The aim of this document is to inform Sacyr website users about the processing of personal data that is carried out while browsing through its pages.

1. Ownership of the Website

Sacyr, S.A. holds the ownership of the Website, with registered office at C/ Condesa de Venadito 7, 28027 Madrid.

You may contact our Data Protection Delegate here: dpo@sacyr.com

2. Data collected and purposes of the processing

• By just accessing the Service, Sacyr collects the IP address and other data related to the connection and its origin. The IP address is a code that identifies the user's Internet connection at a specific time.
• Only the user's Internet access provider is able to identify the subscriber who was assigned an IP address at a specific time. Due to the very nature of the server that supports the Service, the IP address of the user is automatically registered along the date and time of access.
• Sacyr will process the data collected (name, surname, email, Linkedin, telephone and position in the company), in the event that users register in the "join" section of the Sacyr iChallenges website or in the "participate" section and complete the registration form on the Sacyr Open Innovation website, in order to manage their participation in the challenges and calls that are published. Both websites are designed for innovative agents (startups, entrepreneurs, innovation centers, universities, etc) to join with innovative proposals to the challenges launched by Sacyr.
• Sacyr shall process the data collected in the Consultation and Reporting section that users provide to manage the query or complaint made. The personal data of the said users that we shall process are: name, surname, e-mail and telephone number.

3. Legal basis of processing

• Sacyr shall process the data of the users who provide such data to us through the registration in challenges or innovation intiatives on the basis of the consent that we shall request from them.
• User consent expressed through the sending of a Consultation or Complaint through the form established for this end, together with the need for processing for the maintenance or fulfillment of a contractual relationship, are the bases that legitimize this processing.
• In the event of express consent from the users, Sacyr shall send commercial communications by email or other means of electronic communication.

4. Recipients of data and international transfers

Your personal data may be transferred to Administrations, Authorities and Public Organizations, including Courts and Tribunals, when required by applicable regulations.

Sacyr also has service providers, such as computer and web maintenance companies, legal services, administrative agencies or third parties on which it relies for the organization of events that, in the course of providing their services, access Sacyr's personal data.

Sacyr selects and control of these third parties with whom it has signed data protection agreements, where they are obliged to follow a series of data protection obligations. Apart from the aforementioned cases, Sacyr does not communicate your personal data to any additional third parties. If any of our service providers or computer systems are located outside the EU, Sacyr will adopt all the guarantees that are applicable in accordance with the regulations in order to guarantee adequate data management.

5. Storage of personal data.

The personal data will be kept for two years, after which they will be deleted or blocked if any legal liability arises, during the period of limitation of the same.

6. Derechos de los usuarios en materia de protección de datos

Users can exercise their rights of access, rectification, deletion, opposition, limitation of processing and portability, as well as revoke the consent given, regarding the processing for which Sacyr, S.A. is responsible by writing to the person responsible, accrediting their identity, to the following address: Condesa de Venadito 7, 28027, Madrid or by sending an email to protecciondedatos@sacyr.com, providing your ID or equivalent document, identifying yourself as a user of the contact page of Sacyr, S.A., and specifying your request.

Should users want more information or consider that their right to data protection has been breached, they may contact the Spanish Agency for Data Protection (www.aepd.es) or the Sacyr Data Protection Delegate (dpo@sacyr.com).

7. Security Measures

Sacyr has adopted all the necessary security measures to ensure the integrity, security and storage of personal data stored in their systems, in accordance with the provisions of current legislation on data protection, recognizing and appreciating the importance of the responsible use of the information herein.

8. Additional information

Should the users have any questions about the information contained in our Privacy Policy, please send an email to: dpo@sacyr.com