Privacy Policy
This privacy notice governs the processing of personal data by Iberdrola México, S.A. de C.V. and its affiliates and subsidiaries (hereinafter "Iberdrola México"), as applicable, with domicile at Montes Urales No. 540, Col. Lomas de Chapultepec I Sección, Alcaldía Miguel Hidalgo, Mexico City, C.P. 11000 , in their capacity as Responsible Parties, under the terms provided by the Federal Law for the Protection of Personal Data in Possession of Individuals and the regulations arising therefrom ("the Ordinances").
For the purposes of this Notice, terms that are not defined shall have the meaning provided in the Regulations.
Iberdrola México undertakes to: protect your privacy, to comply with the regulations on the protection of personal data; and, specifically, to process your personal information in a lawful, fair and transparent manner; in accordance with explicit and legitimate purposes; only if it is adequate, relevant and limited, related to the processing; accurate and updated; in a manner that allows the identification of the data subject only for the time necessary for the purposes of the processing; ensuring its security.
In terms of the applicable regulations, we inform you about the processing of your personal data during the term of the contractual relationship with Iberdrola México and after the termination of the same.
Who is responsible for the processing of your personal data?
The data controller is the subsidiary or affiliate company of Iberdrola México with which it has a contractual relationship. We inform you that your personal data will also be processed by Iberdrola S.A. (data processor), which carries out the centralized and corporate management of the customers of the Iberdrola Group companies.
What personal data do we collect and process from you?
The personal data we collect and process are data of an identifying nature: name, surname, identification issued by a competent authority (i.e. INE, passport, identity card), RFC or CIF, postal or e-mail address, landline/cell phone, image and signature.
Iberdrola México may request the delivery of original documentation and / or copies thereof, as evidence to support the information you have provided.
How do we obtain your personal data?
The affiliates or subsidiaries of Iberdrola México process your personal data as a consequence of the contractual relationship you have with them; you provide us with your personal data through the information you provide us in the customer registration process and, if applicable, through contracting, and during the term of the contractual relationship.
Personal data is collected through:
i) the voluntary and direct provision of your information through our printed forms;
ii) the voluntary provision of information and personal data in face-to-face or telephone interviews with our authorized personnel;
iii) through the voluntary and direct provision of your information through the use of e-mails and
iv) the use of publicly available sources and other sources available in the market.
For what purposes do we process your data?
The information you provide will be treated in accordance with the following primary purposes:
Maintenance, development and control, in all its aspects, of the contractual relationship;
Internal management of customers;
Elaboration of surveys and statistics and internal reports;
Collection management;
Administrative management;
Sending of tax information;
Management of administrative and judicial proceedings and actions with administrative or judicial authorities related to this matter.
Access control to the facilities and other security activities.
We inform you that your data will not be subject to automated decision-making processes.
What is the legal basis for the processing of your data?
The legal basis for the processing of your data for the purposes described in the previous section, is the execution of the contract made with you, and / or to comply with the obligations stipulated by law.
To whom will your data be communicated?
Your data will be communicated to third parties when necessary in compliance with legal obligations.
The personal data received may be transferred and shared with controlling companies, subsidiaries or affiliates, part of the Iberdrola Group outside the Mexican territory, which are subject to internal policies on the protection of personal data and have an interest in hiring them. Such companies of the Iberdrola Group may be consulted on the corporate website
How long do we keep your data?
The personal data provided will be kept for the period necessary to fulfill the purpose for which they were collected, and in any case, until the end of the contract and after the expiration of the statute of limitations for possible legal actions.
Notwithstanding the above, the personal data provided may be kept duly blocked for the time required by the applicable regulations.
What are your rights?
In those cases in which applicable regulations so require or are determined in accordance with binding rules or agreements adopted within the Iberdrola Group, you have the right to access your personal data being processed, as well as to request the rectification of inaccurate data or, where appropriate, request their deletion when the data are no longer necessary for the purposes for which they were collected, in addition to exercising the right to oppose and limit the processing and portability of data. In the case of having obtained the consent of the owner of the personal data, the latter has the right to revoke his consent at any time.
You may submit your requests to exercise your rights free of charge and always enclosing a copy of your national identity card or other equivalent document, via e-mail: mx.protecciondatos@iberdrola.com.
When applicable, in the event that you have not obtained satisfaction in the exercise of your rights you may file a complaint with the National Institute of Transparency, Access to Information and Protection of Personal Data (INAI) or the competent authority on data protection.
Information Security
We have implemented the necessary technical measures in order to protect your data and information from accidental loss, unauthorized access, use and disclosure. However, despite the diligent implementation of such measures, the user should be aware that security measures are not impregnable. Iberdrola Group companies are not responsible for actions of third parties who, in violation of such measures, gain access to the aforementioned data and information.
We have established procedures for any data security incident.
Consent
For the purposes of the provisions of the Ordinances, you hereby declare: i) that this Notice has been made known to you by Iberdrola México prior to the collection and/or processing of your personal data, ii) that you have read, understood and agreed to the terms set forth in this Notice for the collection and processing of your sensitive, patrimonial and/or financial data, and therefore, if you provide them, you will include your name and signature at the bottom of this document, or of the corresponding Privacy Notice. In accordance with the foregoing, and in accordance with the legal provisions, Iberdrola México is authorized to process your personal data and transfer them in compliance with our obligations under legal or contractual terms, or by virtue of the present and/or future legal relationship that we have or may have with you.
For the collection, processing and transfer of your personal data, which are not financial or patrimonial, you will provide us with your tacit consent under the terms of this Notice by not objecting or objecting to its content within 48 hours after your personal data are collected and this notice has been made available to you.
Modifications to the privacy notice
Iberdrola Group reserves the right to update this Notice to reflect changes in our data protection practices resulting from our continuous improvement process, as well as legal, regulatory and administrative changes that may occur. We invite you to periodically review the content of the Privacy Notice on the corporate website, where we will publish the changes made along with the date of the last update.
Last update: March 2022