Data Controller and Purpose of Data Collection
In compliance with current legislation on data protection, we hereby inform you that the personal information you may provide to us will be processed by Ferrovial, S.A. (hereinafter the Company) as Data Controller, for the purpose of managing complaints regarding possible irregularities, breaches or behaviours that may be contrary to ethical practices, legislation or the corporate standards of Ferrovial.
Sharing of Data
We likewise inform you that your details may be shared with any company of the Ferrovial Group if required for the proper handling of the claim. Ferrovial Group companies are all companies or entities having Ferrovial S.A. as its parent company for the purposes of Article 42 of the Commercial Code and, specifically, the companies listed in our most recent annual report and consolidated annual accounts published on the historic.ferrowebpre.aws.ferrovial.com website. The activities of Ferrovial Group companies are essentially: i) construction, ii) airport management, iii) highway and other road infrastructure management, and iv) services. Such communication could imply international transfer of personal information to countries outside the European Economic Area (EEA), some of which may not be considered by the European Commission as having a level of data protection equivalent to the level of protection in the EEA.
Lawful Basis for Collection and Data Retention
The lawful basis for the processing of your personal information are the legitimate interests of the Company in investigating possible irregularities, breaches or behaviours that may be contrary to ethical practices, legislation or the corporate standards of Ferrovial. The international transfer of data, if required, is based on your consent. The information you provide to us may be retained for as long as required to properly investigate the claims made.
You have the right of access to, rectification, elimination or portability of your personal information, the right to restrict or oppose its processing under certain circumstances, and/or to withdraw any consent provided by you by means of a written communication to [name of Ferrovial Group company] specifying your name and surname, an address for the purposes of communications, and the right you wish to exercise, including therein a copy of your National Identity Card. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), in particular if not satisfied with the response given to your request to exercise such rights. Additionally, and in relation to Ferrovial Group companies in Spain, or Group companies using personal details in Spain, you can contact our Data Protection Officer at firstname.lastname@example.org or C/Príncipe de Vergara 135, 28002 – Madrid.