PRIVACY POLICY INVESTORS

Privacy notice

Iberdrola, S.A. ("Iberdrola" or the "company") will protect your privacy and guarantees compliance with personal data protection legislation, in particular, the General Data Protection Regulations ("GDPR") and the Organic Law on Data Protection and Guarantee of Digital Rights ("LOPDGDD"). Your personal data will be treated lawfully, fairly and transparently, according to specific explicit and legitimate purposes, only if they are adequate, relevant and limited to what is necessary in relation to such purposes. In addition, we will keep your data accurate and up to date, retaining them in such a way that your identification is permitted only for the time necessary to the purposes of the processing.

Iberdrola has implemented the necessary technical and organizational measures to protect your data from accidental loss or unauthorized alteration, access, use or disclosure, having also established procedures to react to any security incident that could affect your personal data.

By means of this Privacy Policy we inform you about the way in which the treatment of your personal data will be carried out.

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?

IBERDROLA, S.A.

Address: Plaza Euskadi, 5, 48009, Bilbao, España.

Iberdrola has appointed a Data Protection Delegate to facilitate compliance with the obligations of the RGPD and the LOPDGDD. You may contact:

  • By post to the following address: Tomás Redondo 1, 28033, Madrid.
  • By e-mail, sent to dpo@iberdrola.com.

WHAT PERSONAL DATA DO WE COLLECT FROM YOU AND WHERE WE HAVE OBTAINED?

Iberdrola will only process your personal data necessary to fulfill the purposes of processing stated below. These data will be only your name and surname, and professional data relating to your email address, telephone numbers and profession.

These personal data have been obtained from Nasdaq, who have communicated them to us on the basis of your consent. Occasionally, we obtain them directly from you, who has provided them to us by virtue of your relationship with this entity.

In order to fulfill the purposes described below, we ask you to update your personal data as it changes.

FOR WHAT PURPOSES DO WE PROCESS YOUR DATA?

The purpose for which we treat your data is the following:

  • Sending permanent information on both the quarterly evolution and the strategy and industrial group, the main financial events and the current situation of the company, as well as information regarding the exercise of your rights as an investor.
  • Direct and personalized telephone attention through the Investor Relations team.
  • Receive invitations to corporate, cultural and leisure events organized by the company to offer the possibility of participating in raffles and special prizes; offer the possibility of participating in surveys to find out your opinion of the company.

WHAT IS THE LEGITIMACY OF THE PROCESSING OF YOUR DATA?

The legal basis that legitimates this processing is the legitimate interest of Iberdrola to keep the financial community informed about important financial information of the entity and the supervision of such information, facilitating the exercise of the rights and interests of investors within the framework of the defense of the social interest.

HOW LONG DO WE KEEP YOUR DATA?

Your personal data will be kept until you request its deletion.

TO WHOM WILL YOUR DATA BE DISCLOSED?

Your personal data will not be communicated by Iberdrola to any third party outside the entity.

WHAT ARE YOUR RIGHTS?

You have the right to access your personal data that is the object of processing, as well as to request the rectification of inaccurate data or, if applicable, to request its deletion when the data are no longer necessary for the purposes for which they were collected, in addition to exercising the right to oppose and limit the processing and portability of the data.

You may exercise your rights free of charge to the following e-mail address: investor.relations@iberdrola.es.

In the event that you have not obtained satisfaction in the exercise of your rights, you may submit a claim to the Spanish Data Protection Agency.