Whistleblowing Channel Policy

Metrovacesa, S.A. (hereinafter, METROVACESA) informs you that in relation to the personal data provided by you through the Complaints Channel form, unless it is an anonymous complaint:

1. The data processed will include identifying information, contact information, professional activity information, and any other information included in the complaint or obtained as a result of its processing or investigation.
2. METROVACESA will process this information for the purpose of handling reports received through the Whistleblower Channel established by METROVACESA or through any other appropriate means, in accordance with the provisions of the Policy on the Internal Reporting System and Whistleblower Protection published on the Whistleblower Channel webpage.
3. Personal data may be disclosed to companies within the Metrovacesa Group if necessary for the investigation, processing, and/or resolution of the complaint, and, where applicable, to the competent authorities responsible for investigating possible acts constituting criminal or administrative offenses.
4. The legal basis for this is compliance with legal regulations that require METROVACESA to establish internal reporting mechanisms and to process and investigate such reports. The data will be retained for the duration of the complaint process and thereafter for the applicable legal retention periods, which may be up to 10 years if investigations are conducted.
5. In the case of verbal communications that are recorded and/or transcribed, the legal basis will be the consent provided by accepting this Privacy Policy.
6. You guarantee that the data provided are true, accurate, complete and updated, being responsible for any damage or prejudice, direct or indirect, that could be caused as a result of the breach of such obligation.
7. In the event that the data provided belonged to a third party, you guarantee that you have informed said third party of the aspects contained in this Policy and obtained their authorization to provide their data to METROVACESA for the aforementioned purposes.
8. You must provide at least the information marked as required; otherwise, if this necessary information is not provided, METROVACESA will not be able to process the complaint or report.
9. To exercise your rights of access, rectification, deletion, opposition, limitation of processing and portability with respect to your personal data, or to request further information, you may contact our Data Protection Officer by sending a letter with the reference “Data Protection” to C/ Puerto de Somport, nº23, 28050 (Madrid) or to privacidad@metrovacesa.com.
10. In any case, a complaint may be filed with the Spanish Data Protection Agency (www.aepd.es).