Privacy policy

This Privacy Policy was last revised on 21 May 2025.

About us and this Privacy Policy.

The website at www.atlantica.com is owned and operated by Atlantica Holdco Ltd.

About us and this Privacy Policy. The website at www.atlantica.com is owned and operated by Atlantica Holdco Ltd. We understand that privacy is very important to you, and we are committed to safeguarding the privacy of all our visitors. Our Privacy Policy, which is set out below, has been prepared to meet the requirements of the European Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing The Privacy and Electronic Communications (EC Directive) Regulations 2003. It is intended to help you understand our practices relating to the collection, protection, disclosure and use of any personal data that you provide to us, or that we collect from you, whilst you visit our website. By “personal data”, we mean any information about you that could be used to help identify you. The term “personal data” is defined more fully in article 4 of the European Regulation 2016/679, which you can read here. Nothing in this Privacy Policy limits your legal rights in relation to your personal data. When you visit the website or provide information to us via the website, you are accepting and consenting to our processing of your information in accordance with this Privacy Policy and any other contract we may have with you. If you do not agree to the terms set out in these terms and policies, we do not give you permission to use the website and you must cease to do so immediately.

1. Who is the data controller?

Please note that Atlantica Holdco Ltd with address at Building 7, Floor 2, Unit 5, Chiswick Business Park, 566 Chiswick High Road, London W4 5YG, United Kingdom, is the Data Controller of your personal data for the purposes described here.

The subsidiaries of Atlantica Holdco Ltd, which comprise the Atlantica group (hereinafter “Atlantica”), are listed in the latest consolidated annual report published on the website www.atlantica.com.

You may contact the Data Protection Manager in the address previously indicated or in the following email address dataprotection@atlantica.com.

2. What information do we collect and process from you?

Categories of dataPurposes
We process the following personal data:Identification data (name and surname, username)Contact details (email and telephone)We process your personal data to:Contact us with an enquiry by telephone or email or using any forms on our website (we may monitor, record and retain copies of such communications)Sign up to receive information from us about our business, news and events or respond to our marketing communicationsReport a problem with our website or any services generally
Information about you or your computer that we collect automatically each time you visit the website and information we lawfully receive from other sources, such as business partners, analytics providers, search information providers and webservers such as apache or nginx.Technical information for our own internal logs, including the Internet Protocol (IP) address used to connect your computer to the internet, software user-agent, browser type and version, time zone setting, browser plug-in types and versions, operating system and platformInformation about your visit, including the full Uniform Resource Locators (URL), http response, clickstream to, through and from our website (including date and time); location data, other communications data; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any methods of communication used to contact usUsed for:Security, diagnostics and system administrationImproving website performance and user experienceAnalyzing usage trends and interactions with our services

Any other processing of your personal data that is not included in the above sections will only be carried out by Atlantica in those cases in which you provide your data voluntarily, subject to your consent, or when it is mandatory under current legislation. In any case, we will duly inform you.

3. Do we collect data about children?

We do not knowingly collect information from individuals who are under the age of 16. If you are under 16, please do not provide any information about yourself to us. If you have already done so, please contact us.

4. Which are the purposes of collecting and processing your data and why are we untitled to do it?

4.1 We use the information that you give to us:

4.1.1 To provide information to you that you request from us; we are untitled to use your data for this purpose in order to fulfil our contractual obligations as a result of your request.

4.1.2 To provide you with information about our business (e.g. quarterly financial information) and relevant news and events; we are untitled to use your data for this purpose in order to fulfil our contractual obligations as a result of your request.

4.1.3 To administer our website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes; we are untitled to use your data for this purpose by being a legitimate interest in connection with the information society services provided through our website.

4.1.4 To communicate with you about any comments, queries or feedback you might have about us or the website; we are untitled to use your data for this purpose by being a legitimate interest in connection with the information society services provided through our website.

4.1.5 To ensure that content from our website is presented in the most effective manner for you and for your computer; we are untitled to use your data for this purpose by being a legitimate interest in connection with the information society services provided through our website.

4.1.6 To provide you with communications about our business, news and events we feel may interest you by post, telephone and/or email. We will send that information by electronic mail only if: (i) you have consented to this, for example, by opting in when you sign up to receive this information or (ii) the information is about our products and services similar to those which were the subject of a previous sale or negotiation of a sale to you and you have not opted out of receiving such marketing messages. If you do not want us to use your personal data in this way, please let us know using our contact details at the end of this Privacy Policy; we are untitled to use your data for this purpose as expressly recognized as a legitimate interest of our company by the legislation in force. At any time you will be untitled to oppose to our further processing of your data for this purpose. Please see section 5 “Opting out of marketing” below.

4.1.7 To inform you of any changes to our website and/or services; we are untitled to use your data for this purpose by being a legitimate interest in connection with the information society services provided through our website.

4.2 We use information about you that we collect automatically:

4.2.1 To administer our website and for internal operations, including troubleshooting, data analysis, testing, researching, statistical and survey purposes; we are untitled to use your data for this purpose by being a legitimate interest in connection with the information society services provided through our website.

4.2.2 To improve our website to ensure that content is presented in the most effective manner for you and your computer; we are untitled to use your data for this purpose by being a legitimate interest in connection with the information society services provided through our website.

4.3 We do not adopt decisions that may affect you based solely on the automated processing of your data.

5. Opting out of marketing

You have the right to ask us not to process your personal data for marketing purposes. If you would like to do so, just let us know using our contact details at the end of this Privacy Policy. However, if you exercise your right to opt-out of receiving marketing messages from us, please be aware that you may continue to receive certain non-marketing communications from us. For example, we may still need to contact you about important changes to our services or website that affect you or about any agreements we may have entered into with you.

6. How do we process and store your personal data?

The information we collect from you is stored on Microsoft Azure Cloud’s servers and the server on which your data is stored is located in the European Economic Area. More information about their privacy standards can be found here: https://www.microsoft.com/en-us/TrustCenter/Privacy/default.aspx

7. How do we disclose your information to third parties?

Your data may be communicated to the recipients indicated below, for the following reasons:

RecipientsLegal Basis
Public Administrations (such as Tax Agencies, Social Security, labour authorities) as well as Courts and TribunalsFor the strict fulfilment of legal obligations to which Atlantica is subject under European regulations.
Law enforcement agenciesFor the strict fulfilment of legal obligations to which Atlantica is subject under European regulations.
The companies that make up the Atlantica Group listed in the most recent Consolidated Annual Report published on the website
www.atlantica.com for internal administrative and management purposes
Given Atlantica’s legitimate interest expressly recognized by data protection regulations.
Any other recipient whose transfer is required by lawFor the strict fulfilment of legal obligations to which Atlantica is subject under European regulations.
Accounting audit firmsFor the strict fulfilment of legal obligations to which Atlantica is subject under European regulations.
Service providersFor the execution of a contract held between the supplier and Atlantica.
Interested third parties that may arise from the development of any structural modification of Atlantica or the contribution or transfer of businessGiven Atlantica’s legitimate interest in effectively managing the governance of the companies forming part of the Group.

Atlantica will not share your data with other third parties without obtaining your prior consent, except in those cases where it is necessary for the fulfilment of legal or contractual obligations to which Atlantica is subject at any given time due to its nature and activity.

If in the future Atlantica makes other personal data communications, it will inform you in due course.

8. International data transfers

Intragroup

Due to the international nature of the Atlantica group, it is possible that your personal data may be transferred and shared with Atlantica entities in our offices outside the European Union. Atlantica protects such transfers in accordance with the international data transfer agreements adopted, which incorporate the Standard Data Protection Clauses (Standard Contract Clauses) adopted by the European Commission. To obtain a copy of the Standard Contractual Clauses applicable in the EU adopted by Atlantica, please contact our Data Protection Manager.

From third parties

Atlantica does not need to make international transfers of your data to countries that do not have regulations equivalent to the European one (“Third Countries”). In the event that Atlantica needs to contract the services of suppliers located in Third Countries for the processing of your data, such contracting would be carried out after fulfilling all the requirements established by the data protection regulations and applying the necessary guarantees and safeguards to preserve your privacy. For further information on guarantees in relation to international data transfers, you may contact our Data Protection Manager at the postal and e-mail addresses indicated.

9. Automated decisioins and profiling

We inform you that your personal data are not subject to automated decisions. All decision-making processes related to the purposes described above are carried out with human intervention. Furthermore, no profiling of data subjects is carried out within the framework of the processing described above.

10. What are your rights?

You may exercise your rights of access, rectification, deletion and portability, limitation, withdrawal of consent and/or opposition to processing by sending a communication to the following postal and e-mail addresses:

  • To the e-mail address: dataprotection@atlantica.com with the subject “Data Protection”
  • By any postal means that provides proof of receipt by Atlantica, addressed to the following address: Building 7, Floor 2, Unit 5, Chiswick Business Park, 566 Chiswick High Road, London W4 5YG, United Kingdom, or the postal address of its subsidiaries, indicating on the envelope the reference “Data Protection”

If you consider the processing of your personal data violates the regulation or your rights, you may file a claim to our Data Protection Manager using our mailbox dataprotection@atlantica.com, to our Head of Human Resources or to the applicable Data Protection Authority to their electronic or postal addresses. In the UK, that Data Protection Authority is the Information Commissioner (https://ico.org.uk/); in the European Economic Area, a list of Data Protection Authorities is available here: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.

11. How long do we retain personal data

Your personal data will be kept as long as your relationship with the Company is maintained and, after the termination of such relationship for any reason, during the applicable legal prescription periods. In this case, they will be processed for the sole purpose of accrediting compliance with our legal or contractual obligations.

After these prescription periods, your data will be deleted or, alternatively, anonymized.

12. Updates of this policy

Atlantica reserves the right to review this information clause whenever it deems appropriate, in order to reflect regulatory changes, good practices, or update personal data processing activities. You will be informed of such updates in accordance with regulatory requirements, in case your rights are appreciably affected as a result of such modification or update.

13. Security measures

We take all steps reasonably necessary to ensure your data is treated securely. Unfortunately, the sending of information via the internet is not totally secure and on occasion such information can be intercepted. Therefore, we cannot guarantee the security of data that you choose to send us electronically and therefore sending such information is entirely at your own risk.

14. Links to third party websites

This Privacy Policy only covers this website. On occasion we include links to third parties on our website. For example, we may include links to third party informational resources or services that we believe will be of interest to you. If you follow a link to any of these websites, you should be aware that these websites have their own privacy policies, and the operators of those websites will handle your information in accordance with such policies and not with this Privacy Policy. Such operators might contact you or permit third parties to contact you for marketing purposes in accordance with their own privacy policies, unless you opt out of such communications. Where we provide a link, it does not mean that we endorse or approve that website’s policy towards visitor privacy or any goods or services offered on it. We do not accept any responsibility or liability for third party privacy policies, and we strongly advise you to check such policies and consider the owner’s reputation before you submit your information to any third-party website or enter into any transactions through their websites.

15. Contacting us

If you have any comments or questions about this Privacy Policy, please contact us by email at dataprotection@atlantica.com. You can also write to us at Atlantica Holdco Ltd, Building 7, Floor 2, Unit 5, Chiswick Business Park, 566 Chiswick High Road, London W4 5YG, United Kingdom.