Privacy Policy

Part I: When do we collect personal data? What personal data do we collect?

The Association of Independent Energy Retailers (hereinafter ACIE) supports the fair and transparent processing of data.

Personal data refers to any information relating to an identified or identifiable natural person, as defined in Article 4 of the GDPR. ACIE collects personal data from users of our website or from those who complete the contact form.

When visiting our website: Please refer to our Cookies Policy.

When completing a contact form: We collect your contact details, as well as any other data necessary to fulfill the request corresponding to each specific form.

Part II: Who is responsible for processing your personal data, for what purposes, and on what legal basis?

You have the right to know who is responsible for processing your data and to whom you can direct related requests. We consider it important that you understand the purposes for which we collect and process your personal data, as well as the legal basis for doing so.

Data Controller:

ACIE
C/ Federico Mompou, 5
Building 1 – 4th Floor
28050 – Madrid
Spain
Email: info@acie.org.es

As the data controller, ACIE defines the purposes and means of processing your personal data.

What are the purposes and legal bases for processing your personal data?

When visiting our website:
Please refer to our Cookies Policy.

When completing a contact form:

  • Purpose: The personal data we collect allows us to provide you (or your company) with information regarding the inquiry made through the form.

  • Legal basis: By filling out our online forms, you expressly consent to the processing of the personal data you provide. Therefore, the legal basis for processing your data is your consent and our company’s need to fulfill contractual obligations arising from your request.
    You have the right to withdraw this consent at any time. Such withdrawal will not affect the lawfulness of processing based on consent before its withdrawal, but it may prevent our company from fulfilling the request you made through the corresponding form.

Note: ACIE will not process your personal data for any purpose other than those mentioned above.

Automated decision-making:
ACIE does not use automated decision-making systems based on your personal data. All our data processing procedures involve human intervention.

Part III: Who are the recipients of your personal data?

ACIE will be the sole recipient of your personal data.

Part IV: How long will we retain your personal data? What are your rights and how can you exercise them?

How long will my personal data be retained?

In accordance with applicable data protection laws, personal data is retained only for as long as necessary for the designated purposes. Your personal data will be kept by our company while commercial or contractual relationships with your company remain in place.
Upon termination of such relationships, data will be properly blocked and retained only to allow our company to demonstrate compliance with legal, tax, or contractual obligations for the maximum limitation periods established by law. Once these periods have expired, your personal data will be permanently deleted or, alternatively, anonymized.

What are your rights and how can you exercise them?

  • Right to withdraw consent: You have the right to withdraw your consent for the processing of your data at any time by contacting ACIE.

  • Right to object: You have the right to object, at any time and based on your particular situation, to the processing of your personal data, including profiling. Once you exercise this right, ACIE will cease processing your data unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or if processing is necessary for the establishment, exercise, or defense of legal claims.

  • Right of access: You have the right to obtain confirmation from us as to whether or not we process your personal data. If so, you may request access to your personal data and related information about its processing.

  • Right of rectification: You have the right to obtain, without undue delay, the rectification of inaccurate personal data concerning you. Considering the purpose of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

  • Right to erasure (“right to be forgotten”): You have the right to have your personal data erased without undue delay.

  • Right to restrict processing: You have the right to restrict the processing of your personal data in the following cases: when you contest the accuracy of the data; when processing is unlawful and you request restriction instead of erasure; or when your data is no longer necessary but you request restriction for the exercise or defense of legal claims.

  • Right to data portability: You have the right to receive a copy of the personal data you provided to ACIE in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from ACIE.

Exercising your rights:
You may exercise your rights by contacting ACIE.

What will we do regarding third parties to whom we have disclosed your data?
Note: ACIE will communicate any rectification, erasure, or restriction of processing of your personal data to each recipient, unless this proves impossible or requires disproportionate effort. We will inform you of such recipients if you request it.

Part V: What security measures do we take to protect your personal data?

No internet operation is completely secure or error-free, and we cannot guarantee that stored data is free from vulnerabilities. However, the technical and organizational measures implemented by ACIE ensure an appropriate level of security and confidentiality for your personal data, including the prevention of unauthorized use and the protection of equipment used for processing.

We employ a wide range of security measures, including sophisticated encryption and authentication mechanisms, to maintain the security of your personal data. Your information is stored on secure networks and is only accessible to a limited number of individuals with special access rights to such systems, who are required to keep this information confidential. All information you provide is stored on secure servers.

Part VI: How to file a complaint

Right to file a complaint

If you wish to file a complaint, you may contact ACIE at the following address:

ACIE
C/ Federico Mompou, 5
Building 1 – 4th Floor
28050 – Madrid
Spain
Email: info@acie.org.es

Right to file a complaint with a supervisory authority

Additionally, you have the right to file a complaint with the Spanish supervisory authority:

Spanish Data Protection Agency (Agencia Española de Protección de Datos)
C/ Jorge Juan, 6
28001 – Madrid
Spain

Part VII: Miscellaneous

Links to other websites
Our website may include links to third-party websites. We are not responsible for the privacy policies of those websites.

Changes to the policy
We will review our privacy policy whenever necessary. In such cases, we will include a notice on our website for 30 days informing users of the revision.

Questions and comments
We welcome your questions and comments regarding our privacy policy. Please feel free to contact us.

Last updated: September 2018