PERSONAL DATA PROTECTION INFORMATION - WEB SITE USERS

Who is the Data Controller?

Capital Energy, S.L.U

Address: Torre Serrano, C/ Marqués de Villamagna 3, Planta 5, 28001, Madrid.

E-mail: derechosinteresados@capitalenergy.com

Purposes

• Contact Form: to look after the request for information made using the contact form.

• Cookies: maintain the registered user's login, provide statistics relating to the use of the Web Site, location of our offices and anti-spam systems (captcha).

• Sending communications that are commercial by nature which have expressly be requested.

Legitimation and retention

The basis for the data processing is the consent given by the data subject when ticking the consent box(es).

The fields in the contact form marked with an asterisk (*) are compulsory fields needed to manage its purpose. If they are not completed, it shall not be possible to process your request.

See our cookies policy to get information about the cookies needed for the web site to function.

• Contact data shall be retained during the time needed to look after your enquiry unless their deletion is requested.

• Data relating to expressly requested commercial mailings shall be retained until their deletion is requested.

• See our Cookies Policy to identify how long each cookie lasts.

Consignees for assignments and international transfers

• It is not expected to disclose your data to third parties.

• It is possible that international data transfers are made to countries outside the European Economic Area, in which case the transfer shall be based on an adequacy decision covered by the Agency or with adequate guarantees in accordance with Regulation (EU) 2016/679. You can see the list of these Service Providers by sending an e-mail to dpo@capitalenergy.com.

Rights of the data subjects

You can exercise your rights of access, rectification, deletion, portability and limitation or objection by writing to derechosinteresados@capitalenergy.com.

Data subjects have the right to withdraw the consent given.

Data subjects have the right to lodge a claim with the Regulatory Authority (Spanish Data Protection Agency: www.aepd.es).

 

PERSONAL DATA PROTECTION INFORMATION - COMPLAINTS CHANNEL

Who is the data processor?

Capital Energy, S.L.U.

Address: Torre Serrano, C/ Marqués de Villamagna 3, Planta 5, 28001, Madrid.

E-mail: derechosinteresados@capitalenergy.com

Purposes

To manage complaints and queries received via the complaints channel.

Legitimation and retention

The basis for processing the data is the consent of the data subject when voluntarily sending the information, along with the legitimate interest of the Company in investigating events that may contravene criminal law, or other applicable legislation. In the event that all the data required are not provided it shall not be possible to process the matter correctly.

The data of the complainant, offender or third parties and other information shall be retained during the time absolutely necessary to decide on the suitability of commencing an investigation into the facts reported. In the event that the complaint is filed away and not progressed, the complaint and associated information shall be anonymised, but the obligation to block data shall not apply. Three months after the data were communicated, the information on the complaints system shall be deleted, unless the purpose of retaining it is for the legal person to leave proof that the crime prevention model works. They shall be solely held by persons having internal control and compliance duties, or, if appropriate, external third parties acting as data processors.

Consignees for assignments and international transfers

• The identity of the claimant shall not be disclosed to third parties, apart from the relevant people involved in the investigation or judicial proceedings initiated as a result.

• The facts that may constitute a criminal or administrative offence, including personal data, shall be reported to the relevant authorities, whether in Spain or abroad. The latter would involve an international data transfer made on the basis of grounds of public interest and/or to make, serve or defend claims. Furthermore, personal data may be communicated to Group companies in the event that this is necessary for the investigation, processing and/or resolution. You can find out which companies are in the corporate group Capital Energy belongs to by sending an e-mail to info@capitalenergy.com

Rights of the data subjects

You can exercise your rights of access, rectification, deletion, portability and limitation or objection by writing to derechosinteresados@capitalenergy.com.

Data subjects have the right to withdraw the consent given.

Data subjects have the right to lodge a claim with the Regulatory Authority (Spanish Data Protection Agency: www.aepd.es).

 

The user shall be solely liable for the accuracy of the data provided.

Capital Energy takes the technical and organisational steps needed to ensure the security of personal data and to prevent their alteration, loss and unauthorised processing or access, taking into account the state of technology, the nature of the data and the risks to which they are exposed.

The Web Site has an SSL (Secure Socket Layer) Certificate, in order to guarantee security when transferring data between the user’s browser and our Web Site.

The secure server makes a connection in such a way that the information is sent encrypted and is only intelligible to the user’s device and that of the Web Site.

To verify that you are in a secure environment, the Web Site address should begin with https:// or a padlock icon should appear in your browser’s address bar. You can also verify the SSL certificate by checking the Web Site properties in your browser. To do so, you should consult its attributes.

Any change made to the Privacy Policy shall be shown in a timely manner, and Capital Energy may add to, amend or delete the privacy policy when it considers this to be necessary. The policies shall never be amended to make them less effective where the protection of previously stored users’ personal data are concerned, unless there is prior consent from the data subject.

 

Last update: 17th November 2020