Privacy Policy

Privacy Policy

Fundación Iberdrola España (the Foundation) is committed to protecting your privacy, guaranteeing compliance with personal data protection legislation and, in particular, that your personal information will be processed in a lawful, fair and transparent manner, for specific and explicit legitimate ends, where it is appropriate, relevant and limited to that required for processing. Data treatment shall be accurate and updated, ensuring that it is only possible to identify the interested party for the time necessary for the purposes of the processing, thus guaranteeing your security.

Certain personal data processing operations may however be subject to other privacy notices that will be provided to you at the time that they are requested or processed. If this privacy notice is updated, we will inform you in due time in writing.

You should read this alert and any updates thereof in order to know the purpose of the processing of your personal details and the circumstances in which this is undertaken by Fundación Iberdrola España.

Who is responsible for processing your data?

Identity: Fundación Iberdrola España

Postal address: Calle Arequipa 1 – 4º, 28043 Madrid

What will we process your data for?

  • The information you provide will be processed for the following purposes:
  • Handling of the information provided in consultations
  • Handling of Grant Applications
  • Handling of applications for research grants and social assistance.
  • Other applications that the USER makes to Fundación Iberdrola España via its website

What is the lawful basis for processing your data?

The legal basis for the processing of the data is the Fundación Iberdrola España’s legitimate interest in the enquiries, requests and communication it receives.

How do we obtain your personal data?

You provide us with your personal data when requested on the website or in the application forms. If you do not provide us with your personal data, we will not be able to process your application.

How long will we keep your data?

The personal data provided will be kept for the time necessary to process your application and, once this has elapsed, for the time necessary to comply with our legal obligations, until the associated liability period has expired. You are therefore informed that the Foundation is bound by the regulations on the prevention of money laundering and the financing of terrorism and, as such, has a legal duty to keep documents for a period of ten years.

Notwithstanding the foregoing, the personal data provided may be kept duly blocked during this statutory period. 

Who will your data be revealed to?

Data will not be revealed or passed on to third parties, except in cases where you are expressly informed of this at the time that it is collected.

What are your rights?

The data subject and/or their legal representative will be entitled to access their personal data, and to seek that any incorrect data be amended. Where applicable, they may seek the deletion of any data that is no longer necessary for the purposes for which it was collected, as well as exercising their right of opposition and/or limitation of data processing and portability. If consent was granted by the data holder, they will be entitled to withdraw this at any time.

In the event that you are not satisfied with the exercise of your rights, you may submit a complaint before the Spanish Data Protection Agency.

Further information

We have implemented the technical means needed to protect your data and information from any accidental loss, access, use or unauthorised disclosure. Nevertheless, despite implementing said measures diligently, the user must understand that security measures are not unbreachable. Iberdrola will not be liable for any third party action through which access to this data and information is obtained by breaching said measures. 

Binding Corporate Rules (BCR)

Data transfers are carried out in accordance with applicable data protection laws and our Binding Corporate Rules (“BCR”).

The Iberdrola Group’s BCRs reflect European legislation on data protection (General Data Protection Regulation). The fact of having the BCRs implies that all the companies in our Group that sign them have to comply with the same internal rules.

You can download a copy of Iberdrola’s BCR