Privacy Policy

EKHI ENERGY, S.L. and EKHI ENERGY LARGE SCALE, S.L. will treat the data confidentially, with all the legal and security guarantees imposed by the General Data Protection Regulation (EU) 2016/679 (hereinafter, GDPR) and the Organic Law 3/2019, of December 5, on Personal Data Protection and guarantee of digital rights, as well as the Law 34/2002, of July 11, on Information Society Services and Electronic Commerce, and other Spanish legislation in force.

1. Identification

EKHI ENERGY, S.L. is a company with registered office at Paseo de la Castellana 141, 15th floor, 28046 Madrid, C.I.F. B-88278098 and duly registered in the Mercantile Registry of Madrid - Volume 38591, Folio 115, Section 8, Page M-686280, First Inscription.

EKHI ENERGY LARGE SCALE, S.L. is a company with registered office at Paseo de la Castellana 141, 15th floor, 28046 Madrid, C.I.F. B-16948523 and duly registered in the Mercantile Registry of Madrid - Volume 42566, Folio 1, Page M-753121, First Inscription.

To ensure the proper management in the processing of your data, the Website Owner has designated a Data Protection Officer, who can be contacted through the following email address: protecciondedatos@ekhi.energy

Information and consent

By accepting this Privacy Policy, the user is informed and gives his free, informed, specific and unequivocal consent for the personal data provided through the website located at URL www.ekhi.energy (hereinafter, the "Website") to be processed by EKHI ENERGY, S.L. and EKHI ENERGY LARGE SCALE, S.L., as well as the data derived from its navigation and other data that may be provided in the future.

3. Obligation to provide data

The data requested in the forms on the Web Site are, in general, mandatory (unless otherwise specified in the required field) to fulfill the established purposes. Therefore, if they are not provided or are not provided correctly, the aforementioned purposes cannot be fulfilled, notwithstanding the fact that you may freely view the content of the Website.

4. For what purpose do we process the personal data of the user of the website?

The personal data provided in the forms on the Website will be processed for the purposes of managing the query made through the contact forms on the website and the offer simulation platform, sending commercial information about the products or services interested by the user and/or providing the service contracted or proposed as a result of the simulator.

5. What data do we process about the user of the website?

The type of personal data that we collect and process from the users of the Web Site for the management of their consultation, sending of the requested commercial information and provision of the consulted or contracted service are: identification data (name and surname), contact data (telephone number and e-mail), and those other data provided by the users themselves in the open "message" fields.

It is the user's obligation to provide the data truthfully and keep them updated. In the event that the user provides data of third parties, he/she declares to have their consent and undertakes to transfer the information contained in this Privacy Policy, exempting the owner of the Website from any liability in this regard. However, the owner of the Website may carry out periodic verifications to verify this fact, adopting the corresponding due diligence measures, in accordance with data protection regulations.

6. What is the legitimacy of the processing of user data?

The legitimacy of the processing of your personal data collected through the Website and the simulation platform is the express consent of the data subject (Article 6.1.a) of the GDPR). By ticking the acceptance box, you give your legitimate consent to the processing of your personal data in accordance with the purposes of this privacy policy.

The maintenance of the commercial or pre-contractual relationship has its legitimate basis in the execution of a contract: before entering into the contract, to advise on the queries raised about the service concerned, and after the contract is concluded, to provide the user with the contracted service.

The legitimacy of commercial communications related to services or products similar to those requested or contracted lies in the legitimate interest of the data controller.

7. With which recipients will the user's data be shared?

The personal data processed may be communicated, in order to achieve the purposes detailed above, to other companies of the EKHI GROUP, for the management of the contractual or pre-contractual relationship interested by the user and to collaborating companies in the provision of the service. Likewise, the information provided may also be transferred, in order to comply with legal obligations, to the competent Public Authorities or the Administration of Justice.

8. Data Retention

We will keep the information and personal data for the time necessary to fulfill the purpose for which the data were obtained, as well as to meet possible claims or liabilities arising as a result of the processing of the data.

As a general rule, once the consultation or service has been completed, the data will be blocked, and no further processing of the data will be carried out beyond keeping them at the disposal of the public authorities and the Administration of Justice, in order to deal with any possible liabilities arising from the processing. Once the statute of limitations has expired, the data will be deleted. However, before treatments in which the consideration of liabilities arising from the treatment is not necessary, EKHI ENERGY, S.L. and EKHI ENERGY LARGE SCALE, S.L. will proceed to the deletion of the data after the time necessary to ensure proper fulfillment of the purpose for which they were collected.

9. Exercise of rights

The user may send a letter to the postal address indicated in the heading of this Policy, or by e-mail to the address protecciondedatos@ekhi.energy attaching a photocopy of his/her identity document, at any time and free of charge, in order to: revoke the consents granted, obtain confirmation as to whether we are processing personal data concerning the user, access their personal data, correct incorrect or incomplete data, request the deletion of their personal data when, for any reason, the data are no longer necessary for the purposes for which they were obtained, obtain the limitation of data processing when any of the conditions provided for in the data protection regulations are met, request the portability of the data provided by the user and file a complaint regarding the protection of their personal data with the competent supervisory authority.

10. Security measures

We will treat the user's data at all times with absolute confidentiality and keeping the mandatory duty of secrecy with respect to them, in accordance with the provisions of the applicable regulations, adopting for this purpose the necessary technical and organizational measures to ensure the security of your data and avoid its alteration, loss, treatment or unauthorized access, given the state of technology, the nature of the data stored and the risks to which they are exposed.