Website Privacy Policy
www.energy-less.com
I. PRIVACY AND DATA PROTECTION POLICY
Respecting the provisions of current legislation, EnergyLess (hereinafter, also Website) undertakes to adopt the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected.
Laws incorporated into this privacy policy
This privacy policy is adapted to the current Spanish and European regulations on the protection of personal data on the internet. Specifically, it respects the following rules:
- Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
- Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).
- Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce (LSSI-CE).
Identity of the data controller
The controller of the personal data collected on EnergyLess is: Alvaro Twose Velasco, with NIF (Tax ID): 51540286T (hereinafter, Data Controller). His contact details are as follows:
Address: C Collado de Marichiva 95
Contact phone: 692 34 23 56
Contact email: info@energy-less.com
Register of Personal Data Processing Activities
In compliance with the provisions of the GDPR and the LOPD-GDD, we inform you that the personal data collected by EnergyLess through the forms on its pages will be incorporated and processed in our files in order to facilitate, expedite, and fulfill the commitments established between EnergyLess and the User, or to maintain the relationship established in the forms that the User fills out, or to attend to a request or query from the User. Likewise, in accordance with the provisions of the GDPR and the LOPD-GDD, a register of processing activities is maintained, which specifies, according to their purposes, the processing activities carried out.
Principles applicable to the processing of personal data
The processing of the User’s personal data will be subject to the following principles set out in Article 5 of the GDPR and Article 4 and following of Organic Law 3/2018:
- Principle of lawfulness, fairness, and transparency: The User’s consent will be required at all times, following completely transparent information about the purposes for which the personal data is collected.
- Principle of purpose limitation: Personal data will be collected for specified, explicit, and legitimate purposes.
- Principle of data minimization: The personal data collected will be only that which is strictly necessary in relation to the purposes for which it is processed.
- Principle of accuracy: Personal data must be accurate and kept up to date.
- Principle of storage limitation: Personal data will only be kept in a form which permits identification of the User for no longer than is necessary for the purposes of its processing.
- Principle of integrity and confidentiality: Personal data will be processed in a manner that ensures its security and confidentiality.
- Principle of accountability: The Data Controller will be responsible for ensuring that the above principles are met.
Categories of personal data
The categories of data processed by EnergyLess are solely identifying data. Specifically, Nombre y Email Address.
Under no circumstances are special categories of personal data processed within the meaning of Article 9 of the GDPR.
Legal basis for the processing of personal data
The legal basis for the processing of personal data is **consent**. EnergyLess undertakes to obtain the express and verifiable consent of the User for the processing of their personal data for one or more specific purposes.
The User shall have the right to withdraw their consent at any time. It will be as easy to withdraw consent as to give it. As a general rule, the withdrawal of consent will not condition the use of the Website.
On occasions when the User must or may provide their data through forms to make inquiries, request information, or for reasons related to the content of the Website, they will be informed if the completion of any of them is mandatory because they are essential for the correct development of the operation.
Purposes of the processing to which the personal data are destined
Personal data (specifically, name and email address) is collected and managed by EnergyLess for the purpose of managing your subscription to our newsletter and launch list. This allows us to send you email communications regarding:
- The launch of our ‘Learning Paths’ and ‘Solutions Finder’.
- News, articles (‘Short Tech Notes’), and updates from our community.
- Responding to your direct inquiries.
Likewise, the data may be used for statistical and marketing study purposes to adapt the Content offered to the User, as well as to improve the quality, operation, and navigation of the Website.
At the time the personal data is obtained, the User will be informed about the specific purpose or purposes of the processing to which the personal data will be destined; that is, the use or uses that will be given to the collected information.
Retention periods for personal data
Personal data will only be retained for the minimum time necessary for the purposes of its processing, and in any case, only until the User requests its deletion.
Recipients of personal data
The User’s personal data will be shared with the following recipients (data processors) who are necessary to provide our services:
- Hostalia (acens technologies, S.L.U.): As our web hosting and database provider, located in the EU.
- WPManageNinja LLC (Fluent Forms): The company providing the forms software we use to collect and manage your data within WordPress.
- Google LLC (Google Analytics): For the analysis of traffic and website usage in an aggregated manner. (Note: Include only if you use Google Analytics).
- n8n GmbH: (Potentially) For the automation of workflows and data transfer. (Note: Include if you connect it).
Personal data of minors
Respecting the provisions of Articles 8 of the GDPR and 7 of Organic Law 3/2018, only those over 14 years of age may lawfully give their consent for the processing of their personal data by EnergyLess. If the User is a minor under 14, the consent of parents or guardians will be necessary for the processing.
Secrecy and security of personal data
EnergyLess undertakes to adopt the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected, to ensure the security of personal data and prevent the accidental or unlawful destruction, loss, or alteration of personal data.
The Website has an SSL (Secure Socket Layer) certificate, which ensures that personal data is transmitted securely and confidentially, as the data transmission between the server and the User is fully encrypted.
However, EnergyLess cannot guarantee the impregnability of the internet. The Data Controller undertakes to notify the User without undue delay of any personal data breach that is likely to result in a high risk to the rights and freedoms of natural persons.
Personal data will be treated as confidential by the Data Controller, who undertakes to ensure that this confidentiality is respected by employees, associates, and any person to whom the information is made accessible.
Rights derived from the processing of personal data
The User has rights over EnergyLess and may, therefore, exercise the following rights recognized in the GDPR and Organic Law 3/2018 against the Data Controller:
- Right of access
- Right to rectification
- Right to erasure (“the right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object
- Right not to be subject to automated individual decision-making.
Thus, the User may exercise their rights by written communication addressed to the Data Controller with the reference “GDPR-www.energy-less.com”, specifying:
- Name, surname of the User, and copy of ID (or equivalent document).
- Request with the specific reasons for the application or information to be accessed.
- Address for notification purposes.
- Date and signature of the applicant.
This request may be sent to the following address and/or email:
Postal address: C Collado de Marichiva 95
Email: info@energy-less.com
Links to third-party websites
The Website may include hyperlinks or links that allow access to third-party websites other than EnergyLess. The owners of such websites will have their own data protection policies, being responsible for their own files and privacy practices.
Complaints to the supervisory authority
If the User considers that there is a problem or infringement of the current regulations in the way their personal data is being processed, they will have the right to effective judicial protection and to lodge a complaint with a supervisory authority, in particular, in the Member State of their habitual residence. In the case of Spain, the supervisory authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos – https://www.aepd.es/).
II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY
It is necessary that the User has read and agrees with the conditions on the protection of personal data contained in this Privacy Policy, and that they accept the processing of their personal data so that the Data Controller can proceed with it in the manner, during the periods, and for the purposes indicated. The use of the Website will imply the acceptance of its Privacy Policy.
EnergyLess reserves the right to modify its Privacy Policy, according to its own criteria, or motivated by a legislative, jurisprudential, or doctrinal change by the Spanish Data Protection Agency. Users are recommended to consult this page periodically to stay informed of the latest changes or updates.
This Privacy Policy was updated to adapt to Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPD-GDD).
