Skip to main content

Privacy policy

Privacy policy

Your privacy is essential to our team

This Privacy Policy regulates the collection and processing of personal data that are provided by Users, when they access, browse or make use of the functionalities of the Citibox Application (hereinafter, the Application).

When for the use or request of any service it is necessary to provide personal data, users will guarantee its veracity, accuracy, authenticity and validity. In this sense, it will be the users' obligation to keep the data updated in a way that corresponds to the reality at all times.

Acceptance of this Privacy Policy means that the User empowers Citibox Smart Services, S.L. with NIF B98747561 (hereinafter, Citibox), and domicile in Madrid, Calle Menorca 3, Floor 2, 28009, as owner of the Application.

If, in addition, the courier wishes to know general information about the data processing carried out by Citibox, he/she can consult our Privacy Policy at

Citibox to process your personal data for the purposes stipulated below:

User registration

User registration requires the facilitation of your phone number and its link to a Citibox ticket office. This data, together with your first and last name will be processed in order to manage the reception and return of packages by you through the lockers of Citibox, inform you of the deposit of a package addressed to you at one of our lockers and, in those cases where possible, send you information about the status of your shipment or return. The processing of such data is necessary to provide you with the requested service. Your data will be kept for 5 years from your last interaction with Citibox.

Unregistered user package pickup

We inform you that in case your courier or marketplace indicates as a place of delivery a Citibox ticket office, it will provide us with your phone number in order to process the collection of your package in one of our lockers, inform you of this circumstance and assist you in opening the selected ticket office. Your data will be processed for the sole purpose of managing the collection of your package based on our legitimate interest in fulfilling our contractual obligations with our customers. This data will be kept for the period of 5 years after the delivery of your package.

Remember that if you do not want to download the Citibox App and/or do not want to receive packages at Citibox, you can follow the instructions below:


The recipients of the data

As needed to the correct development of the contractual relationship, Citibox will communicate to the courier companies the identification and contact data of its Users so that they can verify the availability of the delivery and manage any incident that may occur during the development of the service. 


Si el Usuario lo autoriza expresamente, en base a su consentimiento, Citibox podrá enviar publicidad de los servicios y / o promociones por medios electrónicos o postales. Puede revocar ese consentimiento en cualquier momento. Trataremos los datos del usuario mientra no haya un revocamiento de dicho consentimiento

Third-party advertising

 The User may ask Citibox to send them marketing information, promotions or discounts from third parties by clicking the corresponding box or button. These companies operate within the following sectors: training, retail, entertainment and telecommunications. Their data will be processed for these purposes based on their consent, and will be stored for a period of 36 months. User Rights The User may withdraw their consent for the processing of their data, and may also exercise their rights of access, rectification, erasure, portability, opposition and limitation of processing by sending an email to the data protection office at Citibox at, or by writing to the postal address indicated above, with the subject “Data Protection”.

Communications related to the service for registered users

Due to the most important functionality of Citibox is to facilitate the reception or return of packages through Citibox boxes, we understand that the User has registered looking for this service, so we have the legitimate interest to communicate with our users to send them communications or surveys related to our services.

The legal basis for the processing of such data is based on the legitimate interest of Citibox.

Your data will be kept as long as you are part of Citibox and you are registered, or as long as you have not exercised your opposition or limitation to the treatment, unless other legal terms are applicable.


Based on our legitimate interest, in order to verify that our services are provided adequately, we may send satisfaction surveys to the Registered User: If you do not wish to receive them, you can contact with our Customer team by email and exercise your right to object. Response to these surveys is completely voluntary: If you decide to answer them, the data you provide us will be processed by Citibox to measure participation and analyze the results, based on the consent of the Registered User, expressed when sending the form established for this purpose.

Your data will be kept as long as you are part of Citibox and you are registered, or as long as you do not revoke your consent, unless a legal obligation applies to us that requires us to extend said period.

User’s Rights

The User may exercise, at any time, the rights of access, rectification, erasure, portability, to object and limitation upon the processing, or get in touch with our Data Protection Officer by emailing or by writing to the postal address set out above, indicating “Data Protection” as the subject. The User may at any time file a complaint with his Data Protection Authority.

 Finally, the User may inform of any modification in writing or request de-registration, by contacting any of the addresses provided.

Last update: June 10th 2024