In compliance with the provisions of national regulations on the protection of personal data and Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, GDPR), we inform you below of how your personal data will be processed.

This Privacy Policy shall apply exclusively to the processing of personal data carried out by Elewit, S.A. Unipersonal (hereinafter, “Elewit”) through https://www.elewit.ventures/es. The processing of personal data carried out through specific domains shall be governed by their respective privacy policies, such as:

• https://www.redeia.com/en
• https://www.ree.es/es
• https://www.reintel.es/es
• https://redelectricaetica.globalsuitesolutions.com/denuncias
• https://redelectricaetica.globalsuitesolutions.com/consultas

Likewise, you are hereby informed that the basic information provided on an individual basis regarding the processing of your data may include special conditions that will supersede this Privacy Policy.

In order to guarantee proper management of your personal data processing, Elewit has appointed a Data Protection Officer, who may be reached for any queries you may have and who can be contacted at the following e-mail address dpd@redeia.com.

This Privacy Policy may be modified by Elewit as required. If changes are made, we will let you know through this website or by other means, so that you can learn about the new Privacy conditions. Continued use of the functionalities made available by Elewit, once the aforementioned modifications have been notified, will constitute your acceptance of them, except in those cases in which your express consent is necessary.

Who is the data controller?

Your data will be processed by Elewit, S.A. Unipersonal (Elewit) and/or by the companies that make up Redeia (hereinafter, Redeia), depending on the recipient of your request or the relationship you have established with each of them. You can consult the companies that form part of Redeia at https://www.redeia.com/es/nuestros-servicios, about which we provide further information below:

Identity of the main entity: Elewit, S.A. Unipersonal (Elewit) with C.I.F. (tax ID number): A-88409990.

Other Redeia companies responsible for the processing:

• Redeia Corporación S.A. with C.I.F.: A-78003662.
• Red Eléctrica de España S.A. Unipersonal with C.I.F.: A-85309219.
• Red Eléctrica Internacional S.A.U. with C.I.F.: A-82852906.
• Red Eléctrica de España Finance, B.V. with registration number: NL812199017B01.
• Redeia Financiaciones S.L.U., with C.I.F.: B-42954917.
• REDCOR Reaseguros, S.A. with registration number: B153252.
• Redeia Infraestructuras de Telecomunicación, S.A. with C.I.F.: A-87323127.
• Red Eléctrica Infraestructuras en Canarias, S.A.U. with C.I.F.: A-76234822.
• Redeia Sistemas de Telecomunicaciones S.A.U. with C.I.F.: A-88044144.

Postal address for notification purposes: Paseo Conde de los Gaitanes nº 177, La Moraleja, 28109 Alcobendas (Madrid).

Data Protection Officer: dpd@redeia.com.

For what purposes will we process your personal data?

In general, your data will be processed by Elewit exclusively for the fulfilment of the following purposes:

1. Management of your relationship with Elewit. We will process your data to manage all matters relating to the maintenance of the relationship established between you and Elewit.
2. Management of users and provision of services offered through our website. We will process your data to provide you with the services we offer on our website and to manage registrations as a user in those sections of the website that require prior registration to access the reserved area.
3. Manage requests for information, queries, and questions through the forms enabled on the web, through postal or electronic mail, or by telephone contact. With the information you provide, Elewit will be able to respond to them and provide you with solutions tailored to your needs. Elewit undertakes to process the data obtained and provided by you to the extent that such data is necessary for the purpose specified herein. Phone calls may be recorded in order to ensure the quality of the service and for security purposes.
4. Manage the contractual relationship established between you and Elewit. In general, when the processing of your data is based on the performance of a contract to which you are a party, we will process your data in accordance with the provisions of the contract signed between you and Elewit for its performance and development.
5. To comply with Elewit's legal obligations. Elewit, in its capacity as a data controller, is obliged to comply with information requests from Public Administration bodies, courts, regulatory bodies and Spanish law enforcement authorities with competence in the matter.
6. Send newsletters and subscription to newsletter. At Elewit there are forms where you can grant your unequivocal consent to authorise the receipt of information through bulletins and newsletters, both by ordinary and electronic means, as well as information about the activities organised by Elewit.
7. Sending of advertising communications. With the information you provide, Elewit may use your data to send you information, including by electronic means, about offers, products, recommendations, services, and promotions suited to your interests, needs and preferences.
8. Conducting satisfaction surveys. In order to verify your degree of satisfaction with the work carried out by Elewit, we may conduct satisfaction surveys to improve the quality of our procedures and services.
9. Use of cookies and analysis of web browsing. We will process your browsing data to manage the correct functioning of the website, analyse how users interact with it, as well as to improve the quality of the services offered and your browsing experience. For these purposes, cookies and similar technologies may be used to analyse user behaviour in an aggregated or individual manner. Likewise, Elewit informs you that it does not carry out individual profiling processes that produce legal effects concerning you or similarly significantly affect you. In any case, you can obtain more information about the use of cookies, as well as how to manage or deactivate them, through the Cookies Policy.
10. Guaranteeing website security and preventing misuse. We will process your data in order to guarantee the security of the website, prevent unauthorised access or cyberattacks, and detect, investigate and, where appropriate, mitigate situations that could compromise the confidentiality, integrity or availability of information and systems. Furthermore, these processing activities ensure the correct technical functioning of the website and protect both Elewit and its users against potential fraudulent or improper use.
11. Management of relationships with representatives and contact persons of entities. We will process your personal data when you act as a legal representative or contact person for public or private entities (clients, suppliers, collaborators, institutions or other third parties) in order to maintain, manage and develop the professional, administrative, contractual or institutional relationship, as well as to facilitate the necessary communications within the framework of said relationship.

How will the data of minors be processed?

In general, the contents and services of Elewit are directed and designed mostly for people over 18 years of age.

Elewit will not collect or process the personal data of minors under 14 years of age without fully complying with the requirements established in the applicable data protection regulations regarding the duty to inform and the obtainment of any necessary consents.

How long will we store your data?

The personal data provided will be stored for the period necessary to manage your request, query, suggestion, complaint or claim, or for as long as the contractual relationship is maintained, its erasure or objection is not requested by the data subject and they should not be deleted because they are necessary to comply with a legal obligation or for the establishment, exercise or defence of legal claims.

In this regard, Elewit will store and duly block the personal data once its relationship with you has ended, and will only make it available to the Public Administrations, Judges and Courts for the attention of the possible responsibilities arising from the processing, as well as for the exercise and defence of claims at the Spanish Agency for Data Protection and will be stored for the statutory limitation period of any actions that may arise from the relationship maintained with the user.

Your personal data will be stored for the time necessary to fulfil the purpose for which it was collected. If your data is used for several purposes that require us to store it for different periods, we will apply the longest retention period.

What is the lawful basis for the processing of your data?

Elewit is legitimised to carry out the processing of your personal data on the following lawful bases:

• Performance of a contract: The processing of your data is necessary for the management, maintenance and performance of a contract signed between you and Elewit.
• Consent of the data subject: You have given your consent by completing a form authorising the processing of your personal data for a specific purpose or for certain purposes, such as subscribing to information bulletins, responding to queries, requests for information, claims, sending commercial communications and conducting satisfaction surveys. You may withdraw the consent granted at any time through the means made available to you.
• Compliance with legal obligations: The processing of your data is necessary to comply with the legal obligations established in legislation (tax, commercial, labour, etc.).
• Legitimate interest of Elewit: The processing of your data is based on the legitimate interest of Elewit when there is no other lawful basis that permits the processing. In any case, a balancing test of our legitimacy has been carried out so as not to cause any prejudice to your fundamental rights and freedoms, taking into account reasonable expectations based on your relationship with Elewit.

How do we collect your data?

In each process in which you provide your personal data, you will be informed of the mandatory or optional nature of its completion, and of the consequences of not providing said data.

Through this Privacy Policy, you declare that the information and data you provide us with are accurate and truthful, with Elewit reserving the right to exclude from the services any interested parties who have provided false data, without prejudice to the possibility of initiating legal actions. You will be solely responsible for any false or inaccurate statements you make and for the damages that this may cause to Elewit or third parties. If, by means of any form, you provide us with third-party personal data, you guarantee that you have informed said third party of this Privacy Policy and that you have obtained their authorisation to provide Elewit with their data for the purposes indicated.

In compliance with article 14 of the GDPR, Elewit undertakes to provide any third party whose personal data you provide to us with the relevant information.

To which recipients will your data be disclosed?

Elewit will disclose and provide your personal data for the above-mentioned purposes and in accordance with the above-mentioned legitimate processing grounds to:

• The Redeia companies, which can be found at https://www.redeia.com/es/nuestros-servicios.
• Public Administrations and the Judiciary and, in general, any competent Authorities in case Elewit is legally bound to provide such data.
• Elewit suppliers that have access to your personal data that will process said data as Elewit data processors, as a result of the services they provide to Elewit. All suppliers with access to personal data that provide services to Elewit have signed the corresponding data processor agreement in accordance with the provisions of article 28 of the GDPR, taking it upon themselves to comply with the following obligations: apply appropriate technical and organisational measures; process the personal data for the agreed purposes and acting only on the documented instructions of Elewit and the obligation to delete the data once the provision of the services has ended.
• Due to the activity carried out by Elewit, there is the possibility of international data transfers to countries located outside the European Economic Area (EEA). For cases in which international data transfers are made to countries outside the European Economic Area (EEA) or to countries that do not offer an adequate level of protection, the necessary measures will be applied with adequate guarantees through the use of Standard Contractual Clauses that legitimise international transfer.

How do we guarantee the security of your data?

Elewit applies and maintains appropriate technical and organisational measures to guarantee an adequate level of security based on prior risk analysis.

Specifically, Elewit has established all the technical means at its disposal to prevent the loss, misuse, alteration, unauthorised access and theft of the data you provide us with.

What are your rights when you provide us with your data?

Elewit informs you that you have the right to obtain confirmation on whether we are processing personal data that concerns you or not.

Likewise, Elewit informs you that you may exercise the following rights over your personal data:

• Access: You have the right to access your data to know what personal data we are processing that concerns you.
• Rectification or erasure: In some circumstances, you have the right to rectify any personal data that you consider to be inaccurate and that concern you, and that are processed by RE, as well as the right to request the erasure of your data when, among other reasons, the data were no longer necessary for the purposes for which they were collected.
• Restriction of processing: In some circumstances, you will have the right to request us to limit the processing of your data, in which case we inform you that we will only store the data on which you have requested restriction of processing for the establishment, exercise or defence of legal claims.
• Portability: In some circumstances, you will have the right to receive the personal data that concern you, and that you have provided us, in a structured, commonly used and machine-readable format, as well as to have them transmitted by Elewit to another data controller.
• Right to object: In some circumstances, and for reasons related to your particular situation, you will have the right to object to the processing of your data, in which case, we would stop processing them unless we are obliged to continue to do so for compelling legitimate grounds or for the establishment, exercise or defence of legal claims.

To exercise your rights, please submit a letter to the aforementioned postal address or via email to the following address: digame@redeia.com, including in the subject “Data Protection”.

You can also contact our Data Protection Officer at the following address: dpd@redeia.com.

The data controller will take the appropriate measures to provide the data subject with all possible information regarding the processing of their personal data in accordance with their request within a maximum period of one month from the receipt of the request. This period may be extended for two additional months, depending on the complexity of the case and the number of requests.

You must specify which of these rights you are requesting to exercise and, in turn, must prove your identity in the event your identity cannot be confirmed via the communication channel used for the request. In the event that you are represented by a legal or voluntary representative, you must also provide a document proving the representation, as well as the identity of said party.

Additionally, in accordance with article 77 of the GDPR, if you consider that your right to the protection of personal data has been violated, you can file a claim with the supervisory authority, in Spain, the Spanish Agency for Data Protection (www.agpd.es) or apply to the competent court, in accordance with article 79 of the GDPR. Likewise, we hereby inform you that, initially, you may file a complaint with the Data Protection Officer at the following address: dpd@redeia.com.

Update date of this Privacy Policy: June 2026.