Privacy Policy
We have published this Privacy Policy for the purposes of giving you detailed information on how we process your personal data and protect both your privacy and the information that you provide.
If we make changes to this Privacy Policy at any time in the future, we will inform you via this website or in some other way so that you can learn of any new privacy conditions that are adopted.
The following section contains information, in question and answer form, about the conditions in which our company processes your personal data.
Who is responsible for processing your data?
- Name: ENERGREEN CAPITAL, S.L.
- Tax ID (CIF): B-85827939
- Postal address: Calle Gil Imón, 6-Local, 28005 de Madrid (Spain)
- Telephone: +34 915 570 956
- Email: energreen@energreencapital.es
Why do we process your personal data?
We process the personal data that you provide for the following purposes:
- Dealing with any requests for information, suggestions or claims that you may submit, contacting the person submitting the information, responding to your request or enquiry and providing any subsequent follow-up. Providing your data for this purpose is voluntary, though if you do not do so it will not be possible to respond to your request, enquiry or claim. The submission of your personal data for this purpose is therefore a necessary requirement if we are to attend to any such request.
- Managing relations with potential customers (in the event that a quote is requested) or with customers (in the event that our services are engaged) and invoicing and collecting payment for the services. The provision of data for this purpose is mandatory, and if they are not provided it will not be possible to send you a quote or comply with the relevant agreement.
For how long will we process your data?
We only retain your data for as long as they are required in order to achieve the purpose for which they were collected, comply with any legal obligations by which we may be bound, or attend to any potential liability that might result from achieving the purpose for which the data were gathered.
Data pertaining to potential customers who do not end up contracting our products or engaging our services will be deleted when it is confirmed that no agreement is to be entered into, while data gathered in order to manage relations with customers and invoice and collect payment for our services will be retained for this purpose for the entire time that the agreement in question remains in force. Once such relations have ended, where applicable, data may be retained for the length of time required under the legislation in force, and until any potential liability arising from the relations in question has expired.
Personal data processed in order to attend to applications, requests, queries or claims will be kept for the amount of time necessary in order to respond to such applications, requests, queries or claims and see them through to their complete conclusion. They will subsequently be saved for one year in the form of a correspondence record, unless you request that they be deleted earlier.
What authorisation do we have for processing your data?
The legitimate basis for processing your data when you request a quote will be the adoption of pre-contractual measures. In the event that you engage our services, your data will be processed for the purposes of managing that request, on the legal grounds that there is an existing contractual relationship.
The processing of personal data in order to respond to requests for information, applications, queries and claims is based on the consent given by the data subject in question. You may withdraw your consent at any time, though this will not affect the legality of any processing carried out prior to the withdrawal of your consent.
The categories of data processed are those that are requested in each case in the form or agreement in which you provide us with your data.
To whom will your data be forwarded?
Data will not be forwarded to third parties, except when it is necessary to pass them on due to the legislation in force, and when they are required to be forwarded to the financial institutions used to manage the collection of payments, in the event that you engage our services.
Even though this does not represent the forwarding of data, it is possible that third-party companies acting as our suppliers may have access to your data in order to provide their services. Any such data processors shall adhere to our instructions when gaining access to your data, and they may not use them for any other purpose. They shall maintain the strictest confidentiality, based on an agreement in which they undertake to comply with the requirements of the regulations in force with regard to the protection of personal data.
What are your rights when you provide us with your data?
Everyone has the right to obtain confirmation of whether or not we are processing personal data that relate to them. All interested parties have the right to access their personal data and to request the correction of any inaccurate data or, where applicable, ask for their data to be deleted when, among other reasons, their data are no longer required for the purposes for which they were collected.
Under the provisions of the General Data Protection Regulation, affected parties may request that the processing or portability of their data be restricted, in which case we will only save the data in question for the purposes of exercising or defending claims.
Under certain circumstances, and for reasons relating to their own individual situation, affected parties may object to the processing of their data. If you have granted your consent for a specific purpose, you have the right to withdraw it at any time, though this will not affect the legality of any processing carried out on the basis of consent granted prior to its withdrawal. In this case, we shall either no longer process the data in question or, where applicable, cease processing them for the specific purpose indicated, unless this is necessary for legitimate mandatory ends or for the defence of any potential claims.
In addition, the regulations that govern data protection allow you to object to decisions that are based solely on the automated processing of your data, where applicable.
The foregoing rights can be characterised as follows:
- They may be exercised free of charge, unless a request to exercise them is clearly groundless or excessive (e.g. they are exercised repeatedly), in which case, a fee may be charged that is proportional to the administrative costs incurred, or the Company may refuse to act.
- You may exercise your rights either directly or through a legal or voluntary representative.
- You must receive a response to your request within a period of one month, though this term may be extended by a further two months, depending on the complexity of the case and the number of requests received.
- We are under an obligation to inform you of the channels through which these rights may be exercised. These must be accessible and you may not be denied the exercise of a right purely because you have opted for an alternative channel. If a request is submitted electronically, information will be provided in this way whenever possible, unless you request that it be provided via other means.
- If a request is not processed for any reason, we will inform you of the reasons within a period of one month and of the possibility of submitting a claim to a Supervisory Authority.
For the purposes of exercising the rights described above, we here provide links to the forms to be used to request such rights in each case:
All the rights mentioned may be exercised using the contact details shown at the beginning of this clause.
In the event of any infringement of your rights, and particularly when you have been unable to exercise your rights in a satisfactory manner, you may submit a claim to the Spanish Data Protection Agency (contact details at www.aepd.es) or any other competent monitoring authority. You may also contact these authorities in order to obtain more information on the rights to which you are entitled.
How do we protect your personal data?
We are firmly committed to protecting the personal data that we process. We use measures, controls and procedures of a physical, organisational and technological nature that are reasonably reliable and effective, aimed at preserving the integrity and security of your data and guaranteeing your privacy.
In addition, all personnel who have access to personal data have been trained and are aware of their obligations with regard to the processing of such data.
In the case of the agreements that we sign with our suppliers, we include clauses in which we require them to adhere to a duty of secrecy with regard to any personal data to which they have had access as the result of their duties, and we have also implemented the technical and organisational security measures required to guarantee the confidentiality, integrity, availability and permanent resilience of our personal data processing systems and services.
All of these security measures are regularly reviewed in order to ensure their adequacy and effectiveness.
However, it is not possible to guarantee absolute security, and there is no security system that is entirely impenetrable. Therefore, in the event that any information that is subject to processing and held under our control is compromised as the result of a security breach, we will take suitable measures in order to investigate the incident in question, notify the Supervisory Authority and, where applicable, inform any users who may have been affected, so that they may take appropriate measures.
What is your responsibility as the data subject?
Any person who provides us with their personal data guarantees that they are over the age of 14 and that the data that they are providing are true, precise, complete and up-to-date.
To this end, the data subject is responsible for the veracity of the data and must ensure that they remain properly updated, in such a way that they reflect the data subject’s real situation. The data subject shall be liable for any false or inaccurate data that they may provide, and for any direct or indirect harm that may be caused in this regard.
If you provide data pertaining to third parties, you accept responsibility for granting them prior notice of the contents of Article 14 of the General Data Protection Regulation, under the conditions set out in the said Article.
