Privacy policy

Norvento Enerxía is committed to inform you, as a user of our Website, of our policy regarding the treatment and protection of the personal data of users and clients that we collect when viewing the site or using the services offered on it.

Personal data means any numerical, alphabetical, graphic, photographic, acoustic or any other type of information concerning identified or identifiable persons.

WHO IS RESPONSIBLE FOR THE TREATMENT OF PERSONAL DATA?

In accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 (hereinafter, ‘GDPR’), the Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (hereinafter, ‘LOPD’) and other regulations applicable to the matter, we must inform you that the personal data you may provide during the use of the Website www.norvento.com (hereinafter, the ‘Website’), will be processed as data controller by NORVENTO ENERXÍA, S.L., with NIF B-27.014.315 and address at Rúa Ramón María Aller Ulloa 23, 27003 Lugo, Spain and/or by the companies that are part of the Norvento Enerxía group, in accordance with the provisions of article 42 of the Code of Commerce (hereinafter, ‘Norvento Enerxía’), depending on the user of the request or the relationship established with each of them.

We are responsible for and guarantee the confidentiality and security of the personal data processed in accordance with the specified purposes and shall not be responsible in any way for the processing and subsequent use of personal data that may be carried out by third party information society service providers acting outside the Website.

ARE YOU REQUIRED TO PROVIDE YOUR PERSONAL DATA?

Visiting the Website does not involve any obligation to provide any personal data. However, the use of some of the services available on the Website depends on the fulfilment of personal data forms and the use of cookies.

The data collected through the different forms on the Web are the fair and necessary for the provision of the services requested. The refusal to provide the data indicated as necessary implies the impossibility of properly supplying these services. You can also provide data on a voluntary basis so that these services can be provided in the best possible way.

WHAT DO WE USE YOUR PERSONAL DATA FOR?

The personal data you provide for the provision of the different services made available through the Web will be processed by Norvento Enerxía in accordance with the following purposes:

• In the case of the contact form, the purpose is to answer the query made regarding the services provided by any of the companies of Norvento Enerxía.
• In relation to the use of cookies, the main purpose is to improve the positioning and reach of the Website through audience measurement. You can find more specific information in our Cookies Policy.

WHAT IS THE LEGITIMACY OF THE PROCESSING OF YOUR DATA?

In relation to the contact form, processing is necessary as a requirement for the conclusion of a contract or as a pre-contractual measure (art. 6.1.b GDPR).

Where the processing is voluntary on the part of the data subject, as in the case of the use of non-necessary cookies, the basis of legitimacy is the data subject’s consent (art. 6.1.a GDPR).

Any interested party has the right to revoke their consent at any time by simply expressing it, by means similar to those used to grant it, and without affecting the processing carried out up to that time. For more information, please refer to the section WHAT RIGHTS DOES THE USER HAVE?

WHAT CATEGORIES OF DATA ARE PROCESSED?

The personal data used will be the strictly minimum and necessary to achieve the purposes described. The data will be obtained either directly by having provided them, or because they are generated in the course of the relationship with Norvento Enerxía companies or are provided by third parties.

In any case, the global categories covered are:

• Identifying and/or contact details: name and surname, e-mail address, telephone number, IP address.
• Browsing data.
• Other typology of data in the event that you have voluntarily provided it because you consider it relevant to your application and/or by other means.

FOR HOW LONG WILL PERSONAL DATA BE PROCESSED?

The data will be kept as long as they are necessary for the purpose for which they were originally collected. Once the purpose has been fulfilled, the data will be duly blocked during the limitation periods for claims and legal actions for possible responsibilities derived. At the end of this period, they will be destroyed by secure means that make their recovery and identification reasonably improbable.

TO WHOM WILL THE DATA BE COMMUNICATED?

The personal data provided will be shared with service providers that help or support us, whether they are Norvento Enerxía companies or external collaborators with whom we have reached an agreement. In any case, they will assume the same obligations and guarantee the same rights as the responsible. Furthermore, these transfers will only be made if necessary for the provision of the services requested.

We do not plan to transfer your data internationally. Your data will be collected, used, stored, communicated (if applicable) and destroyed exclusively within the European Economic Area and countries authorised by the European Commission that have a level of data protection that is substantially equivalent to the GDPR.

WHAT IS YOUR RESPONSIBILITY?

You will be responsible for the data you provide to Norvento Enerxía to be true, exact, complete, and updated. For these purposes, when you provide them, you will be responsible for the veracity of all the data you provide and you must keep the information provided duly updated, so that it corresponds to your real situation.

Likewise, please note that you will be responsible for any false or inaccurate information you provide through the Web and for any damages, direct or indirect, that this may cause to Norvento Enerxía or third parties.

PRACTICE OF THE RIGHTS AND COMMITMENTS.

The practice of the Rights and Commitments is free of charge and they can be made at any time, by sending a written communication by post or e-mail, together with a photocopy of the National Identity Document or other legally valid means of proof of the user’s identity, to the address for notification purposes of Norvento Enerxía, which corresponds either to Rúa Ramón María Aller Ulloa 23, 27003 Lugo, Spain or to the e-mail address protecciondedatos@norvento.com. In the event that the communication must be handled by another company in the group, you will be informed and will receive a feedback from the company in question. As a group, we ensure that all communications are centralised in order to provide a more efficient and transparent service to users, without this undermining your rights.

The practice of the rights and commitments you can exercise are:

• To revoke consent to processing.
• To access your personal data.
• To rectify inaccurate or incomplete data.
• To request the deletion of your data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
• To obtain from Norvento Enerxía the limitation of the treatment when any of the conditions established in the data protection regulations are fulfilled.
• To request data portability.
• To claim to the Spanish Data Protection Agency when you consider that Norvento Enerxía has damaged your rights as recognised by the applicable data protection regulations.

Norvento Enerxía informs you that the exercise of these rights is highly personal, so that only the user can exercise these rights with respect to the personal data of which he/she is the legitimate owner. However, and in exceptional cases, the authorised representative of the user will be able to exercise the rights he/she is entitled to in the above terms, as long as he/she accompanies the mentioned communication with the document accrediting such representation.

IS IT SAFE TO PROVIDE PERSONAL DATA?

Norvento Enerxía will handle the personal data at all times in an absolutely confidential manner and will keep the mandatory duty of confidentiality in accordance with the provisions of the applicable regulations, adopting the necessary technical and organisational measures to ensure the security of your data and avoid its alteration, loss, unauthorised processing or access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed.

CAN YOU CHANGE YOUR PRIVACY POLICY?

Norvento Enerxía keeps the right to modify the present Privacy Policy in order to adapt it to any new legislation that may be applicable. In such cases, and if required, the changes will be announced on the Website and/or by e-mail with reasonable notice prior to their implementation.

RECOMMENDATIONS

Norvento Enerxía recommends the use of the latest versions of software as they incorporate more security measures.

Norvento Enerxía also recommends the use of the security mechanisms available (such as secure web servers, cryptography, digital signature, or firewall) to protect the confidentiality and integrity of the data as necessary, due to the risk of identity theft or violation of communication.

Norvento Enerxía reminds that the Internet is not always as secure as we would like it to be, so the necessary and appropriate technical measures must be taken to prevent unauthorised processing of your data.

Norvento Enerxía warns that whenever one provides personal information through the Internet by means of e-mail, newsgroups or, among others, discussion forums, one should be aware that such information may be collected and processed for undesired purposes, so it is advisable to inform oneself about the confidentiality and privacy policies of the online sites visited.

Norvento Enerxía warns that, unless encryption mechanisms are used, e-mail on the Internet is not secure. Emails and discussion forums can be subject to forgery and impersonation, which should be taken into account whenever they are used. If you do not want to publish your e-mail address, you should configure your browser so that it does not leave your e-mail address on the web servers you access.