The Privacy Policy forms part of the General Terms and Conditions governing this Website.

Who is responsible for processing your data?

GRUPO HAFESA SUMINISTROS ENERGÉTICOS, S.L.
Tax ID: B95840583
Address: Calle Orense 34, Edificio Norte, 1st Floor, Left (28020 Madrid)
Phone: +34 917839410
Data Protection Officer: rgpd@grupohafesa.com

We reserve the right to modify or adapt this Privacy Policy at any time. We recommend reviewing it regularly to stay informed.

If you belong to any of the following groups, please consult the relevant information:

WEBSITE OR EMAIL CONTACTS

What data do we collect through the Website?

If you provide us with data through the contact form, we will process your identification and contact data, as well as any other information you include in the form.
Additionally, we may process your IP address, operating system, browser type, and the duration of your visit, in a pseudonymised manner.

For what purposes will we process your personal data?

• To manage the requested service, respond to your inquiry, or process your request.

• To send commercial information or event notifications via electronic means.

• To carry out analysis and improvements to the Website.

What is the legal basis for processing your data?

Your consent or the existence of a contractual relationship between the parties.

How long will we keep your personal data?

For as long as you remain linked to us or until you exercise a right that requires us to delete your data.

NEWSLETTER SUBSCRIBERS

What data do we collect through the Newsletter?

Identification data (first and last name) and contact data (email address).

For what purposes will we process your personal data?

To periodically send news, promotions, and relevant information.

What is the legal basis for processing your data?

Your consent.

How long will we keep your personal data?

Until you withdraw your consent, which you may do at any time without retroactive effect.

JOB APPLICANTS

What personal data do we process?

We will process the data you provide during the selection process or through a spontaneous application. Typically, we will process your identification data, contact information, and data related to your professional and/or academic experience.

For what purposes will we process your personal data?

• To organise selection processes for the hiring of employees.

• To schedule interviews and evaluate your application.

What is the legal basis for processing your data?

The legal basis is the necessity of the processing for the execution of a labour contract, with the selection process being considered a pre-contractual measure.

How long will we keep your personal data?

Until the completion of the selection process and, in any case, for a maximum of one (1) year.

ETHICS CHANNEL (WHISTLEBLOWING CHANNEL)

What data will we process?

If you identify yourself, we may process the following data: name, surname, email, phone number—and any personal data of third parties included in the communication.

For what purposes will we process your personal data?

• To manage the communications received.

• To take the corresponding corrective measures.

• If necessary, to inform you about the outcome of the procedure.

What is the legal basis for processing your data?

The legal basis is compliance with a legal obligation or, alternatively, the public interest.

How long will we keep your personal data?

The data will be kept only for the time strictly necessary to clarify the reported facts. In any case, after six (6) months, the data will be anonymised unless they are being investigated in another legal context.

 

ADDITIONAL INFORMATION ABOUT DATA PROCESSING

Do we include personal data of third parties?

No. As a general rule, we only process data provided by the data subjects. If you provide third-party data, you must first inform them and obtain their consent. Otherwise, you exempt us from any liability arising from non-compliance with this obligation.

Do we process children’s data?

We do not process data of minors under 14 years of age. Please refrain from providing such data unless you meet this age requirement or from supplying data of third parties who do not. HAFESA accepts no liability for breach of this provision.

What security measures do we apply?

You can rest assured: we have adopted an optimal level of protection for the personal data we process and implemented all technical and organisational measures available to us, according to the state of the art, to prevent loss, misuse, alteration, unauthorised access, or theft.

To whom will your data be communicated?

Your data will not be shared with third parties unless required by law.
However, your data may be communicated to the State Tax Administration Agency and to banks and financial institutions for the collection of services or products, as well as to data processors required for the execution of the agreement, who will act under a contract in accordance with Article 28 of the GDPR.

What rights do you have?

• The right to access your personal data.

• The right to request the rectification of inaccurate data.

• The right to request the deletion of your data.

• The right to withdraw previously granted consent.

• The right to request the restriction of processing.

• The right not to be subject to automated decision-making.

• The right to data portability, which will be provided in a structured, commonly used, machine-readable format.

• The right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

If any of your data changes, we kindly ask you to notify us so we can keep your information up to date.

How can you exercise your rights?

We have forms available to facilitate the exercise of your rights. You may request them by email, or if you prefer, you may use the forms provided by the Spanish Data Protection Agency or other entities.
Forms may be submitted in person, by post, or by email to rgpd@grupohafesa.com (as indicated above).

If there is reasonable doubt regarding your identity, we will be required to ask for identification before processing your request.

How long do we take to respond?

One month from receipt of the request, extendable by an additional two months when necessary due to complexity. You will be notified within the established timeframe.

Do we use cookies?

If we use cookies other than those strictly necessary, you may consult our Cookies Policy via the corresponding link available on the homepage of our website.