We hereby inform you that your data will be processed in accordance with Spanish Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights and with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the "GDPR").
This Policy applies to all data processing operations carried out by H2GREEM. However, it does not apply to third-party websites, including external websites accessed via links on our websites. The Data Controller
The main company responsible for processing your data is H2GREEM GLOBAL SOLUTIONS, S.L. (hereinafter, H2GREEM).
In addition, if you have any queries in connection with the processing of their data, you can email us on firstname.lastname@example.org
or write to our headquarters in Calle Titán, 8. 28045 Madrid. Personal data we process and how we obtain the data
By way of example, we may process the following personal data by the following means:
- Data you provide voluntarily in messages sent to the email addresses in the "Contact" section of this website or information we collect from correspondence with users, such as data provided in response to recruitment processes carried out by H2GREEM.
- We will process your image via our video surveillance system to protect the people in the H2GREEM building and our facilities.
- Data arising from your interaction on social media, such as when you comment on H2GREEM posts or pages, and data relating to your account that can be used to identify you.
By way of example, we inform you that H2GREEM may process your personal data for the following purposes:
a) To attend to a customer, user or data subject
We will process your data (email, name, telephone number) in order to establish business relationships with you, when you have previously requested it. The basis that legitimizes the treatment is the execution of the relationship itself, either contractual or pre-contractual (contract request), or consent (when you request information about our products and services).
b) Management of data from contract representatives and potential clients
To manage and perform the contractual relationship we have with companies such as gas marketers, distributors and/or suppliers, we process the contact details of the companies' representatives. Therefore, the legal basis for the processing is the performance of the contract between the two parties.
Similarly, we process the data of potential clients, such as legal persons, representatives of institutions and public bodies, journalists, analysts, investors and shareholders, who have provided us with their personal data. The legal basis for the processing in this case is the consent given by the data subject.
c) Relations with suppliers
H2GREEM may process the data of supplier's employees (provided either by the supplier or the employee) to ensure the quality of the service provided by the supplier, allow access to H2GREEM' facilities and to comply with legal obligations in relation to social security. The legal basis for the processing is our legitimate interest in overseeing the relationship with our suppliers and the associated responsibilities.
d) H2GREEM news and publications
We will process your personal details to send you news about the H2GREEM Group and its activities when you subscribe to our newsletter. We will only process the data if we have your consent, and this consent is the legal basis for the processing.
if you are not an employee, the consent you gave when registering for the training course.
We will process your data when this is required for compliance with our tax, obligations, employment and/or administrative obligations. The legal basis for the processing is compliance with our legal obligations in each case. Data retention
We will keep your personal data for the time required to fulfil the purpose of collection, such as to respond to a query or complaint, or as long as you have a contractual relationship with us, provided you do not exercise your right of erasure, we are required to retain your data in compliance with a legal obligation or for the exercise or defense of legal claims. We will inform you of the criteria and duration of the processing in each specific case.
After the contractual relationship has ended, we will retain your data after blocking them to make them available to the public authorities or courts for possible criminal, civil, commercial and/or administrative liabilities arising out of the processing and to exercise and defend ourselves against complaints from the Spanish Data Protection Agency. Data recipients
If H2GREEM intends to disclose your personal details, when your data is collected, you will be informed of the recipients or categories of recipients to whom the data are disclosed, such as:
- Third parties to whom we are obliged to disclose your data to comply with a legal obligation, for example, the administrative, tax and social security authorities.
- Third parties to whom we must disclose your data to fulfil the basic purposes of the relationship.
- Entities that subsidize training activities, when data are processed for training purposes.
In addition, we have relationships with third-party suppliers who, in their capacity as data processors, provide us with certain services. H2GREEM, for its part, requires that data processors provide enough guarantees in relation to the protection of your data.
In the event that your data is accessed by companies in countries outside the European Economic Area (EEA) that do not offer an adequate level of protection similar to that afforded by the EEA, we will require that they comply with one of the guarantee mechanisms provided in the GDPR. Data Security of data
To safeguard your personal data, H2GREEM has taken all technical and organizational measures to ensure the security, integrity and confidentiality of your personal data and to avoid their alteration, loss and/or unauthorized access or processing.
In order to keep your personal data up-to-date in our Record of Processing Activities, you are required to inform us of any changes to your personal information, otherwise we cannot accept responsibility for data that is not accurate or truthful, or for the consequences this may have for the H2GREEM Group or third parties. Processing of your data in social media
The legal basis for the processing is your status as a "user", "friend" or "follower" of our social media profile or to be able to respond if you mention our profile in your comments, even if you are not a follower; in the latter case, we will process the minimum data needed to reply to you.
Once you stop "following" our social media profile, we will retain your data for a period of two years.
In any event, we recommend that you avoid including your own or other people's personal data when communicating with us on social media. Minors
In general, H2GREEM does not process the personal data of persons under 18 years. Both the content and services we offer are intended for people over the age of 18.
H2GREEM accepts no responsibility for personal data published by minors on our social media pages without their parents or guardian's consent. The data subject's rights
You may exercise your rights of access, rectification, erasure, restriction, portability and objection to the processing of your data and automated decision-making at any time by sending a written request to email@example.com
or to the address: Calle Titán, 8. 28045 Madrid, including a copy of your national ID card or equivalent identity document and specifying the rights you wish to exercise.
If a legal or voluntary representative is acting on your behalf, they must also provide a document to this effect and their identity document.
In addition, if you gave your consent to a specific processing operation at some point but wish to withdraw it, you may do so by sending a written request to firstname.lastname@example.org
or the address indicated above.
Templates, forms and additional information about the above rights can be found on the Official website of the Spanish Data Protection Agency.
If you believe your rights under the regulations have been infringed, you may send a complaint to email@example.com
or the data protection authority which, in Spain, is the Spanish Data Protection Agency (www.aepd.es
). The data subject's responsibility
This Policy may be amended at any time, and you will be notified of any important changes. Your data will be processed in accordance with the provisions of the new Policy; therefore, we recommend that you check the Policy from time to time.