This document contains useful information about how Elecnor handles your personal data and your rights under the General Data Protection Regulation (“GDPR”).

I. Identification and contact details of the Controller

Elecnor is one of the leading global corporations in project development, construction and operation through two major mutually-enriching business areas: Infrastructure and Concessions.

You can contact Elecnor via the following channels:

  • In person or by post addressed to the company headquarters at Paseo de la Castellana 81, 20th floor, 28046 Madrid. 
  • By email addressed to
  • Via the different forms of contact with the head office and offices defined on the website: 

II. Exercising your rights

We hereby inform you that you may exercise the following rights:

  1. The right to access your personal data to find out which are being processed and how they are being processed. 
  2. The right to rectify any inaccurate personal data. 
  3. The right to delete your personal data, when this is possible. 
  4. The right to request the limitation of processing of your personal data when the accuracy, legality or necessity of data processing is uncertain, in which case we may retain your data for the exercise or defence of claims.
  5. The right to oppose the processing of your personal data when the legal basis for this is of legitimate interest. Elecnor will no longer process your data except when there is an overriding legitimate interest for presenting, exercising or defending against any complaints.
  6. The right to portability of your personal data, when the legal basis provided for data processing is the existence of a contractual relationship or your consent.
  7. The right to revoke your consent at any time.

Furthermore, we inform you that you have the right to complain to the Spanish Data Protection Agency if you believe that there has been a breach of the data protection law concerning the processing of your personal data.

III. Information about the processing carried out by Elecnor

Elecnor has a Processing Activities Register containing all key information concerning the processing activities completed by the controller.

  • Shareholders
  • Customers
  • Access control
  • Ethical code
  • Communication and institutional relations
  • Access control
  • Candidates
  • Personnel management
  • Legal records file
  • Related operations
  • Suppliers
  • Sub-contractors
  • Video surveillance

IV. Security and guarantees

Depending on the type of processing Elecnor processes personal data based on the legitimate interest provided by the contractual relationship, the pre-contractual relationship including that in which the interested party is a party, by means of explicit consent when those affected are direct users and consumers, compliance with legal obligations and other bases that are specified in the Record of Processing Activities.

Our aim is to always process personal data in an appropriate and legal manner in accordance with the prevailing data protection principles.

In the case of personal data processing by Elecnor based onlegitimate interest, the controller considers the impacts with regard to the interests, rights and freedoms of those affected and balances them to the extent required under the applicable law to ensure that due privacy is not affected.

The security measures implemented comply with the provisions of the National Security Scheme in the field of Electronic Administration and which are described in the documents which comprise Elecnor's information security policy.

How long will we keep your data?

We keep your data for no longer than is required under applicable laws. If your data is no longer required for the legal purposes for which it was obtained, it will be destroyed in accordance with data protection laws.

V. Transfer of your data 

Transfers of personal data outside Spain or Europe are not foreseen for the defined processing with the exception of processing related to human resources.

Data may be communicated to comply with legal requirements for processing.

VI. Confidentiality

The personal data that we may collect via the website or by means of our various communications with you will be treated in the strictest confidentiality and we are bound to secrecy in accordance with the applicable legislation.

VII. Updating of our privacy policy

It is possible that this Privacy Policy will have to be updated so it is necessary for you to review this policy periodically and if possible each time that you access the website so that you are adequately informed about the type of information collected and its processing. You can find the Privacy Policy at the bottom of the company home page. However, we will inform you about any amendment of the current privacy policy which affects the processing of your personal data.

The Privacy Policy was last updated on 19 July 2018.