• +34 988 37 07 66

COPASA, is particularly sensitive to the protection of personal data of Users of the services of the Website. Through this Privacy Policy (hereinafter, Policy) COPASA informs Users of the Website made available to the public at the URL , of the uses to which personal data collected on the Website, so that they can decide, freely and voluntarily, if they wish to provide the requested information.

COPASA reserves the right to modify this Policy in order to adapt it to new legislation, jurisprudential criteria, industry practices, or interests of the entity. Any modification in it will be announced with due notice, so that you have full knowledge of its contents.

The fact of continuing to make use of the functionalities made available by COPASA after having been notified of the aforementioned modifications, will mean that you agree with them, except for those cases in which your express consent is necessary.

Who is the data controller?

The data controller is S.A. de Obras y Servicios, COPASA (hereinafter, COPASA), with registered office for these purposes in Rúa do Paseo 25, 32003, Ourense.

To ensure proper management in the processing of your personal data, COPASA has a Data Protection Officer, whom you can contact to resolve any questions you may have, and who can be contacted at the following email address:

For what purpose do we process your personal data?

The personal data provided by the User through this Website may be processed by COPASA for the following purposes, depending on the type of data provided by the user, as well as the interactions that the user enters into with COPASA through this website.


  1. Contact
  • Purpose: The personal data of Users who contact COPASA through any of the contact channels made available on the Website, will be processed in order to give answer, manage and respond to requests for information, questions or suggestions.
  • Data processed for this purpose: Identification and contact data (e.g. name and surname, email address, telephone number)
  • Legitimate basis: 6.1.b) GDPR – Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.


  1. Registration to the job bank (Work with us)
  • Purpose: User´s personal data may be processed by COPASA in order to manage their registration for the different vacancies published on the Website through the forms made available for this purpose.
  • Data processed for this purpose: Identification and contact data (e.g. name, surname, email address). Academic and professional data (e.g. qualifications).
  • Legitimate basis: 6.1.b) GDPR – Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

From what sources does the data come?

The data that COPASA processes come from the following sources:
• Data provided by the user through the completion of forms made available by COPASA or by any other means by which the User enters into a relationship with COPASA (e.g. name, surname, email, telephone)
• Data generated as a result of browsing and use by the User of the website (e.g. sections visited)
• Data generated as a result of the development, processing and management of the relationship between the User and COPASA (e.g. number of contacts made with the client)

To whom is your data communicated?

COPASA informs Users that the processing of personal data described and reported in this Privacy Policy may involve the communication of their data by COPASA to third parties. In this sense, and whenever necessary, COPASA may communicate data to the following third parties:

• Public bodies and Public Administrations, in order to comply with legal obligations applicable to COPASA. They may also be transferred to the competent authorities when formally required and when there is a legal obligation to provide them in compliance with the Law on the Prevention of Money Laundering.

The international transfer of your personal data is noy envisaged. However, in the case of any international transfer, it will be carried out in accordance with the criteria and requirements demanded by current legislation, by means of the adoption of appropriate legal guarantees, which may consist of the formalization with the recipient of the data of (i) Standard Contractual Clauses approved by the European Commission to legitimize the international transfer of data to third countries or (ii) another valid legal instrument that guarantees an adequate level of protection equivalent to that of the European Economic Area.

How long will we keep your data?

COPASA will keep your personal data for the time necessary to manage the reported incidents and/or to achieve the intended purpose of processing.

Subsequently, as long as the user has not exercised their right of erasure, their data will be kept for the legal periods applicable in each case, taking into account the type of data, as well as the purpose of the processing.

The data of candidates who send their CV through the “Work with us” form will be kept for the duration of the selection process and for an additional year from the end of the same.

In any case, the user may request detailed information on the data retention periods applied in COPASA by contacting our Data Protection Officer, who can be contacted at

What personal data must be provided in each case?

COPASA informs users that, when personal data is collected through a form made available through our Website, it will be necessary for the user to provide at least the data indicated as obligatory. In case of not providing at least such data, considered as necessary, COPASA will not be able to manage the provision of services or meet the user´s request.

What do you have to guarantee when providing your personal data?

The User guarantees that the data provided is true, accurate, complete and up to date, and is responsible for any direct or indirect damage or injury that may be caused as a result of non-compliance with this obligation.

In the case that the user provides data belonging to a third party, guarantees that has informed that third party of all aspects contained in this Privacy Policy and obtained their consent to provide us with their data for the purpose of the processing in question. All this, prior to the provision of data from a third party through our Website.

COPASA informs you that, in order to provide your personal data, in any way, through our Website, you must be over 18 years old. The user who provides data to COPASA through its Website declares and guarantees to be over 18 years old, taking full responsibility for such treatment.

What measures do we adopt to protect your personal data?

In response to COPASA´s concern to guarantee the security and confidentiality of your data, we have adopted the security levels required for the protection of personal data and have installed the technical means at its disposal to prevent the loss, misuse, alteration, unauthorized access and theft of personal data provided through this Website. In any case, you should bear in mind that security measures on the internet are not impregnable.

What are your rights regarding your personal data?

COPASA informs you that you have the right to obtain confirmation as to whether or not we are processing personal data concerning you.

Likewise, COPASA informs you that you have the following rights over your personal data:

• Access to your data: Know what personal data we are processing concerning you.
• Request the rectification or erasure of your data: Rectify those personal data that you consider inaccurate and that concern you, and that are processed by COPASA, as well as the right to request the erasure of your data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
• To request the limitation of the processing of your data: The limitation of the processing of your data, in which case we inform you that we will only keep the data about which you have requested limitation in the processing for the exercise or defense of claims.
• Portability of your data: Receive the personal data concerning you, which you have provided to us, in a structured format for common use and mechanical reading, as well as to be transmitted by COPASA to another data controller.
• Object to the processing of your data: Oppose the processing of your data in which case, we would stop processing them unless we must continue to do so for legitimate reasons or for the exercise or defense of possible claims.

We also remind you that you have the right to object, at any time, to the sending of advertising of COPASA´s own products and services, as well as to withdraw any of the consents you may have given for the processing of your data, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

COPASA informs you that you may exercise your rights over your personal data by writing to COPASA, with the reference “Exercise of customer rights”.

You may send your requests to any of the following addresses:
• Rúa do Paseo 25, 32003 Ourense