In compliance with the provisions of the current national regulation concerning personal data protection and Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter GDPR); you are informed of how we will process your personal data below.
Who is the Controller of your data?
Your data will be processed by Red Eléctrica de España, S.A.U. and/or the companies in the Red Eléctrica Group (hereinafter RE), based on the recipient of your request or the relationship you have established with each of them. You can see the entities that are part of RE at https://www.ree.es/en/about-us/red-electrica-group, and more information about them can be found below:
Identity of the main entity: Red Eléctrica de España S.A.U with C.I.F. (tax ID): A-85309219
Other Red Eléctrica Group companies:
Postal address for notifications: Paseo Conde de los Gaitanes nº 177, La Moraleja, 28109 Alcobendas (Madrid).
Why do we process your personal data?
Generally, your data will be processed by RE for the following purposes:
How will data about minors be processed?
Generally, RE’s content and services are mostly aimed at and designed for people over 18.
Nevertheless, our website does have content aimed at minors including online games they may access. RE will not gather or process the personal data of minors under the age of 16, without fully complying with the requirements set forth in the applicable regulations on data protection, with regard to fulfilment of the duty to inform and obtain consent where necessary.
How long will your data be kept?
The personal data provided will be kept for the amount of time needed to manage your request, query, suggestion, complaint, or claim, or as long as there is a contractual relationship, the data subject does not request their erasure or opposition, and the data needn’t be deleted to comply with a legal obligation, or for the formulation, lodging, and defence of claims.
Therefore, RE will keep personal data duly blocked once its relationship with you has ended, except to make it available to Public Administrations, Judges, and Courts to respond to potential liabilities arising from the processing, as well as to lodge and defend claims with the Spanish Data Protection Agency, and they will be kept for the statute of limitations of the actions that may arise from the relationship maintained with the user.
Your personal data will be kept for the period of time necessary to fulfil the purpose for which they were collected. If your data are used for several purposes, thereby obliging us to keep them for different periods of time, we will apply the longest retention period.
What gives us the authority to process your data?
RE has the authority to process your personal data on the following legal bases:
How do we collect your data?
In each process in which you provide your personal data you will be informed of the obligatory or optional nature of completing the field and of the consequences of failing to provide said data.
In accordance with article 14 of GDPR, RE undertakes to provide any third party whose details you indicate with the relevant information.
Who are the recipients of your data?
RE will share and give up your personal data in the fulfilment of the above-mentioned purposes and based on the above-mentioned legitimate bases for processing to:
What are your rights when you provide us with your data?
You will be able to exercise the rights of Access, Rectification, Portability, Erasure, Restriction, or, where applicable, to Object. In order to exercise these rights, you must send a letter to the above-mentioned postal address or via email to the following address: firstname.lastname@example.org including in the matter “Data protection”.
You must specify which of these rights you wish to exercise and, in turn, you must attach a photocopy of the national ID card or equivalent identity document of the data subject. In the event a legal or voluntary representative acts on the data subject’s behalf, they must also provide a document proving this representation and their identity document.
In addition, in the event you consider your right to personal data protection has been violated, you may file a claim with the Spanish Data Protection Agency (www.agpd.es).
How do we ensure your data’s security?
RE applies and maintains the appropriate technical and organisational measures to guarantee an adequate level of security based on prior risk analysis.
Specifically, RE has put in place all of the technical resources at its disposal to prevent the loss, misuse, alteration, unauthorised access, and theft of the data you provide.