The privacy policy set out below applies to this entire Website, which is understood to mean all the pages and sub-pages accessible via the domain www. dibal.com, with the exception of websites accessible via hyperlinks on this Website; DIBAL accepts no responsibility for any privacy policies or personal data protection policies that such websites may contain.

DIBAL wishes to inform users of this Website that this statement sets out the personal data protection policy followed by DIBAL in relation to the data collected on this Website. This policy has been drawn up in strict compliance with current legislation on the protection of personal data, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing the former LOPD, the new Organic Law 3/2018 of 5 December on Data Protection and the Guarantee of Digital Rights (LOPDGDD). Consequently, any data collected from users via this Website will, in all cases, be processed in accordance with current legislation on the protection of personal data.

Collection of personal data

DIBAL does not collect personal data from users on this Website via automated devices and procedures beyond the user’s control (cookies); it is entirely possible to browse the Website anonymously, should the user so wish.

DIBAL will only hold personal data relating to those users who voluntarily choose to provide it via the Website using the mechanisms established for this purpose (e.g. communications with DIBAL via the Contact section). Such data, provided voluntarily by the user, will be incorporated into the data files for which DIBAL is responsible, created for the purpose of providing users with the information or services requested and, where applicable, for the maintenance of the existing contractual relationship. Consequently, any user who provides DIBAL with their personal data expressly consents to the processing of such data so that DIBAL may provide them with the services and information they may request.

Security measures

Personal data collected via this Website is stored in databases under the responsibility of DIBAL, which implements all necessary technical, organisational and security measures to guarantee the confidentiality, integrity and quality of the information contained therein, in accordance with the provisions of the LOPD and its implementing regulations.

Communication between users of the Website and DIBAL does not take place via a secure channel, and the data transmitted is not encrypted, and users are therefore requested to refrain from sending any personal data that may be classified as specially protected data under the terms of Article 7 of the LOPD (personal data relating to ideology, trade union membership, religion, beliefs, racial or ethnic origin, sex life or health), as the security measures applicable to an unsecured channel make this inadvisable. Consequently, any such data submitted by the user will be immediately deleted without even being processed.

Purpose of data processing

Personal data voluntarily provided by the user will be used solely for the specific purpose expressly stated in the data collection form and to fulfil the user’s requests as set out in that form. Such data will always be used for lawful purposes related to DIBAL’s business activities and will be treated with the utmost confidentiality, being used solely for the purposes for which it was collected and of which the user is expressly informed at the time of collection.

Any user who voluntarily provides their data to DIBAL via this Website expressly consents, unless they object, to the use of such personal data for the purpose of sending commercial information regarding DIBAL’s new products and services, including by electronic means such as email, always in strict compliance with the provisions of current legislation on Information Society Services, insofar as electronic commercial communications are concerned, as well as with the provisions of other applicable legislation. Furthermore, the user declares that they have obtained the consent of third parties aged fourteen or over whose personal data is included in this document for the disclosure of such data to DIBAL for the purpose indicated above, and that they have informed the data subject of the existence of this transfer, the identity and address of the transferee, the nature of the processing and the possibility of exercising their rights.

Transfer of data

Users who voluntarily provide their personal data to DIBAL via this Website expressly consent to the disclosure of such data to DIBAL or its affiliated companies for the purpose of optimising the services provided to the user.

Data quality: rights of access, objection, rectification and erasure

DIBAL undertakes to keep the personal data voluntarily provided by users of this Website up to date at all times, in accordance with the information provided by such individuals, so that it accurately reflects their identity and personal characteristics; consequently, any such individual may, at any time, exercise their right to rectify the personal data they have provided by sending an email to marketing@dibal.com. Finally, you are informed that any user may, at any time, exercise their right to access, rectify and, where applicable, object to the processing of or delete their personal data provided to DIBAL, by writing to the addresses indicated in the ‘Legal Notice’ section or by email to the following address: marketing@dibal.com

Legal framework and applicable jurisdiction

The “Privacy Policy – Protection of Personal Data” for this website has been drawn up in full compliance with the applicable legislation in this area, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing the former LOPD, the new Organic Law 3/2018 of 5 December on Data Protection and the Guarantee of Digital Rights (LOPDGDD), and may be reviewed and amended at any time in order to adapt to any changes in current legislation. In such cases, the new content shall apply from the moment it is published on the Website and becomes accessible to its users.

Any dispute or conflict that may arise as a result of the use of the Website shall be resolved in accordance with the legislation in force in Spain, and shall be subject to the jurisdiction and competence of the Courts and Tribunals of Bilbao, without prejudice to the provisions of the legislation applicable to the specific matter in relation to the establishment of territorial jurisdiction.