The privacy policy described below is applicable to the whole of this Website, understood as all the pages and subpages which are accessed through www.DIBAL.es, except for the websites that are accessed via the hyperlinks located in this Website, in relation to which DIBAL, S.A. (hereinafter, DIBAL) declines all responsibility for the different privacy and personal data protection policies they may contain.

DIBAL wishes to inform the users of this Website that this declaration reflects the policy on matters relating to personal data protection followed by DIBAL with respect to the data collected on this Website. This policy was set up in strict compliance with the prevailing standards on personal data protection, that is, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing and free movement of personal data and the new Organic Law 3/2018, 5 December, Data Protection and Digital Rights Guarantee (LOPDGDD). and its implementing regulations. Consequently, the data gathered on users by means of this Website shall be treated at all events in compliance with prevailing regulations on personal data protection.

Personal data collection

DIBAL does not gather personal data on the users of this Website by means of automatic devices and procedures beyond the user’s control (cookies), and anonymous surfing on the Website is perfectly possible, if the user so wishes.

DIBAL shall only avail of the personal data of such users as who voluntarily wish to provide them through the Website by means of the mechanisms established for that purpose (e.g. communications with DIBAL via the Contact section)

Said data, voluntarily provided by the user, shall be included in files under DIBAL’s responsibility, created with the purpose to offer users the information or services requested and, where appropriate, to maintain the existing contractual relationship. Consequently, the user who provides DIBAL with his/her personal data expressly agrees to the processing of the same so that DIBAL can render the services and provide the information which, if applicable, is requested.

Security measures

The personal data gathered through this Website are stored in databases, which are the responsibility of DIBAL, the latter taking all the technical, organisational and safety measures to guarantee the confidentiality, integrity and quality of the information contained in the same in accordance with what is laid down in the LOPD and in its implementing regulations.

Communication between the users of the Website and DIBAL does not use a safe channel, and the data transmitted are not encrypted, which is why users are kindly requested to refrain from sending such personal data as are considered specially protected data under the terms of section 7 of the LOPD (personal data referring to ideology, trade union membership, religion, beliefs, racial or ethnic origin, sexual life or health), as the security measures applicable to an unsafe channel render it unadvisable. Therefore, all data of this type submitted by the user will be immediately eliminated without its processing.

Purpose of data processing

Personal data voluntarily provided by the user shall be used only for the concrete purpose expressly specified in the questionnaire for gathering the same and for meeting the user requirements in said form. They shall always respond to legitimate purposes related to DIBAL’s business activity and shall be treated with absolute confidentiality, and only used for such purposes as they were gathered for and which are expressly communicated to the user on the occasion of their collection.

The user voluntarily providing DIBAL with their data by means of this Website, unless opposed, expressly agrees to the use of said personal data for the dispatch of commercial information on DIBAL’s latest developments and services, including via electronic means, such as email, always in strict compliance with what is provided in prevailing legislation on matters relating to Information Society Services, with respect to electronic commercial communications, as well as to what is stipulated in the other applicable legislation. Similarly, the User declares that he/she has the consent of third parties over fourteen years of age whose personal data are included in this document for the communication of the same to DIBAL for the abovementioned purpose, and likewise declares to have informed the third party owner of the data communicated of the existence of said transfer, the identity and address of the assignee, the content of the processing and the possibility of exercising their rights.

Data transfer

Users who voluntarily use this Website to provide DIBAL with their personal data expressly agree to the communication of said data to DIBAL or to its associate companies with the aim to optimise services for the user.

Quality of the data: rights of access, opposition, rectification and cancellation.

DIBAL undertakes to keep the personal data voluntarily supplied by the users of this Website up to date at all times, in accordance with the information provided by said users so that they truly respond to the identity and personal characteristics of said users, so that any user can, at any time, exercise their right to rectify the personal data that they have supplied by writing an email to: marketing@dibal.com. Last of all, they are informed that any User may, at any time, exercise their right to access, rectify and, if applicable, oppose the processing, or cancel the personal data supplied to DIBAL, by means of written communication addressed to the addresses indicated in the “Legal notice " section, or by email to the following address: marketing@dibal.com

Legal standards and applicable jurisdiction

The "Privacy - Personal data protection policy " of this Website, as well as the rest of the content of the same, have been drawn up in compliance at all times with the applicable legislation with respect to the subject, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing and free movement of personal data and the new Organic Law 3/2018, 5 December, Data Protection and Digital Rights Guarantee (LOPDGDD), and can be revised and amended at any time for the purpose of being brought into line with any amendment of prevailing laws. In said case, the new content shall be applicable from the time it is published on the Website, and shall be accessible for all users of the same.

Any dispute or conflict that arises as a result of the use of the Website shall be resolved in accordance with prevailing laws in Spain, and be submitted to the jurisdiction of the Courts and Tribunals of Bilbao, without prejudice to what is laid down in laws applicable to the concrete matter in relation to the establishment of territorial jurisdiction.