We want you to know, by means of this notice, which are the criteria followed by Avalon Renovables, S.L. (hereinafter, the "Company").Company") with respect to the use of the data you provide us, or that we have collected through third parties (the "Privacy Policy").
Our data protection policy is constructed and communicated in accordance with the applicable regulations., most notably in relation to EU Regulation 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the "GDPR").
This policy may change over time due to possible legislative changes. If any changes occur, we will keep you informed through this page.
The Company has adopted the necessary technical and organizational measures to guarantee the confidentiality and security of personal data, avoiding its alteration, loss, treatment or unauthorized access in accordance with the provisions of the applicable regulations, and complying, in any case, with the level of security appropriate to the level of data processed.
The Company handles data of individuals in the performance of a professional position or function, as well as personal data in the private sphere. Both categories have been taken into account when establishing this Privacy Policy.
What is personal data?
Personal data refers to any information or data that can identify you directly (e.g. your name or surname) or indirectly (e.g. your national identity card or ID card) without disproportionate effort. Personal Data may be considered as information relating to a natural person, such as e-mail address, private postal addresses, cell phone number, user names, etc.
Who is responsible?
The data controller is Avalon Renovables, S.L., with NIF B-88227202, domiciled in Madrid, Paseo de la Castellana, 259D, 9th floor, 28046, e-mail legal@avalonrenovables.com.
Purpose of Processing
For what purposes do we process your personal data?
We process the information provided by the interested parties for the following purposes:
- Contractual purposes: to facilitate the management of the provision of the agreed services, to maintain the commercial relationship, as well as any other service that may be contracted subsequently.
- If you give your consent, your data may be processed for marketing purposes, for sending commercial information, newslettersinvitations to events, market research or promotions on products and services of the Company or of companies related to the renewable energy, energy efficiency, sustainable mobility, photovoltaic solutions and green hydrogen sectors. The updated list of related companies is available upon request through the contact addresses provided in this Privacy Policy.
- Purposes based on legitimate interest, under the protection of the provisions of Article 19 of the Organic Law 3/2018 of December 5, 2018, on the Protection of Personal Data and guarantee of digital rights (hereinafter, the "LOPD") and in Article 6.1 f) of the GDPR, with regard to contact data, function or positions held by natural persons providing services in a legal person, referring only to the data necessary for their location and to maintain relations of any kind with the legal person in which the affected person provides services.
- Purposes covered by Article 6.1 c) of the RGPD and Article 8.1 of the LOPD, when the processing is necessary for compliance with a legal obligation required of the controller, imposed by a rule of European Union law or a rule having the force of law, which may determine the general conditions of the processing and the types of data processed, as well as the transfers that may be made as a result of compliance with the legal obligation.
How long will we keep your data?
The personal data provided will be kept
- as long as required by the business relationship,
- as long as its deletion is not requested by the interested party.
being blocked when the first of the two above-mentioned events occurs. From that moment, it will be at the exclusive disposal of Judges and Courts, the Public Prosecutor's Office or the competent Public Administrations, in particular the data protection authorities, for the attention of possible liabilities arising from the processing, during the prescription period of these. Once the aforementioned period has expired, the data will be deleted.
Is profiling performed?
Profiling is not performed.
To which recipients are your data communicated?
The data is communicated to our partners who perform services as data processors. There are no international data transfers.
Lawful Treatment
What is the legitimacy for the processing of your data?
The legal basis for the processing of your data is based on:
- In the contractual relationship and execution of the contract entered into with us.
- In the event that you have expressly given your consent, the legal basis is such consent.
- The processing of personal data, in order to comply with the obligations established by the regulations for the prevention of money laundering is covered by the provisions of Article 8.1 of the LOPD, and Article 6.1 c) of the RGPD, not requiring the consent of the person concerned. Nor will consent be required for data communications made under the protection of such regulations for the prevention of money laundering, being also covered by Article 8.1 of the LOPD.
- Covered by the concept of legitimate interest, established in Recital 47 and Article 6.1 f) of the RGPD, after weighing the rights and freedoms of data subjects and the interests of the Company, based on the following criteria:
- The interests or fundamental rights and freedoms of the data subjects are the general ones that require the protection of personal data. In addition, no data of minors or data of special categories are included.
- The risk to the interests or fundamental rights and freedoms of data subjects is minor or non-existent, due to the information processed and the technical and organizational measures adopted by the Company.
- The obligation of its customers who use your data to incorporate such information in the advertising communications they send to users.
- This information is published on the company's website, and
- An adequate and simple management, processing and information process has been created, in relation to the exercise by the interested parties of their GDPR rights.
Rights
What are your rights?
- Any person has the right to obtain confirmation as to whether or not the Company is processing personal data concerning them.
- Interested persons have the right to access their personal data, as well as to request the rectification or rectification of inaccurate data or, where appropriate, to request its rectification or deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
- In certain circumstances provided for in Article 18 of the GDPR, data subjects may request the restriction of the use of the data limitation in which case we will only keep the data for the exercise or defense of claims.
- Interested parties may oppose object to the processing of their data for marketing purposes, including profiling. The Company will stop processing the data, except for compelling legitimate reasons or the exercise or defense of possible claims.
- By virtue of the right to portabilitydata subjects have the right to obtain the personal data concerning them in a structured, commonly used and machine-readable format and to transmit it to another data controller.
- Interested parties are entitled to not be subject to a decision based on automated processing alone that produces legal effects on them or significantly affects them.
How can rights be exercised?
- by writing to AVALON RENOVABLES, S.L., Paseo de la Castellana, 259D9, 28046 Madrid, Spain.
- by e-mail to the following address legal@avalonrenovables.com
What complaint procedures are available?
If you believe that the Company has not correctly resolved your request, you may apply to the Spanish Data Protection Agency, whose details can be found at www.aepd.es
Data Categories
What categories of data do we process?
- Identifying data.
- Information about your professional function or activity.
- Economic and financial information.
- Labor and employee information.
- Information for the management of legal proceedings and legal matters in general.
No special categories of Articles 9 and 10 of the GDPR are processed. In relation to such data, when used, the Company complies with the legal requirements and explicit consent is collected.
Personal data is treated confidentially in accordance with the privacy and security policies established by the Company.
The data received or collected are those necessary to fulfill the indicated purposes.
Source
How did we obtain your data?
The personal data we process comes from the information you provide when you contract with the Company, access our website, or establish any type of relationship with us, directly or indirectly.
