01 – INTRODUCTION
VINCI Energies España, S.A. (hereinafter, VINCI Energies España), as the owner company of the website www.vinci-energies.es (hereinafter, the “Website”), we undertake to ensure that your personal information is protected and not used inappropriately.
In this document we explain who is responsible for its processing, the purposes for which your personal information will be processed, the legitimization for its processing, how we collect it, why we collect it, how we use it, your rights in relation thereto and also explain the processes we have implemented to protect your privacy.
By providing us with your personal information and using our websites, we understand that you have read and understood the terms related to personal data protection information as declared. VINCI Energies España, S.A., as the owner of the Website, takes responsibility for complying with the applicable national and European data protection legislation, and aims to process your data fairly, lawfully and in a transparent manner.
02 – CONTROLLER
In accordance with the controller definition provided in the General Data Protection Regulation, a ‘controller’ means the natural or legal person, public authority, agency or another body which, alone or jointly with others, determines the purposes and means of the processing of personal data, the controller for the said personal data collected from emails and website forms is:
VINCI Energies España, S.A.
Registered office: Paseo de la Castellana, 41, 28046 – Madrid
Phone number: 91 127 10 01
VAT number: A-63038665
Business Registry: Madrid
03 – DATA COLLECTION, PURPOSE AND PROCESSING
The website only employs one system for acquiring personal information, and it only processes information provided by interested parties for the following purposes:
- Contact form: We request the following personal data, to be provided by the user when processing a contact request submitted to the website owner, for the sole purpose of identifying you and improving quality of the service.
- Name and Surname
- IP address
04 – PRINCIPLES APPLIED TO YOUR PERSONAL DATA
In processing your personal data, we will apply the following principles in compliance with the stipulations contained in the new Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights and the new General Data Protection Regulation (GDPR):
- Principle of lawfulness, fairness and transparency: We will always require that you consent to the processing of your personal data for one or more specific purposes that you will be notified of in advance with absolute transparency.
- Principle of data minimisation: We will only request data that is strictly necessary in relation to the purposes for which we require it. The minimum possible.
- Principle of storage limitation: The data will not be kept for longer than is necessary for its intended purposes, and will be deleted once these have been completed. In the case of a subscription, this will be maintained until the user withdraws their consent.
- Principle of integrity and confidentiality: Your data will be processed in a manner that ensures appropriate security of the personal data, and guarantees confidentiality. Please be aware that we have taken all necessary precautions to avoid the unauthorised access or improper use of our users’ data by third parties.
05 – PERSONAL DATA PROCESSING LEGITIMIZATION
The legal basis for the treatment of your data is: consent.
The category of data that is processed is identification data. Special protected data is not processed.
VINCI Energies España informs users that their personal data will not be transferred to third-party organizations, unless the said data transfer is covered by a legal obligation or when the provision of a service involves the need for a contractual relationship with a processor.
08 – USER RIGHTS
Anyone has the right to obtain confirmation regarding whether VINCI Energies España is processing our personal data or not. Interested parties have the right to:
- Request access to their personal data.
- Request it be rectified or deleted.
- Request that a limitation is placed on its processing.
- Object to its processing.
- Request the portability of the data.
Interested parties may access their personal data and request the rectification of any inaccurate data or, where applicable, request its deletion when, amongst other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, interested parties may request the limitation of the data processing, in which case we will only keep it to process or defend complaints.
In certain cases and for reasons related to their individual circumstances, interested parties may object to the processing of their data. VINCI Energies España will stop processing the data, except for compelling legitimate reasons, or process or defend against possible complaints. As an interested party, you have the right to receive the personal data held about you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit that data to another controller when:
- Processing is based on consent.
- The data has been provided by the interested party.
- Processing is performed automatically.
When exercising their right to data portability, the interested parties have the right to have the personal data transmitted directly from one controller to another when technically feasible. Likewise, they will also have the right to an effective remedy and to submit a claim to the supervisory authority, in this case, the Spanish Data Protection Agency, if they consider that the processing of their personal data infringes the Regulation
To exercise these rights, the user must send an email or a letter to the Controller identified under point 2 of this document. In order to respond to your request, you must also provide us with your name and surname(s), documentation that demonstrates your identity (ID Card or passport) and an address where you would like a response to be sent.
These rights are to be exercised by the user. However, they may be exercised by a legal representative of the authorized party. In which case, documentation must be provided to demonstrate that they represent the interested party.
09 – DATA SECRECY AND SECURITY
VINCI Energies España is committed, when using and processing the personal data of users, to respecting their confidentiality and using it in accordance with the purpose thereof, and to comply with its obligation to save it and implement any measures to avoid its alteration, loss or unauthorized processing or access, in accordance with the provisions of the applicable data protection regulations.
VINCI Energies España cannot guarantee the absolute impregnability of the Internet and, therefore, cannot rule out data breaches as a result of fraudulent access by third parties.
With respect to the confidentiality of the processing, VINCI Energies España will ensure that any person authorized to process the user’s data (including its staff, collaborators and providers), will be subject to the appropriate confidentiality requirements (either contractual or legal).
In the event of a security incident, upon discovery, VINCI Energies España will notify the user without undue delay and will provide timely information related to the security incident in a transparent manner or when the user reasonably requests it.
10 – DATA ACCURACY AND VERACITY
The user is solely responsible for the veracity and correctness of the data that they submit via the Website, and exonerate VINCI Energies España from any responsibility in this regard.
The users guarantee and are responsible for, in any event, the accuracy, validity and authenticity of the personal data provided, and undertake to keep it duly updated. The user agrees to provide only complete and correct information via the contact or subscription form.
11 – ACCEPTANCE AND CONSENT
12 – CANCELLATION
The consent provided, both regarding the processing and the cessation of the data for the interested party can be cancelled at any time by notifying VINCI Energies España according to the terms established in this Policy for the exercise of their rights. This cancellation will under no circumstances be retroactive.
VINCI Energies España reserves the right to modify this policy to adapt it to legislative or jurisprudential developments and to meet industry practice. In such cases, VINCI Energies España will announce any changes introduced on this web page, with reasonable notice of implementation.
14 – COMMERCIAL EMAILS
According to the Law on Information Society Services and Electronic Commerce (LSSICE), VINCI Energies España does conduct spamming and therefore does not send commercial e-mails that have not been previously requested or authorized by the user.
According to the terms of Law 34/2002 on Information Society Services and Electronic Commerce, VINCI Energies España undertakes not to send commercial communications without identifying them as such.