Who is responsible for the processing of your data?

Company name: Cegasa Energía, S.L.U
Tax ID Code: B-01574896
Address: C/Marie Curie, 1 - 01510 Miñano - Vitoria-Gasteiz (Araba) ESPAÑA
Email: info@cegasa.com
Company registered in the Mercantile Register of Álava, Volume 1674, , Book 0, Sheet 114, Page VI-17409, Inscrip 1

With this document, we want to inform you about why we collect your personal data, what we do with it, what your rights are and how you can exercise them, complying with Organic Law 15/1999 of 13th December, Protection of Personal Data, and the European Union General Data Protection Regulation

Customer, service supplier related data

If you have provided your data as a contact person representing a customer or supplier or as a private businessperson, either as a customer or supplier of CEGASA, please be informed that CEGASA shall use the data exclusively for maintaining contractual relationships and shall not share them with third parties, unless such release of data is necessary in compliance with contractual relationships with the owner of the data or their company. The data provided shall be kept for the duration of the contractual relationship or for the period necessary to comply with legal obligations. In addition, you are informed that, as a customer or supplier of CEGASA, CEGASA may send you commercial information through the means that you have provided, including email, based on Legitimate Interest governed by the General Data Protection Regulation.

In addition, you are also informed that CEGASA may use your personal data for training and parameterisation purposes, whenever the service provided to the customer requires such.

Applicant related data

If you have provided CEGASA with your data to apply to be part of it, please be informed that CEGASA shall use the data exclusively to manage your application for any of vacancies that may exist and shall not share them with third parties. The data provided shall be kept for a maximum period of two years. The legitimising basis is your consent by the submission of your curriculum.

Marketing and business mail

Please be informed that CEGASA uses contact information of customers or potential customers to send information that may be considered commercial. Accordingly, recipients of this information may be customers, potential customers whom CEGASA has previously contacted, people who contact CEGASA through the contact form, as well as those who have subscribed through the corresponding form. In the event that a data owner is receiving this type of information, it shall be due to one of the cases listed. Any information that CEGASA sends out is considered to be of interest to the recipient and solely related to CEGASA products and services in which the recipient has expressed some interest.

The legal grounds for the lawfulness of processing data for this purpose are none other than the legitimate interests of CEGASA. As this deals with contact information of individuals, this legitimate interest is weighted by informing the recipient of the possibility to unsubscribe from this mail, so the purpose pursued by CEGASA shall be solely business related, sending information related to CEGASA products and services for which the recipient has previously expressed interest.

An objection to the processing of data for the purposes indicated may be lodged at any time by sending an email to info@cegasa.com

CEGASA shall hold your data for the duration of the business or contractual relationship it has with you, unless you inform CEGASA that you do not wish to receive commercial information.

Contact and subscription forms

Personal data provided through existing forms shall be used to address any queries raised in the form itself and shall not be shared with third parties, unless the query requires such communication and then exclusively for that purpose.

The legitimising basis of such processing is your consent when filling out the form.

In addition, please be informed that CEGASA shall hold your personal data for as long as you do not object to it being processed.

As mentioned previously, these data may be used to send commercial information based on legitimate interest.

Training related data

If you have provided your data in order to participate in any training course given by CEGASA, please be informed that CEGASA shall use the data exclusively for maintaining contractual relationships and shall not share them with third parties, unless such release of data is necessary in compliance with contractual relationships with the owner of the data or their company. The data provided shall be kept for the duration of the contractual relationship or for the period necessary to comply with legal obligations. In addition, you are also informed that CEGASA may send you commercial information through the means that you have provided, including email, based on Legitimate Interest governed by the General Data Protection Regulation.

If you have completed any type of survey and provided your identity, please be informed that your data shall only be used to assess the training provided and the trainers, with the possibility that CEGASA may contact you in order to clarify any type of circumstance arising from the completion of the survey.

Video surveillance and control related data

CEGASA has video surveillance cameras installed along with the appropriate notice signs. The data obtained via the cameras are stored for a maximum period of 30 days. CEGASA shall uphold absolute confidentiality when processing these data and shall only surrender the data to official bodies and agents of authority upon their request. The purpose of these recordings is the safety of the company and the work environment.

The legitimising basis for such being public interest.

With regard to access control, CEGASA employs access control for security purposes, the legitimising basis for such being public interest. Likewise, as in the previous case, the data shall only be kept for 30 days.

The exercise of rights common to all personal data

The owner of the data has the right to obtain confirmation concerning whether CEGASA is processing their personal data, consequently, they have the right to access their personal data, rectify any inaccurate data or request deletion of such when the data are no longer necessary, as well as to oppose the processing of their data for any purpose expressed herein such as, for example, the sending of commercial information.

You have the right of access, rectification, deletion, opposition, limitation to processing and transferability, which you may exercise by:

• Email: info@cegasa.com
• Postal address: C/Marie Curie, 1. 01510 Miñano, Vitoria-Gasteiz (Araba) SPAIN.

In any case, the owner of the data may contact the corresponding control authority to present any complaints that they consider appropriate, which in the case of Spain is the Spanish Data Protection Agency.

Truthfulness of data and updates

CEGASA assumes that the personal data provided through the different channels and supports are truthful, that it is supplied directly buy the owner who are who they say they are, that the data are current, that the affected/interested party shall communicate any correction of their data as from the moment it changes.

Duty of confidentiality

Those involved in processing the data of individuals and accessing files, directly or indirectly, shall at all times maintain any personal data that they may handle during the course of their work in the strictest of confidence. The Duty of Confidentiality constitutes an obligation for CEGASA; members of its board and management; those with an employment contract under labour laws and professionals who provide services with a commercial contract under commercial law. It also represents an obligation for suppliers of goods and services as well as their employees, Data Processors and their employees and whomsoever Data Processors may subcontract and their employees. The Duty of confidentiality remains in force after the labour or commercial relationship established with CEGASA, the data controller, has ended, as well as after the expiration of labour or commercial contracts, etc. that link employees and/or professionals to the Data Processor and the suppliers that supply goods or provide services to CEGASA.

Website / web page recommendations

CEGASA recommends and provides links to websites/web pages when it considers them to be of interest to the User. CEGASA has no obligation to supervise the websites/web pages it recommends or to which it provides links. The said websites/web pages have been created by individuals, or entities with or without legal personality that are not connected to CEGASA. CEGASA does not intervene in their management, finance them, make decisions regarding content, manage or participate in the services provided by the linked or recommended websites/web pages. CEGASA shall erase any links and refrain from recommending websites/ web pages whenever it has irrefutable proof that they and/or the services they provide are unlawful or harm the rights of third parties that may be entitled to compensation.

Use of cookies

Click here for more information about the use of cookies

Data security

CEGASA has implemented all security measures required by personal data protection regulations within its work centres, premises, systems and communication infrastructures, etc.. It has also adopted logical, physical, organisational and contractual measures, etc. to prevent any unauthorised access to data by third parties, as well as their destruction, modification, reproduction, dissemination, transfer or reuse.

Validity and modification of the privacy policy

The Privacy Policy established by CEGASA enters into force as of the date it is published on the corresponding website; the User may save and/or reproduce it. CEGASA has the authority to modify its Policy Privacy, duly informing Users to this effect.