PRIVACY NOTE

Date: July, 2022

Fundación Iberdrola España (hereinafter, “FIBE”) commit to protect your privacy and to comply with applicable personal data protection laws and regulations, in particular, the General Data Protection Regulation (“GDPR”) and the local laws of the territories in which Iberdrola group companies operate. Your personal data will be processed in a lawful, fair and transparent manner; according to explicit and legitimate purposes; and only to the extent it is relevant and necessary in relation to such purposes. In addition, we will keep your personal data accurate, up to date and for no longer than legally permitted.

FIBE has implemented technical and organizational measures to protect your personal data from accidental loss and from unauthorized modification, access, use and disclosure. We have established procedures to respond in the event of a security incident that affects your personal data.

By means of this Privacy Policy we inform you about the processing of the personal data that you provide when submitting your application for Energy for Future (“E4F”) Fellowship Program, (the “Fellowship”) and all the information that you include in it, and also about the processing of your personal data in case you are a beneficiary of the Fellowship applied for.

If we update this privacy notice, we will notify you through this website in a timely manner.

You should read this notice and any updates thereof to understand the purpose of the processing of your personal details and the circumstances in which this is undertaken by FIBE.

¿Who is responsible for processing your personal data (the Data Controller)?

The data controller is FUNDACIÓN IBERDROLA ESPAÑA, with registered business address in Madrid, Calle Arequipa, 1, 4ª planta, 28043 and with Tax Identification Number (N.I.F.) G-83277871.

The Foundation has designated a Data Protection Officer to ensure compliance with the obligations of the GDPR, who can be consulted in the event of any query in relation to this privacy notice through the following channels:

• By post to the following address: calle Arequipa, número 1, 4ª planta, postal code 28043.
• By e-mail, sent to the following address: msolanam@iberdrola.es

Which of your personal data do we collect and process?

The personal data we can process about you as a Fellowship applicant are those included by you in your application and attached documentation, as well as the results of your evaluation as a Fellowship candidate.

The personal data we can process about you as a Fellowship beneficiary are the above as well as images and videos taken in all the events organized during the Fellowship, follow-up information, data collected in the questionnaire provided once you finish your studies, academic results, and information collected from the corresponding partners organizations participating in the E4F Program.

No personal data are collected unless necessary for the purposes stated above.

How do we obtain your personal data?

You provide us with your personal data in the information you give us in your Fellowship application, and, if applicable, during the Fellowship if you are awarded a Fellowship. In this case, the corresponding partner organization where the Fellowship takes place will share with us some personal data in relation with it.

For what purposes do we process your personal data?

1. As a Fellowship applicant, the information that you provide to us will be used exclusively to manage your register to the E4F website, analyze your suitability and carry out a selection process for the award of the fellowship in question, and for internal reporting purposes.
2. If you are awarded a Fellowship, your personal data will be processed for the following purposes:

• To ensure that the recipient meets the requirements throughout the term of the Fellowship.
• Publication of your name, image and videos on the E4F website and Iberdrola website, social media, press etc. as part of the dissemination and communication activities you have committed to participate in relation with the Fellowship.
• Internal reporting activities.
• Comply with the requirements included in the agreement signed between Fundación Iberdrola España and the European Commission, related to the Fellowship.

What is the legal basis for processing your data?

The legal basis for the processing of applicants’ data is the application of the terms & conditions for the Fellowship applied to; in the case of Fellowship beneficiaries, the enforcement of the contract entered into by means of the acceptance letter, and the legitimate interest of FIBE in complying with the commitments included in the agreement signed with the European Commission related to Fellowship.

In both cases, the legal basis of the internal reporting activities is the legitimate interest of FIBE in the overall internal administrative management.

How long will we keep your data?

The personal data of Fellowship applicants will be processed for the duration of the fellowship application period and for six months following the award of the Fellowship. Once this period has elapsed, the data will be conserved, duly blocked, for 5 years after the termination of the Energy for Future Programme. Once this period has elapsed, the data will be erased or anonymised

The data of Fellowship recipients will be processed for the duration of the Fellowship and subsequently for 5 years after the  termination of the Energy for Future Programme . Once this period has elapsed, the data will be erased or anonymized, keeping only the data necessary to control access by previous recipients to new Fellowship programmes.

Who will your data be revealed to?

Your personal data may be communicated to third parties and public authorities (i) when necessary for the management of the Fellowship, including compliance with our obligations or the exercise of our rights, (ii) if we are required to do so by law or regulation, or (iii) to comply with court orders, legal process or government, judicial or regulatory requests. If you are awarded a Fellowship, your data will be communicated to the European Commission to comply with the requirements of the agreement signed between FIBE and the European Commission and to the corresponding partner organization in which the Fellowship will take place.

Some of the partners participating in the Fellowship Program are in USA, México and UK. Iberdrola will ensure that such transfer is made in accordance with GDPR, that is, through (i) the Binding Corporate Rules of the Iberdrola Group, available at: https://www.iberdrola.com/privacy-policy/binding-corporate-rules, for the completion of the Secondment by the Fellowship recipient in a Group company, (ii) the performance of the contract between the Fellowship recipient and FIBE, under the derogation of article 49.1.b) of the GDPR, for the transfer of data to the host universities where the Fellowship will be studied, and (iii) the UK Adequacy Decision for the above purposes, as well as, for sending the data of the Fellowship applicants for the selection process. FIBE has carried out the corresponding Transfer Impact Assessment (TIA) and implemented the appropriate safeguards set out in the GDPR, as well as those additional measures necessary to ensure an adequate level of protection of the personal data transferred in the countries to which the data is transferred.

Your data may be accessed by external service providers as IT services. Additionally, in case your application complies with all eligibility requirements, your data may also be shared with the External International Peer Reviewers (EIPRs) and external advisors that will participate in Phase 2 of the selection process; and, in case your applications progress to Phase 3 of the selection process, your data will  be revealed to the partner organizations of your choice and with the external members of the corresponding Interview Committee. We have entered into the legally required contracts with said providers which guarantee compliance with their obligations under data protection laws and regulations. In these contracts, when the companies are located in a third country that does not offer an adequate level of protection of personal data equivalent to that established in the European Union, Iberdrola will ensure that it has the appropriate measures in place so that your data is protected in the country and organization of destination in identical or similar terms to those provided for in European and Spanish regulations. You may contact Iberdrola at any time to learn about the specific guarantees that have been implemented for the adequate and appropriate protection of your data.

What are your rights?

You have the right to access your personal data, as well as to request that inaccurate information be corrected or removed, where the information in question is no longer required for the purposes for which it was initially gathered. You also have the right to object to or restrict the processing and portability of the data.

You may exercise your rights free of charge by emailing  msolanam@iberdrola.es

You may submit a complaint before the Spanish Data Protection Agency or the competent supervisory authority.