PRIVACY POLICY INVESTORS

Privacy notice

Iberdrola, S.A. ("Iberdrola" or the "company") will protect your privacy and guarantees compliance with personal data protection legislation, in particular, the General Data Protection Regulations ("GDPR") and the Organic Law on Data Protection and Guarantee of Digital Rights ("LOPDGDD"). Your personal data will be treated lawfully, fairly and transparently, according to specific explicit and legitimate purposes, only if they are adequate, relevant and limited to what is necessary in relation to such purposes. In addition, we will keep your data accurate and up to date, retaining them in such a way that your identification is permitted only for the time necessary to the purposes of the processing.

Iberdrola has implemented the necessary technical and organizational measures to protect your data from accidental loss or unauthorized alteration, access, use or disclosure, having also established procedures to react to any security incident that could affect your personal data.

By means of this Privacy Policy we inform you about the way in which the treatment of your personal data will be carried out.

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?

IBERDROLA, S.A.

Address: Plaza Euskadi, 5, 48009, Bilbao, España.

Iberdrola has appointed a Data Protection Delegate to facilitate compliance with the obligations of the RGPD and the LOPDGDD. You may contact:

  • By post to the following address: Tomás Redondo 1, 28033, Madrid.
  • By e-mail, sent to dpo@iberdrola.com.

WHAT PERSONAL DATA DO WE COLLECT FROM YOU AND WHERE WE HAVE OBTAINED?

Iberdrola will only process your personal data necessary for complying with the processing purposes listed below.

1. In relation with data obtained from Nasdaq, we will only use your name and surname(s), and professional particulars relating to your e-mail address, telephone numbers and profession.

This personal data has been obtained from Nasdaq, which has provided it based on your consent. On occasions we will obtain the data directly from you, which you provide as a result of your relationship with this company.

So that we may fulfil the purposes described below, we ask that you update your personal data whenever there are any changes thereto.

2. In relation with the broadcasting of events via streaming and audio conferencing: presentation of Iberdrola's results and Investor Day. This will only be your name, surname(s), e-mail address, professional data, position and country.

We obtain this data directly from you via a web form or verbally.

FOR WHAT PURPOSES DO WE PROCESS YOUR DATA?

We process your data for the following purposes:

1. In relation with the data indicated in point 1:

  • Sending permanent information on both the quarterly evolution and the strategy and industrial group, the main financial events and the current situation of the company, as well as information regarding the exercise of your rights as an investor.
  • Direct and personalized telephone attention through the Investor Relations team.
  • Receive invitations to corporate, cultural and leisure events organized by the company to offer the possibility of participating in raffles and special prizes; offer the possibility of participating in surveys to find out your opinion of the company.

2. In relation with the broadcasting of events via streaming and audio conferencing: presentation of Iberdrola's results and Investor Day. This will only be your name, surname(s), e-mail address, professional data, position and country.

We obtain this data directly from you via a web form or verbally.

WHAT IS THE LEGITIMACY OF THE PROCESSING OF YOUR DATA?

The legal basis that legitimates this processing is the legitimate interest of Iberdrola to keep the financial community informed about important financial information of the entity and the supervision of such information, facilitating the exercise of the rights and interests of investors within the framework of the defense of the social interest.

HOW LONG DO WE KEEP YOUR DATA?

In relation with the data collected for the purposes indicated in point 1, the data will be stored until you request the elimination thereof, and, duly blocked, until the expiry of the statute of limitations for any potential legal action derived from the same.

In relation with the data collected for the purposes indicated in point 2, the data will solely be stored during the events, and, duly blocked, until the expiry of the statute of limitations for any potential legal action derived from the same.

TO WHOM WILL YOUR DATA BE DISCLOSED?

Your personal data will not be communicated by Iberdrola to any third party outside the entity. However, if you participate in question time at events, bearing in mind the terms and conditions for participating therein, you are hereby informed that your data will be disclosed to any third party watching the broadcast.

You are also hereby informed that your data may also be accessed by external service providers related to the broadcasting of the events. Iberdrola has signed the legally required contracts with all of them ensuring copliance with their obligations as processors.

WHAT ARE YOUR RIGHTS?

You have the right to access your personal data that is the object of processing, as well as to request the rectification of inaccurate data or, if applicable, to request its deletion when the data are no longer necessary for the purposes for which they were collected, in addition to exercising the right to oppose and limit the processing and portability of the data.

You may exercise your rights free of charge to the following e-mail address: investor.relations@iberdrola.es.

In the event that you have not obtained satisfaction in the exercise of your rights, you may submit a claim to the Spanish Data Protection Agency.

In any case, you have the right to lodge a complaint with the Spanish Data Protection Agency.