Privacy Policy

INTRODUCTION

AGUAS DE VALENCIA S.A. reserves the right to modify this Policy in order to adapt it to legislative developments, judicial criteria, industry practices, or the interests of AGUAS DE VALENCIA S.A. Any modifications will be announced in advance so that you are fully aware of its contents.

In order to provide certain services, it is necessary to manage your personal data. For these purposes, such data will be incorporated into the relevant processing activities of AGUAS DE VALENCIA S.A. and will be processed for the specific purposes of each processing activity, in accordance primarily with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).

INFORMATION ON DATA PROCESSING

Below, AGUAS DE VALENCIA S.A. provides information on the protection of privacy and personal data applied to the data processing activities carried out on its website:

1. Who is the Data Controller?

AGUAS DE VALENCIA S.A. is the Data Controller, with registered office for these purposes at Gran Vía Marqués del Turia, nº 19, 46005, Valencia, Spain.

AGUAS DE VALENCIA S.A. has appointed a Data Protection Officer who can be contacted at: dpo@globalomnium.com

However, AGUAS DE VALENCIA S.A. carries out certain personal data processing activities on behalf of the Public Administration associated with your supply contract, under the data processor agreement signed with said authority. Specifically, all activities related to the integrated water cycle are carried out as a processor, as indicated in the various data collection forms included on this website.

This privacy policy provides information on the data processing activities carried out by AGUAS DE VALENCIA S.A. as the data controller.

2. What personal data do we collect from our users?

AGUAS DE VALENCIA S.A. collects personal data through two main sources:

a) Data directly provided by users

We collect your personal data through the various data collection forms available on the website, such as the contact form or the job application form.

All fields marked with an asterisk (*) must be completed, as failure to do so may prevent us from providing you with the requested services.

We will also ask you to confirm that you have read and accepted this privacy policy, thereby acknowledging that you have been informed about the processing of your data.

To ensure that the information provided is always up to date and that we do not process inaccurate data, you must notify us as soon as possible of any changes to your personal data, using the means indicated in the section on exercising your rights.

b) Data obtained indirectly

We use data storage and retrieval mechanisms that may be installed on your device (such as cookies), as explained in our Cookies Policy.

When you browse our site, various cookies and other tracking devices may be installed on your device, as explained in our cookies policy.

3. What are the purposes of processing personal data and the legal basis?

AGUAS DE VALENCIA S.A. uses the data collected for the following purposes and based on the following legal grounds:

Based on the performance of a contract or pre-contractual measures:

a) Manage recruitment processes.

b) Manage your registration as a supplier.

Based on legitimate interest:

a) Conduct periodic reviews of our services and satisfaction surveys to evaluate and improve service quality.

Based on your freely given, specific, informed, and unambiguous consent:

a) Respond to contact requests via the website.

b) Manage suggestions related to our services.

c) If applicable, keep you informed about our products and services or those of third parties, provided you have given your express consent.

d) Use cookies and similar data storage and retrieval mechanisms on terminal devices.

e) Share your data with other entities of the Group or its subsidiaries.

Based on legal obligations:

a) Address your potential complaints and manage your data protection rights.

b) Disclose your data to public authorities when required by applicable law.

Based on a task carried out in the public interest:

a) Ensure the safety of individuals, assets, and facilities by registering and controlling visits.

4. How long do we retain your personal data?

Your data will be retained for as long as necessary to provide the services and unless you request their deletion. Even after such a request, data will remain blocked and processed only for the following purposes: compliance with legal or contractual obligations, for the legally established limitation periods, and/or for the exercise or defense of claims.

5. Who may receive your personal data?

Personal data will not be transferred or disclosed to third parties, except where necessary for the development, control, or fulfillment of the purposes described above, or as required by law.

However, since AGUAS DE VALENCIA S.A. is part of the GLOBAL OMNIUM group, data may be shared with group companies for administrative purposes. Transfers may also occur with your express consent.

In addition, AGUAS DE VALENCIA S.A. works with third-party service providers who may access your personal data and process it on behalf of AGUAS DE VALENCIA S.A. under a data processing agreement. These contracts require, among other obligations, that they implement appropriate technical and organizational measures, process data only for agreed purposes and follow AGUAS DE VALENCIA S.A.'s instructions, and delete or return the data upon completion of services.

AGUAS DE VALENCIA S.A. guarantees that if providers are located outside the EU or in non-adequate jurisdictions, appropriate safeguards are in place to ensure safe data transfers, such as Standard Contractual Clauses or exceptions allowed by law.

6. Personal data security

AGUAS DE VALENCIA S.A. will implement appropriate technical and organizational measures within its information systems, following the principle of proactive responsibility, to ensure the security and confidentiality of stored data, and to prevent unauthorized alteration, loss, processing, or access, taking into account the state of the art, implementation costs, nature, scope, context, and processing purposes, as well as the varying probability and severity of risks.

7. What are your data protection rights and how can you exercise them?

Below is further information on exercising your data protection rights:

a) What are my rights?

b) Who can exercise these rights with AGUAS DE VALENCIA S.A.?

c) How and where can I exercise these rights?

a) What are my rights?

Under data protection laws, you may exercise the rights of access, rectification, erasure, objection, and restriction of processing with AGUAS DE VALENCIA S.A., in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPD-GDD):

Right of access

You have the right to know:

  • Whether or not we are processing your personal data.
  • The source of your data, if you did not provide it.
  • The purposes of the processing.
  • The categories of data involved.
  • The recipients or categories of recipients of your data.
  • The expected retention period or criteria used to determine it.
  • Your right to lodge a complaint with a supervisory authority.
  • Whether we use automated decisions, including profiling.

Right to rectification

  • Complete your data if it is incomplete.
  • Update or correct it if inaccurate or outdated.
  • Ensure your data is accurate and complete.

Right to erasure

  • Data is no longer necessary for the purposes collected.
  • You withdraw your consent and no other legal basis applies.
  • You successfully object to processing.
  • Data was processed unlawfully.

Right to restriction of processing

You have the right to restrict processing (i.e., data is stored but not used).

Right to object

You may object to processing, for example, if you believe your data is inaccurate or no longer needs to be used.

If you believe your data protection rights have been violated, you may file a complaint with the Spanish Data Protection Agency (www.agpd.es).

b) Who can exercise these rights with AGUAS DE VALENCIA S.A.?

You can exercise these rights as the data subject acting on your own behalf, or through a representative, either legal (e.g., parents or guardians) or voluntary (a person you have granted power of attorney).

c) How and where can I exercise these rights?

  • In writing to the company’s registered address listed above.
  • At our customer service offices.
  • With an email, sending it to portalweb@aguasdevalencia.org. In the email, we'll need you to include information about your first and last name, some ID number, a contact phone number, your address (including the postcode), your request, and whether you'd like us to respond you by email or postal mail.