Personal data protection notice

Telefónica, S.A. (company with ID A28015865 and registered office at Gran Vía 28, 28013, Madrid, Spain) informs that it is the controller for the processing of personal data of investors, including their representatives and contact persons, and other relevant stakeholders in this sector (e.g. market analysts, brokers, etc.).

The purpose of the processing is to maintain contact by any means in order to respond to the queries raised and to send communications of various kinds that are of interest to the data subjects, such as financial results, relevant facts, invitations to events and other activities and meetings organised by Telefónica’s Investor Relations area, as well as the actual management of such events, activities and meetings to which the data subject has been invited or for which he/she has registered. This purpose is carried out on the basis of the data subject’s consent, granted when the data subject completes a form, contacts Telefónica, S.A. by any means or provides them at an event, activity or meeting, as well as on the basis of Telefónica, S.A.’s legitimate interest in maintaining and enhancing the relationship with investors and relevant stakeholders in this sector.

Personal data may include basic identification and professional contact data, relating to the profession, position, company, sector and other data related to said professional field and/or provided by the data subject. Personal data comes from the data subject himself/herself, when he/she has completed a contact form or newsletter subscription form or when he/she has provided it to Telefónica when contacting Telefónica by any means or at an event, activity or meeting, as well as from the entity he/she represents and/or from major investor databases and other publicly sources available in this sector. Personal data will not be transferred to other data controllers, unless legally obliged to do so or unless it is strictly necessary to meet the request made by the data subject or, where appropriate, to other Telefónica Group companies in order to fulfil the same purposes as those stated. In addition, Telefónica, S.A. may make use of third party suppliers who, as data processors, may access and process the personal data following the instructions of Telefónica, S.A. and under contractual guarantees. These data recipients may be established in or access personal data from countries outside the European Economic Area, in which case, Telefónica, S.A. will ensure that they are countries with an adequate level of protection declared by the European Commission or will provide the necessary contractual, technical and organisational measures to guarantee the due protection of personal data.

Telefónica, S.A. will retain the personal data for the period necessary to fulfil the purposes stated or as long as the data subject does not withdraw his or her consent or, where appropriate, does not object to the processing. Once this period has expired, the data will be duly blocked during the period of limitation of the corresponding actions and will subsequently be deleted.

As applicable, data subjects may exercise their rights of access, rectification, erasure, restriction of processing, data portability and object to the processing, as well as to withdraw the consent granted at any time, by writing to Telefónica, S.A. (Distrito Telefónica, Ronda de la Comunicación SN, central planta 2, Área Relaciones con Inversores, CP 28050, Madrid, Spain) or by e-mail to ir@telefonica.com, indicating in each case the right to be exercised and putting as the subject “exercise of data protection rights”. Interested parties may also contact Telefónica’s Data Protection Officer by writing to DPO_telefonicasa@telefonica.com. Finally, Telefónica, S.A. informs data subjects about the possibility of lodging a complaint with the Spanish Data Protection Agency (www.aepd.es) in the event that they consider their data protection rights have been violated.