Privacy policy

Data controller

Gamesa Electric, S. A. Unipersonal (“Gamesa Electric”) – with registered office at Parque Tecnológico de Bizkaia, Edificio 100, 48170, Zamudio, Vizcaya (Spain) – as Data Controller, takes data protection seriously. As part of this effort, we ensure that our websites are in compliance with the applicable laws on data privacy and security.

This Privacy Policy serves to inform on the types of personal data we collect on our websites, in addition to the reason for which these are collected. It also provides information on who your data is shared with and why, in cases where applicable. This Privacy Policy is updated from time to time. The last update can be found at the top of this page.

Utilization of cookies on our websites

Further information about cookies can be found in our Cookie Policy; the policy gives direction on how to take control over this subject. Access to our website is logged for the purpose of security analysis reports and to defend against cyber-attacks. When only visiting and browsing the website no personal data – other than the IP address – is collected. IP addresses are analyzed only in the event of a cyber-attack. Log data is promptly deleted on a regular basis.

Collection and processing of personal data as a result of your use of websites, online applications and platforms

Gamesa Electric may ask for your consent before using your personal data (Article 6 (1) (a) General Data Protection Regulation – GDPR):

  • To fulfil a specific request, such as responding to inquiries and complaints handling (for which you gave us the data). Gamesa Electric will process the data based on the consent of the interested party given when filling out the form provided for this purpose.
  • To handle the requests of candidates who want to work at Gamesa Electric through the «Jobs at Gamesa Electric » section. Gamesa Electric will process the data based on the consent of the interested party given when filling out the form provided for this purpose.

To exercise legitimate interests pursued by Gamesa Electric (Article 6 (1) (f) GDPR) Gamesa Electric will process your personal data:

  • To defend against fraud (and this may include the verification of identity), or to verify the legitimacy of a legal claim.
  • To maintain and protect the security of our products, services and websites, preventing and detecting security threats, fraud or other criminal or malicious activities. To improve customer service and to assist in identifying ways in which we can provide you with a better service, or enhance your experience of our website and other services.

To comply with Gamesa Electric’s legal obligations (Article 6 (1) (c) GDPR) Gamesa Electric will process your personal data:

  • To comply with legal and regulatory obligations and enforce our legal rights. For compliance purposes and Business Partner auditing, record keeping, compliance screening obligations (to prevent money laundering and other white-collar crimes).

Links to other websites

As part of our offerings, Gamesa Electric may provide links to other third party websites or applications that may be of interest to you. This privacy policy does not cover third parties; as such Gamesa Electric is not responsible for the privacy practices of these websites or applications.

Personal data processed by Gamesa Electric

For the aforementioned purposes, personal data processed by Gamesa Electric may include:

  • Contact information – full name, work address, work telephone and fax number, work email address;
  • Payment data – e.g., credit/debit cards, bank details, security code numbers, and other information required for billing and fraud prevention;
  • Further information necessarily processed in a project or contractual relationship with Gamesa Electric or voluntarily provided by the Business Partner Contact, such as orders placed, payments made, requests, and project milestones;
  • Publicly available information– e.g., information available from integrity data bases and credit agencies; and
  • If legally required for Business Partner compliance screening – information about relevant and significant litigation or other legal proceedings against Business Partners.

Sharing of personal data

As part of our effort to protect your data, we will only share your personal data with our subsidiaries when necessary and after your consent is given, or when we are legally entitled to do so. We only share your personal data with Gamesa Electric subsidiaries in third countries that have adopted and implemented our Binding Corporate Rules (BCR) for the protection of personal data.

For the operation of our websites, we work with service providers such as hosting services or IT maintenance service providers. In such cases, there are safeguards put in place to make certain that your personal data is protected according to the regulations of the European Union. For recipients located in countries outside the European Economic Area (“third countries”), there is a possibility that the applicable laws on data protection do not offer the same level of protection as in the European Economic Area (EEA). Where this is true, Gamesa Electric takes the necessary steps to ensure that an appropriate level of protection of personal data exists, such as European Model Clauses.

Data is shared only in connection with and in compliance with applicable laws and regulations. We do not sell or otherwise market your personal data to third parties.

Personal rights

In case you wish, you may exercise your rights of access, rectification, erasure (“right to be forgotten”), restriction of processing, portability, object and not to be subject of an automated individual decision-making, including profiling. You may also revoke your consent at any time. In this sense, please Contact Us to send your request. We will respond to all legitimate requests.

Complaints

Users who feel that their data protection rights have been violated or users who have any complaints regarding their personal information may contact the relevant Gamesa Electric Data Protection Officer. In any event, data subjects may always lodge a complaint before the competent data protection authority in accordance with the applicable legislation.

Data retention

We only retain the personal data that you provided to us to fulfill the purposes for which it was initially collected, or unless otherwise required by law.

In this sense, once this purpose disappears or in the case in which the user withdraws his/her consent, Gamesa Electric may keep the user’s personal data, duly blocked, during the period of prescription of the actions that may arise from the relationship with the interested party or for the attention of public authorities, in accordance with the applicable regulations in each case, as well as for the exercise and defense of claims before the Data Protection Agencies.

Contact information

If you have any matters relating to personal data, you can reach the Gamesa Electric data protection department at: dataprotection@siemensgamesa.com.

© 2022 by Gamesa Electric, S.A.U.