Skip to main content

Información sobre la Atención en Loreto. Actualidad.


Privacy policy

Pursuant to Organic Law 3/2018, of December 5, of Protection of Personal Data and guarantee of digital rights (hereinafter LOPDGDD) and Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (hereinafter GDPR), we inform you that personal data provided will be incorporated into a database owned by LORETO MUTUA, MPS (hereinafter LORETO MUTUA), the bearer of Tax ID no. V-28277002, postal address: Paseo de la Castellana 40, 28046 Madrid, Spain, telephone 900 844 855 and email: For any matter related to the processing of personal data by LORETO MUTUA, contact our Data Protection Officer at the following email address:

LORETO MUTUA will collect the following data provided by the User by completing the contact forms on the website:



for queries related to LORETO MUTUA's activities and the marketing and sale of its services.

Contact Form

Data collected: Name, telephone, email and comment.

Purpose: To answer requests for information from Users via this means about LORETO MUTUA products and services.

Retention periods: Information will be kept for the time necessary for the resolution of the query. Once finalised, it will be kept until the moment in which the interested party requests its deletion.

Legitimacy: Based on the provision of consent, LORETO MUTUA is entitled to process the data provided by the User through the contact form.


to obtain a password to access the Private Area that enables the contracting and management of LORETO MUTUA products and services.

Registration form

Data collected: First name, surname, NIF (tax ID), contact address, home address, email, contact telephone number and other additional information as identified in the data collection form of the requested product or service.

Purpose: the registration of Users for the contracting and management of LORETO MUTUA products and services.

Retention periods: data will be kept until the moment in which the interested party requests their deletion. Once such data have been deleted, they may be kept for a period of six years at the disposal of the public administration, judges and courts, for the attention and defence of possible responsibilities arising from their processing.

Legitimacy: the legal relationship of the contracted service.


Information common to the data collected through the website mentioned in the previous sections.

Recipients: to the extent that it is necessary for each of the purposes expressed in the previous sections, your data may be transferred to Loreto Inversiones SGIIC S.A., a company belonging to the LORETO MUTUA group (more information about Loreto Inversiones can be obtained at: Said assignment, if it occurs, will be carried out with the same processing purposes, the same data categories, the same retention period, and a similar exercise of rights. You may at any time oppose such transfer by sending an email to

There is no provision for the transfer or communication of data to third parties, except for the provision of third-party services as Processors with which LORETO MUTUA has signed the corresponding Processor contracts and verified that they meet sufficient guarantees to apply technical measures and appropriate organisational arrangements, in such a way that the processing is carried out in accordance with the requirements of the GDPR, guaranteeing the protection of the rights of the data subject.

The User’s rights to access are recognised, as well as those to rectification, erasure, limitation, objection and portability of data. Similarly, Users are protected by the right to withdraw their consent for the processing of their data by LORETO MUTUA. Likewise, the User has the right to complain to the supervisory authority.

At any time data subjects may exercise their rights by providing notification, attaching a document that proves their identity and expressly indicating the right that they wish to exercise, to LORETO MUTUA at the address indicated above or by sending an email to

LORETO MUTUA has adopted the necessary technical and organisational measures to guarantee the security and integrity of the data, as well as to avoid their alteration, loss or unauthorised processing or access.

The User expressly accepts the content of the Legal Notice that regulates the provision of services.

The data requested on the website’s various forms are strictly necessary to meet your request, and the User provides them voluntarily. Any refusal to provide data classed as mandatory will entail the non-provision or the impossibility of accessing the service for which such data were requested. Data may also be provided voluntarily in order to optimise the provision of services. Similarly, where third-party data is provided, the User undertakes to inform such third party or parties of the content of this privacy policy.

The User agrees to inform LORETO MUTUA as soon as possible of any modification or rectification of his or her personal data so that the information contained in the LORETO MUTUA Activity Records can be kept up-to-date at all times.

On the basis of the legitimate interests of LORETO MUTUA MPS and LORETO INVERSIONES SGIIC S.A, the personal data of the User may be employed for the establishment or maintenance of business relationships by any means, including electronic, regarding information of interest concerning GRUPO LORETO MUTUA products and services, with the User being able at any time to oppose such treatment for commercial purposes by sending an email to