Skip to content

Privacy policy

Pursuant to Organic Law 3/2018, of December 5, of Protection of Personal Data and guarantee of digital rights (hereinafter LOPDGDD) and Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (hereinafter GDPR), we inform you that personal data provided will be incorporated into a database owned by LORETO MUTUA, MPS (hereinafter LORETO MUTUA), the bearer of Tax ID no. V-28277002, postal address: Paseo de la Castellana 40, 28046 Madrid, Spain, telephone 900 844 855 and email: For any matter related to the processing of personal data by LORETO MUTUA, contact our Data Protection Officer at the following email address:

LORETO MUTUA will collect the following data provided by the User by completing the contact forms on the website:


Contact Form

Data collected: Name, telephone, email and comment.

Purpose: To answer requests for information from Users via this means about LORETO MUTUA products and services.

Retention periods:Information will be kept for the time necessary for the resolution of the query. Once finalised, it will be kept until the moment in which the interested party requests its deletion.

Legitimacy:Based on the provision of consent, LORETO MUTUA is entitled to process the data provided by the User through the contact form.


Registration form

Data collected:First name, surname, NIF (tax ID), contact address, home address, email, contact telephone number and other additional information as identified in the data collection form of the requested product or service.

Purpose: the registration of Users for the contracting and management of LORETO MUTUA products and services.

Retention periods: data will be kept until the moment in which the interested party requests their deletion. Once such data have been deleted, they may be kept for a period of six years at the disposal of the public administration, judges and courts, for the attention and defence of possible responsibilities arising from their processing.

Legitimacy:the legal relationship of the contracted service.

Information common to the data collected via the Webpage mentioned in the previous sections.

Recipients: To the extent necessary for the purposes expressed above, your data may be transferred to Loreto Inversiones, SGIIC, S.A., a LORETO MUTUA group company (for more information on Loreto Inversiones, visit Any transfer of this nature will occur under the same terms as stated above with regard to the purposes, data categories, storage period and further on regarding your rights. You may at any time object to this transfer of data by sending an email to

We do not plan to disclose or transfer data to third parties except for the provision of data processing services by third parties as data processors with whom LORETO MUTUA has signed Data Processor agreements where LORETO MUTUA has verified that these third parties provide sufficient guarantees that the appropriate technical and organisational measures will be applied for the processing to occur in accordance with the requirements of the GDPR to guarantee the protection of your rights.

As the user, you have rights for accessing, rectifying, erasing and restricting your data and objecting to your data processing. You also have a right to data portability. Likewise, you may withdraw the consent you gave for LORETO MUTUA for processing your data. You may also file a claim with the supervising authority.

You may at any time exercise your rights by sending a letter to LORETO MUTUA at the address specified above or an email to in which you state the right you want to exercise. You must attach a document that demonstrates your identity.

LORETO MUTUA has adopted the technical and organisational measures required to guarantee the security and integrity of the data and to safeguard against any unauthorised alteration, loss, processing or access.

You accept the content of the Legal Notice that governs the provision of the services.

The data requested in the forms of the Webpage is required for responding to your query. You disclose this data voluntarily. If you do not provide the data required, we cannot provide you with or let you access the service for which the data was requested. Likewise, you may also voluntarily provide some data so that we can optimally provide you the services. If you disclose the data of a third party, you must inform the third party of the content of this privacy policy.

You must also disclose as soon as possible to LORETO MUTUA any change or correction to your personal data so that the information contained in LORETO MUTUA’s Activity Registers is at all times up-to-date.

Based on the legitimate interest of  LORETO MUTUA, MPS and LORETO INVERSIONES SGIIC, SA, your personal data may be used for establishing or maintaining commercial relationships via any means, including electronic, on information of interest on products and services of the LORETO MUTUA group. You may object at any time to this processing for commercial purposes by sending an email to