The Privacy Policy
1. Data Controller
The data controller responsible for the personal data collected through this website is:
[Nombre legal de la empresa / autónomo]
CIF/NIF: [CIF/NIF]
Registered address: [Full address]
Contact email address: [contact email]
Data protection email address: [privacy email, if different]
Website: [website URL]
Hereinafter, “[Trade name]”.
2. Personal data we process
Through the forms on this website, we may process the following personal data:
Full name.
Company.
Job title or department, if provided.
Email.
Phone number
Message or information included in the form.
Attached documentation, such as electricity bills, Excel files, consumption curves, hourly consumption data, supply contracts, or other energy-related information provided voluntarily.
Technical data associated with the use of the website, such as IP address, date and time of form submission, browser, or similar information, where necessary for technical or security reasons.
We recommend that you do not include any personal, confidential, or sensitive information in the attached documents that is not necessary to analyze your energy consumption or your request.
3. Purposes of processing
We process your personal data for the following purposes:
Manage your contact request.
Respond to enquiries received through the website.
Analyze the energy information you provide to us.
Carry out, where applicable, a preliminary assessment of consumption, costs, savings opportunities, PPAs, self-consumption, storage, or other energy solutions.
Prepare a commercial proposal or maintain pre-contractual communications where requested by you.
Maintain contact with you in relation to the services requested.
Comply with applicable legal obligations.
Ensure the security, traceability, and proper functioning of the website.
If you expressly tick the corresponding box, we may also send you commercial communications related to energy consulting services, savings, PPAs, self-consumption, storage, electricity market analysis, or other related services.
4. Legal basis for processing
The legal basis for processing your data is:
Your consent, when you voluntarily submit a form, attach documentation, or agree to receive commercial communications.
The application of pre-contractual measures, when you request information, an assessment, a proposal, or a preliminary evaluation before entering into a contract.
The legitimate interest of [Trade name] in responding to professional requests, maintaining communications with interested companies, and ensuring the security of the website.
Compliance with legal obligations, where it is necessary to retain certain information for legal, tax, accounting, or administrative reasons.
You may withdraw your consent at any time by writing to [privacy email]. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to its withdrawal.
5. Attached documents and energy data
If you attach bills, Excel files, consumption curves, supply contracts, or other documents, you confirm that you have sufficient authorization to share that information with us.
These documents will be used solely to analyze your request, assess savings opportunities, study energy alternatives, or prepare a proposal related to our services.
You must not attach documents containing third-party personal data, sensitive information, or confidential information that is not necessary for the requested analysis. If the documents include unnecessary data, we recommend deleting, redacting, or anonymizing it before sending them.
[Trade name] will treat the documentation received confidentially and will apply reasonable measures to protect it against unauthorized access, loss, alteration, or improper disclosure.
6. Commercial communications
We will only send commercial communications if you have given us your express consent or if there is a prior relationship that legally allows us to do so.
You may unsubscribe or request that we stop sending you commercial communications at any time by writing to [privacy email] or by using the unsubscribe mechanism included, where applicable, in those communications.
Acceptance of commercial communications is not required in order to submit a contact or assessment request.
7. Data retention period
We will retain your data for as long as necessary to manage your request, carry out the requested analysis, and maintain communications related to it.
If no commercial or contractual relationship is ultimately established, the data and documents provided may be retained for a maximum period of [12 months] from the last communication, unless you request their deletion earlier or there is a legal obligation requiring us to retain them for a longer period.
If a commercial or contractual relationship is formalized, the data will be retained for the duration of that relationship and, subsequently, for the legal periods necessary to address any potential liabilities.
Data used for commercial communications will be retained until you withdraw your consent or request to unsubscribe.
8. Data recipients
We will not sell your personal data or disclose it to third parties for their own commercial purposes.
Certain providers that deliver services necessary for the operation of the website and the management of requests may access your data, for example:
Hosting provider.
Email service provider.
Email service provider.
Cloud storage services.
CRM or commercial management tools, if used.
Legal, tax, accounting, or technical advisors, where necessary.
Technical or financial partners, only where necessary to analyze or execute a solution and always subject to confidentiality criteria.
These providers will process the data according to our instructions and in accordance with applicable data protection regulations.
We may also disclose data where there is a legal obligation to do so or where necessary to respond to requests from competent authorities.
9. International data transfers
Some technology providers used for the management of the website, email, forms, storage, or digital tools may be located outside the European Economic Area or may process data from third countries.
In such cases, we will seek to ensure that appropriate safeguards are in place in accordance with the General Data Protection Regulation, such as adequacy decisions, standard contractual clauses, or other legally recognized mechanisms.
If you would like more information about the providers used and the applicable safeguards, you may request it by writing to [privacy email].
10. User rights
You may exercise the following rights in relation to data protection:
Right of access: to know what personal data we process about you.
Right to rectification: to request the correction of inaccurate or incomplete data.
Right to erasure: to request the deletion of your data when it is no longer necessary.
Right to object: to object to certain types of processing.
Right to restriction of processing: to request that we limit the use of your data in certain cases.
Right to data portability: to receive your data in a structured format, where applicable.
Right to withdraw consent: to withdraw the consent given at any time.
To exercise these rights, you may write to:
[email de privacidad]
You must indicate which right you wish to exercise and provide sufficient information to identify yourself. Where necessary, we may request additional documentation to verify your identity.
You also have the right to lodge a complaint with the Spanish Data Protection Agency if you consider that the processing of your data does not comply with applicable regulations. The AEPD allows complaints to be filed in relation to the processing of personal data and the exercise of rights.
11. Information security
[Trade name] applies reasonable technical and organizational measures to protect personal data and the documentation received against unauthorized access, loss, alteration, disclosure, or destruction.
However, you should be aware that no system for transmitting or storing information on the Internet is completely secure. For this reason, we recommend that you do not send unnecessary information, especially third-party personal data, sensitive data, or confidential information unrelated to the requested analysis.
12. Accuracy of the data
The user guarantees that the data provided is true, accurate, complete, and up to date.
If you provide third-party data or documentation belonging to a company, you declare that you have sufficient authorization to do so and that, where applicable, you have informed the affected persons about the processing of their data.
13. Minors
The services offered through this website are intended for companies and professionals, not minors.
We do not knowingly collect data from minors. If we detect that data from a minor has been submitted without valid authorization, we will proceed to delete it.
14. Changes to the Privacy Policy
We may update this Privacy Policy to adapt it to legal, technical, or website operational changes.
The version in force will be the one published on this page at any given time.
Last updated: 12/05/2026.
