QUERY MAILBOX

Privacy Policy

Iberdrola, S.A ("Iberdrola") undertakes to protect your privacy and ensure compliance with the laws governing personal data protection, most particularly the General Data Protection Regulation ("GPDR") and the Organic Law on the Protection of Personal Data and Guaranteeing Digital Rights ("LOPDGDD"). Your personal data will be processed: lawfully, faithfully and transparently; for specific, explicit, legitimate purposes; only if they are appropriate and pertinent; and such processing shall be limited to that which is strictly necessary for these purposes. We will keep your data accurate and updated. The data will be stored to allow your identification only for the time necessary to comply with the purposes for which it is processed.

Iberdrola has implemented the necessary technical and organisational measures to protect your data from accidental loss or unauthorised alteration, access, use or disclosure, and has also established procedures to react to any security incident that could affect your personal data.

By means of this Privacy Notice we inform you of the processing of your personal data when you send us a query through the "Contact" section of the website www.iberdrola.com.

You should read this notice in order to understand the purpose and circumstances of the processing of your personal data by Iberdrola.

What personal data of yours do we process?

Iberdrola will only process such of your personal data as it needs to fulfil the processing purposes listed below. These are your email address and any other data you include in your query.

How do we obtain your personal data?

You provide us with your personal data through the query that you send us. If you do not provide us with the personal data we request, we will not be able to answer your query.

Who is responsible for processing your personal data (the Data Controller)?

IBERDROLA, S.A.
Plaza Euskadi 5, 48009 Bilbao

Iberdrola has designated a Data Protection Officer whom you may contact with regard to any matter relating to this Privacy Notice by writing to Tomás Redondo 1, 28033 Madrid or dpo@iberdrola.com.

For what purposes will we process your data?

The personal information you provide us with will be processed for the exclusive purpose of answering such queries as you may send us.

What is the legal basis for processing your data?

The legal basis for the processing of your personal data for the purpose indicated in the foregoing section is the performance of the services that Iberdrola provides to you following your request.

How long do we keep your data?

The personal data provided will be kept during the performance of the services requested. At the end of that period, Iberdrola may retain the data, duly blocked, until the prescription periods for possible legal action deriving from their processing have elapsed.

Who will your data be revealed to?

Your data will not be passed on to any third party beyond the Data Controller.

What are your rights?

You have the right to access your personal data and request the correction of inaccurate information and, where applicable, the erasure of data no longer required for the purposes for which it was initially gathered. You also have the right to object to or restrict the processing of the data and the right to their portability.

You may present your requests to exercise rights free of charge by writing to the following email addresses depending on which one you sent your query to:

• medioambiente@iberdrola.es
• sostenibilidad@iberdrola.es
• accionistas@iberdrola.es
• Investor.relations@iberdrola.es
• esg@iberdrola.com
• comunicacion@iberdrola.es
• DesarrolloSuministradores@iberdrola.es

You also have the right to lodge a complaint with the Spanish Data Protection Agency.