Privacy Policy


The data controller will be the Governing Body of Hipoges Iberia, S.L (“HIPOGES”), with registered office at C/Albacete N.3, 5th floor (28027) Madrid, and with CIF B85610228.

HIPOGES will process your personal data only for the purpose of providing you with information about the facts communicated, as well as to be able to request, if necessary, additional information in this regard.

The legitimate basis for the processing of the personal data you provide in the communication or complaint is the fulfillment of a legal obligation applicable to HIPOGES.

HIPOGES will not communicate the data collected to third parties, except to competent judicial and public authorities, when it is strictly due to a legal obligation, in the context of investigations.

In addition, your identity will in any case be kept confidential and will not be communicated to the persons to whom the facts related or to third parties.

Personal data which are not necessary for the purpose of knowledge and investigation of the reported or reported actions or omissions will not be processed and will be deleted immediately.

The personal data processed shall be kept only for the time necessary to decide whether to initiate an investigation into the facts reported. In any case, after three months from the receipt of the communication without any investigation having been initiated, the data will be deleted, unless the purpose of the storage is to provide evidence of the operation of the system. Communications that have not been processed may only be recorded in anonymised form, without being applicable the obligation to block.

When the communication is made orally, it shall be recorded for the same purpose. Such recording may be subject to voice distortion at the choice of the reporting person.

You can contact our Data Protection Officer (a) by postal communication to the address indicated previously in this document, or (b) by sending an e-mail to the following e-mail address:

You may exercise your rights of access, rectification, erasure, objection, restriction and data portability, at any time, by sending an e-mail to the address, providing a copy of your ID card or equivalent document. If you consider that your right to data protection has been violated, you may file a complaint with the Spanish Data Protection Agency (

You may report to the External Reporting Channel [include the reference to the external reporting channel established by the Member State], either directly or following communication through this Whistleblowing Channel.