Privacy policy

Rules and practices to protect personal data

Privacy policy

Iberdrola considers the privacy of individuals to be important, both the visitors to our website (hereinafter, "website") and any other individuals who provide information to us through this website or make use of the services offered as registered USERS (hereinafter, "USER" or "USERS").

Iberdrola undertakes to process your data in accordance with the applicable personal data protection regulations applicable at any time. In particular, Iberdrola shall comply with the provisions of the General Data Protection Regulation ("GDPR") and the Organic Law on Personal Data Protection and guarantee of digital rights ("LDPGDR") and any other related implementing regulations in force at any time.

Iberdrola informs of its Privacy Policy, in order to make USERS aware of the processing of their data, as well as of the fundamental principles on personal data protection that the company applies. Nevertheless, certain services may contain particular conditions of use with provisions on the protection of personal data, which prevail over this Privacy Policy.

The USER should read this Privacy Policy carefully in order to be informed about the rules and practices that we have developed to protect personal data and to better understand our relationships with third parties who may have access to such data.

In any case, the USER is solely responsible for the information provided on the website and if in the future Iberdrola wishes to use it for purposes other than those referred to above, it will inform the USER of these new purposes and will seek his/her consent, if necessary.

By using our website, you acknowledge that you have read and agree to this Privacy Policy, our Cookies Policy and our Legal Notice.

 SEE INFOGRAPHIC: Keys to personal data processing [PDF] External link, opens in new window.

1. Who is the data controller?

Contact details of the data controller:

IBERDROLA, S.A.
Plaza Euskadi 5, Bilbao
Data Protection Officer: Tomás Redondo 1, 28033 Madrid or dpo@iberdrola.com

2. How do we collect personal data from you?

Based on this Privacy Policy, any information that identifies you or can be used to identify you, such as your name, address, telephone number or e-mail address, is considered "personal information".

Iberdrola may have the data you provide us with in the forms you fill in or through the different e-mail accounts that Iberdrola makes available on its website for contact purposes.

This data is processed when you interact with Iberdrola in participating or requesting to be considered to participate in activities related to Iberdrola, when you apply to any of our job offers, when you interact with the website when you are asked to provide personal data, as described in this Privacy and Cookies Policy; when you register on the website or use certain features without registering.

We ask you to update your personal data as it changes, and always provide truthful information, as we must have your current information.

3. How do we use personal data of the USERS?

Iberdrola informs USERS that the personal data provided and captured will be used for the purpose of:

• Respond to queries or requests for information that USERS may make;
• Respond to your job application;
• The use or provision of services, if any, after registration of the USER, in accordance with the Legal Notice and Legal Conditions for access and use of the Website and the specific conditions of certain services;
• To customize and improve the tools and functionalities of the website, as well as to guarantee its technical operation;
• In the event that the USER checks the appropriate box for such purposes, we will keep him / her informed by sending notifications / newsletters by email and / or other electronic means, the content of which will mainly address our services, activities, projects, updates and new features of the website.
• Use them for any other purpose required or permitted by the applicable law or for which you have given your consent.

4. Why do we process personal data of the USERS?

Iberdrola may process your personal data on any of the following legal bases: (A) legitimate business purposes; (B) when you have given your consent; (C) when it is necessary to comply with Iberdrola's legal obligations and (D) as necessary for the performance of a contract to which you are a party.

5. Who will be able to access the USER's personal data?

Depending on the purposes for which personal information is collected, it may be accessed by the following individuals, without distinction:

• Authorized personnel of Iberdrola subject to the applicable data protection laws;
• Official bodies or third parties in accordance with the applicable legislation;
• External service providers, with whom we have signed the legally required contracts under which they guarantee the fulfilment of their obligations as data processors.

6. How do we protect USER's personal information?

We have implemented the necessary technical measures to protect your data and information from accidental loss, unauthorized access, use and disclosure. However, despite the diligent implementation of such measures, the USER should be aware that security measures are not indefeasible. Iberdrola is not responsible for the actions of third parties who, in violation of these measures, access the aforementioned data and information.

We have established procedures for any data security incident.

7. How long will we keep the USER's personal data?

Iberdrola processes your personal data for the period necessary to comply with the purposes established in this Privacy Policy and will keep your personal information in compliance with applicable legislation.

The criteria we follow for the retention of your data is determined by:

• The purpose of the data collected and the fulfilment of this purpose.
• The reasons why the data is collected: e.g. in case of consent, you can revoke it at any time.
• Required periods of storage according to contractual and legislative requirements.

8. Confidentiality

Iberdrola employees and suppliers who have any access to the USER's data undertake not to disclose or make use of the information they have accessed. The information provided by the USER shall in any case be considered confidential and may not be used for any other purpose than that which Iberdrola informs the USER of, where appropriate.

9. What are the data protection rights of USERS?

USERS may exercise the following rights:

• Right to request access to personal data: you may ask Iberdrola if it is processing your data, and if so, access them.
• Right to request rectification if the data are inaccurate or complete the data that it is incomplete.
• Right to request erasure of your data.
• Right to request restriction of processing: in this case we will only retain them for the exercise or defense of claims.
• Right to object to processing: Iberdrola will no longer process personal data, with the exception that they must continue to be processed for legitimate reasons or for the exercise or defense of possible claims.
• Right to data portability: in the event that the USER wishes his / her data to be processed by another data controller, Iberdrola will facilitate the transfer of his / her data to the new data controller.
• Right not to be subject to a decision based solely on the automated processing of your personal data.

If you have given your consent for a specific purpose, you may withdraw it at any time, without affecting the lawfulness of the processing based on your prior consent.

To exercise their rights, USERS must send a written communication to Iberdrola's registered office or to the email address indicated in section 1 of this Privacy Policy.

In the event that you have not obtained satisfaction in the exercise of your rights, you may file a complaint with the Spanish Data Protection Agency.

10. Social networks

Iberdrola is present on some of the main social networks on the Internet, and acts as data controller for the data published by Iberdrola.

Iberdrola will process the data in each social network according to the rules established for this purpose by each social network. Therefore, and until otherwise stated from Iberdrola we can inform our followers on the corresponding social network of our activities, events, and other related topics, including customer service, through the channels provided by the social network for this purpose.

Iberdrola will not extract personal data from social networks, unless the USER gives his / her express consent.

11. Special category of personal data

Iberdrola does not collect or obtain personal data from USERS that are particularly sensitive or included in the special category of USER's personal data, unless they explicitly provide it. Special categories of personal data refer to information relating to race or ethnic origin, political opinions, religious or philosophical beliefs or other beliefs of a similar nature, trade union membership, genetic data, biometric data for the sole purpose of identifying a natural person, health data, sex life or sexual orientation.

12. Child Use Policy

This website is not designed or directed to children under the age of sixteen (16), without parental or legal guardian permission. In this regard, we do not knowingly collect information from such individuals. In any case, if the parents or legal representatives consider that their children have provided us with personal data, without their consent, please contact us by writing to the address of the data controller.

13. Direct Marketing

We will not use USER's personal data for direct marketing purposes without their express prior consent.

If at any time you decide to stop receiving commercial or promotional information from Iberdrola you can, without charge and without having to provide any justification, unsubscribe from direct marketing campaigns and oppose the future processing of your personal data for these purposes by sending us an e-mail to the address of the Data Controller or by using the "unsubscribe" option in the subject line of the e-mail. You can also use the unsubscribe procedure provided in any promotional message you receive from Iberdrola.

However, even if you decide not to subscribe or unsubscribe from promotional emails or newsletters, Iberdrola may continue to contact you regarding important non-commercial information, such as incident resolution, error detection and prevention or, in general, to comply with the Legal Notice and/or Conditions of Use and Access of the website.

14. Automated decision making

Iberdrola does not carry out automated decision-making processes, including profiling, unless you have explicitly authorized us to do so. In that case, we would inform you about the logic used in the decision and the meaning and expected consequences of such processing to you.

15. Links to other websites

On the Iberdrola websites there are links to other websites that we consider potentially useful and informative for you. However, bear in mind that Iberdrola does not endorse or recommend the content or services of such websites, nor is it responsible for their privacy policies. We encourage you to be aware of and read the privacy policies of all sites you visit. Remember that what it is indicated in this Privacy Policy only applies to the data collected and/or processed by Iberdrola.

16. Changes and completeness of our Privacy Policy

Iberdrola will only use your personal data in accordance with the provisions of the Privacy Policy in force at the time when we collect your personal data. Iberdrola reserves the right to modify this Privacy Policy at any time by publishing such modifications on our website, so we recommend that you visit it each time you access the Privacy Policy. If at any time it is decided to use personal data in a different way from that stated at the time it was collected, we will inform you by e-mail, provided that we have it at our disposal. At that time, you will be given the option to authorize other uses or transfers of the personal data that you have provided to us prior to the modification of our Privacy Policy.

In the event that any clause of this Privacy Policy is annulled or considered null, the rest of the conditions will not be affected, maintaining their full validity, in accordance with the regulations in force at any given time.

17. Exercise of rights

In case you have provided personal data to Iberdrola in this website, you have the right to access his/her personal data being processed, as well as the right to request the rectification of inaccurate data or, where appropriate, to request their erasure when the data are no longer necessary for the purposes for which they were collected, as well as the right to object and restrict the processing and data portability. If you have given your consent, you can withdraw it at any time although this will not affect the lawfulness of any data processing that occurred prior to your consent being withdrawn. You can exercise your rights free of charge through the following channels. In any event, you have the right to file a claim with the Spanish Data Protection Agency at www.aepd.es or with any other appropriate control authority.

Additionally, regarding the public and privates, acts and events, organized by Iberdrola where you have provided, you have the right to access his/her personal data being processed, as well as the right to request the rectification of inaccurate data or, where appropriate, to request their erasure when the data are no longer necessary for the purposes for which they were collected, as well as the right to object and restrict the processing and data portability. You can exercise your rights free of charges through the following channels:

18. Binding Corporate Rules (BCR)

Data transfers are carried out in accordance with applicable data protection laws and our Binding Corporate Rules ("BCR").

The Iberdrola Group's BCRs reflect European legislation on data protection (General Data Protection Regulation). The fact of having the BCRs implies that all the companies in our Group that sign them have to comply with the same internal rules.

You can download here a copy of Iberdrola's BCR.