PRIVACY POLICY FOR COMPETITIONS

Privacy policy for competitions

Iberdrola, S.A. and the companies that make up the Iberdrola Group in accordance with commercial law (hereinafter, for any of them, "Iberdrola") hereby undertake to protect your privacy and ensure compliance with the laws governing protection of personal data, most particularly the General Data Protection Regulation ("GDPR") and the Spanish Organic Law on Data Protection and the Guarantee of Digital Rights ("LOPDGDD"). Your personal data will be processed: lawfully, faithfully and transparently; for specific, explicit, legitimate purposes; only where appropriate and pertinent; and to the extent strictly necessary for these purposes. We will keep your data accurate and updated. The data will be stored to allow your identification only for the time necessary to comply with the purposes for which it is processed.

Iberdrola has implemented the necessary technical and organisational measures to protect your data from accidental loss or unauthorised alteration, access, use or disclosure, and has also established procedures to react to any security incidents that could affect your personal data.

This privacy policy informs you about how your personal data is processed when you take part in competitions organised by Iberdrola (hereinafter, ("Competitions").

If you provide us with third-party data when taking part in a Competition, you must first inform that third party of this privacy notice and obtain the necessary consent.

If this privacy policy is updated, you will be notified through this website.

What personal data do we process and where do we get them from?

The personal data that we process about you are the details you give us when you register to participate in a Competition.

More specifically, the data we process are: your name and surname, ID or passport number, email address, social media username, postal address, bank account number and any images you send us.

Who is the Data Controller responsible for processing your personal data?

IBERDROLA, S.A.
Address: Plaza Euskadi 5, 48009 Bilbao, Spain.

Iberdrola has designated a Data Protection Officer whom you may contact regarding any matters related to this Privacy Policy at the following email address: dpo@iberdrola.com.

For what purposes will we process your data?

The information you provide will be processed for the following purposes:

a) To process your registration in a Competition.

b) To manage your participation in a Competition.

c) To publish any images you send us if you are selected according to the Competition terms and conditions.

d) To process and deliver your prize if you win the Competition.

Your data will be processed solely for the purposes expressed, and may not be further processed for purposes which are not aligned with those described herein. If your data are intended to be used for purposes other than those explained above, you will be informed accordingly before they are processed for such purposes.

What is the lawful basis for processing your data?

The lawful basis for processing your personal data is the consent you give us.

How long will we keep your data?

We will keep your personal data for the duration of the Competition. However, data will be duly blocked and stored until the statute of limitations period for possible legal actions has elapsed.

To whom will your data be communicated?

Your data will not be disclosed to any third parties unrelated to Iberdrola, with the exception of the Spanish Tax Agency so as to comply with tax obligations and certain external service providers involved in organising Competitions, with each of whom Iberdrola will have signed the statutory agreements to ensure they comply with their obligations as data processors.

We inform you that the communication of your data to companies based outside the European Union constitutes an international transfer to a third country, which involves certain risks to your privacy due to the absence of an adequacy finding and adequate guarantees. Therefore, in the event that it is necessary to carry out an international transfer of your personal data, you will be informed of this and your explicit consent will be requested for it to be carried out.

What are your rights?

You have the right to access those of your personal data which are subject to processing, as well as to request that any information be corrected if it is inaccurate, or erased when it is no longer required for the purposes for which it was initially collected. You also have the right of objection to or limitation of the processing of your data, and to seek the portability thereof.

To exercise your rights free of charge, please write to our postal address at Calle Tomás Redondo 1, 28033 Madrid, Spain - REF: Medios Digitales & Redes Sociales, or to our email address: digitalysocialmedia@iberdrola.es.

In any case, you have the right to file a claim with the Spanish Data Protection Agency.