NEDGIA provides users of the website at [https://nedgia-wordpress.apinedgia-dev.gniinnova.com] and all the websites associated with it (also the Portal) with this Privacy Policy, in order to offer information regarding how we process your personal data and protect your privacy and information.
NEDGIA may amend this Privacy Policy when this is deemed necessary. In the event that changes are made, we will communicate such action via the website or other means in order for you to be made aware of the new privacy conditions. The act of continuing to use the features made available by NEDGIA following notification of such changes will imply that you agree with them, unless your express consent is required.
Pursuant to the provisions of the General Data Protection Regulations and other regulations governing data protection, as well as Law 34/2002 of 11 July on information society service and e-commerce, the Website User is informed of the following:
I. Data Controller
The personal data that the User provides by filling in any form will be collected and processed automatically as potential customers, for which the Ddata Controller is NEDGIA, S.A. with registered address at Avenida América Nº 38 – 28028 Madrid, or its subsidiaries (NEDGIA).
In order to guarantee proper management in the processing of your data, Gas Natural Fenosa has a Data Protection Officer. The contact details are shown below:
Postal address: Plaça del Gas, 1 – 08003 Barcelona
Email: dpd-dpo@gasnaturalfenosa.com
II. Purpose for which your Data are Processed
The personal data provided by the users of this website and/or provided via any other website made available to the public by NEDGIA may be processed thereby for the following purposes based on the type of data provided by the user and the interaction undertaken by the user via the website in question. Below, the User is informed that the purposes for which their data will be automatically processed are:
(i) To maintain and comply with the business relationship and/or communication undertaken with the Data Controller by contracting or using any of the products and services offered or which may be offered to you in the future, regarding the supply of natural gas and domestic and in-company assistance; or for the purpose of commercial activities regarding the energy sector. The data may be preserved for the aforementioned purposes even once the contractual relationship has ended.
(ii) To provide you with information and send you, by any means, commercial communications about said products and services or those that may gradually be added to the Portal.
(iii) Knowledge of your preferences for the purpose of adapting offers on our products and services to your particular interests and needs. To that end, our server will send a file (“cookie”) to your computer, which, with the information it will provide us about the pages you visit via nedgia-wordpress.apinedgia-dev.gniinnova.com, will enable us to know your browsing habits as a User and thereby customise your preferences to facilitate browsing on our website. In any event, the User has the ability to configure their computer so as to reject the installation of said “cookies”.
(iv) To comply with all the legal obligations that affect NEDGIA.
(v) To deal with and manage your requests regarding products and services offered by NEDGIA or any of its subsidiaries, as well as maintain, develop or control existing business relations between the parties, thus including assessment and oversight by means of scoring.
(vi) To determine your level of financial solvency and creditworthiness with regards to payment obligations and, in the event of non-payment, to communicate the details of the default to common financial solvency files, pursuant to all established legal requirements set out in the current applicable legislation.
(vii) Profiling based on marketing studies and statistical and segmentation techniques and procedures leading to the introduction of improvements and the selection of offers for products and services to suit your characteristics and needs.
However NEDGIA or any of its subsidiaries intends to send commercial communications to its users via electronic means, pursuant to the provisions of Article 21 of Spanish Law 34/2002 of 11 July on information society services and e-commerce (hereinafter, LSSI), by accepting this Privacy Policy, the User expressly authorises NEDGIA to send them promotional or advertising communications by email or other equivalent electronic communication channels.
If the User does not wish their data to be communicated as indicated in the previous paragraph and/or does not wish to receive commercial communications (advertising or promotional), they may freely express their decision via the methods indicated in paragraph 1 above. Acceptance by the User of their data being processed or communicated in the way defined in the previous paragraphs may be revoked at any time, with no retroactive effect, in accordance with the provisions of Articles 7.3 GDPR and 22.2 LSSI.
III. Data Processed by Nedgia and Sources of said Data
The data processed by NEDGIA as a result of the interactions undertaken by the User via our website are taken from the following sources:
• Data provided by the User when filling in the forms and spaces made available in contracts or by any other means through which the user engages in communication with the Data Controller.
• Data generated as a result of developing, processing and maintaining the relationship created between the User and the Data Controller.
NEDGIA may process the following types of personal data depending on the relationship established with the User:
• ID details (e.g. name and surname(s), email address, postal address, telephone number, IP address, etc.).
• Economic, financial and insurance details (e.g. bank details).
• Data on personal characteristics and social circumstances (e.g. age, date of birth, tastes, hobbies and lifestyle, etc.).
IV. Legal Grounds for Processing Data
NEDGIA processes the personal data provided by the Users of its websites in accordance with the following legal grounds, depending on the type of data provided by the User and the interaction undertaken by the User with NEDGIA.
The legal grounds for processing your personal data lie in the development and execution of the contractual relationship established with you.
Furthermore, the legal grounds for processing your personal data also lie in the legitimate interest to know your financial solvency and creditworthiness prior to undertaking activities related to compliance and non-compliance with monetary obligations.
The following data processing actions are based on consent and relate to:
• The processing of your personal data through marketing studies and statistical and segmentation techniques and procedures that allow improvements to be introduced and/or the information and the offers of products and services that best fit your profile to be adapted or chosen, and, consequently, also allow the distribution of advertising or promotional material through any communication channels.
• The processing of personal data after the contractual relationship with NEDGIA has ended, and unless you expressly request the deletion thereof through the means provided for this, with a twofold purpose: (i) statistical and (ii) to provide you with advertising or promotional information.
V. Data Sharing
The personal data processed for the purposes described above may be shared with the following recipients depending on the legal grounds for sharing.
By virtue of the above, the following data communications seek to guarantee the correct development of the contractual relationship and ensure compliance with the legal obligations corresponding to such communications:
• Common solvency files related to compliance and non-compliance with financial obligations.
• Public bodies and authorities.
• Suppliers when necessary, for the sole and exclusive purpose of compliance with the business relationship in question. Under no circumstances will said third party providers be able to contact users directly for marketing or promotional purposes, nor may they transfer said data to third parties or other entities within its own group, whatever the intention behind said transfer, with the corresponding liability for breach of the foregoing lying solely with said third party providers.
The following communications are based on consent and relate to:
Data collected for the purpose of maintaining and complying with the business and/or communication relationship you undertake with the Data Controller by contracting or using products and services offered, or that could be offered to you in the future, regarding the supply of natural gas, for the distribution, via email, SMS, telephone or any other means of electronic communication, of advertising or promotional information, whether general or adapted, by applying marketing studies and statistical and segmentation techniques and procedures.
VI. Data Storage
NEDGIA will store your personal data for the time needed to provide the service requested and/or to achieve the processing purposes sought.
Subsequently, provided that the User has not exercised their right to elimination, their data will be kept for the legal periods defined for each applicable case based on the type of data and the processing purpose.
VII. Data you must provide in each case
NEDGIA informs users that, when personal data are collected via a form made available on our website, it will be necessary for the user to at least provide those data fields marked with an asterisk (*). If said minimum data considered as necessary are not provided, NEDGIA will be unable to manage the service or query posed by the User.
In the event that the User does not fill in all the fields marked as required in the contracting form, this may prevent the contract for products and services from being finalised.
VIII. Guarantee of the Data Provided
The User guarantees that the data provided are accurate, truthful, complete and up to date, accepting liability for any direct or indirect damage that may arise as a result of non-compliance with this obligation.
The User undertakes and agrees to immediately notify the Data Processor of any change to their personal data so that the information contained in its files is up to date and error-free at all times.
IX. Measures adopted to protect your Data
For the purpose of guaranteeing the security and confidentiality of your data, NEDGIA undertakes to process the personal data of the User with the utmost confidentiality, using it solely for the purposes indicated in this privacy policy. NEDGIA has adopted suitable measures in terms of data protection and has implemented the measures needed to protect the rights and freedoms of data subjects, and avoid alteration, loss, unauthorised processing and/or access based on the state of the art, the costs of application, the nature, scope, context and purpose for processing, as well as the various likelihood and severity risks. In any event, you should bear in mind that Internet security measures are not impregnable.
X. Rights over your Personal Data
NEDGIA informs you that you are entitled to obtain confirmation regarding whether or not we are processing personal data that concern you.
Similarly, NEDGIA informs you that you have the following rights over your personal data:
NEDGIA informs you that you are entitled to access your personal data and obtain confirmation regarding how said data are being processed. Furthermore, you are entitled to request the rectification of inaccurate data or, as appropriate, request the elimination thereof when, among other reasons, the data are no longer necessary for the purposes for which they were collected by NEDGIA.
Under certain circumstances, you may request that limitations be imposed on the processing of your data, in which case NEDGIA will only keep them for filing or defending possible claims.
Furthermore, also under certain circumstances, you may oppose the processing of your personal data for the purpose reported by NEDGIA. In this case, NEDGIA will cease to process the personal data unless legitimate grounds exist therefor or to guarantee filing or defending possible claims.
Finally, you may request the right to portability and obtain, for yourself or another service provider, certain information stemming from the contractual relationship established with NEDGIA.
To exercise any of these rights, you may contact NEDGIA (ATR) by writing to Legal Claims – Personalised Response, Plaça del Gas Nº2, 08003 Barcelona, including “Data Protection Request” as the reference, or to the email address sgestionre@nedgia.es. The identity of the person exercising such rights must be demonstrated when doing so by including a copy of both sides of their DNI, NIE, Passport or equivalent document.
NEDGIA will provide the requested information within one month from receiving the request. Said period may be extended to two months if necessary based on the complexity and number of requests.
NEDGIA informs you that you may lodge a claim with the competent Control Agency for data protection issues. However, you may first of all lodge a claim with the Data Protection Officer, who will respond to the claim within two months.