Privacy Policy
1. Data Controller
The data controller for user data is the company ENERVENT S.A. (hereinafter, “the Company” or “ENERVENT”), a company legally established under Spanish law with Tax ID No. A60900388, registered at Travessera de Gràcia, number 62 – 2º 5º, 08006 Barcelona, and listed in the Barcelona Commercial Registry under Volume 39428, Folio 190, Sheet B-143012.
2. Purpose of Data Processing
ENERVENT will process user data manually and/or automatically for the following purposes:
- Management of Wind Farm Visit Requests: To manage and coordinate requests to visit the wind farm, including communication of related information (confirmations, schedules, safety rules, etc.).
- Sending Commercial and Advertising Information about ENERVENT: To send commercial communications, newsletters, company news, future projects, promotions, or events related to ENERVENT and the renewable energy sector, provided the user has given explicit consent.
- Response to Inquiries and Requests for Information: To address and respond to inquiries, suggestions, or requests for information submitted by users through the contact form.
- Compliance with Legal Obligations: To comply with legal obligations derived from applicable legislation.
- Security Measures and Access Control: To ensure the safety of facilities, employees, and visitors, including access control to the wind farm and visitor log management.
- Statistical Analysis and Service Improvement: To conduct statistical studies on received inquiries, requests, and participations to improve services and user experience.
3. Data Retention
The personal data provided will be retained for as long as necessary to fulfill the purposes for which they were collected. Subsequently, they will be duly blocked for the period required to address potential legal liabilities, including the statute of limitations for legal actions that may arise, in accordance with the applicable legislation in each jurisdiction.
Once these periods have elapsed, the data will be securely and permanently deleted.
4. Legal Basis for Data Processing
The legal basis for processing user data is based on:
- User Consent: For managing requests to visit the wind farm and responding to inquiries, as well as for sending commercial and advertising communications, provided the user has given their explicit consent.
- Contract Execution: In cases where a contract is formalized.
- Compliance with Legal Obligations: For processing necessary to fulfill the legal obligations applicable to ENERVENT.
- Legitimate Interest: For the security of facilities and statistical analysis, provided that the fundamental rights and freedoms of the user do not prevail.
5. Recipients
ENERVENT will not transfer personal data to third parties except where there is a legal obligation to do so. If necessary, data may be shared with:
- Competent Public Authorities: In cases provided for by law.
- Service Providers: Acting as data processors, with whom a corresponding data processing agreement has been formalized.
- In the event of international data transfers, these will be carried out with appropriate guarantees in accordance with the General Data Protection Regulation (GDPR) and other applicable regulations.
6. User Rights
Users may exercise the following rights provided by the GDPR regarding the processing of their personal data:<
- Right of Access: To request information on whether personal data concerning them is being processed.
- Right of Rectification: To request correction of inaccurate or incomplete data.
- Right of Erasure: To request deletion of their data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
- Right to Restrict Processing: To request the limitation of their data processing under certain circumstances.
- Right to Object: To object to the processing of their data for reasons related to their particular situation.
- Right to Data Portability: To receive the personal data concerning them that they have provided in a structured, commonly used, and machine-readable format, and to transmit it to another data controller.
- To exercise these rights, users can send a written communication to ENERVENT S.A., Travessera de Gràcia, number 62 – 2º 5º, 08006 Barcelona, or via email: enervent@gmail.com , attaching a copy of their national ID, passport, or other valid document for identification, along with any other relevant information to resolve their request.
- Users are also informed of their right to file a complaint with the Spanish Data Protection Agency (AEPD) if they believe that the processing of their personal data violates applicable regulations.
7. Security Measures
ENERVENT has implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, taking into account the state of technology, implementation costs, and the nature, scope, context, and purposes of processing, as well as the varying likelihood and severity of risks to the rights and freedoms of natural persons.
8. Scope of Application
The structure of processing, equipment, and information systems intended to comply with current data protection legislation will apply to all ENERVENT’s temporary or permanent processing operations that include personal data, as well as any equipment or information system processing such data.
9. Confidentiality and Professional Secrecy
All data collected in private communications between ENERVENT and users will be treated with absolute confidentiality. ENERVENT undertakes to maintain the confidentiality of personal data, to safeguard it, and to adopt all necessary measures to prevent alteration, loss, processing, or unauthorized access, in accordance with applicable regulations.
Additionally, any information exchanged between the parties, agreed upon as confidential, or inherently confidential by its nature will be treated as such.
10. Changes to the Privacy Policy
ENERVENT reserves the right to modify its privacy policy to adapt it to legislative or jurisprudential developments, as well as changes derived from existing codes of conduct or strategic corporate decisions, with effect from the date of publication of the modification on the website enerventperello.com . When changes are particularly significant, users will be notified individually.
11. User’s Communication of Data
Before providing personal data of third parties to the website, users must obtain their prior explicit consent and inform them of the terms contained in this Privacy Policy. Users agree to hold ENERVENT harmless from any potential claims, fines, or penalties arising from user noncompliance.
12. Minors’ Data
Minors may not use the services available through the website without prior authorization from their parents, guardians, or legal representatives, who will be solely responsible for all actions taken through the website by the minors in their care, including filling out forms with the minors’ personal data and, where applicable, checking the accompanying boxes.