Privacy policy

Who is the data controller?

The data controller for your personal data is LA ASOCIACIÓN DE EMPRESAS DE ENERGÍA ELÉCTRICA (hereinafter “aelēc”), with registered office at Paseo de la Castellana, 141, 12th floor, 28020 Madrid, Spain.

If you wish to contact us, you may do so via the following email address: dpo@aelec.es

aelēc guarantees the security and confidentiality of the data provided by each User of the website, establishing the necessary technical and organisational measures to prevent alteration, loss, misuse, unauthorised processing and unauthorised access, in compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”), Organic Law 3/2018 of 5 December, on the protection of personal data and guarantees of digital rights (“LOPDGDD”), as well as all other applicable regulations regarding the protection of personal data.

What categories of personal data will we process?

When you use the aelēc website, we will process various types of information and personal data relating to you, which may fall into one or more of the categories set out below:

For what purposes, and on what legal basis, will aelēc process your personal data?

With regard to the processing of personal data by aelēc, please note that you are free to provide any data that may be requested in connection with an information request, or when subscribing to or registering for any of the services offered.

At aelēc, we will process personal data for the following purposes, depending on the reason for which the data were provided, and in all cases in accordance with the legal bases set out below:

1. Sending communications to inform users about the various events and activities organised by aelēc that may be of interest to them.

This processing will only take place where you have given your consent.

As the legal basis for this processing is consent, you may withdraw it freely at any time. Withdrawal of consent will not affect the lawfulness of communications sent prior to such withdrawal.

You may withdraw your consent by sending a signed written request to the Asociación de Empresas de Energía Eléctrica (aelēc), Paseo de la Castellana, 141, 12th floor, 28020, Madrid, or by email to dpo@aelec.es. The request must contain the following details: the User’s full name and address for notification purposes.

For this processing activity, aelēc will process the following categories of personal data: identifying data, contact details.

1. Responding to requests for information, enquiries or queries raised by the User, and following up on them.

This processing will only take place where you have given your consent.

As the legal basis for this processing is consent, you may withdraw it freely at any time. Withdrawal of consent will not affect the lawfulness of actions taken prior to such withdrawal.

You may withdraw your consent by sending a signed written request to the Asociación de Empresas de Energía Eléctrica (aelēc), Paseo de la Castellana, 141, 12th floor, 28020, Madrid, or by email to dpo@aelec.es. The request must contain the following details: the User’s full name and address for notification purposes.

For this purpose, we will process your identifying and contact data.

1. Attendance at courses or events organised or held by aelēc at third-party premises.

In accordance with the balancing test documented internally, this processing is carried out on the basis of aelēc’s legitimate interest in maintaining and ensuring the safety and wellbeing of attendees at such events.

However, you have the right to obtain further information regarding this processing activity and the content of this legitimate interest, as well as to object to the processing of your data for this purpose, by contacting us at the following email address: dpo@aelec.es.

For this processing activity, we will process the following categories of personal data: identifying data.

1. During events held at aelēc’s offices or at third-party venues, photographs or videos of attendees may be taken for the purpose of creating a photo or video report to be published on aelēc’s social media channels and in the media.

Where you give your consent, you will assign your image rights to aelēc for such events.

By giving your consent, you authorise aelēc to use your personal image from the photographic session in question for the above purpose, pursuant to Organic Law 1/1982 of 5 May on the Civil Protection of the Right to Honour, Personal and Family Privacy and One’s Own Image, with no time limit and no territorial restriction.

Once the images obtained are no longer required, they will be deleted.

As the legal basis for this processing is consent, you may withdraw it freely at any time. Withdrawal of consent will not affect the lawfulness of actions taken prior to such withdrawal.

You may withdraw your consent by sending a signed written request to the Asociación de Empresas de Energía Eléctrica (aelēc), Paseo de la Castellana, 141, 12th floor, 28020, Madrid, or by email to dpo@aelec.es. The request must contain the following details: the User’s full name and address for notification purposes.

For this processing activity, aelēc will process the following categories of personal data: identifying data, contact details.

1. Compliance with legal obligations

aelēc may process your personal data in order to comply with the various legal obligations applicable to it at any given time, including the handling of data protection rights requests.

In addition, if requested by any court, the State Security Forces, or any other competent public authority or administration, we may also be required to disclose your personal data where we are legally obliged to do so.

For this purpose, we will process your identifying and contact data.

1. Analysis of browsing activity to improve the user experience

Where you consent, and in accordance with the terms set out in the Cookie Policy, we will process information relating to your browsing activity on our website (e.g. time of day, searches) and use it to produce internal statistics and internal business reports on website performance in order to meet and improve, as far as possible, your user experience and level of satisfaction when browsing our website.

We may also show you advertising where you accept advertising cookies.

In this case, we will process your identifying data (IP address).

aelēc undertakes to use the personal data provided in accordance with the purposes set out in this Privacy Policy, to respect its confidentiality, and to comply with its obligation to safeguard such data and take all necessary measures to prevent alteration, loss, and unauthorised processing or access, in accordance with applicable data protection legislation.

How long will we retain your personal data?

The personal data to which aelēc has access will be processed for as long as the purpose for which it was provided remains valid.

In any event, once the data are no longer necessary, we will keep your personal data duly blocked. In accordance with legal provisions, we will retain such data only (i) for the periods determined in each case by the applicable regulations, (ii) for the limitation period of any claims that may arise from the relationship with the data subject, or (iii) to make them available to the competent authorities.

Once these periods have elapsed, the data will be permanently deleted.

To whom will we disclose your personal data?

As a general rule, your personal data will only be processed by aelēc. Only the data subject will have access to their data, and under no circumstances will such data be disclosed, shared, transferred or sold to any third party.

However, on certain occasions your personal data may be disclosed to third parties to whom we are legally obliged to provide them, such as public bodies and authorities, the tax authorities, the courts, or the State Security Forces.

Apart from the above disclosures, aelēc may engage third-party service providers who may have access to your personal data and who will process such data on aelēc’s behalf and for its account as part of their service provision.

aelēc follows appropriate criteria for the selection of service providers in order to comply with its data protection obligations and undertakes to enter into the relevant data processing agreement with them, imposing, among others, the following obligations: to implement appropriate technical and organisational measures; to process personal data for the agreed purposes and solely in accordance with aelēc’s documented instructions; and to delete or return the data once the provision of services has ended.

Are personal data transferred internationally?

As a general rule, we will not transfer your personal data internationally when processing them.

However, should your personal data be transferred internationally as a result of processing, such transfers will be carried out in accordance with applicable data protection legislation and, in particular, to countries whose level of protection has been recognised by an Adequacy Decision adopted by the European Commission.

Do you need to keep your data up to date?

All data you provide to us must be correct, complete, accurate and duly up to date.

If any of the personal data you have provided to us changes (especially your contact details), we would appreciate it if you could let us know as soon as possible so that we can update it in our databases.

Otherwise, if you do not inform us of these possible changes, any communications we send you using the contact details in our internal records will remain valid.

If you provide us with personal data relating to third parties, please note that you must do so with their consent and must have informed them beforehand of the matters set out in this Privacy Policy so that they are aware of how aelēc uses their personal data.

What are your rights when you provide us with your personal data?

As a User, you have the right of access, rectification, objection, erasure, restriction of processing, data portability, and the right to withdraw your consent freely at any time.

You may exercise these rights by sending a signed written request to the Asociación de Empresas de Energía Eléctrica (aelēc), Paseo de la Castellana, 141, 12th floor, 28020 Madrid, or by sending a written communication to dpo@aelec.es, attaching a copy of your ID document to the email. You may also lodge a complaint at any time with the Supervisory Authority (Spanish Data Protection Agency), particularly if you have not received a satisfactory response regarding the exercise of your rights, by submitting a written request via the website https://www.aepd.es.