Privacy Policy

Identification of the Controller of the processing of your personal data

The information and/or personal data you provide us with shall be processed by Aliara Energía, S.A.U. as Data Controller, whose identification details are:

• VAT No. A-87170650

• Postal address: Calle Virgilio, 2B, 28223 - Pozuelo de Alarcón, Madrid

Personal data we process

Collected data are those that you provide us with when you formulate the report through this Website or through the Reporting Channels. Data that may be processed to carry out the purpose(s) about which you have been and are being informed are the following:

• Name

• Surname

• Email

• Relationship with the company

• Telephone

• Name of the company that is the subject of the communication

• Company’s subsidiary or branch that is the subject of the communication

• Type of communication

• Facts of the communication

• Other information that could be identified in the description of the reported event.

Fields marked with an asterisk in the collection forms on the Website are mandatory. These fields may vary depending on whether the communication is anonymous or not. In any case, the name of the company about which the communication is made, its subsidiary or delegation, the type of communication and the facts that are the subject of the communication are mandatory.

We may also collect personal data about you indirectly, if it is provided to us by any person involved in the investigation or proceedings.

Purposes for which we process your data

Aliara Energía shall process your data in order to receive, deal with and manage your report of information, carry out the corresponding investigation of the communication made by you, if necessary, and take the appropriate decisions or actions, as appropriate. We shall also process personal data in order to comply with our legal obligations in the event that we are not required by law to report certain matters to the relevant authorities or in the context of legal proceedings.

Personal data shall be treated with due confidentiality of the whistleblower’s identity, in accordance with applicable regulations.

Legitimation of data processing

The basis that legitimises the processing of personal data is the fulfilment of a legal obligation, in accordance with the provisions of art. 6.1.c) of the General Data Protection Regulation (GDPR).

Data recipients

Data shall be treated confidentially, with the whistleblower’s identity being kept confidential, and shall not be communicated to any third party or be subject to international transfers, unless required by law or unless (i) it is essential for the investigation of the reported facts, (ii) it is required by the State Security Forces and/or the competent judicial or administrative authorities, or (iii) it is necessary within the framework of a criminal, disciplinary or sanctioning investigation.

We also inform you that Aliara Energía contracts with service providers for the management of the aforementioned purposes, these being Forvis Mazars Auditores S.L.P. as the owner of the reporting platform through which you can send information. Forvis Mazars, under the commitment of professional secrecy, shall keep your identity reserved and with the due confidentiality. Forvis Mazars shall receive your communication of information and send you an acknowledgement of receipt, and may ask you to clarify or complete the information communicated through the platform or the information channels made available to you through the platform. Likewise, you shall be provided with a reasonable follow-up on the progress of your communication and Aliara Energía shall receive the report of the communication received so to decide whether or not to open an investigation and make the corresponding decisions or actions, where appropriate.

Aliara Energía may also engage external advisors to provide support services in the framework of the investigation, if necessary.

These companies are subject to a contract with Aliara Energía as data processors which guarantees that your data shall not be used for purposes other than those mentioned above.

Data retention

Data shall be kept in the whistleblowing system for the time necessary to decide whether to initiate an investigation into the reported facts and, in any case, three months after your data has been collected, we shall delete them from the whistleblowing system, unless we need to keep them to demonstrate the functioning of the system or they need to be processed by the body or person responsible for investigating the facts.

In any case, as a maximum retention period, personal data relating to information received and internal investigations shall be kept for the period that is necessary and proportionate for legal purposes and for a maximum period of 10 years.

Exercise of rights

Under the terms and to the extent established in the regulations in force, you are entitled to:

• Confirm whether or not Aliara Energía is processing personal data concerning you, to access them and to the information related to their processing.

• Request the rectification of inaccurate or incomplete data.

• Request the deletion of data when, among other reasons, they are no longer necessary for the purposes for which they were collected, in which case Aliara Energía shall stop processing the data except for the exercise or defence of possible claims.

• Request the restriction of the processing of your data, in which case they may be processed only with your consent, with the exception of their retention and use for the exercise or defence of claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the European Union or of a specific Member State.

• Oppose the processing of your data, in which case Aliara Energía shall stop processing the data, except for the defence of possible claims. In the event that the person to whom the facts described in the communication refer exercises the right to oppose, it shall be presumed that, unless there is proof to the contrary, there are compelling legitimate reasons that legitimise the processing of your personal data.

You may exercise these rights, as appropriate, by sending your request to Calle Virgilio, 2B, 28223 - Pozuelo de Alarcón, Madrid or by sending an e-mail to admin@aliaraenergia.es.

We inform you that you may file a complaint with the Spanish Data Protection Agency, when you consider that you have not obtained satisfaction in the exercise of your rights by Aliara Energía, through its website: www.aepd.es/en.

Cookies policy

Aliara Energía’s whistleblowing channel, provided by our external supplier Forvis Mazars, collects information about the user’s browsing through text files called cookies. These are own cookies that are sent to the user’s terminal equipment from a computer or domain managed by Forvis Mazars in order to store and retrieve information. They are technical cookies that are used for the functioning and operation of the website and personalisation cookies that are used to remember the configuration parameters or the selected language.

For more information you can consult our Cookie Policy.

Modification of this Policy

Aliara Energía reserves the right to modify and/or update this Privacy Policy at any time, as well as any information that may appear on the Website without prior notice.

Last updated: 25 November 2024