The purpose of MITSUBISHI ELECTRIC EUROPE B.V. Spanish Branch (hereinafter, “MEU-SP”), through the website with the domain https://europe.mitsubishielectric.com/en, as well as all its subpages (hereinafter, the “Website”), aims to provide users (hereinafter, "Users") with information about its products and services. However, data may be collected from Users through the Website, so it is necessary to provide information about this practice.

Furthermore, we have implemented this Privacy Policy, which complies with the guidelines and security measures required by Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter, the "LOPDGDD") and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, the "GDPR"). The aim of these measures is to guarantee privacy and transparency in the use of user data.

The personal information we collect depends on the channel through which we receive it and the user from whom we collect it.

Typically, due to the nature of our services and communication channels, this information will include identifying details such as name, surname, email address, and telephone number.

In some cases, we may record the voice of the person making a request or complaint over the phone.

In any case, we collect personal information to assist users or interested parties and to meet the needs of the company, as described in the following sections. We always respect the rights of customers and users.

Please note that MEU-SP may occasionally collect personal data from publicly available sources and from third parties.

Occasionally, we may collect data from individuals at the customer's home to provide technical support services.

Personal data is defined as any information relating to an identified or identifiable natural person.

A natural person is identifiable if they can be identified, either directly or indirectly, particularly by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to that person's physical, physiological, genetic, mental, economic, cultural, or social identity.

This website may have several types of users:

• Visitor: A user who simply visits and browses the website without interacting.
• Candidate: A person whose data is collected for recruitment purposes, either through a process initiated by MEU-SP directly or through third parties contracted for this purpose, or because the person spontaneously or voluntarily applies for a job position.
• Interested Party: A person who contacts us through one of the channels or forms on the website to make a request or ask a question.
• Customer or End User: A person who interacts with the website or any of its sections, forms, or channels, and whose data we collect to provide a service, as stated in this privacy policy. This also refers to the person who receives the service or the professionals who visit their home to provide technical assistance for the requested or required devices.
• Professional: A user whose data is collected in their professional or business capacity, meaning they do not interact with the website as an individual or consumer. They may be a distributor, installer, technical support service provider, trainee, collaborator, or supplier of the company.
• User: We will refer to users when processing data of any type of user of the website, either indiscriminately or in general, and this may refer to any of the aforementioned.

At MEU-SP, we collect personal data through the following methods:

5.1.1. Contact form for products and general inquiries

Users may contact us through the form to inquire about our products and services. For each product, there is a form requesting your contact details.

5.1.2. Through the complaints channel

Users may submit questions and concerns related to this channel. In this regard, they may also report any well-founded suspicions of possible regulatory noncompliance.

5.1.3. Use the form for general data protection inquiries

This channel collects data to analyze your inquiry or request regarding compliance with data protection regulations and respond to you. You may also use this channel to specify the type of inquiry you have.

5.1.4. Through the "Other Queries" form

You can use this form to send us any other general queries you may have.

5.1.5. Through email

MEU-SP has set up the following email address for general inquiries: contacto@sp.mee.com.

5.1.6. Through social media

MEU-SP may collect personal data and interact with users through their profiles on the various social media platforms we use, as detailed in Section 12 of this policy.

5.1.7. You may subscribe to the newsletter

Users may subscribe to receive information about the latest news and updates from MEU-SP.

5.1.8. Electronic communications

Users may receive electronic communications via email, telephone, SMS, WhatsApp, or other channels when they expressly agree to this upon accepting our terms and conditions.

5.1.9. Through cookies

MEU-SP may collect information about user behavior on the website through cookies. You can find more information about this in the Cookies Policy

5.2.1. Website contact form

If we receive an unsolicited application through the website's contact form or any other form of communication, such as a corporate email, we will respond to it in accordance with the regulations.

5.2.2. Job offers

Any job vacancies or offers will be published on the website itself or in a section dedicated to this purpose.

5.2.3. Job platform

MEU SP has a platform specifically for candidates. Through this platform, candidates can register to apply for job positions at MEU-SP. To do so, they must fill out the fields provided. Once the required information has been provided, the selection process for suitable job positions can be managed.

5.2.4. Selection processes through third parties

In certain cases, external companies hired by MEU-SP may manage personnel selection processes. These companies act as data processors and process data in accordance with current regulations and under the instructions of MEU-SP.

5.3.1. From all types of users

(a) Contact telephone number

Users may contact us with any questions, comments, or requests for services. They may call the office of their choice to do so. A complete list of our Spanish offices and their phone numbers can be found here.

Any user who calls the company may be recorded to provide the necessary service or assistance. They will be informed about the processing of their data and must consent to it for us to provide the service.

(b) Video surveillance

Users are informed that we may collect images of them through video surveillance cameras located in various MEU-SP facilities. Thus, employees, collaborators, and visitors to the facilities may be affected by such processing.

(c) Surveys

Users may be asked to participate in surveys regarding MEU-SP products, services, and training courses for the purpose of conducting research studies and improving the quality of the service offered. These surveys may be directed at individual users, legal entities, or professionals.

(d) Incorrect collection through any channel

If a user contacts us incorrectly through one of the channels on our website, our services will redirect them to the appropriate department, either online or by telephone, and answer their request.

(e) ChatBots

MEU-SP provides certain services to professionals through customized chatbots designed to address technical queries. Users may submit questions or review information through the platform and receive automated responses generated by the chatbot.

5.3.2. Professional Users

(a) QR codes relating to professional courses

MEU-SP may collect your personal data when you scan a QR code. This is done to manage attendance confirmation at courses and, where applicable, provide the corresponding training material and content.

QR codes may also be used to conduct satisfaction surveys, learn about your interests, and send you additional commercial information if you have agreed to this in the relevant clauses or policies.

(b) Purchase of products and/or contracting of services

When users make a purchase or request a refund for an MEU-SP product, their data is collected to respond to their request regarding the purchase, delivery of the product, or refund.

(c) Specific service platforms for professionals

We may provide services through specific platforms for managing certain services offered to customers or end users and carried out by professional users. For example, for "Service requests" or "Technical assistance requests," among others.

(d) WhatsApp channel

MEU-SP has a WhatsApp communication channel through which professional users or installers can contact the company with inquiries. It is an automated tool that provides intelligent responses based on the questions asked by the user.

5.3.3. Natural Person Users

(a) Specific forms

Occasionally, specific forms are created for specific campaigns, such as contests, sweepstakes, or promotions. These forms collect basic identifying information from users to properly manage participation in promotional activities, contact winners, and send campaign-related communications, when appropriate. These forms may appear on specific web pages or landing pages for the purpose of carrying out such campaigns.

Where applicable, your data will be used for the campaign's purposes and, if you expressly agree, for the commercial purposes indicated herein.

(b) Form to request a quote for products, services, or technical assistance: "Request a Quote" or "Request Technical Assistance"

If you wish to contract the installation service (provided by third parties) and/or technical assistance or maintenance of Mitsubishi Electric products, you must complete the requested information to receive the service.

(c) Through collaboration with or representation of third parties

Due to Mitsubishi Electric's collaboration with partners (installers, distributors, and other third parties), your data may be provided to us for technical support purposes. In this case, the partner will be responsible for informing you about the processing of your data.

Second, a user may decide to represent another user for justified reasons. In this case, we will access and manage your data to provide the requested service.

The purpose of data collection in the afore mentioned sections will depend on the type of user and channel indicated above.

The data will be processed to:

• Establish and maintain direct contact with users to resolve any doubts, queries, or comments submitted by any means and to provide the requested information, always guaranteeing experience in accordance with the highest and quality standards.
• Attend to, manage, and respond to any complaints submitted by users.
• Respond to requests for information about our products and services and requests made by users.
• Process and respond to requests to exercise data protection rights in accordance with the GDPR and LOPDGDD.
• Manage the complaints channel set up by MEU-SP.

The data will be processed for the following purposes:

• To manage the contractual relationship arising from the contracting of services and/or sale of products offered by MEU-SP.
• To manage the contractual relationship arising from the contracting of services related to the installation and/or maintenance of MEU-SP products by connecting you with relevant professionals.
• Also, managing the data is necessary to provide technical support for applicable equipment.
• Where applicable, we will coordinate attendance at training courses, seminars, and other events organized by MEU-SP. We will also facilitate access to related materials and content for professional users.
• In the event that the user interacts with automated tools, such as the WhatsApp channel or chatbot, responses will be provided automatically. However, human control will also be available, and users will be able to contact us through our other communication channels.

When a user contacts us with a spontaneous application or in response to a job vacancy, either through the means provided by MEU-SP or through the candidate platform on the website, their data will be processed to analyze job vacancies for them or to manage their application. They will be informed of the data processing that will be carried out by the company and of their rights through this notice and, where applicable, the clauses that will be sent to them.

Likewise, if the application is managed by external companies hired by MEU-SP for selection or recruitment processes, the user will be informed of the processing of their data once their resume has been received. This ensures compliance with applicable data protection regulations.

Depending on the services and conditions you accept, the data may be used to:

• Send commercial communications, news, and offers about MEU-SP products and/or services through various communication and interaction channels, including social media platforms, mobile applications, websites, WhatsApp, chatbots and other digital communication tools, provided that we have your express consent.
• Manage user participation in promotional activities, such as contests, sweepstakes, and promotions; contact winners; and send communications related to the campaign, where appropriate.
• Reward Professional Users who offer the best service, depending on the activities, interactions, and actions they carry out on our platforms or websites.
• Manage and monitor our social media presence to promote MEU-SP services. This activity is carried out through the official profiles indicated in Section 12 of this Privacy Policy.
• Depending on the User's cookie settings, we perform statistical analyses and create profiles based on their browsing habits in accordance with our Cookie Policy.
• For research and development purposes, analyze personal information to better understand the needs and preferences of users, improve services, and develop innovative solutions that provide greater value. In this case, however, only statistical analyses will be performed.

When you access our facilities, your image may be recorded to manage access and ensure the safety of people, property, and spaces.

MEU-SP will not use personal data for purposes other than those described in this Privacy Policy. If we intend to process your data for new purposes, we will inform you in advance and request your consent, if necessary.

In compliance with the GDPR and the LOPDGDD, and in accordance with our internal policies, we will obtain the consent of the data subject:

a) When the user sends us personal data. Each time this occurs, the user must give their express consent by checking the box at the bottom of each form where their data is collected.

b) (b) For commercial and/or marketing purposes when expressly accepted, according to the MEU-SP web pages visited and/or forms filled out, where applicable.

Similarly, the user guarantees that the personal data provided to MEU-SP is accurate and is responsible for communicating any changes to it.

The user's acceptance of the processing of their data for the purposes referred to in this policy may be revoked at any time, without retroactive effect, in accordance with current legislation. Therefore, the user has the right to withdraw consent at any time without affecting the lawfulness of processing based on prior consent. This can be done using the methods provided in Section 10 of this legal text.

We rely on our legitimate interest to:

a) Perform statistical analyses and non-invasive market research that allow us to improve our services and technology.

b) Process your data when you write to our contact email address or any other address enabled for specific functions on the Website, whether as an individual or a professional. In this case, we will process your data based on the legitimate interest of both parties in communicating and responding to a need.

c) We may also process your data provided by a collaborator in order to provide you with a technical assistance service requested or required by you.

d) We will also process your personal data if you are at home to attend to our technical assistance services, in order to record the assistance in the report, whether or not you are the owner or proprietor of the equipment to be checked.

The legal basis for the processing of personal data may also be the existence of a contractual relationship to which the User is a party.

This scenario will apply:

a) When Users contract our services or purchase our products. The processing of personal data will be required to execute said contractual relationship, formalized and reported in the corresponding contract, outside the provisions of this legal text.

b) For the formalization of the employment contract with employees. The same will apply in the case of interns. However, in this case, the corresponding contract will be formalized with them separately.

Public interest will be applied as the basis for legitimacy to:

a) Manage access to our facilities and preserve the safety of people, property, and physical spaces. All of this will be done through access control and/or the video surveillance system in place.

Compliance with a legal obligation will be applied on a legal basis:

a) To monitor queries and transactions between the parties, ensure service quality and compliance with regulatory procedures, and combat fraud.

b) In relation to legal or regulatory obligations. The user's personal information may be processed to comply with certain regulatory requirements or for discussions that may be held with regulators or public entities, including disclosing personal information to third parties, judicial services, said regulators, or law enforcement agencies, all in relation to requests, proceedings, or investigations carried out by such entities anywhere in the world or where they are required to carry out such actions. To the extent permitted, such requests will be directed to the user, or the user will be informed before a response is given, unless doing so would interfere with the prevention or detection of illegal activity.

In general, your personal data will not be communicated to third parties, except in the following cases:

a) Legal obligation: When disclosure is required by law, data may be disclosed to competent authorities or bodies, courts and tribunals, or any other third parties authorized under applicable regulations.

b) Companies in the business group: Your data may be disclosed to companies and subsidiaries of the MEU-SP group when necessary for internal administrative purposes or for the proper provision of the services requested, always in accordance with the corresponding legal basis.

c) Agents and advisors or collaborators: On occasion, data may be shared on matters related to the improvement of our services and for appropriate and proportionate purposes.

d) Data processors: MEU-SP may share your data with third-party providers acting as data processors, exclusively for the provision of services necessary for the performance of our activities (e.g., web hosting services, cloud computing, technical support, or other technological services). In these cases, we guarantee that these providers will act in accordance with our instructions, within the framework of a data processing agreement that complies with the requirements of Article 28 of the GDPR.

e) Data transfers for installation services: MEU-SP will share your data with duly verified distributors or installers in order to install and/or maintain the products offered by MEU-SP on the market. In this regard, through the relevant channels or specific pages, MEU-SP will collect your data, on the one hand, and on the other, will transfer the data to the corresponding professional in compliance with the requirements established in the data protection regulations. In this regard, from that moment on, the installers or professionals will be responsible for the processing of your data as a User of the service, and MEU-SP will not be responsible for the processing of your data by them.

8.2.1. International transfers between group companies

With regard to international data transfers that may be made between MEU-SP and other group companies located outside the European Economic Area, the company has a policy or regulatory framework in place that regulates different scenarios, including the following: (i) both the company transferring the data and the recipient act as data controllers; (ii) when the transferring company is the data controller and the receiving company is the data processor; (iii) when the transferring entity is the data processor and the other entity is also the data processor; (iv) when the company transferring the data is the data processor and the other company operates as the data controller.

This regulatory framework is also supplemented by several annexes that establish the list of companies that may be subject to such international data transfers, the model standard clauses that must be used as a general rule to comply with the GDPR, with companies located outside the EEA, but also the clauses to be signed with companies in the United Kingdom, the security measures to be taken into account, and a list of sub-processors.

Such transfers between group companies are normally intended to: (i) meet a need between such companies or for one of them to provide support to another; (ii) matters related to the sharing or use of resources; (iii) internal management matters, such as companies in the same group; (iv) coordination of projects between companies for which it is necessary to provide information between companies in the same group; (v) carry out analyses relating to the performance of personnel, equipment, or resources; (vi) ascertain customer satisfaction in general with regard to the provision of services or distribution of products; or any other purpose related to the group's business activity and linked to its commercial purpose, always respecting fundamental rights and data protection.

For more information, please contact us here: Consultas RGPD | MITSUBISHI ELECTRIC ESPAÑA / rgpd@sp.mee.com

8.2.2. Transfers relating to social media providers

Users are also informed that we will make international transfers of their data to the following entities, except in the cases set out in our legal texts, where applicable:

• GOOGLE, LLC. when using the Gmail email application. This company operates worldwide and has its main data center in the US. To ensure regulatory compliance and adequately protect personal data, GOOGLE, LLC. is part of the EU-US Data Framework of July 10, 2023, as established on the Data Privacy Framework Program website: www.dataprivacyframework.gov/list.
• META PLATFORMS, INC. transfers data outside the European Union. To ensure regulatory compliance and protect personal data, Meta is part of the EU-US Framework of July 10, 2023, as established on the Data Privacy Framework Program website: www.dataprivacyframework.gov/list.
• LINKEDIN CORPORATION transfers data outside the European Union. To ensure regulatory compliance and protect personal data, LINKEDIN CORPORATION is part of the EU-US Framework of July 10, 2023, as established on the Data Privacy Framework Program website: www.dataprivacyframework.gov/list.
• X CORP. transfers data outside the European Union. To ensure regulatory compliance and protect personal data, X is part of the EU-USA Framework of July 10, 2023, as established on the Data Privacy Framework Program website: www.dataprivacyframework.gov/list.

8.2.3. Collaborations with third parties outside the group

In cases where there is collaboration with third parties that share or send data outside the European Economic Area, MEU-SP formalizes the corresponding data processor contract to which the Standard Clauses are added, established by IMPLEMENTING DECISION (EU) 2021/914 OF THE COMMISSION of June 4, 2021, on standard contractual clauses for the transfer of personal data to third countries in accordance with the GDPR, which can be viewed below: https://eur-lex.europa.eu/legal-content/ES/TXT/PDF/?uri=CELEX:32021D0914

8.2.4. Server location

Apart from the above, all servers we use to provide our services are located within the European Economic Area, specifically in Spain.

The personal data provided will be kept for the time necessary to fulfill the purpose for which it was collected and to determine any possible liabilities that may arise from that purpose, in addition to the periods derived from applicable legislation.

Data relating to security cameras will be kept for a maximum period of one (1) month from the capture of the images. After this time, personal data will be deleted, except in cases where it must be kept proving the commission of acts that threaten the integrity of people, property, or facilities.

With regard to the resumes of unsuccessful candidates, the information will be kept for a period of one (1) year. After this period, it will be destroyed.

For all other processing, it will depend on the type of processing and its purpose. In any case, it will be kept for the duration of the service or collaboration and the limitation period established by law. Once this period has expired, it will be destroyed using the appropriate mechanisms and in compliance with the law.

We inform you that you may revoke the consents granted, as well as exercise your rights of access, rectification, deletion, limitation, portability, opposition, and not to be subject to automated individual decisions, by sending a written communication through the specific link indicated in section 2 of this Privacy Policy, or by postal mail to the address of MEU-SP.

Below, we briefly explain each of the rights you can exercise:

Furthermore, as a User, you have the right to lodge a complaint with the competent Supervisory Authority if you consider that the processing of personal data concerning you infringes the provisions of data protection legislation and regulations; all this without prejudice to any other administrative remedy or legal action.

In this case, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

To ensure security on the Website, we have integrated a security system that allows us to maintain the confidentiality and integrity of our users’ data that has been submitted or collected through the means mentioned in the first point. To this end, we collaborate with an independent secure server.

All the information you provide us with is stored on our secure servers or other servers established by trusted third-party service providers whose compliance with our company's management standards has been verified and whose access and use are subject to MEU-SP's security policies and standards.

In this way, MEU-SP maintains the levels of data protection security required by the GDPR and the LOPDGDD, and has put in place all the technical means at its disposal to prevent the loss, misuse, alteration, unauthorized access, and theft of the data you provide through the Website.

Also, as a User, you understand, accept, and acknowledge that internet security measures are not impregnable and that, therefore, you are obliged to take the necessary security measures to ensure that you can trust the authenticity of our Website, where you are entering your data. We will also do our utmost to always ensure the privacy and security of that personal information, always exercising the utmost diligence and implementing the necessary measures.

Moreover, we inform you that you, as a User, will be solely responsible for the security measures you implement in relation to the protection of your data. Therefore, MEU-SP is not responsible for situations where you have not implemented the appropriate security measures, nor for their consequences, as well as for causes or damage caused by third parties outside the business, including fortuitous events and/or force majeure.

If you receive (or choose) a password that allows you to access certain parts of the Websites, you are responsible for maintaining the confidentiality of that password and for complying with the security procedures indicated to you. Please do not share your passwords with anyone.

In accordance with the above, MEU-SP cannot guarantee that unauthorized third parties will not become aware of the type, conditions, characteristics, and circumstances of the use that Users make of the services offered on the Website. However, as a measure, conditions of use have been set out in our Legal Notice, and we also have specific conditions of use or terms for certain platforms or web pages, which the User must accept, where applicable.

Any user of any nature (natural person, legal entity, or professional) who provides data belonging to another person must have the express permission of the user affected by the processing. In this regard, they must check the box acknowledging this fact on the corresponding form and, by doing so, exempt MEU-SP from any breach or consequence of such breach.

We have corporate profiles on LinkedIn, Facebook, YouTube, and Instagram.

In accordance with current regulations on personal data protection, we inform you that we are responsible for processing the personal data of Users who interact with our corporate profiles through these platforms (for example, when they follow us, “like” us, comment on or share content).

By interacting with us on these networks, the User accepts this Privacy Policy, in which we inform them about the processing of their data, their rights, and how to exercise them.

We always guarantee confidentiality in the processing of your data and compliance with the applicable regulations.

We use our social media accounts to share relevant information about our services, activities, news, and other content that we consider to be of interest. Depending on your profile settings and how each social media platform works, you may receive these types of posts on your wall or feed.

However, we remind you that there is no link between MEU-SP and the aforementioned platforms, so when you access them, you are subject to their own privacy policies, conditions of use, and legal terms, and MEU-SP is not responsible for the use that these platforms make of your data outside the framework of this relationship and the processing described in this Policy.

MEU-SP Websites may contain links to third-party websites. If you access a third-party website through one of these links, please note that they have their own privacy policies, and MEU-SP accepts no responsibility for them or for the processing of personal data conducted on these websites. In any case, we recommend that you review the relevant policies before submitting personal data to such third-party websites.

We inform you that this Website uses cookies, as detailed in our Cookies Policy, which you can access for complete information about their use, purpose, and configuration.

At MEU-SP, we use other technologies to track and monitor Users through our websites and platforms, such as Hubspot, Matomo, Google Ads, and Meta Ads.

This Privacy Policy may be modified or updated at any time to adapt to regulatory changes, jurisprudential criteria, or the needs of the Website. Therefore, Users are advised to periodically review this Privacy Policy each time they access the Website.

This Privacy Policy is supplemented by the Legal Notice, the Cookies Policy, and other applicable legal texts.

For more information, please contact: https://europe.mitsubishielectric.com/es/privacy/group-fundamental-approach/

Latest Version: November 2025