Skip to main content

Privacy notice for recommended candidates

 

Date of last update: 29 September 2024

Iberdrola, S.A. and the companies that are part of the Iberdrola Group under commercial law (hereinafter, each of them, "Iberdrola" and, jointly, "Iberdrola Group") are committed to protecting your privacy and complying with personal data protection legislation, in particular, where applicable, the General Data Protection Regulation ("GDPR") and the personal data protection legislation applicable in each country in which the companies of the Iberdrola Group are domiciled. Your personal data will be processed in a lawful, fair and transparent manner; in accordance with explicit and legitimate purposes; only if they are adequate, relevant and limited to what is necessary in relation to those purposes. In addition, we will store your data in a form that permits identification only for as long as is necessary to fulfill the purposes of the processing.

Iberdrola has implemented the necessary technical and organizational measures to protect your data from accidental loss or unauthorized alteration, access, use or disclosure, having also established procedures to react to any security incident that may affect such personal data.

By means of this Privacy Notice, we inform you about the processing of your personal data in connection with the request made by a third party for your recommendation as an Iberdrola candidate.

We recommend that you read this notice in order to know how Iberdrola process your personal data.

Who is the data controller responsible for processing your personal data?

The data controller of your personal data will be the companies of the Iberdrola Group with responsibility in personnel selection processes. You can access information on each of the data controllers on the corporate website: https://www.iberdrola.com/documents/20125/42388/IB_Annual_Financial_Information.pdf [PDF] (Appendix I).

We also inform you that the Iberdrola Group companies have designated Data Protection Officers. You may contact them, or the local privacy teams, at the following e-mail addresses, where applicable:

What personal data do we collect and process?

The personal data that we may process from you are: first name, last name, telephone number, e-mail address and relationship with the employee who recommended you.

The personal data that we may process has been obtained through the "Candidate recommendation" form, completed by a third party, an Iberdrola employee, on your behalf, for the purpose of recommending you for a position selected by that third party.

For what purposes do we process your data?

The information will be processed for the purpose of: managing your recommendation and contacting you so that, if you are interested, you can proceed to register in the Iberdrola Group Employment Channel and participate in the selection process.

Which is the legal basis for the processing of your data?

The legal basis for the processing of your personal data for the purposes indicated in the previous section is the legitimate interest of Iberdrola in managing and contacting you to invite you to register in the Iberdrola Employment Channel.

You may object to this processing at any time, free of charge, by writing to the mailbox stated in clause 7 of this Notice.

How long do we stored your data?

Your personal data will be stored for the time necessary to fulfill the candidate recommendation request and for a maximum of 6 months. In any case, you may object to the processing of your data previously.

At the end of this period, the data provided will be duly blocked until the expiry of the legal obligations imposed on Iberdrola.

How will your data be shared?

Your data will be communicated to Iberdrola Group companies for the purpose of including you in a database of recommended candidates, in order to invite you to participate in the process in which you have been recommended on the basis of the Iberdrola Group's legitimate interest in having a common database of candidates interested in a job or internship in the Iberdrola Group. Such Iberdrola Group companies are those listed on the corporate website: https://www.iberdrola.com/documents/20125/42388/IB_Annual_Financial_Information.pdf [PDF] (Annex I).

In this context, in the event that the communication of your personal data takes place to Iberdrola Group companies located outside the European Economic Area or the United Kingdom, in countries that do not offer an adequate level of protection of personal data equivalent to that established in the European Union and the United Kingdom, we inform you that such transfers will be made in accordance with the applicable data protection laws and our binding corporate rules ("BCRs"). Having BCRs in place means that all entities in our group that subscribe to them have to comply with the GDPR and the same internal rules. It also means that your rights (remain the same regardless of where Iberdrola processes your data). You can download a copy of the Iberdrola Group BCRs at https://www.iberdrola.com/privacy-policy/binding-corporate-rules.

Your data may also be communicated to third parties and official bodies when necessary in compliance with legal obligations or to comply with requests from public or judicial authorities.

Finally, your data will be accessible by external service providers, such as IT service providers or those involved in the selection process. With all of them we have signed the contracts required by the GDPR that regulate their obligations as data processors. In such contracts, when the companies are located in a third country that does not offer an adequate level of protection of personal data, equivalent to that established in the European Union, Iberdrola will ensure that it has the appropriate measures in place so that your data is protected in the country and in the destination organization in identical or similar terms to those provided for in the European and Spanish regulations. You can contact Iberdrola at any time to find out the specific guarantees that have been implemented for the adequate and appropriate protection of your personal data.  

8.    What are your rights?

You have the right to access your personal data being processed, as well as to request the rectification of inaccurate data or, where appropriate, to request their erasure when the data are no longer necessary for the purposes for which they were collected, in addition to exercising the right to restrict and limit the processing and portability of the data.

You may exercise these rights free of charge by writing to: CandidateDataProtection@iberdrola.com.

We inform you that you have the right to file a complaint with the Spanish Data Protection Agency or with the competent supervisory or regulatory authority in your country.