The terms and conditions indicated below regulate access to and use of this CaixaBank application (hereinafter the “Application” or “App”), as well as the conditions under which this user licence (hereinafter “the licence” or “user licence”) is granted. The current wording of these terms and conditions is made available to the user (hereinafter the User) and must be read and accepted during the procedure to download and install the Application.

CAIXABANK, S.A. (hereinafter, CaixaBank) is the owner of the Application and holds all rights to exploit it and can therefore license the use of said Application.

1. Terms and conditions of access to the application.

Access to the Application is though the CaixaBank online CaixaMovil Store, or through any other distributor, provided they have prior authorisation from CaixaBank. In no case will licences or downloads via unauthorized third parties be valid.

2. Licence for use. Intellectual property.

If the User accepts these terms and conditions, “la Caixa” grants the User a user's licence so that they can install the Application on a mobile device (mobile phone, tablet, etc.) and use it exclusively to access the services offered by CaixaBank or any of the companies in the CaixaBank Group.

The intellectual and industrial property rights to the Application, including the graphic design, content and any databases it includes, belong to CaixaBank, as they are either its own property or it holds the necessary licences for them.

The licence is of a limited and non-exclusive nature, and in no case may the User:

a) Assign rights, sublicense, rent, distribute or grant rights of any type to third parties with respect to the licence granted.
b) Undertake or allow others to undertake any modification or any type of reverse engineering. translate or decompile the Application.
c) Delete, hide or alter any notification regarding the copyright or intellectual property rights of the Application.
d) Use the Application with commercial aims different from the services offered by CaixaBank or by the companies in its Group.

CaixaBank reserves the right to perform the modifications and improvements that it considers necessary for the Application and the User will have access to the updates which are considered appropriate at any time. The user is recommended to maintain the Application duly updated.

3. Brands and trade names.

All use of the brand names, trade names, domain names or any other distinctive symbol of CaixaBank contained in the Application is prohibited, including the name itself and the graphic by which the Application is identified.

4. Geolocation.

The Application may contain or be adapted for geolocation functions, in order to offer services that are accessed through it. For the provision of such services, it will therefore be necessary to have the geolocation function of your mobile device activated.

You will find detailed information on the use of your geolocation data in the section PRIVACY AND PERSONAL DATA PROCESSING POLICY / Information about geolocation data processing, which you will find after these terms and conditions.

5. Conditions of use of the Application and conditions of use of the services offered through the Application.

These conditions will regulate the use of the Application, notwithstanding the conditions governing each of the services of CaixaBank or the companies in the CaixaBank Group to which the User has access via the Application, which will be governed by specific contracts signed by the User as a customer of CaixaBank or, where applicable, of the companies in the CaixaBank Group.

In some cases, the User will only be able to access the services by means of the access codes provided by CaixaBank when the services are contracted, so that access to these services, notwithstanding the fact that it takes place exclusively through the Application, will be subject to the contracts signed between the User and the provider of the service

The use of the Application requires compatible devices and access to the internet, as well as certain software and an operating system that are compatible with it. The Application may require updated versions of this software or operating system so that the performance of the Application is not affected.

CaixaBank guarantees the security of the Application, with regard to the services that can be accessed via it. The User will be solely responsible for the custody of the access codes to Services, their use and entering them in the Application. Similarly, the User will be solely responsible for the security, use and custody of the mobile device in which the Application is installed.

6. Responsibility

The Application is supplied in its current state of development and with the functions currently available to provide the services offered; CaixaBank therefore guarantees solely and exclusively its suitability for these services and for the platform or operating system for which it has been developed.

CaixaBank does not under any circumstances guarantee the availability of the services that may be offered via the Application, insofar as accessing them depends on factors beyond its control, and outside the Application itself, such as the availability or correct functioning of the device on which it is installed, or of telecommunications networks. CaixaBank will not, therefore, be liable, in any case, for damage of any kind caused by a lack of availability, accessibility or operability of the services when this may be attributed to the aforementioned reasons.

CaixaBank does not assume any commitment to the ongoing maintenance or continuity of the Application, so it may replace it at any time or simply cease to make it available, with no obligation or liability whatsoever to Users.
7. Modification.

CaixaBank may modify the present Conditions at any time, without giving prior notice or notifying the User.

The user will be able to see and accept the new conditions on the app. If you do not agree, you can uninstall the application.

These Terms of Use and Licence are governed by Spanish law.

PERSONAL DATA PROCESSING AND PRIVACY POLICY

Basic information on personal data processing

Data controller
CaixaBank, with Tax ID A08663619 and registered offices at Calle Pintor Sorolla, 2-4 Valencia.

Joint data controllers
For certain activities, CaixaBank, S.A. and CaixaBank group companies will process your data jointly.
You will find the list of the companies that process your data, as well as the essential aspects of the joint processing agreements, at www.caixabank.es/empresasgrupo.

Data processing

Processing based on consent

• When analysing your data in order to create profiles that help us to offer you products that we think will be of interest to you.
• When communicating the commercial offer of products and services of the CaixaBank Group through the channels of your choice.
• When transferring your data to companies that do not form part of the CaixaBank Group.
• When using biometrics to identify you as a customer and to sign documentation.
• When applying personal conditions in joint contracts.

This processing will be carried out only when you have given us your consent to do so

You can consult and manage your consents at any time in the Application under Settings > My Profile.

Processing necessary for the execution of contractual relationships in order to formalise and maintain the contractual relationships we enter into.

Processing necessary for compliance with legal obligations in order to adopt the measures required by the regulations applicable to the business activity of the CaixaBank Group.

Processing based on the legitimate interest of CaixaBank, provided that such interests are not overridden by your interests or your fundamental rights and freedoms.

Exercising rights and submitting claims.

You can exercise your rights of access, rectification, opposition, erasure, limitation or data portability and withdraw your consent or choose not to be subject to automated decision-making in accordance with the law.
You can exercise these rights through the following channels:
- At CaixaBank offices open to the public.
- Using the options enabled in your digital banking account and in this application under Settings > My Profile.
- At the email address: www.caixabank.com/ejerciciodederechos.
- By writing to the address: Apartado de Correos n. 209, 46080, Valencia.

In addition, if you have any claims arising from the processing of your data, you can address them to the Spanish Data Protection Agency. (www.agpd.es)

Detailed information on how we process your personal data

Full details of how we will use your data can be found in our Privacy Policy, which you can access at any time at www.caixabank.com/politicaprivacidad.

Likewise, if you wish, you can request a physical copy of this information at any of our branches.

Information on geolocation data processing

Geolocation information is captured at the time the user logs in to the Application, provided that the user has geolocation enabled on their device.

The information captured reflects the geographic location of the device that is using the Application.

Geolocation is collected by the device only if said feature is enabled on the device and can be configured at any time by accessing Settings > Geolocation.
This Application uses geolocation data on mobile devices for the following purposes:

• Processing based on your consent

Only if you have given us your consent to process your data for the following purposes :

○ to analyse your data in order to create profiles that help us to offer you products that we think will be of interest to you.
○ to communicate the commercial offer of products and services of the CaixaBank Group through the channels of your choice.

we will use the geolocation data (as well as other data belonging to you) to configure or design an offer of products and services tailored to your characteristics as a customer and to provide the commercial offer of products and services of the CaixaBank Group.

You can consult and manage your consents at any time in the Application under Settings > My Profile – Commercial Authorisations.

• Processing necessary for the execution of contractual relationships

If you wish to use the branch finder functionality, you must activate geolocation on your device; we will use the geolocation data to show you the branches nearest the device.

• Processing based on the legitimate interest of CaixaBank (combating fraud)

We will use geolocation data to detect and prevent potential fraud in the operations of customers and our systems (e.g., cases of impersonation or identity theft in fund transfer operations) or to review and analyse purchases and operations carried out in our systems to protect our customers from fraud in electronic channels and prevent cyberattacks.

Information on the use of elements that collect browsing data and browsing habits.

Through the use of an SDK (Software Development Kit), this Application collects and processes information about users’ browsing (e.g., error-free browsing, usage statistics, screens and/or pages visited, type of device used) in order to offer certain functionalities (updates to the application and its functionalities or prevention of fraud in operations) and to show you content according to your preferences and browsing habits, both inside and outside the Application.

To offer you said content in accordance with your preferences, profiles are developed based on your browsing data. These profiles may be shared with third parties (e.g., Google or Facebook) so that CaixaBank products and services can be offered to you outside the Application.

Only if you have given us your consent to process your data for the following purposes:

○ to analyse your data in order to create profiles that help us to offer you products that we think will be of interest to you.
○ to communicate the commercial offer of products and services of the CaixaBank Group through the channels of your choice.

we will use browsing data (as well as other data belonging to you) to configure or design an offer of products and services tailored to your preferences and browsing habits and to provide the commercial offer of products and services of the CaixaBank Group.

You can consult and manage your consents at any time under Settings > My Profile – Commercial Authorisations.

Information on access to resources or device features

Some Application functionalities may ask for your permission to access specific device features. For example:

- If you want to upload a picture to My Profile, the Application will ask for permission to access the Camera or the device's files (Storage).
- When you make a mobile money transfer using the Bizum service, the Application will ask for permission to access your Contacts.
- To speak to Noa, our virtual assistant, the Application will ask for permission to access the microphone.

The Application will display a notification asking for permission to use a certain feature on the device. You can Allow or Deny permission, although the functionality may not be able to work properly without permission to access the requested feature.

Remember that you can always check the permissions the Application has been granted, as well as manage and modify said permissions, under the Settings menu on your device.

Information on foreground and background data processing

The Application processes personal data in the foreground whenever the application is active.

The Application processes background geolocation data only if the user has permanently authorised the Application to access the geolocation data.

Security measures implemented by CaixaBank

CaixaBank has adopted the necessary technical measures to maintain the security standards required by the regulations on personal data protection.

© CaixaBank, S.A. 2021