legales-hero

Data Protection and Privacy Policy

GRENERGY RENOVABLES S.A, hereinafter the responsible for this Website and in accordance with the provisions of current legislation on the protection of personal data, the GDPR (EU) 2016/679, of 27 April, and the LOPD 3/2018, of 5 December, and with the provisions of the LSSI-CE 34/2002, of 11 June, has implemented policies, means and procedures to ensure and protect the privacy of the personal data of its USERS.

If you have any questions or need additional information, you can contact us at the email address canald@grenergy.eu as well as see detailed information in our Data Protection Policy.

Identification of the data controller

In accordance with the provisions of current legislation, we inform you that the personal data you provide will be processed as Data Controller by: GRENERGY RENOVABLES S.A , with C.I.F.: A85130821, and address at C/ RAFAEL BOTÍ 26, 3ª planta C.P.: 28023 – MADRID (MADRID). In case you need additional information, you can contact us at the email address canald@grenergy.eu

Purposes of the processing of personal data

GRENERGY RENOVABLES S.A., will process the data provided by the USER for the following purposes:

  1. Manage and deal with the contact requests made by the USER, either through the forms, email addresses or telephone numbers provided for this purpose on this Website, or any other form of contact indicated.
  2. To evaluate and manage the application for job vacancies with the insertion of personal data and curriculum through the forms provided for this purpose on this Website, and if necessary, to carry out the necessary actions for the selection and recruitment of personnel.
  3. To periodically send communications, information, newsletters, and/or electronic advertising related to the contracted services sector and of added value for end USERS, unless otherwise indicated or unless the USER objects or revokes their consent.
  4. To produce anonymous statistical reports regarding access habits, preferences and USER behavior on this Website. All information collected is aggregated.
  5. Fulfilling legally established obligations, as well as verifying compliance with contractual obligations, including fraud prevention.

No profiling, automated decision-making and/or applied logic is envisaged.

Legal basis for processing

GRENERGY RENOVABLES S.A. will process your data on the following legitimate bases:

The sending of communications, information, newsletters, and/or electronic advertising (processing of data for marketing purposes) will be based on legitimate interest based on the exception provided for in Article 21.2 of the Information Society Services Act and the provisions of recital 47 of the General Data Protection Regulation, as well as, where appropriate, on the explicit consent of the USER. The legitimate interest is based on the performance of direct marketing in order to offer the USER products and services that may be of interest to him/her and thus gain his/her loyalty. However, the USER has the right to object to this processing at the time he/she provides his/her data and at any time thereafter.

When the USER is not previously provided with services by GRENERGY RENOVABLES S.A. and there is no previous contractual or pre-contractual relationship, the data will be processed on the basis of the consent provided by the USER.

Also, when he/she has given his/her consent to do so, the data will be processed in order to manage and respond to requests for contact carried out by the USER, and to follow up on his/her case. In the event that the USER withdraws his/her consent, the consultation, request or petition will not be processed.

In the event that the USER submits his/her CV or registers for the various job offers, his/her data will be processed on the basis of his/her explicit consent.

Processing may be carried out on the basis of legitimate interests pursued by the Data Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, as set out in Article 6, paragraph 1, letter f). This legitimate interest is based on being able to offer the USERS of GRENERGY RENOVABLES S.A. the highest quality and best possible experience. However, the USER has the right to object to this processing at any time.

Processing may also be carried out on the basis of compliance with legally established obligations.

The USER shall withdraw his/her consent at any time in the manner indicated in the section on the Rights of data subjects. However, in this case it may not be possible to provide the service.

The consents obtained for the aforementioned purposes are independent, so the USER may revoke only one of them without affecting the others.

Categories of personal data we process

The personal data processed through this Website are provided directly by the USER through the forms provided for this purpose or through the communication channels detailed in each of the sections of the Website.

  1. Name and surname (identification and contact details).
  2. Email address and telephone number (identification and contact details).
  3. Curriculum Vitae (academic and professional data).
  4. IP (browsing data).
  5. User-Agent (browsing data).
  6. Any other data provided directly by the USER in communications through the channels provided for this purpose.

The categories of recipients of the personal data of the data subjects are: Group companies.

Need to provide personal data

The USER may provide additional data through the contact form or the job vacancy in question.

The application to the various job vacancies offered and the contact requests made by the USER on this Website imply the need to provide, at least, the data requested on the form identified as mandatory, which is the data marked with an asterisk (*). If it is not provided, it will not be possible to provide the service for which the data is collected.

Duration of the processing
  1. Regarding the data provided in application of the various job offers offered on this Website, it will be kept for the duration of the selection process until the position offered is filled.
  2. Regarding the data provided in the completion of contact forms, or any other form of contact, it will be stored while the query is resolved, and once completed, the information will be kept blocked for the period of limitation of the legal actions derived from the aforementioned request, unless the USER requests its erasure before, without affecting the lawfulness of processing based on consent before its withdrawal. In the event that the USER is within a contracting process or the contractual relationship with GRENERGY RENOVABLES S.A., the data relating to his/her query will be retained for the duration of the contract.
  3. Regarding electronic commercial communications, the data will be processed until the USER opposes the sending of these or revokes their consent.
  4. To make anonymous statistical reports on the access habits, preferences and behaviour of users on this Website, the information will be used in aggregate form for the preparation of reports, statistics and analyses, for the period necessary to process and prepare the aforementioned reports, statistics and/or analyses, and, once this period has expired, the information will be kept blocked for the period of limitation of the legal actions derived from the aforementioned request.
  5. The data provided to comply with the obligations derived from the services offered by ECIJA will be kept for the legally established periods.

In any case, the data provided will be kept for as long as they are necessary for the provision of the services requested and, subsequently, during the legally established periods for posible legal actions derived from the services provided, at the disposal of Judges and Courts.

Data Communication

The personal data of the USERS, together with those arising as a result of accessing, using or contracting the service, may only be transferred in the manner and for the purpose established and expressly authorized by the USERS.

The Data Controller may transfer the data of the data subject to the competent Public Administrations and Public Bodies, in accordance with the legislation in force, on the basis of compliance with a legal obligation.

Regarding international transfers, it is envisaged that international transfers are made with the explicit consent of the data subject.

Data may be communicated to other offices of GRENERGY RENOVABLES S.A., in order to attend to the requests, manage the services contracted and inform them about services related to professional activity, for administrative and management purposes of GRENERGY RENOVABLES S.A., based on the legitimate interest recognised in Article 48 of the General Data Protection Regulation. The aforementioned recipients may be located within or outside the European Economic Area, depending on the geographical location of the offices, and in the latter case, international data transfers are duly legitimised. Likewise, these data may be processed in these offices in response to the requests made, the contractual relationship mantained or participation in selection processes.

Rights of the data subjects

The data subject has the right to request access to, rectification, erasure or restriction of processing, to object to processing, withdraw consents and to data portability.

In order to exercise the aforementioned rights, the data subject shall send an e-mail to *MAIL* with the subject “Personal Data”, providing proof of identity.

Likewise, the data subject has the right to lodge a complaint with a Supervisory Authority, the Spanish Data Protection Agency (AEPD), at the address Calle de Jorge Juan, 6, 28001, Madrid, when the interested party considers that the rights recognised by the applicable data protection regulations have been infringed.

Responsibility of the USER

The USER shall be responsible for ensuring that the data provided to GRENERGY RENOVABLES S.A. are true, accurate, complete and kept up to date. To this effect, the USER shall be responsible for the veracity of all the data he/she communicates and shall keep the information provided duly updated, in such a way that it corresponds to his/her real situation.

Likewise, he/she shall be liable for any false or inaccurate information provided and for any damages, direct or indirect, that this may cause to GRENERGY RENOVABLES S.A. or third parties.

In the event that the USER provides third party data, he/she declares that he/she has a legitimate reason to do so and undertakes to provide the information contained in this Privacy policy, exempting GRENERGY RENOVABLES S.A. from any liability in this regard. However, GRENERGY RENOVABLES S.A. may carry out verifications to verify this fact, adopting the corresponding due diligence measures, in accordance with data protection regulations.

Anti-spam policy

Persons who receive any of the communications, information, newsletters and / or electronic advertising from GRENERGY RENOVABLES S.A, receive them for the following reasons:

  • By online registration on this Website.
  • By online registration on the Website of collaborators.
  • For requesting information about our products and services.
  • For having provided his/her information to one of our Collaborators or Employees.
  • For offline registration by filling out forms, newsletters, applications, etc., which are offered at fairs, offices, or collaborations, among others, and which are archived for further verification for a period of 5 years.

Our communications do not want to reach any person who does not want it, therefore, and in order to correct the situation that can sometimes occur, as a person can register another without his/her consent, we have incorporated into this subscription system a filter based on a “no contact list”, which prevents a commercial communication from being sent to any email address included in it.

Therefore, if you do not want to receive our commercial communications and prevent anyone from being able to register you against your will, please contact us through the method established for each processing activity and we will include in the “no contact list” the address from which the cancellation of the processing is requested.

If you have any problem to do it electronically, please do not hesitate to contact us at our contact telephone number during office hours, where a person will attend you personally and will carry out the procedure.

Security measures

The data provided will be incorporated into processing activities and will be treated with absolute confidentiality.

The Data Controller, as well as those involved in any phase of the processing and/or the entities to whom the data have been communicated – by virtue of the authorization given by the USER – are obliged to observe professional secrecy and to adopt the levels of protection and the necessary technical and organisational measures within their reach that guarantee the security of the personal data, avoiding, as far as possible, unauthorised access, unlawful modifications, theft and/or loss of the data.

However, USERS are warned and informed that such technical measures are not infallible or impregnable, and for this reason, the Data Controller cannot be held responsible for such practices or their consequences.

Updating of the Privacy Policy

Finally, we inform you that the Data Controller reserves the right to modify this data protection, privacy and cookies policy in order to adapt it to new legislation or jurisprudence, as well as to changes or industry practices, although it will be notified, with due notice, of the changes to be introduced and the time when they will begin to take full effect.

Last updated: July 2023.