEMBER you can change your marketing preferences at any time by amending your communications preferences on your membership profile online at https://onbusiness.iberia.com and accessing your On Business private area; or by using online applicable form for Data Protection Individual Right Requests available at https://www.iberia.com/gb/management-of-personal-data/
  • • IF YOU ARE NOT A MEMBER EITHER OFN IBERIA PLUS OR OF ON BUSINESS LOYALTY SCHEMES, then you may oppose to receiving these communications by using online application form for Data Protection Individual Right Requests available at https://www.iberia.com/es/management-of-personal-data/

In addition, each marketing communication we send by email will also have an “unsubscribe” or an “amend my contact preferences” option which will allow you to stop you receiving further marketing emails or customise the way you receive such communications.

We will respect your decision on what communications you want to receive and the means or channels you prefer that we use for such purposes, as long as we are able to provide options for you to personalise our communications to you.

You may also stop any further SMS/MMS messages by replying with the word “STOP”.

We will do our best to manage your unsubscribe or customise requests as soon as feasible within a maximum term of 30 calendar days.

Please note that if you tell us that you do not wish to receive further marketing communications, you will still receive service communications (as described above) which are necessary, for example, to confirm your booking or to provide you with an update you on its status. If you are an Iberia Plus or an On Business member, we will continue to keep you informed about your membership and other important service information relating to the loyalty program such as, for example, a new partner joining the program.

How long do we keep personal information?

We will keep your information for as long as we need it for the purpose it was collected, unless you request us to delete it and in such a case provided that the Iberia has no longer the need to keep your information for other reasons.

For example, where you book a flight with us we will keep the information related to your booking so we can fulfil the specific travel arrangements you have made and after that, we will keep the information for a period which enables us to handle or respond to any complaints, queries or concerns relating to the booking. The information may also be retained so that we can continue to improve your experience with Iberia and to ensure that you receive any loyalty rewards which are due to you.

We will actively review the information we hold and either delete it securely when there is no longer a legal, business or customer need for it to be retained; or in some cases anonymise it in order to keep using it for administrative or statistic purposes or to develop generic profiles and segmentations that help us learn more about our types of customers in general and their relevant needs and preferences.

Please note that when we have collected the personal information based on your consent and you withdraw such consent, or in the cases where you exercise your right to supress your personal information we may still to keep the information blocked and available to courts, tribunals and other relevant authorities for the minimum term established by law in each particular case and in order for Iberia to meet its responsibilities arising from processing your data.

With whom do we share your personal data?

We may share your personal data with the companies in our business group, “IAG”, which includes International Consolidated Airlines Group S.A. (IAG), British Airways, Iberia Express, Vueling, Aer Lingus, OpenSkies, Flylevel, S.L., British Airways Holidays, Avios Group Ltd., BA CityFlyer, IAG Connect and IAG GBS. For more information about our group, visit the website of our parent IAG at www.iairgroup.com.

We may share information with these companies so that they can help us to provide services to you and get to know you better. For example, if you have flown with any other IAG airlines or you belong to their loyalty programmes, we may use that information to form a clearer picture of the type of travel services that probably interest you.

You will only receive commercial emails from other companies in our group if you have given your consent to them.

We may also disclose your personal data to the following third parties for the purposes specified below:

  • Customs and immigration authorities in any country in your itinerary or over whose airspace you may fly. Iberia and all other airlines are obliged by the laws of the United States and other countries to provide the border and customs authorities with access to information about bookings and travel if the flight originates or lands in those countries, including stopovers, or if you fly over them to reach your destination.

    For example, if your flight involves flying over the USA, we will supply this information to the relevant US authorities.

  • Airlines, maritime or land transport operators and other service providers that are necessary to provide you with the services you request: for example, if part of your travel itinerary includes a flight operated by a different airline and includes specific services related with your flight that you have decided to book. These airlines, transport operators and service providers will be identified when you make your booking and we will inform you of the data we will need disclose to them, either in advance or when we disclose your data. Your interest in booking these services with third parties will be understood as your express consent to disclose your data.

    Iberia follows strict criteria when selecting service providers in order to comply with data protection obligations. It also undertakes to sign a data protection agreement with them imposing a set of obligations, including the following: use appropriate technical and organisational methods; process personal data for the agreed purposes and strictly in accordance with the written instructions from Iberia; and erase or return the data to Iberia once the services have been provided.

    Examples: If travelling to your destination involves changing from an Iberia flight to a flight operated by a different company, whether it belongs to IAG or not.

    If you book a ticket through our website to make a journey with a pre-booked transport service, we will provide your name and email address to the transport company so that they can issue your ticket and make your booking.

    If you book Bag On Board (“BOB”), the service where we collect your baggage from your home, take it to the airport and check it in, available for certain Iberia flights, we will have to provide your data to the service provider so that they can manage the contractual relationship you have requested.

  • Our franchise airlines (such as Air Nostrum Líneas Aéreas del Mediterráneo, S.A., or 'Air Nostrum'): for example, to facilitate your connecting flights or manage benefits derived from the collaboration between loyalty programmes. Plus, travel agencies and other third parties through which you book journeys.
  • If you are a member of the ON BUSINESS or IBERIA PLUS programmes, or any other associated loyalty programme (such as those belonging to other airlines in the ONEWORLD ALLIANCE), we will share information with our partners so that we can manage the joint benefits to which you are entitled. To find out more about the members of OneWorld, please go the official website: https://es.oneworld.com/
  • Credit and debit card companies, credit reporting agencies and fraud control service providers, to process payments and (where necessary) carry out fraud controls.
  • In response to legal and valid requests from governments and law enforcement agencies, such as customs and immigration authorities and fraud and organised crime agencies. Please remember that, for reasons of control and public safety, Iberia is authorised to pass your passenger details to the national security governmental authorities of the country of origin, transit or destination at any time prior to arrival. The United States also requires this information for aircraft that fly over its airspace. This information may also be provided to other states which, by virtue of the applicable laws or treaties, require these details for aircraft that fly over their airspace.
  • External providers to which we outsource services such as carrying out marketing initiatives or conducting customer surveys on our behalf.
  • Third parties such as law firms and courts, insurance companies, intermediaries like experts, to demand compliance with or the execution of an agreement with you, or to defend our legitimate interests in legal, administrative, judicial or extrajudicial actions and proceedings.
  • Third parties such as the police and regulatory authorities, to protect our rights and properties or the safety of our customers, employees and assets.
  • If required to comply with a legal obligation in any jurisdiction, even if the obligation is derived from an action or omission by Iberia (for example, our decision to operate in a specific country or a decision related to that).

We will not sell your personal data to third parties and we will only allow third parties to send you commercial communications if you have given your consent.

What countries will your personal information be sent to?

Your personal information may be sent to and stored by us and third parties in countries outside the country in which you are located and in particular outside the European Economic Area.

The nature of Iberia’s business means it is often necessary for us to send your personal information outside the European Economic Area in order to fulfil your travel arrangements, in order to either fulfil our contractual relationship with you or to fulfil our legal obligations as an airline, in accordance to what we have explained in section “What do we use your personal information for and under what legal basis do we use it?” above.

This occurs in the course of providing your travel arrangements and the services you have requested because our business and the third parties identified in “Who do we share your personal information with?” have operations in countries across the world. For example, where you are flying outside of the European Economic Area, your personal information will be transferred to border control and immigration outside of these territories.

Likewise we may have to transfer your personal information to third parties located outside your country in order to allow such third parties deliver services and products you have requested us for.

  • Example: we will need to provide access to our booking and check-in systems to agents of our handling companies that provide these services to us outside Spain.

Legal statement for flights operated by OpenSkies

In accordance with Article L232-6 of French Internal Security Code, please be informed that air carriers may transmit reservation/checking and boarding data collected from their passengers (PNR/API) to the French national public services and competent authorities for the purposes and under conditions as defined in the Decret N°2014-1095 dated 26/09/2014.

What are your legal rights in relation to the personal information we hold about you and how can you exercise them?

You may exercise, at your convenience, the rights to access, amend and delete your personal information; to limit processing carried out with your data or to oppose to such processing; to request portability of your personal information as well as to request not to be affected by automated decisions by any of the following means:

  • If you are a MEMBER OF IBERIA PLUS then you may exercise most of the aforementioned rights in your own personal membership area at www.iberia.com, accessing your personal Iberia Plus area, section “My Profile / Preferences”.
  • • If you are a MEMBER OF ON BUSINESS then you may likewise exercise most of the aforementioned rights in your own personal membership area at https://onbusiness.iberia.com, accessing your On Business personal area.
  • To exercise any other right or if you are NOT A MEMBER OF EITHER IBERIA PLUS OR ON BUSINESS then you may exercise your rights through our online webform for personal data rights request available at https://www.iberia.com/es/management-of-personal-data/.

In order to answer your request we will ask you to provide personal information and documentation:

  • Full name of the requestor
  • ID number
  • Contact details (at least, a contact email)
  • Details of your request
  • Any information that may help us locate the data you are requesting for like, for example, your flight locator, or your flight number and/or date/s. .
  • A copy of your ID card or passport so that we may verify who you are
  • If you are requesting information on behalf of someone else then we will ask you to provide a signed authorisation from such individual and a copy of his/her ID card or passport.

What Data Protection Authority should I address in order to defend or exercise my rights?

You may always address the Spanish Data Protection Authority (“Agencia Española de Protección de Datos”) and submit a claim, especially in the cases where you deem that we have not satisfied your individual rights regarding how we process your personal information. To learn more please visit www.agpd.es .