CAREERS SITE: PRIVACY NOTICE

Date of last update: 24-02-21

The companies in the Iberdrola group ("Iberdrola Group", which include Iberdrola, S.A. and all the companies it controls directly or indirectly in accordance with law) undertake to protect your privacy and ensure compliance with personal data protection legislation and, specifically, undertake to ensure that your personal information will be processed: in a legal, fair, transparent manner; for explicit, legitimate purposes; only if it is appropriate, pertinent and limited to what is required for the purposes for which it was obtained; if it is accurate and up to date; in such a way as to allow your identification only during the time needed to fulfil the purposes that justify its processing; and protecting its integrity, availability and confidentiality.

Iberdrola has implemented the necessary technical and organizational measures to protect your data from accidental loss or unauthorized alteration, access, use or disclosure, having also established procedures to react to any security incident that could affect your personal data.

We hereby inform you of the processing of your personal data on the Iberdrola Group Careers Site ("Careers Site") when you register and possibly take part in Iberdrola Group selection processes for staff or interns.

If, as a result of your taking part in a selection process for any of the companies in the Iberdrola Group, you provide us with personal data on third parties, you must, prior to the personal data being provided, inform said third parties that it will be processed under the terms in this notice.

Who is the data controller in charge of your personal data?

The data controller in charge of your personal data are the Iberdrola Group companies that are responsible for recruitment:

IBERDROLA S.A. (Plaza Euskadi 5, 48009 Bilbao, Spain)
Contact details of the Data Protection Officer:
- E-mail address: DPO@iberdrola.com
- Postal address: IBERDROLA SA-Att.: Data Protection Officer, Calle Tomas Redondo, 1- 28033 Madrid - Spain
IBERDROLA ESPAÑA S.A.U. (Plaza Euskadi 5, 48009 Bilbao, Spain)
Contact details of the Data Protection Officer:
- E-mail address: dpo@iberdrola.es
- Postal address: IBERDROLA SA-Att.: Data Protection Officer, Calle Tomas Redondo, 1- 28033 Madrid - Spain
IBERDROLA MÉXICO, S.A. DE C.V.
Boulevard Manuel Ávila Camacho 24, piso 19, Colonia Lomas de Chapultepec, Ciudad de México 11000, México. mx.protecciondatos@iberdrola.com
IBERDROLA SERVICIOS CORPORATIVOS, S.A. de C.V.
Boulevard Manuel Ávila Camacho 24, piso 19, Colonia Lomas de Chapultepec, Ciudad de México 11000, México. mx.protecciondatos@iberdrola.com
IBERDROLA SOPORTE A PROYECTOS LIBERALIZADOS, S.A. DE C.V.
Boulevard Manuel Ávila Camacho 24, piso 19, Colonia Lomas de Chapultepec, Ciudad de México 11000, México. mx.protecciondatos@iberdrola.com
SERVICIOS DE OPERACIÓN LA LAGUNA, S.A. DE C.V.
Boulevard Manuel Ávila Camacho 24, piso 19, Colonia Lomas de Chapultepec, Ciudad de México 11000, México. mx.protecciondatos@iberdrola.com
SERVICIOS ADMINISTRATIVOS TAMAZUNCHALE, S.A. DE C.V.
Boulevard Manuel Ávila Camacho 24, piso 19, Colonia Lomas de Chapultepec, Ciudad de México 11000, México. mx.protecciondatos@iberdrola.com
IBERDROLA ENERGÍA ALTAMIRA DE SERVICIOS, S.A. DE C.V.
Boulevard Manuel Ávila Camacho 24, piso 19, Colonia Lomas de Chapultepec, Ciudad de México 11000, México. mx.protecciondatos@iberdrola.com
CINERGY, S.R.L. DE C.V.
Boulevard Manuel Ávila Camacho 24, piso 19, Colonia Lomas de Chapultepec, Ciudad de México 11000, México. mx.protecciondatos@iberdrola.com
IBERDROLA SOPORTE A PROYECTOS RENOVABLES, S.A. DE C.V.
Boulevard Manuel Ávila Camacho 24, piso 19, Colonia Lomas de Chapultepec, Ciudad de México 11000, México. mx.protecciondatos@iberdrola.com
CORPORATIVO IBERDROLA RENOVABLES MÉXICO, S.A. DE C.V.
Boulevard Manuel Ávila Camacho 24, piso 19, Colonia Lomas de Chapultepec, Ciudad de México 11000, México. mx.protecciondatos@iberdrola.com
SERVICIOS DE OPERACIÓN EOELÉCTRICA, DE MÉXICO, S.A. DE C.V.
Boulevard Manuel Ávila Camacho 24, piso 19, Colonia Lomas de Chapultepec, Ciudad de México 11000, México. mx.protecciondatos@iberdrola.com
SCOTTISHPOWER UK, PLC (320 St Vincent Street, G2 5AD, Glasgow, Scotland, United Kingdom). Data Protection Officer: dataprotection_corporate@scottishpower.com
SCOTTISHPOWER ENERGY MANAGEMENT LIMITED (320 St Vincent Street, G2 5AD, Glasgow, Scotland, United Kingdom). Data Protection Officer: dataprotection_corporate@scottishpower.com
SCOTTISHPOWER RENEWABLES (UK) LIMITED (The Soloist, 1 Lanyon Place, Belfast, BT1 3LP). Data Protection Officer: dataprotection_corporate@scottishpower.com
SCOTTISHPOWER GENERATION (Assets) LTD. PLC (320 St Vincent Street, G2 5AD, Glasgow, Scotland, United Kingdom). Data Protection Officer: dataprotection_corporate@scottishpower.com
SP DISTRIBUTION OLC (Ochil House, 10 Technology Avenue, Hamilton International Technology Park, Blantyre, G72 0HT). Data Protection Officer: dataprotection_corporate@scottishpower.com
SP TRANSMISSION PLC (Ochil House, 10 Technology Avenue, Hamilton International Technology Park, Blantyre, G72 0HT). Data Protection Officer: dataprotection_corporate@scottishpower.com
SP MANWEB PLC (3 Prenton Way, Prenton, CH43 3ET, Scotland, United Kingdom). Data Protection Officer: dataprotection_corporate@scottishpower.com
SCOTTISHPOWER ENERGY RETAIL LTD (320 St Vincent Street, G2 5AD, Glasgow, Scotland, United Kingdom). Data Protection Officer: dataprotection_corporate@scottishpower.com
SP DATASERVE LTD (320 St Vincent Street, G2 5AD, Glasgow, Scotland, United Kingdom). Data Protection Officer: dataprotection_corporate@scottishpower.com
SCOTTISH POWER SYSTEMS LTD (Ochil House, 10 Technology Avenue, Hamilton International Technology Park, Blantyre, G72 0HT). Data Protection Officer: dataprotection_corporate@scottishpower.com
ELEKTRO REDES S.A. (Rua Ary Antenor de Souza, 321 Jd. Nova América, Campinas - Sao Paolo, 13053-024, Brazil) dpo@neoenergia.com
NEOENERGIA S.A. (Praia do Flamengo, nº 78, 3º andar, Flamengo, cidade e Estado do Rio de Janeiro, Brazil) dpo@neoenergia.com
NC ENERGIA S.A. (Praia do Flamengo, nº 78, 1º andar, Flamengo, cidade e Estado do Rio de Janeiro, Brasil) dpo@neoenergia.com
COMPANHIA ENERGÉTICA DE PERNAMBUCO - CELPE (Avenida João de Barros, nº 111, Boa Vista, Recife, Pernambuco, Brazil) dpo@neoenergia.com
COMPANHIA DE ELETRICIDADE DO ESTADO DA BAHIA - COELBA (Avenida Edgard Santos, 300, Salvador, Bahia, Brazil) dpo@neoenergia.com
COMPANHIA ENERGÉTICA DO RIO GRANDE DO NORTE - COSERN (Rua Mermoz, 150, Cidade Alta, Natal, Rio Grande do Norte, Brazil) dpo@neoenergia.com
FORÇA EÓLICA DO BRASIL S.A. (Praia do Flamengo, nº 78, sala 101, parte, Flamengo, cidade e Estado do Rio de Janeiro, Brazil) dpo@neoenergia.com
ITAPEBI GERAÇÃO DE ENERGIA S.A. (Praia do Flamengo, nº 78, 4º e 10º andar, Flamengo, cidade e Estado do Rio de Janeiro, Brazil) dpo@neoenergia.com
NEOENERGIA OPERAÇÃO E MANUTENÇÃO S.A. (Avenida Edgard Santos, 300, Cabula VI, Salvador, Bahia, Brazil) dpo@neoenergia.com
TERMOPERNAMBUCO S.A. (Praia do Flamengo, nº 78, 7º andar, Flamengo, cidade e Estado do Rio de Janeiro, Brazil) dpo@neoenergia.com
AVANGRID SERVICE COMPANY (One City Center, 5th Floor, Portland Maine, 04101, United States of America)
AVANGRID MANAGEMENT COMPANY LLC (One City Center, 5th Floor, Portland Maine, 04101, United States of America)
AVANGRID RENEWABLES LLC (1125 NW Couch Street, Suite 700, Portland, Oregon, 97209, United Sates of America)
UIL HOLDING CORPORATION (180 Marsh Hill Road, Orange, CT 06477, United Sates of America)
AVANGRID ARIZON RENEWABLES, LLC (1125 NW Couch Street, Suite 700, Portland, Oregon, 97209, United Sates of America)
AVANGRID LOGISTIC SERVICES, LLC (1125 NW Couch Street, Portland, Oregon, 97209, United Sates of America)
AVANGRID TEXAS RENEWABLES, LLC (1125 NW Couch Street, Portland, Oregon, 97209, United Sates of America)
BERKSHIRE GAS COMPANY (115 Cheshire Rd, Pittsfield, MA 01201)
CENTRAL MAINE POWER COMPANY (83 Edison Drive Augusta, ME 04332 United States of America)
CONNETICUT NATURAL GAS CORPORATION (77 Hartland St, East Hartford, CT 06108)
MANZANA POWER SERVICES INCORPORATED (1125 NW Couch St Portland, OR 97209)
NEW YORK STATE ELECTRIC & GAS CORPORATION (89 East Avenue, Rochester, NY, 14604)
PPM TECHNICAL SERVICES INCORPORATED (1125 NW Couch St Portland, OR 97209)
ROCHESTER GAS & ELECTRIC CORPORATION (89 East Avenue, Rochester, NY, 14604)
SOUTHERN CONNETICUT GAS COMPANY (60 Marsh Hill Road, Orange, CT 06477, United Sates of America)
UNITED ILUMINATING COMPANY (180 Marsh Hill Road, Orange, CT 06477, United Sates of America)
IBERDROLA ENERGÍA INTERNACIONAL, S.A.U. (Plaza Euskadi 5, 48009 Bilbao, Spain)
IBERDROLA CLIENTES INTERNACIONAL, S.A.U. (Plaza Euskadi 5, 48009 Bilbao, Spain)
IBERDROLA RENOVABLES INTERNACIONAL, S.A.U. (Plaza Euskadi 5, 48009 Bilbao, Spain)

The companies of the Iberdrola Group have designated Data Protection Delegates. You may contact them at the following email addresses, when applicable:

- Iberdrola, S.A.: dpo@iberdrola.com

- Rest of the Iberdrola Group companies in Spain: dpo@iberdrola.es

- Iberdrola Energía Internacional, S.A.U., Iberdrola Clientes Internacional, S.A.U. and Iberdrola Renovables Internacional, S.A.U.: dpoiei@iberdrola.com

- Iberdrola Group companies in UK: dataprotection_corporate@scottishpower.com

- Iberdrola Group companies in Italy: dpo@iberdrola.it

- Iberdrola Group companies in Portugal: dpo@iberdrola.pt

- Iberdrola Group companies in Ireland: dataprotection@iberdrola.ie

- Iberdrola Group companies in France: dpo@iberdrola.fr

- Iberdrola Group companies in Germany: datenschutz@iberdrola.de

- Iberdrola Group companies in Brazil: dpo@neoenergia.com

What personal data do we collect and process?

We will process the personal data entered on the Careers Site registration form, the personal data on your Curriculum Vitae and on any other documentation you provide when applying for a specific job or internship offer. In addition, we will process the information obtained as a result of conducting tests during a specific recruitment process or pre-selection tests so you may take part in selection processes for future vacancies.

In addition, should you take part in and pass a selection process, we may request and process, depending on the country that has the vacancy with the selection process in which you took part, additional data such as your identity document and/or Social Security and/or passport number, ID document photo, birth certificate, health records after a medical check-up, and where appropriate, bank account data, family data, and medical certificate of fitness for work ("Additional Data").

The Additional Data may also include the following information:

- For vacant positions in Mexico, RFC documents, school certificate and a socio-economic examination (which aims to corroborate the candidate's way of life, schooling and work references and consists of a home interview and validation of personal references).

- For vacant positions in Brazil, the work card, CPF (Individual Taxpayer's Registry), certificate of investor, voter's card, CNH (national driver's license), PIS (social integration program), SUS card, proof of education, proof of address and vaccination card.

- For vacant positions in the USA, forms I-9, W-4 and SWH and the information you provide to our external provider of job applicant due diligence services (which includes information on personal details, a list of previous addresses, employment record, criminal record, financial information and references from previous jobs).

- For vacant positions in the United Kingdom, form HMRC, a P45 and the information you provide to our external provider of job applicant due diligence services (which includes information on personal details, a list of addresses, employment record, criminal record, financial information and references from previous jobs).

We inform you that the Additional Data will only be accessible to the Iberdrola Group Company in charge of the relevant selection process.

For external suppliers, we inform you that we have signed the contracts legally required to protect your privacy with all of them.

We may ask you to provide original documents and copies as evidence of the information you have provided.

How do we obtain your personal data?

You provide us with your personal data when you register for the Careers Site and, where appropriate, during the selection process in which you are taking part. We obtain other information directly from the tests conducted during a selection process.

If you do not provide us with the personal data requested, we may not be able to register you as an applicant for employment, process your participation in recruitment processes or your request, where appropriate, to receive alerts with job or internship offers, comply with our legal obligations and manage our activity.

Please update your personal data as and when it changes and provide us with truthful information as we need your current details at all times.

For what purposes will we process your data?

Your personal information will be processed for the following purposes:

a) To allow you to take part in the selection processes (whether for a job or an internship) for which you apply, which includes an analysis of your suitability, and to ensure that you meet the requirements for the job or internship on offer.

b) If you pass the selection process, the Additional Data will be processed to prepare all the prior administrative steps required for hiring an employee or signing an academic agreement.

c) To inform you of active vacancies on the Careers Site if you request to receive job and/or internship alerts.

d) Your inclusion in the database of possible applicants for jobs or internships with the Iberdrola Group.

e) To invite you to take part in selection processes that fit your professional profile and match the option selected.

f) To invite you to take part in pre-selection processes for possible future vacancies that fit your professional profile.

What is the legal basis for processing your data?

The legal basis for processing your data is your consent, granted when you register with the Careers Site and accept this Privacy Policy.

Who will your data be revealed to?

Your data will be revealed to the companies in the Iberdrola Group that are offering a specific job or internship and for which the Data Controller provides personnel selection services, when it is necessary in relation to any of the purposes indicated in the section "what purposes will we process your data?". Such companies in the Iberdrola Group are as listed on the company website https://www.iberdrola.com/wcorp/gc/prod/en_US/corporativos/docs/IB_Annual_Financial_Information.pdf [PDF] External link, opens in new window.

In this context, in the event that the communication of your personal data occurs to Iberdrola Group companies located outside the European Economic Area, in countries that do not offer an adequate level of protection of personal data equivalent to that established in the European Union, we inform you that such transfers will be made in accordance with applicable data protection laws and our binding corporate rules ("BCR"). Having BCRs in place means that all entities in our group that subscribe to them have to comply with the GDPR and the same internal rules. It also means that you have the same rights regardless of where Iberdrola processes your data. You can download a copy of the Iberdrola Group BCRs https://www.iberdrola.com/privacy-policy/binding-corporate-rules

Your data may also be disclosed to third parties and the authorities, depending on applicable legislation.

How long will we keep your data?

Should you not take part in any selection process, your data will remain in the system for three years. After this time, your personal data will be deleted. However, the term of three years will be automatically renewed if you access your profile on the Careers Site and update or confirm your data.

Should you have taken part in a selection process, we will keep your data for three years and include you in future selection processes that fit your profile. After this time, your personal data relating to the relevant selection process will be deleted.

We will keep the Additional Data if you eventually join the organization either as an employee or intern following the relevant selection process, as part of the information on you as an employee or intern, as appropriate, but the Additional Data will be deleted from the Careers Site. Should you fail to join the organization, either as an employee or intern, the Additional Data will be permanently deleted.

What are your rights?

You have the right to access your personal data and request the correction of inaccurate information and, where applicable, the erasure of data no longer required for the purposes for which it was initially gathered. You also have the right to object to or restrict the processing and portability of the data. You may also withdraw your consent at any time without retroactive effect.

You may exercise these rights free of charge by writing to CandidateDataProtection@iberdrola.com

You may view, update, modify and delete your data directly by accessing your applicant profile on the Careers Site, using your username and password. From your applicant profile you can modify, delete and add data to update your curriculum vitae or completely remove your profile.

If you are not satisfied with the exercise of your rights, you may submit a complaint to the Spanish Data Protection Agency or equivalent authority.

You may view here the staff recruitment and selection policy.