Privacy policy

Your privacy is essential to our team

This Privacy Policy regulates the collection and processing of the personal data that are provided by the Users when they access, browse or use the functionalities of the Citibox application and web application for Couriers (hereinafter, collectively referred to as Application). For the purposes of this Policy, “Courier” shall be taken to be those natural persons who register, access, browse and/or use the Application’s functionalities.

When, to use or request a service, it is necessary to provide personal data, the Courier shall guarantee their veracity, accuracy, authenticity and validity. In this regard, the Courier shall be obliged to keep the data up-to-date so that they reflect reality at all times.

Accepting this Privacy Policy means that the User authorises Citibox Smart Services, S.L. holder of Tax ID No. B98747561 (hereinafter, Citibox), and whose registered address is at Madrid, Calle Menorca 3, Floor 2, 28009, as the owner of the Application.

If, in addition, the courier wishes to know general information about the data processing carried out by Citibox, he/she can consult our Privacy Policy at https://citibox.com/en/privacy-policy.

Data collection, purposes, legitimation basis and conservation terms:

Registration: To register on the Application, it shall be necessary for the courier to provide their identifying details, such as name, surname(s), and their contact data as well as, where appropriate, the details of the courier company for which they work. The purpose of the processing is to process the registration on the Application and to allow access to the functionalities of their personal account.

The legal basis for the processing of such data is the execution of the contractual relationship with Citibox. When the Courier registers on the application at the request of the courier company for which they work, and as long as there is a contract between said company and Citibox , the legal basis for the processing shall be based upon Citibox’s legitimate interest. Your data shall be preserved for five (5) years as from your last interaction with Citibox

Use of Citibox boxes:To use Citibox’s custody service, the Courier’s data related to the transport and delivery of the packages shall be stored, as shall data related to their recipients. The purpose of the processing shall be to manage and control the custody and receipt of packages through Citibox’s parcel boxes. The legal basis for the processing of such data is the execution of the contractual relationship with Citibox, if the courier uses the Application’s “free” mode. However, when the Courier registers on the application at the request of the courier company for which they work, and as long as there is a contract between said company and Citibox (“premium” mode), the legal basis for the processing shall be based upon Citibox’s legitimate interest. Your data shall be preserved for three (3) years as from your last interaction with Citibox.

Surveys: In order to improve the quality of our services, we provide surveys to couriers so that they can give us their opinion about our app or the facilities provided for them to carry out their work. These surveys will be provided, based on our legitimate interest, through the email or the professional contact telephone number through which the courier manages their relationship with Citibox. The data collected through these surveys will be kept for a period of six months, after which they will be deleted.

Communication of data to third parties: When the Courier registers on the application at the request of the courier company for which they work, and as long as there is a contract between said company and Citibox (“premium” mode), we shall be able to send their data to the courier company for which the Courier provides services, on the basis of a legitimate interest and insofar as said communication is necessary for the execution of the contract between the Parties.

User’s Rights

The Courier may exercise, at any time, the rights of access, rectification, erasure, portability, to object and limitation upon the processing, or get in touch with our Data Protection Officer by emailing gdpr@citibox.com or by writing to the postal address set out above, indicating “Data Protection” as the subject. The User may at any time file a complaint with his Data Protection Authority.

 Finally, the User may inform of any modification in writing or request de-registration, by contacting any of the addresses provided.

Last update: December 22st 2021