CAREERS SITE: PRIVACY NOTICE

The companies in the Iberdrola group (“Iberdrola group”, which include Iberdrola, S.A. and all the companies it controls directly or indirectly in accordance with law) undertake to protect your privacy and ensure compliance with personal data protection legislation and, specifically, undertake to ensure that your personal information will be processed: in a legal, fair, transparent manner; for explicit, legitimate purposes; only if it is appropriate, pertinent and limited to what is required for the purposes for which it was obtained; if it is accurate and up to date; in such a way as to allow your identification only during the time needed to fulfil the purposes that justify its processing; and guaranteeing its integrity, availability and confidentiality.

Iberdrola has implemented the necessary technical and organizational measures to protect your data from accidental loss or unauthorized alteration, access, use or disclosure, having also established procedures to react to any security incident that could affect your personal data.

Pursuant to current legislation on the protection of personal data, we hereby inform you of the processing of your personal data on the Iberdrola group Careers Site ("Careers Site") when you register and possibly take part in Iberdrola group selection processes for staff or interns.

If, as a result of your taking part in a selection process for any of the companies in the Iberdrola group, you provide us with personal data on third parties, you must, prior to the personal data being provided, inform said third parties that it will be processed under the terms in this notice.

WHO IS THE DATA CONTROLLER IN CHARGE OF YOUR PERSONAL DATA?

The data controller in charge of your personal data will in all cases be Iberdrola S. A. as it has overall responsibility for the Careers Site. In addition, the companies that access said data, depending on your preferences when registering with the Careers Site, may also be considered data controllers.

1. If you have already created your applicant profile but have not applied for any specific job or internship offer, the data controllers that will have access to your personal data will depend on the option you select from among the following:

  • If you choose option 1: you authorise any company in the Iberdrola group to access your dataand they will all act as data controllers for your personal data. These companies are listed at the end of this section. Since some of these companies are outside the European Economic Area (United States, Brazil and Mexico), we inform you that access by these companies to your personal data involves an international data transfer to these countries, which will be based on you giving your consent to these companies having such access. However, we inform you that your data will be processed in line with the guarantees set out in the General Data Protection Regulation by all the companies in the Iberdrola group regardless of the country in which the processing takes place. Your selection of this option means that you give your consent to said international transfer.
  • If you choose option 2: you only authorise access to the data by companies in the Iberdrola group that carry out staff selection processes in your country of residence, and only these companies will be in charge of processing your data.
  • If you choose option 3: Iberdrola, S.A. will be the sole data controller as it is responsible for the Careers Site.

2. If you have created your applicant profile and apply for a specific job or internship offer, the data controllers will be the companies in the Iberdrola group that correspond to the options outlined in sections 1(a)-(c), in addition to the company processing the job or internship offer for which you applied and the company to which the job or internship offered corresponds.

The companies in the Iberdrola group that are responsible for recruitment are as follows:

  • IBERDROLA S.A. (Plaza Euskadi 5, 48009 Bilbao, España)
    Contact details of the Data Protection Officer:
    - E-mail address: dpo@iberdrola.com
    - Postal address: IBERDROLA S.A. - Att.: Delegado de Protección de Datos, c/Tomás Redondo, 1 - 28033 Madrid - España
  • IBERDROLA ESPAÑA S.A.U. (Plaza Euskadi 5, 48009 Bilbao, España)
    Contact details of the Data Protection Officer:
    - E-mail address: dpo@iberdrola.com
    - Postal address: IBERDROLA S.A. - Att.: Delegado de Protección de Datos, c/Tomás Redondo, 1 - 28033 Madrid - España
  • IBERDROLA MÉXICO, S.A. DE C.V.
    Boulevard Manuel Ávila Camacho 24, piso 19, Colonia Lomas de Chapultepec, Ciudad de México 11000, México. mx.protecciondatos@iberdrola.com
  • IBERDROLA SERVICIOS CORPORATIVOS, S.A. de C.V.
    Boulevard Manuel Ávila Camacho 24, piso 19, Colonia Lomas de Chapultepec, Ciudad de México 11000, México. mx.protecciondatos@iberdrola.com
  • IBERDROLA SOPORTE A PROYECTOS LIBERALIZADOS, S.A. DE C.V.
    Boulevard Manuel Ávila Camacho 24, piso 19, Colonia Lomas de Chapultepec, Ciudad de México 11000, México. mx.protecciondatos@iberdrola.com
  • SERVICIOS DE OPERACIÓN LA LAGUNA, S.A. DE C.V.
    Boulevard Manuel Ávila Camacho 24, piso 19, Colonia Lomas de Chapultepec, Ciudad de México 11000, México. mx.protecciondatos@iberdrola.com
  • SERVICIOS ADMINISTRATIVOS TAMAZUNCHALE, S.A. DE C.V.
    Boulevard Manuel Ávila Camacho 24, piso 19, Colonia Lomas de Chapultepec, Ciudad de México 11000, México. mx.protecciondatos@iberdrola.com
  • IBERDROLA ENERGÍA ALTAMIRA DE SERVICIOS, S.A. DE C.V.
    Boulevard Manuel Ávila Camacho 24, piso 19, Colonia Lomas de Chapultepec, Ciudad de México 11000, México. mx.protecciondatos@iberdrola.com
  • CINERGY, S.R.L. DE C.V.
    Boulevard Manuel Ávila Camacho 24, piso 19, Colonia Lomas de Chapultepec, Ciudad de México 11000, México. mx.protecciondatos@iberdrola.com
  • IBERDROLA SOPORTE A PROYECTOS RENOVABLES, S.A. DE C.V.
    Boulevard Manuel Ávila Camacho 24, piso 19, Colonia Lomas de Chapultepec, Ciudad de México 11000, México. mx.protecciondatos@iberdrola.com
  • CORPORATIVO IBERDROLA RENOVABLES MÉXICO, S.A. DE C.V.
    Boulevard Manuel Ávila Camacho 24, piso 19, Colonia Lomas de Chapultepec, Ciudad de México 11000, México. mx.protecciondatos@iberdrola.com
  • SERVICIOS DE OPERACIÓN EOELÉCTRICA, DE MÉXICO, S.A. DE C.V.
    Boulevard Manuel Ávila Camacho 24, piso 19, Colonia Lomas de Chapultepec, Ciudad de México 11000, México. mx.protecciondatos@iberdrola.com
  • SCOTTISHPOWER UK, PLC (320 St Vincent Street, G2 5AD, Glasgow, Scotland, United Kingdom). Delegado de protección de datos: dataprotection_corporate@scottishpower.com
  • SCOTTISHPOWER ENERGY MANAGEMENT LIMITED (320 St Vincent Street, G2 5AD, Glasgow, Scotland, United Kingdom). Delegado de protección de datos: dataprotection_corporate@scottishpower.com
  • SCOTTISHPOWER RENEWABLES (UK) LIMITED (The Soloist, 1 Lanyon Place, Belfast, BT1 3LP). Delegado de protección de datos: dataprotection_corporate@scottishpower.com
  • SCOTTISHPOWER GENERATION (Assets) LTD. PLC (320 St Vincent Street, G2 5AD, Glasgow, Scotland, United Kingdom). Delegado de protección de datos: dataprotection_corporate@scottishpower.com
  • SP DISTRIBUTION OLC (Ochil House, 10 Technology Avenue, Hamilton International Technology Park, Blantyre, G72 0HT). Delegado de protección de datos: dataprotection_corporate@scottishpower.com
  • SP TRANSMISSION PLC (Ochil House, 10 Technology Avenue, Hamilton International Technology Park, Blantyre, G72 0HT). Delegado de protección de datos: dataprotection_corporate@scottishpower.com
  • SP MANWEB PLC (3 Prenton Way, Prenton, CH43 3ET, Scotland, United Kingdom). Delegado de protección de datos: dataprotection_corporate@scottishpower.com
  • SCOTTISHPOWER ENERGY RETAIL LTD (320 St Vincent Street, G2 5AD, Glasgow, Scotland, United Kingdom). Delegado de protección de datos: dataprotection_corporate@scottishpower.com
  • SP DATASERVE LTD (320 St Vincent Street, G2 5AD, Glasgow, Scotland, United Kingdom). Delegado de protección de datos: dataprotection_corporate@scottishpower.com
  • SCOTTISHPOWER SYSTEMS LTD (Ochil House, 10 Technology Avenue, Hamilton International Technology Park, Blantyre, G72 0HT). Delegado de protección de datos: dataprotection_corporate@scottishpower.com
  • ELEKTRO REDES S.A. (Rua Ary Antenor de Souza, 321 Jd. Nova América, Campinas - Sao Paolo, 13053-024, Brasil)
  • NEOENERGIA S.A. (Praia do Flamengo, nº 78, 3º andar, Flamengo, cidade e Estado do Rio de Janeiro, Brasil)
  • NC ENERGIA S.A. (Praia do Flamengo, nº 78, 1º andar, Flamengo, cidade e Estado do Rio de Janeiro, Brasil)
  • COMPANHIA ENERGÉTICA DE PERNAMBUCO - CELPE (Avenida João de Barros, nº 111, Boa Vista, Recife, Pernambuco, Brasil)
  • COMPANHIA DE ELETRICIDADE DO ESTADO DA BAHIA - COELBA (Avenida Edgard Santos, 300, Salvador, Bahia, Brasil)
  • COMPANHIA ENERGÉTICA DO RIO GRANDE DO NORTE - COSERN (Rua Mermoz, 150, Cidade Alta, Natal, Rio Grande do Norte, Brasil)
  • FORÇA EÓLICA DO BRASIL S.A. (Praia do Flamengo, nº 78, sala 101, parte, Flamengo, cidade e Estado do Rio de Janeiro, Brasil)
  • ITAPEBI GERAÇÃO DE ENERGIA S.A. (Praia do Flamengo, nº 78, 4º e 10º andar, Flamengo, cidade e Estado do Rio de Janeiro, Brasil)
  • NEOENERGIA OPERAÇÃO E MANUTENÇÃO S.A. (Avenida Edgard Santos, 300, Cabula VI, Salvador, Bahia, Brasil)
  • TERMOPERNAMBUCO S.A. (Praia do Flamengo, nº 78, 7º andar, Flamengo, cidade e Estado do Rio de Janeiro, Brasil)
  • AVANGRID SERVICE COMPANY (One City Center, 5th Floor, Portland Maine, 04101, United States of America)
  • AVANGRID MANAGEMENT COMPANY LLC (One City Center, 5th Floor, Portland Maine, 04101, United States of America)
  • AVANGRID RENEWABLES LLC (1125 NW Couch Street, Suite 700, Portland, Oregon, 97209, United Sates of America)
  • UIL HOLDING CORPORATION (180 Marsh Hill Road, Orange, CT 06477, United Sates of America)
  • AVANGRID ARIZON RENEWABLES, LLC (1125 NW Couch Street, Suite 700, Portland, Oregon, 97209, United Sates of America)
  • AVANGRID LOGISTIC SERVICES, LLC (1125 NW Couch Street, Portland, Oregon, 97209, United Sates of America)
  • AVANGRID TEXAS RENEWABLES, LLC (1125 NW Couch Street, Portland, Oregon, 97209, United Sates of America)
  • BERKSHIRE GAS COMPANY (115 Cheshire Rd, Pittsfield, MA 01201)
  • CENTRAL MAINE POWER COMPANY (83 Edison Drive Augusta, ME 04332 United States of America)
  • CONNETICUT NATURAL GAS CORPORATION (77 Hartland St, East Hartford, CT 06108)
  • MANZANA POWER SERVICES INCORPORATED (1125 NW Couch St Portland, OR 97209)
  • NEW YORK STATE ELECTRIC & GAS CORPORATION (89 East Avenue, Rochester, NY, 14604)
  • PPM TECHNICAL SERVICES INCORPORATED (1125 NW Couch St Portland, OR 97209)
  • ROCHESTER GAS & ELECTRIC CORPORATION (89 East Avenue, Rochester, NY, 14604)
  • SOUTHERN CONNETICUT GAS COMPANY (60 Marsh Hill Road, Orange, CT 06477, United Sates of America)
  • UNITED ILUMINATING COMPANY (180 Marsh Hill Road, Orange, CT 06477, United Sates of America)

WHAT PERSONAL DATA DO WE COLLECT AND PROCESS?

We will process the personal data entered on the Careers Site registration form, the personal data on your curriculum vitae and on any other documentation you provide when applying for a specific job or internship offer. In addition, we will process the information obtained as a result of conducting tests during a specific recruitment process or pre-selection tests so you may take part in selection processes for future vacancies.

In addition, should you take part in and pass a selection process, we may request and process, depending on the country that has the vacancy with the selection process in which you took part, additional data such as your identity document and/or Social Security and/or passport number, ID document photo, birth certificate, health records after a medical check-up, [and] where appropriate, bank account data, family data, medical certificate of fitness for work (“Additional Data”).

The Additional Data may also include the following information:

- For vacant positions in Mexico, RFC documents, school certificate and a socio-economic examination (which aims to corroborate the candidate's way of life, schooling and work references and consists of a home interview and validation of personal references).

- For vacant positions in Brazil, the work card, CPF (Individual Taxpayer's Registry), certificate of investor, voter's card, CNH (national driver's license), PIS (social integration program), SUS card, proof of education, proof of address and vaccination card.

- For vacant positions in the USA, forms I-9, W-4 and SWH and the information you provide to our external provider of job applicant due diligence services (which includes information on personal details, a list of previous addresses, employment record, criminal record, financial information and references from previous jobs).

- For vacant positions in the United Kingdom, form HMRC, a P45 and the information you provide to our external provider of job applicant due diligence services (which includes information on personal details, a list of addresses, employment record, criminal record, financial information and references from previous jobs).

For external suppliers, we inform you that we have signed the contracts legally required to protect your privacy with all of them.

We may ask you to provide original documents and copies as evidence of the information you have provided.

HOW DO WE OBTAIN YOUR PERSONAL DATA?

You provide us with your personal data when you register for the Careers Site and, where appropriate, during the selection process in which you are taking part. We obtain other information directly from the tests conducted during a selection process.

If you do not provide us with the personal data requested, we may choose not to register you as an applicant for employment, process your participation in recruitment processes or your request, where appropriate, to receive alerts with job or internship offers, comply with our legal obligations and manage our activity.

Please update your personal data as and when it changes and provide us with truthful information as we need your current details at all times.

FOR WHAT PURPOSES WILL WE PROCESS YOUR DATA?

Your personal information will be processed for the following purposes:

  • To allow you to take part in the selection processes (whether for a job or an internship) for which you apply, which includes an analysis of your suitability, and to ensure that you meet the requirements for the job or internship on offer.
  • If you pass the selection process, the Additional Data will be processed to prepare all the prior administrative steps required for hiring an employee or signing an academic agreement.
  • To inform you of active vacancies on the Careers Site if you request to receive job and/or internship alerts.
  • Your inclusion in the database of possible applicants for jobs or internships with the Iberdrola group or particular companies in the Iberdrola group, depending on the option selected.
  • To invite you to take part in selection processes that fit your professional profile and match the option selected.
  • To invite you to take part in pre-selection processes for possible future vacancies that fit your professional profile.

WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?

The legal basis for processing your data is your consent, granted when you register with the Careers Site and accept this Privacy Policy.

WHO WILL YOUR DATA BE REVEALED TO?

Your data will be revealed to the companies in the Iberdrola group that are offering a specific job or internship and for which the Data Controller provides personnel selection services. Such companies in the Iberdrola group are as listed on the company website https://www.iberdrola.com/wcorp/gc/prod/es_ES/corporativos/docs/IB_Informe_Financiero_Anual.pdf [PDF]

Your data may also be revealed to third parties and the authorities, depending on applicable legislation.

HOW LONG WILL WE KEEP YOUR DATA?

Should you not take part in any selection process, your data will remain in the system for two years. After this time, your personal data will be deleted unless you re-enter your data and accept an extension of this period.

Should you have taken part in a selection process, we will keep your data for three years and include you in future selection processes that fit your profile. After this time, your personal data will be deleted unless you re-enter your data and accept an extension of this period.

We will keep the Additional Data if you sign the employment contract or academic agreement corresponding to the selection process, as part of the information on you as an employee or intern, as appropriate, but the Additional Data will be deleted from the Careers Site. If you do not sign the employment contract or academic agreement, the Additional Data will be permanently deleted.

WHAT ARE YOUR RIGHTS?

You have the right to access your personal data and request the correction of inaccurate information and, where applicable, the erasure of data no longer required for the purposes for which it was initially gathered. You also have the right to object to or restrict the processing and portability of the data. You may also withdraw your consent at any time.

You may exercise these rights free of charge by writing to CandidateDataProtection@iberdrola.com

You may view, update, modify and delete your data directly by accessing your applicant profile on the Careers Site, using your username and password. From your applicant profile you can modify, delete and add data to update your curriculum vitae or completely remove your profile. You may also change your privacy settings to allow or restrict access to your data by all the companies in the Iberdrola group.

If you are not satisfied with the exercise of your rights, you may submit a complaint to the Spanish Data Protection Agency or equivalent authority.

You may view the staff recruitment and selection policy here. https://www.iberdrola.com/wcorp/gc/prod/es_ES/corporativos/docs/politica_reclutamiento_seleccion.pdf [PDF]