OLS Shareholder's Club Privacy Policy
Date of update: 26 February 2025
Iberdrola, S.A ("Iberdrola") is committed to protecting your privacy and complying with applicable data protection legislation (“Applicable Data Protection Legislation”), in particular, the General Data Protection Regulation (“GDPR”) and the Ley Orgánica Protección de Datos y Garantía de los Derechos Digitales (“LOPDGDD”). Your personal data will be processed in a lawful, fair and transparent manner, in accordance with specified purposes and only if the processing is adequate, relevant and limited to what is necessary in relation to those legitimate purposes. In addition, we will keep your data up to date and process them in a way that allows your identification only for as long as necessary to fulfil the purposes of the processing, in accordance with applicable law.
Iberdrola has implemented the necessary technical and organizational measures to protect your data against accidental loss or unauthorized alteration, access, use or disclosure and has established procedures to respond to any security incident that may affect your personal data.
By means of this privacy policy (“Policy”), we inform you about the way in which your personal data will be processed as a member of OLS – Shareholder’s Club during your relationship with Iberdrola and after the termination thereof, where applicable.
Notwithstanding the foregoing, certain processing of personal data may be subject to other specific privacy notices.
You should read this Policy and, where applicable, its updates, in order to understand how Iberdrola processes your personal data. Iberdrola may make changes to the Policy, in which case we will notify you immediately if the change is material or significant.
You are solely responsible for the information you provide and if in the future Iberdrola wishes to use it for purposes other than those referred to above, it will inform you of these new purposes and request your consent, if necessary.
By using OLS – Shareholder’s Club, you acknowledge that you have read and accept this Policy.
1. Who is responsible for the processing of your personal data?
The Data Controller is IBERDROLA, S.A., with registered office at Plaza Euskadi 5, 48009 Bilbao and tax identification number ESA-48010615.
Iberdrola has designated a Data Protection Officer, whom you may contact regarding any matter related to this Privacy Policy by sending an email to dpo@iberdrola.com.
2. What personal data do we process?
Iberdrola processes the following personal data: full name, ID document number (D.N.I./N.I.F./NIE), number of shares, address (postal and electronic), date of birth, country, telephone, electronic signature, confirmation of shareholder status and, where applicable, shareholder proxy.
3. How do we obtain your personal data?
We obtain your personal data directly from you when you register with OLS – Shareholder’s Club. We also sometimes obtain it from third parties for the purpose of checking your shareholder status, as specified in the OLS – Shareholder’s Club Terms and Conditions.
Please update your personal data as and when it changes, and always provide accurate information, as we must have your updated information in order to carry out the purposes of the processing.
4. For what purposes do we process your data and on what legitimate basis?
The personal information you provide will be processed for the following purposes:
- To enable browsing through OLS – Shareholder’s Club and to maintain the activity and security of the same. Iberdrola processes your browsing data based on its legitimate interest in guaranteeing access to the Website and maintaining its security in the event of possible incidents and security breaches.
- To provide you with the OLS – Shareholder’s Club services, which include all of the functionalities described in the Terms and Conditions of Use of OLS – Shareholder’s Club, such as access to news and financial information, consultation of documentation, making questions, telephone assistance, and participation in raffles. The legitimate basis is the execution of the Terms and Conditions applicable to OLS – Shareholder’s Club, as well as Iberdrola's legitimate interest in providing you with information that it considers may be of interest to you as a member of the Shareholder’s Club.
- Verify your shareholder status. Iberdrola processes your personal data to check if you are a shareholder of Iberdrola and to offer you the services of OLA – Shareholder’s Club. The legal basis is the execution of the Terms and Conditions of OLA – Shareholder’s Club, which you must accept beforehand. You can obtain more information about this purpose in clause 7 of this Policy.
5. How long do we process your data for?
The data provided for purpose 1 will be processed while you browse the Website.
The personal data provided for purpose 2 will be processed while you are registered with OLS – Shareholder’s Club, during the performance of the services requested and, in any case, until you cease to be a shareholder.
After the periods mentioned in the preceding paragraphs, Iberdrola will keep the data, duly blocked if applicable, for the period permitted or required by the applicable legislation and until the expiry of the statute of limitations for (i) the legal obligations to which Iberdrola may be subject and (ii) the possible legal liabilities arising from the relationship established with the interested parties and the consequent processing of their personal data.
y privacy.
6. With whom will your data be shared?
Your data may be disclosed to other entities of the Iberdrola Group when this is necessary to carry out the purposes indicated: (i) for internal administration and management purposes; (ii) in compliance with legal obligations; (iii) to comply with the requirements of regulatory, judicial or other authorities; (iv) or to carry out actions related to your status as a shareholder. Occasionally, transfers may be carried out that require your consent, in which case you will be informed and your consent will be obtained for the purposes indicated.
In addition, the data may be processed by internal and/or external service providers and/or collaborators, such as IT services, tools and/or applications, web services and other third parties whose intervention may be required to carry out the purposes indicated in this Notice, who will be configured as Iberdrola's data processors and with whom Iberdrola has established a contractual relationship for this purpose.
Finally, we also inform you that your personal data may be viewed by other users of OLA - Shareholder's Club when you make open queries. If you do not wish your personal data to be made public, you may select ‘confidential enquiry’.
7. Decisions based on the automated processing of Personal Data
Iberdrola informs you that it makes decisions based only on the automated processing of your personal data as part of the process of verifying your status as a shareholder, which is necessary to manage your membership in OLS - Shareholder’s Club, as explained in its Terms and Conditions of Use, and which does not affect your legal rights.
Iberdrola obtains the information on whether or not you are a shareholder from the entities in charge of the accounting record of the shares and stores it in its databases and then compares the ID document number (D.N.I./N.I.F./NIE) provided by the user who wishes to register in OLS-Shareholder's Club with such database. In this way, Iberdrola will verify your status as a shareholder and takes a decision, which may consist of: (i) allowing you access as a member of OLS-Shareholder's Club if it is verified that you are a shareholder; (ii) denying you access if your status as a shareholder is not verified; or (iii) terminating your membership in OLS-Shareholder's Club when you are a member of the same and are no longer a shareholder. We also inform you that periodic checks are carried out on this circumstance in order to decide whether to maintain your membership if you continue to be a shareholder or to cancel your membership if you cease to be a shareholder.
We inform you that you can exercise your right of access through the channels indicated in clause 8.
8. What are your rights?
You may exercise any of the following rights free of charge:
- Right of access.
- Right of rectification.
- Right to erasure (right to be forgotten).
- Right to restriction of processing.
- Right of opposition.
- Right to data portability
- Right not to be subject to decisions based solely on automated processing of your personal data, including profiling.
- Right to withdraw your consent when it has been provided for any purpose. Please note that withdrawal of consent will not affect the lawfulness of the processing based on the consent prior to its withdrawal.
You may submit your requests to exercise your rights free of charge through the following channels:
- By sending an email accionistas@iberdrola.com.
- By calling the Shareholder's Office on (+34) 900 100 019.
- In writing to: OLS - Club del Accionista, C/ Tomás Redondo, 1, 28033 Madrid.
We will send you an acknowledgement of receipt after receiving the request to exercise your rights and, after completing the relevant investigation, we will provide you with a response, normally within one (1) month from receipt of the request, unless, due to the complexity or number of requests received, this period must be extended.
In any event, you have the right to file a complaint with the Spanish Data Protection Agency at www.aepd.es.
Previous version of our OLS Shareholder's Club Privacy Policy
