Privacy policy

Privacy policy

Data Protection
Miralta Finance Bank, S.A. (“Miraltabank “) files and processes the personal data provided by customers, users or visitors through the website (hereinafter, indistinctly the “data subject”) with strict confidentiality and in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

By giving us your data, you unequivocally consent to their use in the terms described below.

Data Controller:
Miralta Finance Bank, S.A.
Miralta Finance Bank, S.A. (“Miraltabank”), is a credit institution registered with the Bank of Spain under code 0244 and domiciled at Plaza de Manuel Gomez Moreno nº 2, Planta 17-A, Edificio Alfredo Mahou. 28020 Madrid
Clients may contact the persons designated by the Controller through

Purpose of the Processing:

  • Contact with the data subject and provision of information about Miraltabank Group products and services.
    Miraltabank will use your data to contact you in response to your request for information on our company and services. The data collected are legitimately processed as the data subject has provided them to establish contact and receive information about the products and services of the Miraltabank Group.
  • Assessment
    If the interested party begins the registration process as a client, the data provided will be used to evaluate them under the regulations for the prevention of money laundering prior to the beginning of their contractual relationship with Miraltabank.
  • Execution of a contract, compliance with legal obligations If the interested party is already, or becomes, a Client of Miraltabank, the data will be used for the provision of the services object of the Contract signed with the entity and for the fulfillment by Miraltabank of its obligations as an investment services company. Miraltabank will categorize you in compliance with the Mifid 2 regulations.
    Under this categorization Miraltabank must issue warnings under certain circumstances and in relation to certain products. For these purposes, Miraltabank systems automatically analyze and profile your categorization as a client and the operations previously carried out for purposes related to the management of the services object of this Contract. Likewise, Miraltabank may analyze the Client’s operations in order to comply with regulations for the prevention of money laundering.

Data retention:
The personal data that you provide us will be kept as long as its deletion is not requested. Once a contract has been signed between Miraltabank and the interested party, Miraltabank is obliged to keep them during the validity of the contractual relationship and for a minimum period of five years after its termination in compliance with the maintenance of the records required of credit institutions in accordance with its regulations and up to ten years in accordance with Law 10/2010, of April 28, on the prevention of money laundering and the financing of terrorism.


  • By providing us with your data, you unequivocally consent to its use by Miraltabank to contact you, to carry out commercial actions by any means and to process your data in accordance with the purposes described here or expressed in the forms or through the means through which your data and consent for your treatment are collected.
  • Legitimate interest
    The personal data are provided within the framework of a request for information addressed by the interested party to Miraltabank, or during a customer registration process or have been obtained within the framework of an existing legal relationship with the interested party. In all cases, the treatment by Miraltabank, in accordance with the purposes described, is legitimate.
    Miraltabank could collect personal data by obtaining it without the consent of the interested party (for example, when the legal representative of a legal entity declares the identity of the natural persons who hold the real ownership of the entity), leaving Miraltabank legitimized in compliance with the regulations. applicable.
  • Execution of a contract
    The data necessary for the provision of the services that are the subject of the contracts and for legitimate purposes associated with the products and services contracted under an existing legal relationship between the interested party and Miraltabank.
  • Consent
    In cases where the interested party also provides consent by providing or completing forms, consent may be revoked at any time, without prejudice to the fact that Miraltabank may process and communicate personal data without the need to obtain prior consent in situations covered by a legitimate interest on the part of the entity.
    If consent is not granted or withdrawn, it does not prevent the maintenance of the contractual relationship or the performance of the respective operation within the framework of which it is requested. All of this without prejudice to the purposes in which the legitimate interest is legitimized, and in the cases legally provided for by article 21.2 of Law 34/2002, of July 11, on information society services and e-commerce.

The Miraltabank Group and certain suppliers Miralta Finance Bank,S.A. and Miralta Asset Management SGIIC, S.A.U. and its suppliers who are Data Processors within the framework of the expressed purposes.

Client Rights:
Rights of access, rectification, opposition, deletion, limitation and portability of your data
The Client can exercise their rights by sending an email to

or a letter to Miralta Finance Bank,S.A., Plaza de Manuel Gómez Moreno nº2, Planta 17-A, Edificio Alfredo Mahou. 28020 Madrid.
If you do not authorize the processing of your data for commercial purposes, this will not affect the maintenance or compliance of the contractual relationship you maintain with Miraltabank.
Miraltabank will not be able to delete your data from its records related to your registration as a client and operations under contracts signed with the entity since it is obliged to keep them in accordance with the indicated legal deadlines.

You have the right to present your claims to the Spanish Data Protection Agency