Torre Iberdrola, A.I.E. (Torre Iberdrola) undertakes to protect your privacy and guarantees compliance with personal data protection regulations, specifically the General Data Protection Regulation (“GDPR”) and Organic Law on Data Protection and Guarantee of Digital Rights (“LOPDGDD”). Your personal data will be processed legally and transparently; for explicit and legitimate purposes; only if they are adequate, relevant and limited to the requirements of the processing. In addition, we will keep your data accurate and up to date, storing them in a manner that allows you to be identified only for as long as is necessary to fulfil the purposes of the processing.
Torre Iberdrola has implemented the necessary technical and organisational measures to protect your data from accidental loss or from unauthorised alteration, access, use or disclosure, and has also established procedures to react to any security incidents that may affect your personal data.
This Privacy Policy hereby informs you about the processing of your personal data submitted to obtain accreditation to access and use our facilities.
You must read this statement, and its updates if there were any, in order to know why your data is processed for and its circumstances by Torre Iberdrola.
Torre Iberdrola, A.I.E, with registered address at Plaza Euskadi, 5 – 48009 Bilbao Torre Iberdrola has designated a data protection officer, with whom you may get in contact via dpo@iberdrola.es by referencing TORRE IBERDROLA.
Your personal data that may be processed are images captured by surveillance cameras, as well as your name and surnames, national identification number or equivalent or passport, company, and, when accessing the facilities with a vehicle, its make, model and registration number.
Furthermore, during the organisation of drills at TORRE IBERDROLA in compliance with the provisions set out in the self-protection and emergency plans which must be drawn up and implemented, images and, where appropriate, voice (ambient sound) of the data subjects may be captured, although they will only be panning shots and ambient sound, in which the images and voice will appear as a mere accessory.
The information submitted will be processed to control access to our facilities and guarantee the safety of people, property and facilities.
The legal basis for the processing of your personal data for the purposes indicated above is Iberdrola’s legitimate interest in ensuring the security of these facilities and the fulfilment of a public interest mission in relation to video-surveillance recordings, as well as compliance with the provisions set out in the self-protection and emergency plans, which must be drawn up and implemented.
You directly provide us with your personal data at the reception to the building or via your host in the building and, in the case of images, they are obtained via surveillance cameras.
In the case of self-protection drills, the images will be taken by the body organising the drill (data processor).
Your personal data will be stored for the period of time necessary to fulfil the legal obligations applicable to Torre Iberdrola and they will be deleted within a period of 30 days, unless they need to be kept for a longer period in order to clarify any infringement or unlawful act detected and/or for communication to the Security Forces, Courts and Tribunals.
Regarding the storage of personal data collected during emergency drills, these will be kept until the review and analysis of the recordings of the drill have been completed, without prejudice to the data subjects‘ prior objection to the processing of their data, and subsequently duly blocked for a period of three years, coinciding with the maximum period of prescription of liabilities set out in Law 17/2015, of 9th July, on the National Civil Protection System, in relation to Law 40/2015, of 1st October, on the Legal Regime in the Public Sector, and the LOPDGDD.
Your data will be reported to official bodies when required to so in compliance with legal obligations or requests by public or judicial authorities. Images captured by the surveillance system may be transferred to our insurance companies to accredit the occurrence of an incident and to the Security Forces, Courts and Tribunals in compliance with the provisions set out in Article 236 quater of Organic Law 6/1985, of 1st July, on Judicial Power and Directive (EU) 2016/680 of the European Parliament and of the Council of 27th April 2016. Your data may also be accessible to suppliers of security and IT services with whom Torre Iberdrola has entered into contracts as required by the applicable legislation.
You have the right to access the personal data undergoing processing, and to request the rectification of inaccurate data, or, if applicable, the erasure when they are no longer necessary for the purposes for which they were collected. You may also exercise the rights to object and to restriction of data processing, as well as the right to data portability. In the event that your consent has been obtained, you have the right to withdraw it at any time in the manner indicated below or by unsubscribing at the link provided in the communications.
You may exercise these rights in writing to: Plaza Euskadi, 5 – 48009 Bilbao or by sending an e-mail to the following address: ProtecciondeDatos@torreiberdrola.com
You also have the right to file a claim with the Spanish Data Protection Agency.
