Rules and practices to protect personal data
Iberdrola considers the privacy of individuals to be important, both the visitors to our website (hereinafter, "website") and any other individuals who provide information to us through this website or make use of the services offered as registered USERS (hereinafter, "USER" or "USERS").
Iberdrola undertakes to process your data in accordance with the applicable personal data protection regulations applicable at any time. Specifically, Iberdrola will comply with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and any other related implementing regulations in force at any time.
In any case, the USER is solely responsible for the information provided on the website and if in the future Iberdrola wishes to use it for purposes other than those referred to above, it will inform the USER of these new purposes and will seek his/her consent, if necessary.
1. Who is the data controller?
Contact details of the data controller:
Plaza Euskadi 5, Bilbao
Data Protection Officer: Tomás Redondo 1, 28033 Madrid or firstname.lastname@example.org
2. How do we collect personal data from you?
Iberdrola may have the data you provide us with in the forms you fill in or through the different e-mail accounts that Iberdrola makes available on its website for contact purposes.
This data is processed when you interact with Iberdrola in participating or requesting to be considered to participate in activities related to Iberdrola, when you apply to any of our job offers, when you interact with the website when you are asked to provide personal data, as described in this Privacy and Cookies Policy; when you register on the website or use certain features without registering.
We ask you to update your personal data as it changes, and always provide truthful information, as we must have your current information.
3. How do we use personal data of the USERS?
Iberdrola informs USERS that the personal data provided and captured will be used for the purpose of:
- Respond to queries or requests for information that USERS may make;
- Respond to your job application;
- The use or provision of services, if any, after registration of the USER, in accordance with the Legal Notice and Legal Conditions for access and use of the Website and the specific conditions of certain services;
- To customize and improve the tools and functionalities of the website, as well as to guarantee its technical operation;
- In the event that the USER checks the appropriate box for such purposes, we will keep him / her informed by sending notifications / newsletters by email and / or other electronic means, the content of which will mainly address our services, activities, projects, updates and new features of the website.
- Use them for any other purpose required or permitted by the applicable law or for which you have given your consent.
4. Why do we process personal data of the USERS?
Iberdrola may process your personal data on any of the following legal bases: (A) legitimate business purposes; (B) when you have given your consent; (C) when it is necessary to comply with Iberdrola's legal obligations and (D) as necessary for the performance of a contract to which you are a party.
5. Who will be able to access the USER's personal data?
Depending on the purposes for which personal information is collected, it may be accessed by the following individuals, without distinction:
- Authorized personnel of Iberdrola subject to the applicable data protection laws;
- Official bodies or third parties in accordance with the applicable legislation;
- External service providers, with whom we have signed the legally required contracts under which they guarantee the fulfilment of their obligations as data processors.
6. How do we protect USER's personal information?
We have implemented the necessary technical measures to protect your data and information from accidental loss, unauthorized access, use and disclosure. However, despite the diligent implementation of such measures, the USER should be aware that security measures are not indefeasible. Iberdrola is not responsible for the actions of third parties who, in violation of these measures, access the aforementioned data and information.
We have established procedures for any data security incident.
7. How long will we keep the USER's personal data?
The criteria we follow for the retention of your data is determined by:
- The purpose of the data collected and the fulfilment of this purpose.
- The reasons why the data is collected: e.g. in case of consent, you can revoke it at any time.
- Required periods of storage according to contractual and legislative requirements.
Iberdrola employees and suppliers who have any access to the USER's data undertake not to disclose or make use of the information they have accessed. The information provided by the USER shall in any case be considered confidential and may not be used for any other purpose than that which Iberdrola informs the USER of, where appropriate.
9. What are the data protection rights of USERS?
USERS may exercise the following rights:
- Right to request access to personal data: you may ask Iberdrola if it is processing your data, and if so, access them.
- Right to request rectification if the data are inaccurate or complete the data that it is incomplete.
- Right to request erasure of your data.
- Right to request restriction of processing: in this case we will only retain them for the exercise or defense of claims.
- Right to object to processing: Iberdrola will no longer process personal data, with the exception that they must continue to be processed for legitimate reasons or for the exercise or defense of possible claims.
- Right to data portability: in the event that the USER wishes his / her data to be processed by another data controller, Iberdrola will facilitate the transfer of his / her data to the new data controller.
- Right not to be subject to a decision based solely on the automated processing of your personal data.
If you have given your consent for a specific purpose, you may withdraw it at any time, without affecting the lawfulness of the processing based on your prior consent.
In the event that you have not obtained satisfaction in the exercise of your rights, you may file a complaint with the Spanish Data Protection Agency.
10. Social networks
Iberdrola is present on some of the main social networks on the Internet, and acts as data controller for the data published by Iberdrola.
Iberdrola will process the data in each social network according to the rules established for this purpose by each social network. Therefore, and until otherwise stated from Iberdrola we can inform our followers on the corresponding social network of our activities, events, and other related topics, including customer service, through the channels provided by the social network for this purpose.
Iberdrola will not extract personal data from social networks, unless the USER gives his / her express consent.
11. Special category of personal data
Iberdrola does not collect or obtain personal data from USERS that are particularly sensitive or included in the special category of USER's personal data, unless they explicitly provide it. Special categories of personal data refer to information relating to race or ethnic origin, political opinions, religious or philosophical beliefs or other beliefs of a similar nature, trade union membership, genetic data, biometric data for the sole purpose of identifying a natural person, health data, sex life or sexual orientation.
12. Child Use Policy
This website is not designed or directed to children under the age of sixteen (16), without parental or legal guardian permission. In this regard, we do not knowingly collect information from such individuals. In any case, if the parents or legal representatives consider that their children have provided us with personal data, without their consent, please contact us by writing to the address of the data controller.
13. Direct Marketing
We will not use USER's personal data for direct marketing purposes without their express prior consent.
If at any time you decide to stop receiving commercial or promotional information from Iberdrola you can, without charge and without having to provide any justification, unsubscribe from direct marketing campaigns and oppose the future processing of your personal data for these purposes by sending us an e-mail to the address of the Data Controller or by using the "unsubscribe" option in the subject line of the e-mail. You can also use the unsubscribe procedure provided in any promotional message you receive from Iberdrola.
However, even if you decide not to subscribe or unsubscribe from promotional emails or newsletters, Iberdrola may continue to contact you regarding important non-commercial information, such as incident resolution, error detection and prevention or, in general, to comply with the Legal Notice and/or Conditions of Use and Access of the website.
14. Automated decision making
Iberdrola does not carry out automated decision-making processes, including profiling, unless you have explicitly authorized us to do so. In that case, we would inform you about the logic used in the decision and the meaning and expected consequences of such processing to you.
15. Links to other websites
17. Exercise of rights
In case you have provided personal data to Iberdrola in this website, you have the right to access his/her personal data being processed, as well as the right to request the rectification of inaccurate data or, where appropriate, to request their erasure when the data are no longer necessary for the purposes for which they were collected, as well as the right to object and restrict the processing and data portability. If you have given your consent, you can withdraw it at any time although this will not affect the lawfulness of any data processing that occurred prior to your consent being withdrawn. You can exercise your rights free of charge through the following channels. In any event, you have the right to file a claim with the Spanish Data Protection Agency at www.aepd.es or with any other appropriate control authority.
You can exercise these rights free of charge by writing to CandidateDataProtection@iberdrola.com.
You may view, update, modify and delete your data directly by accessing your applicant profile on the Employment Channel with your username and password. From your applicant profile, you can modify, delete and add data to update your CV, or delete your profile completely.
You can exercise these rights by writing to the following addresses:
- For Iberdrola Group companies located in the European Union: Dirección de Administración, Plaza Euskadi 5, 48009 Bilbao. By e-mail: Gestionterceros@iberdrola.es
- To ScottishPower group companies: email@example.com or Data Protection Officer, ScottishPower UK Plc, 320 St Vincent Street, Glasgow, G25AD.
- To Iberdrola México Group companies: firstname.lastname@example.org or Boulevard Manuel Ávila Camacho No. 24, piso 19, Col.Lomas de Chapultepec, C.P. 11000, Ciudad de México.
- To Avangrid Group companies: VendorMaintenance_AdminUSA@avangrid.com or AVANGRID General Administration, 162 Canco Road, Portland, Maine 04103.
Additionally, regarding the public and privates, acts and events, organized by Iberdrola where you have provided, you have the right to access his/her personal data being processed, as well as the right to request the rectification of inaccurate data or, where appropriate, to request their erasure when the data are no longer necessary for the purposes for which they were collected, as well as the right to object and restrict the processing and data portability. You can exercise your rights free of charges through the following channels:
18. Binding Corporate Rules (BCR)
Data transfers are carried out in accordance with applicable data protection laws and our Binding Corporate Rules ("BCR").
The Iberdrola Group's BCRs reflect European legislation on data protection (General Data Protection Regulation). The fact of having the BCRs implies that all the companies in our Group that sign them have to comply with the same internal rules.
You can download here a copy of Iberdrola's BCR.