Privacy Policy

Pursuant to the legislation in force on Personal Data Protection, Capital Energy Holding Company, S.L. (hereinafter “Capital Energy”), hereby notifies the users of the web page www.capitalenergy.com (hereinafter the Page) of the Privacy and Data Protection Policy that it shall apply in processing the personal data the User voluntary provides on accessing its web. 

By providing Capital Energy with their personal data through the electronic forms on the Web, contact or work with us section and, if appropriate, by marking the level acceptance box, the User specifically consents to Capital Energy being able to process such data under the terms of this Privacy and Data Protection Policy and for the purposes stated herein.

Capital Energy hereby notifies the users of the Page that their personal data may only be obtained for processing when adequate, pertinent and non-excessive in relation to the scope and purposes determined, explicit and legitimate for which they are obtained. These shall be deleted when they gave cease to be necessary or pertinent for that purpose, or when requested by the data subject exercising his/her right to suppression.

Capital Energy declares its commitment to comply with the legislation in force on data protection from time to time. 

The personal data provided shall be processed by the Company and shall be used according to the following information.

What personal data do we gather and what do we use it for?

  • Data gathered directly: through voluntary filling in the contact form, the work with us section, and interaction on our social networks. Merely for illustration, the data that may be gathered are: name, surname, e-mail, telephone, etc.
  • Data gathered indirectly by using cookies: for statistics, to analyse the use made of our Page and to provide statistics linked to use of the Page. 

The form fields marked with an asterisk (*) are considered necessary fields to manage its purpose. If you do not provide them, it shall not be possible to attend to your application. 

 

Information on Personal Data Protection

Who is the Data Controller?

Information on Personal Data Protection in Section 1

Who is the Data Controller?

Capital Energy Holding Company, S.A.U. (hereinafter “Capital Energy”).

T.I.N.: A-88514724

Address: Paseo del Club Deportivo 1, edificio 13, planta 2ª, 28223 Pozuelo de Alarcón (Madrid)

Contact telephone: 91 401 77 44

Data Protection Officer: dpo@capitalenergy.com.

 

Information on Personal Data Protection in Section 2

Who is the Data Controller?

Capital Energy Energy Services, S.L.U (hereinafter “Capital Energy”).

NIF: B-83410183

Address: Paseo del Club Deportivo 1, edificio 13, planta 2ª, 28223 Pozuelo de Alarcón (Madrid)

Contact telephone: 91 401 77 44

Contacto DPD: dpo@capitalenergy.com

 

What do we process your data for, with what authority for processing, and how long will we store it for?

Section 1

  • Contact Form: We shall process your data to contact you through the channels enabled in order to attend to the request for information using the form. The basis authorising the processing is the user’s consent on filling in the form and marking the boxes provided. The data shall be kept for the necessary time to attend to your query and, in any case, to fulfil the legally established expiry terms. 
  • Commercial post: sending communications of a commercial nature that are specifically requested. We inform you that, if you have authorised it, you will receive commercial information from the different companies of the Capital Energy Group, you can consult the companies of the Group here. The basis authorising processing is consent by the data subject by marking the boxes provided. The data shall be kept while they do not request suppression and, in any case, in compliance with the legally established expiry terms.
  • Cookies: to provide statistics linked to use of the Page. Consult our Cookies Policy to identify the currency of each cookie and obtain information on the cookies the page uses. The basis authorising processing is consent by the data subject on marking the acceptance boxes. 
  • Interaction with social network profiles: the data associated with your interaction in the corporate profiles of social media shall be conserved for the term you have enabled your publications on that social media. 

 

Section 2

  • Contact Form: We shall process your data to contact you through the channels enabled in order to attend to the request for information using the form. The basis authorising the processing is the user’s consent on filling in the form and marking the boxes provided. The data shall be kept for the necessary time to attend to your query and, in any case, to fulfil the legally established expiry terms. 
  • Commercial post: sending communications of a commercial nature that are specifically requested. We inform you that, if you have authorised it, you will receive commercial information from the different companies of the Capital Energy Group, you can consult the companies of the Group here. The basis authorising processing is consent by the data subject by marking the boxes provided. The data shall be kept while they do not request suppression and, in any case, in compliance with the legally established expiry terms.

 

Who do we share your data with? Do we perform international data transfers?

No cession of your data to third parties is foreseen, except due to a legal obligation and those indicated below that may involve international processing of your data:

  • It is possible that Capital Energy Group Companies may engage in international transfers, in particular through the use of providers that locate their servers outside the European Economic Area, i.e., Workday and Salesforce.
  • Other international transfers of data to countries outside the European Economic Area may also take place, in which case the transfer shall be based on an adequacy decision endorsed by the Agency, or with adequate guarantees pursuant to Regulation (EU) 2016/679. You may consult the list of such Providers by sending an e-mail to dpo@capitalenergy.com.
  • Web analytics service managers: The Page has enabled tools provided by Google LLC. Use of these tools may imply an international data transfer to the United States. For more information see https://policies.google.com/privacy/frameworks?hl=es
  • Social media holders: Capital Energy uses social media. The interaction with users through such profiles or tools implies international data transfer (of an analytical and technical nature) to the servers of the social media. 

What rights do I have?

You may exercise your rights of access, correction, deletion, portability and limitation or opposition and, when appropriate, withdraw the consent provided by written request to the addresses provided above.

Data subjects are also entitled to file a complaint before the Controlling Body (Spanish Data Protection Agency: www.aepd.es).

We also inform you that Capital Energy has enabled a whistleblowing channel so all the employees, as well as those who have a contractual relation with Capital Energy (agents, clients, providers, etc.) and any other stakeholders, may report regarding breaches related to the principles and values of Capital Energy recorded in their respective Codes of Ethics. The information on data processing by the Whistle-blower Channel may be consulted by clicking here.

The user shall be the sole party responsible for the veracity of the data provided to Capital Energy.

Capital Energy adopts the necessary measures of a technical and organisational measure to guarantee the security of a personal nature these contain and to avoid their alteration, loss, processing or unauthorised access, considering the state of the art, the nature of the data and the risks to which they are exposed. 

The Page has an SSL (Secure Socket Layer) Certificate, in order to guarantee secure data transmission between your browser and our Page. 

The safe server establishes a connection, so the information transmitted is encrypted, to ensure it is only intelligible to the user’s device and that of the Page. Thus, use of the SSL protocol guarantees:

  • That users are disclosing their data to the Page server centre and not to any other;
  • That the data sent between the user and the Page is encrypted, avoiding the possibility of it being read or manipulated by third parties. 

In addition to verify that they are in a secure environment, the Client must check that the Page verification address begins with https://

You may also identify that the Page is secure when a padlock icon appears on your browser URL bar.

Lastly, you may also verify the presence of the SSL certificate by checking the properties of the Page in your browser, for which you must consult its characteristics. 

Any change made in the Privacy Policy and in the practices to manage the information shall be recorded in an appropriate manner, and Capital Energy may add, amend or eliminate that privacy policy when it sees fit. 

Under no case may Capital Energy amend the policies or practices to make them less effective in protecting the personal data of our clients previously stored, without prior consent by the clients affected. 

Last update: 10th October 2021