AQUALIA USA CORP. (hereinafter, "Aqualia USA") makes available to users of the website www.aqualiausa.com (hereinafter, "the WEBSITE") this Privacy Policy, with the purpose of providing information on how we process your personal data and protect your privacy and information.

Aqualia USA asks users to take a few minutes to carefully read this Privacy Policy, accessible from the "DATA PROTECTION" button located in the footer of the WEBSITE.

Who is responsible for processing your data?

The data controller varies depending on the purposes pursued with the services provided on the WEBSITE.

The controller of your personal data for the purposes of: (i) inquiries and suggestions, (ii) service issue reporting, and (iii) analysis of user navigation on the WEBSITE is AQUALIA USA CORP., with its address at 406 W. Grand Parkway S, Suite 260, Katy, Texas 77494 and Tax ID: [INSERT TAX ID]. Data Protection Contact: [INSERT PRIVACY EMAIL]

The controller of your personal data for the following purposes: (i) service activation, (ii) service termination, (iii) payment setup, (iv) customer data updates, (v) electronic billing requests, and (vi) duplicate invoices is the corresponding municipal utility district in relation to the service you have contracted, which is managed by the concessionaire entity (data processor). In those cases where the concessionaire entity is not AQUALIA USA CORP., AQUALIA USA CORP. has been subcontracted as a sub-processor for the management of these procedures through the WEBSITE.

What data do we process? For what purpose and on what legal basis?

The personal data provided by users of the WEBSITE will be processed by Aqualia USA for the following purposes and on the following legal bases:

Purpose: Maintenance, development, and management of the contractual relationship with the user (service activation, payment setup, customer data updates, or electronic billing requests).

Data processed: Identification data (name, surname, Tax ID/SSN [IF APPLICABLE], telephone, email, etc.), service data (contract number, service address, etc.), voice.

Legal basis: TDPSA: Performance of a contract to which the data subject is party. TDPSA: Legitimate interests pursued by the data controller. The interest refers to documenting both contractual agreements and other matters related to the provision of services that involve any notification, agreement, or proposal by the Controller. In any case, you may request more information about the balancing of interests analysis at [INSERT PRIVACY EMAIL]

Purpose: Recording of telephone conversations made to Customer Service, in order to ensure better quality of service and, on certain occasions, to ensure the contracting process.

Data processed: Voice, identification data.

Legal basis: TDPSA: Legitimate interests pursued by the data controller.

Purpose: Management of inquiries and suggestions.

Data processed: Identification and contact data (name, surname, email, and telephone).

Legal basis: TDPSA: Processing is necessary for the purposes of legitimate interests pursued by the data controller. You may request more information by writing to [INSERT PRIVACY EMAIL]

Purpose: Service issue reporting.

Data processed: Identification data (identity document, email, etc.), service data (contract number, etc.), telephone.

Legal basis: TDPSA: Processing is necessary for legitimate interests pursued by the data controller.

Purpose: Analysis of user navigation on the WEBSITE.

Data processed: Navigation data.

Legal basis: TDPSA: Consent provided by the user through the cookie banner. You can consult more information in the cookie policy that appears in the footer of this website.

Purpose: Personnel selection.

Data processed: Data provided through the application process.

Legal basis: TDPSA: Consent provided by the user. TDPSA: Pre-contractual and contractual actions.

With whom do we share your data?

In principle, we do not foresee the transfer of the personal data you provide to any third party, with Aqualia USA being the only entity that processes them in accordance with what is stated in this Policy. Notwithstanding the foregoing, your data may be communicated to different Public Bodies in compliance with the legal obligations applicable to Aqualia USA.

In addition, to carry out the processing purposes described, personal data may be transmitted to different service providers who will process your personal data under our responsibility and on our behalf. In such cases, we inform you that we ensure that the data processing carried out by the provider complies with current regulations and the conditions set forth in this document. In some cases, the use of these service providers, or the communication of data to any of the recipients, could entail an international data transfer outside the United States. If this situation occurs, Aqualia USA has ensured that such international transfer of personal data is carried out in accordance with one of the safeguard mechanisms established in current regulations and has assessed the risk prior to executing the international transfer. You can consult more information at [INSERT PRIVACY EMAIL]

How long will we keep your personal data?

Aqualia USA will retain your personal data for the time necessary to provide the requested service and/or to achieve the processing purpose pursued, provided that, to the extent applicable, you have not revoked your consent. Subsequently, your data will be retained for the legal periods applicable in each case, taking into account the type of data and the purpose of the processing. You can request more information about Aqualia USA's personal data retention periods at [INSERT PRIVACY EMAIL]

What security measures do we adopt?

Aqualia USA has adopted technical and organizational security measures that are necessary to prevent alteration, loss, misuse, processing, and unauthorized access or theft of data, depending on the state of technology, for all channels in which personal data may be processed, including the WEBSITE.

What are your rights regarding your personal data?

Aqualia USA informs you that you have the following rights regarding your personal data:

Access: You have the right to know if we are processing your data and, if so, what personal data of yours we are processing.

Correction: You have the right to correct inaccurate personal data.

Deletion: Under certain circumstances, you may request the deletion of your data.

Processing restriction: In certain circumstances, you will have the right to request that we limit the processing of your data, in which case we inform you that we will only retain them for the exercise or defense of claims.

Data portability: You will have the right to receive, in electronic format, the personal data you have provided to us and those generated during the contractual relationship, as well as to transmit them to another entity.

Objection: When the purpose of processing permits, you will have the right to object to the processing of your data, in which case we would stop processing them except for compelling legitimate reasons, or the exercise or defense of possible claims.

Revocation of consent when applicable.

You can exercise your rights of access, correction, portability, deletion, limitation or objection to processing, and withdraw consent given, by writing with the reference "Data Protection" to: Customer Management and Data Protection Department, 406 W. Grand Parkway S, Suite 260, Katy, Texas 77494, or by email under the same terms specified to [INSERT PRIVACY EMAIL], in which you must specify the right you are exercising and provide the necessary information to identify you. If we are unable to identify you, we may request additional information. If you consider that your personal data has not been processed in accordance with the regulations or you need more information about the processing, you can contact Aqualia USA's Data Protection Contact directly at: [INSERT PRIVACY EMAIL]. In addition, we inform you that you can file a complaint with the Texas Attorney General (www.texasattorneygeneral.gov).

Origin of data and duty of accuracy

When personal data is collected through the corresponding forms, it will be necessary for the user to provide at least those marked with an asterisk, since if this necessary data is not provided, Aqualia USA will not be able to manage the requested service.

If you provide an email address or other electronic means of communication, you authorize Aqualia USA to use this means as a means of communication with you exclusively to respond to your request and/or inquiry, as well as to process information related to the contract and inform you of any relevant changes that occur on the WEBSITE.

By providing personal data, you guarantee that it is true, accurate, complete, and up to date, being solely responsible for any damage or loss, direct or indirect, that may be caused as a result of non-compliance with this obligation. In the event that the data provided by a user belongs to a third party other than the one providing the data, the user must inform the third party of the aspects contained in this clause, as well as the information contained in the Additional Data Protection Information section, and have obtained their authorization to provide their personal data to Aqualia USA. You guarantee that you have obtained this personal data lawfully.

Likewise, in order to guarantee the duty of quality and updating of data, you must notify Aqualia USA of any changes that may occur in the data provided.

Changes to the privacy policy

To ensure that data protection guidelines always comply with current legal requirements, Aqualia USA reserves the right to make necessary changes to be at all times appropriate to current legislation.

Last updated: [INSERT DATE]