At Alfanar Energía España, S.L.U. (hereinafter, “Alfanar”), we are aware of the importance of protecting your personal information and are committed to safeguarding your privacy, processing your personal data responsibly and in accordance with applicable data protection laws, specifically Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (LOPD) (hereinafter, collectively, the “Applicable Regulations”).
In compliance with the provisions of the Applicable Regulations, by merely using or browsing this website (www.alfanarenergia.com, hereinafter the “Website”), you will be assigned the status of “User” and must carefully read this Privacy Policy, without prejudice to the need for your consent, when requested, at the time of collection of personal data and/or, where applicable, at the time of cookie installation, in accordance with the Cookie Policy.
This Privacy Policy aims to regulate all aspects related to the processing of data of the different Users who browse and/or provide their personal data through the various forms available on the Website.
The company responsible for processing your data is:
The personal data collected from the User are processed in compliance with the principle of purpose limitation. Any processing carried out will be justified by specific, explicit, and legitimate purposes, and such data may not subsequently be processed in a manner incompatible with those purposes. Additionally, the processing of personal data always has a legal basis that legitimizes the processing.
The personal data collected from the User will be processed in compliance with the principle of storage limitation, meaning that personal data will be retained for the strictly necessary time to fulfill the purpose for which they were collected and to determine any potential liabilities arising from said purpose and the processing of the data, as well as for the time required by the Applicable Regulations.
In this regard, the data provided by the User will be processed for the following purposes, legal bases, and retention periods:
| PURPOSE | LEGAL BASIS | RETENTION PERIOD |
|---|---|---|
| Enable the functioning of the Website, allowing access to the information and content provided therein. | User consent (Article 6.1.a) GDPR) and, where applicable, fulfillment of legitimate interest (Article 6.1.f) GDPR), our own or that of third parties, associated with the proper management, maintenance, development, and evolution of the platform, tools, network, and information systems, ensuring their correct operation, functionalities, access to content and services, as well as the overall security of the aforementioned aspects. | Generally, data will be retained for these purposes for the minimum and necessary time to ensure proper browsing and use of our Website and the content provided through it that you access. |
| Address requests or inquiries sent through the contact form and/or any other contact method. | User consent (Article 6.1.a) GDPR) and, where applicable, execution of pre-contractual measures or the contractual relationship between the parties, as provided in Article 6.1.b) GDPR. | The information collected through the form will be used for the time necessary to address the request submitted by the User. In the case of CVs submitted, and provided the User authorizes it, we will retain them for a maximum of 1 year. Subsequently, the data will be deleted, unless the nature of the inquiry or request requires the retention of your information for other purposes, in which case we will inform you about such processing purpose, retention period, and data recipients, as applicable. |
When the legal basis for processing personal data is the User's consent, the User has the right to withdraw such consent at any time, easily and free of charge, by writing to us at dataprotection_spain@alfanar.com.
In any case, regarding the retention period of the data, and without prejudice to the above, the User is also informed that:
In accordance with the Applicable Regulations, concerning the proper processing of personal data by Alfanar, this entity may also retain the information securely for three years from its collection, as this period constitutes the maximum statute of limitations for offenses in this area.
Regarding the retention period of cookies, the User is advised to consult the section on temporality in our Cookie Policy.
Generally, when personal data are no longer necessary for the processing purposes for which they were collected, they will be blocked, remaining available only to the competent authorities for the possible determination of legal liabilities during the processing, always in accordance with applicable regulations, and may not be used for purposes other than these. After the corresponding legal periods in case of blocking, such personal data will be deleted as provided by the Applicable Regulations, or, if applicable, securely anonymized by Alfanar so that they no longer identify a specific individual and, therefore, cease to be considered personal data.
At Alfanar, we comply with the principle of data minimization in the processing of your personal data, meaning that only those User data that are adequate, relevant, and limited to what is necessary for the purposes described are processed.
The personal data that Alfanar may collect are those provided directly by the User through the contact form enabled on the Website or other communication channels (email, social media, etc.), and include, by way of example but not limitation, the following:
Failure to provide personal data may result in the User being unable to browse the Website correctly and Alfanar being unable to process the specific request or inquiry.
Similarly, when browsing our Website, you should be aware of the cookies installed on your terminal or device, as this involves the processing of your personal data according to the type of cookies informed and their specific purposes. You can find this information in our Cookie Policy.
All information provided by the User must be truthful and accurate. To this end, the User guarantees the authenticity of all data provided as a result of completing the forms and/or corresponding requests. In any case, the User will be solely responsible for any false or inaccurate statements made and for any damages caused to Alfanar and/or third parties.
Anyone providing data through the forms on this Website and accepting their processing declares to be over fourteen (14) years of age, and access and use of the Website by minors under this age is prohibited. If at any time Alfanar, as the data controller, detects that a minor under fourteen (14) years of age has provided personal data, it will proceed to delete such data.
We inform the User that the information collected through the Website may be shared with the following recipients:
In this regard, we inform you that such international data transfer is carried out in accordance with the Applicable Regulations and with adequate data protection safeguards.
The Applicable Regulations allow the User to exercise the following rights before Alfanar, where applicable to each of the indicated processing activities:
| USER RIGHTS | WHAT DOES IT ENTAIL? |
|---|---|
| Right to withdraw granted consent. Article 7.3 GDPR |
Right to withdraw consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. |
| Right to information. Articles 12 to 14 GDPR |
Right to be provided by Alfanar with appropriate information, both at the time your personal data are collected (whether obtained from you or a third party) and at any subsequent time regarding the processing of your personal data. |
| Right to lodge a complaint with the competent supervisory authority (AEPD). Articles 13 and 14 GDPR |
Entails the possibility of filing a complaint with the supervisory authority if you believe your right to personal data protection has been violated. |
| Right of access. Article 15 GDPR |
Right to obtain confirmation from Alfanar as to whether or not your personal data are being processed, and if so, the right to access basic information about such processing, as well as to obtain a copy of the personal data being processed. |
| Right to rectification. Articles 16 and 19 GDPR |
Right to obtain from Alfanar without undue delay the rectification of inaccurate personal data. |
| Right to erasure ("right to be forgotten"). Articles 17 and 19 GDPR |
Right to obtain from Alfanar without undue delay the erasure of your personal data when the legally established circumstances apply. |
| Right to restriction of processing. Articles 18 and 19 GDPR |
Right to obtain from Alfanar the restriction of processing of your data when the legally established conditions are met. |
| Right to data portability. Article 20 GDPR |
Right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and to transmit them to another controller where technically feasible. |
| Right to object. Article 21 GDPR |
Right to object at any time to the processing of your personal data, in which case Alfanar will cease processing them, except for legitimate reasons (such as the exercise or defense against potential claims). |
| Right not to be subject to a decision based solely on automated processing (including profiling). Article 22 GDPR |
Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. |
To exercise your rights, the User may contact Alfanar by sending an email to dataprotection_spain@alfanar.com or by written communication addressed to the postal address Calle Velázquez 34, Planta 2, 28001, Madrid, indicating the subject “Data Protection” and attaching a copy of your National Identity Document.
If the User does not see their right satisfied or considers that the data processing does not comply with applicable regulations, they may file a complaint with the supervisory authority, in this case, the Spanish Data Protection Agency (www.aepd.es).
Considering the nature, scope, context, and purposes of processing, as well as the risks of varying likelihood and severity to your rights and freedoms, Alfanar applies (and will apply) appropriate technical and organizational measures to ensure the proper security and protection of the User's personal data, adhering to privacy-by-design and privacy-by-default criteria, as well as implementing a concurrent risk-based approach system that will be reviewed and updated by Alfanar when necessary.
Alfanar reserves the right to make changes to the terms of its Privacy Policy at any time without the obligation to notify or inform the User in advance. When significant changes are made to this Privacy Policy, they will be communicated in the manner that is reasonably and proportionally possible for Alfanar, for example, and in addition to other possible means or channels available to Alfanar, through the Website. Therefore, we recommend that the User periodically review the legal texts governing the Website to stay informed of any updates.
Last updated: September 2024