Privacy Police
Find out everything related to the Privacy policy of the Iberdrola España website

Iberdrola España S.A.U. is committed to protecting your privacy and guarantees compliance with personal data protection legislation. Specifically, it guarantees that your personal information will be processed lawfully, fairly and transparently; for specified, explicit and legitimate purposes; only where adequate, relevant and limited to what is necessary in relation to the processing; accurately and up to date; in a manner that permits identification of the data subject only for as long as is necessary for the purposes of processing; and in a way that guarantees its security.
This portal is owned by Iberdrola España, S.A.U. However, it includes certain sections and content corresponding to companies within its corporate group, which may act as data controllers for specific personal data processing operations. In such cases, the corresponding specific privacy notices available in those sections will apply, which will supplement or, where appropriate, replace the provisions of this notice regarding the specific processing operations carried out by those companies.
In addition, certain personal data processing operations may be subject to other privacy notices that will be provided to you at the specific time when they are requested from you or processed. Should this privacy notice be updated, we will notify you through the channels enabled for this purpose.
We recommend reading this notice carefully and, where applicable, its subsequent updates, as well as any applicable specific privacy notices, to understand the purposes for which your personal data is processed and the circumstances of such processing.
What personal data do we collect and process from you?
Iberdrola España shall only process your data needed to comply with the purposes detailed below. The data are your name and surname, and your email address.
Iberdrola España collects and processes your personal data as a consequence of your request of information.
Who is responsible for the processing of your personal data?
Iberdrola España, S.A.U.
Plaza Euskadi 5, Bilbao (Bizkaia)
Data Protection Officer: dpo@iberdrola.es.
For what purposes do we process your data?
The information you provide us with will be treated with the following purposes:
- Management and processing of the queries that you send us.
What is the legitimacy for the processing of your data?
The legal basis for the treatment of your data according to the aforesaid purposes is the consent given through the checkbox to that effect.
How do we collect your personal data?
You provide us with your personal information through the form on our web page If you do not provide us with your requested personal information, we are not able to handle your request.
How long do we keep your data?
The personal data provided will be kept during the time necessary to process your request and, once it has elapsed, for the time necessary to comply with our legal obligations and, in any case, once the statute of limitations for any legal actions involved has expired.
To whom will your information be communicated?
Your data will not be communicated to any other company, except in those cases where we expressly inform you upon request of your data.
What are your rights?
You have the right of access to the personal data being processed, as well as the right to request the rectification of inaccurate data or, where appropriate, to request their erasure when the data are no longer necessary for the purposes for which they were collected, as well as the right to object and restrict the processing and the data portability. If your consent was obtained, you have the right to revoke it at any time.
You may exercise said rights by sending an e-mail to: dpo@iberdrola.es.
In the event that you have not obtained satisfaction in the exercise of your rights, you may file a complaint with the Spanish Data Protection Agency or equivalent control authority.
More information
We have implemented the necessary technical measures to protect your data and information from accidental loss, unauthorized access, use and disclosure. However, despite the diligent implementation of such measures, the user should be aware that security measures are not indefeasible. Iberdrola España is not responsible for the actions of third parties who, in violation of these measures, access the aforementioned data and information.
Binding Corporate Rules (BCR)
Data transfers are carried out in accordance with applicable data protection laws and our Binding Corporate Rules ("BCR").
The Iberdrola Group's BCRs reflect European legislation on data protection (General Data Protection Regulation). The fact of having the BCRs implies that all the companies in our Group that sign them have to comply with the same internal rules.
You can download a copy of Iberdrola's BCR.

