Privacy policy

1. Additional information on data protection

1.1. This Privacy Policy has been drafted in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and with Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights. CYE ENERGÍA, S.L.U. provides users of the website WWW.CYE-ENERGIA.COM and its related sites, hereinafter referred to as the websites, with data protection information in an easy-to-understand question-and-answer format:

• Who is the Data Controller of your data?

Identity: CYE ENERGÍA, S.L.U.

Postal address: C/ ANTONIO FERRANDIS, 8, ENTRESUELO OFICINA 1-K, VALENCIA

Telephone: 963814388

Email: rgpd@cye-energia.com

Data Protection Officer: IVARSTEC CONSULTING, S.L.

Data Protection Officer contact: Tel. 963 51 52 03 – joseivars@ivarstec.com

• For what purpose do we process your personal data?

CYE ENERGÍA, S.L.U. processes the information you provide us for the following purposes:

1) To manage the contractual relationship, issue invoices, collect payments and send you the invoice for the services and products you contract through our website WWW.CYE-ENERGIA.COM.

When you complete the contracting form on our website, we will send a notification to your telephone number so that you can access the draft version of your contract. Once you have signed the service provision contract, we will process the contact details you have provided us in order to send you emails confirming receipt of your contract, a welcome email, and an email so that you can generate your password for our Customer Area.

2) Through our Customer Area, you will be able to view your electricity consumption data in real time, provided that you have meters installed by CYE ENERGÍA, S.L.U.

3) To manage your registered user credentials on WWW.CYE-ENERGIA.COM and maintain your account in the Customer Area. Once your request has been confirmed and accepted, you will be able to access the contractual documentation in your Customer Area once the entire registration process has been completed.

4) To respond to requests or enquiries made by the user through any of the contact methods made available on the WWW.CYE-ENERGIA.COM website, such as the web form, web chat, etc.

5) To process withdrawals, contractual changes, cancellations and any other management arising from the agreed service provision contract.

6) To handle customer complaints, claims and the exercise of rights.

7) To send you, by any electronic or postal means, advertising about offers and promotions related to the contracting and marketing of our services and products, as well as communications related to news of interest and customer loyalty campaigns. We will request your consent for the processing of your personal data for this purpose in the service provision contract.

When we send you relevant information about the contracted services, commercial advertising and communications related to news of interest and customer loyalty campaigns, we do so through the MAILJET application, owned by CLX Communications (Sinch). By using this application, we can track the clicks made by the user who receives our informational emails. Así, podemos saber cuándo un receptor de nuestros correos de noticias recibe nuestro e-mail, cuando lo abre, si clicka o no en enlaces que hayamos introducido en el e-mail, el lugar donde se entrega el e-mail, etc… asociando todo esto a una ID de usuario que identifica al receptor del mensaje con la finalidad de evaluar y mejorar nuestras campañas de difusión informativa. You can consult MAILJET’s Privacy Policy at https://es.mailjet.com/privacy-policy/

8) To analyse the behaviour of users who browse our website through the software of HOTJAR LTD. This software allows us to analyse your behaviour through heat maps and recordings of your sessions on the website. You can find further information about this purpose by consulting our Cookies Policy.

9) If you are self-employed, we will request data from entities that issue reports regarding your financial or credit solvency, and there is a possibility that we may deny you the supply service if sufficient solvency is not established. In any case, if the contract cannot be concluded for this reason, we will inform you of this as soon as possible.

10) To analyse, through cookies from the Tawk.to web chat, the user ID and the time the user has been browsing our website, by identifying a user ID, in order to send an automatic message through the chat offering our help to answer your queries. In addition, when you contact us through this chat, we know your user ID, to which we associate all conversations we have with you through this chat.

Any other processing of personal data carried out as a result of contracting our services that is not described in this Privacy Policy will be disclosed in the service provision contract itself.

Automated decisions will not be made, such as profiling to offer services or products, except as provided in the Cookies Policy. Should this occur, we will inform you of the logic involved, as well as the significance and the envisaged consequences of such processing for you.

• How long will we keep your data?

If you have entered into a contract, we will keep the personal data you provide us for the period established by tax and fiscal legislation for the limitation of liabilities.

Si usted es un usuario registrado conservaremos sus datos personales para el mantenimiento de su cuenta de cliente mientras usted no solicite la supresión de su cuenta, y en todo caso durante la vigencia de su contrato.

If you have made an enquiry or request for information through the contact methods enabled on the website, we will keep your data for the time strictly necessary to resolve said enquiry and, in any case, for a maximum period of one year from the collection of the data.

If you have filed a claim, we will keep your data for the time strictly and legally necessary to resolve the dispute or controversy caused.

We will continue to send you commercial advertising and communications related to news of interest and customer loyalty campaigns through electronic and postal means, unless you exercise your right to object to such processing.

Los datos sobre su comportamiento en nuestra web recopilados a través del software de Hotjar se conservarán durante 365 días desde su captación. Durante el mismo tiempo conservaremos las conversaciones que tengamos con usted a través del chat de Tawk.to de nuestra web y otra información obtenida a través del chat.

Data relating to enquiries made regarding the customer’s financial or credit solvency will be kept blocked once the information has been obtained and communicated to the customer, where applicable, for a maximum period of 5 years in order to handle possible legal claims.

• What is the lawful basis for processing your data?

When you make an enquiry through the contact forms enabled on our website, we are entitled to process your data on the basis of the consent you give us by accepting our Privacy Policy.

When you enter into a contract, when we create your user account on our website or when we handle any enquiry, claim or suggestion, as well as when we process returns, changes and cancellations, we are entitled to process your data on the basis of the contractual relationship we maintain with you. We request only the data strictly necessary to process your contract.

When we send you a message confirming your contract, we are entitled to process your data in compliance with Article 28 of Law 34/2002 on Information Society Services and Electronic Commerce.

To send you commercial advertising and communications related to news of interest and customer loyalty campaigns, we are entitled to process your data on the basis of the express consent you have given us, or on the basis of the execution of the service provision contract, in the event that you have signed a contract with us and have not expressly objected to receiving such communications at the time of contracting or thereafter.

To analyse your behaviour on our website, we will need your express consent through the acceptance of Hotjar analytical cookies and/or Tawk.to chat cookies, which you provide through the cookie banner settings.

To request reports relating to the financial or credit solvency of a customer who wishes to contract our services, we are entitled to process such data on the basis of the pre-contractual or contractual relationship we maintain, and pursuant to Article 20 of Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights.

• ¿A qué destinatarios se comunicarán sus datos?

We will only disclose your personal data to entities that issue reports relating to your financial or credit solvency when you request the provision of our services and in accordance with our Privacy Policy. Outside these cases, we will disclose your personal data to the entities indicated in the personal data protection section of the service provision contract that we sign with you.

There are also companies to which CYE ENERGÍA, S.L.U. does not disclose data, but which provide us with different services. These services may involve the hosting of personal data by said companies or occasional access to such data by them. These companies act as data processors, and we have signed a contract with them to guarantee the security of personal data. They are:

*IT services: Different companies provide us with hosting and maintenance services for our corporate emails, hosting services for the corporate website, user behaviour monitoring services for users browsing our website, software maintenance services, web chat hosting services, as well as the execution and safekeeping of backup copies, among other IT services.

*Collaborating commercial agents: Different professionals provide us with external commercial services in order to inform about the services offered, acquire customers and represent our brand.

*Electronic signature and authentication service: There are companies that provide us with the electronic signature service that users can use on the documents offered through our website, as well as the execution and safekeeping of backup copies of the signed documents.

International data transfers will be made to GOOGLE LLC. when using its domain hosting service for our corporate emails, GMAIL. GOOGLE LLC. is a company that operates worldwide and has its main data centre in the USA. This international transfer is carried out with the appropriate safeguards, as the European Commission’s standard contractual clauses have been signed with GOOGLE LLC., based on Commission Implementing Decision 2021/914/EU of 4 June 2021, which allows transfers to processors located outside the EEA with appropriate safeguards. You may obtain a copy of the aforementioned clause by requesting it by email at rgpd@cye-energia.com.

International data transfers will be made to SITEGROUND SPAIN, S.L. when using its hosting service for our corporate website and the execution and safekeeping of backup copies of the website, SITEGROUND. SITEGROUND SPAIN, S.L. is a company that operates worldwide and has its main data centre in the EEA and the USA. These international transfers are carried out with the appropriate safeguards, as the European Commission’s standard contractual clauses have been signed with SITEGROUND SPAIN, S.L., based on Commission Implementing Decision 2021/914/EU of 4 June 2021, which allows transfers to processors located outside the EEA with appropriate safeguards. You may obtain a copy of the aforementioned clause by requesting it by email at rgpd@cye-energia.com.

International data transfers will be made to DROPBOX, INC. when using its document hosting service, DROPBOX. DROPBOX, INC. is a company that operates worldwide and has its main data centre in the USA. This international transfer is carried out with the appropriate safeguards, as the European Commission’s standard contractual clauses have been signed with DROPBOX, INC., based on Commission Implementing Decision 2021/914/EU of 4 June 2021, which allows transfers to processors located outside the EEA with appropriate safeguards. You may obtain a copy of the aforementioned clause by requesting it by email at rgpd@cye-energia.com.

In addition, international data transfers will be made to CLX Communications (Sinch), LLC. when using its bulk email sending service, MAILJET. CLX Communications (Sinch) is a company that operates worldwide and has its main data centre in Europe, although it has data processors in the USA. This international transfer is carried out with the appropriate safeguards, as the European Commission’s standard contractual clauses have been signed with CLX Communications (Sinch), based on Commission Implementing Decision 2021/914/EU of 4 June 2021, which allows transfers to processors located outside the EEA with appropriate safeguards. You may obtain a copy of the aforementioned clause by requesting it by email at rgpd@cye-energia.com.

International data transfers will be made to TAWK.TO.INC. when using its online chat service. TAWK.TO.INC. is a company that operates worldwide and has its main data centre in the USA. This international transfer is carried out with the appropriate safeguards, as the European Commission’s standard contractual clauses have been signed with TAWK.TO.INC., based on Commission Implementing Decision 2021/914/EU of 4 June 2021, which allows transfers to processors located outside the EEA with appropriate safeguards. You may obtain a copy of the aforementioned clause by requesting it by email at rgpd@cye-energia.com.

No other international data transfers are planned, except as provided in the Cookies Policy.

• What are your rights when you provide us with your data?

• The data subject has the right to obtain confirmation as to whether or not CYE ENERGÍA, S.L.U. is processing personal data concerning them.
• El interesado tiene derecho a acceder a sus datos personales, así como a solicitar la rectificación de los datos inexactos o , en su caso, solicitar su supresión cuando, entre otros motivos, los datos ya no sean necesarios para los fines que fueron recogidos.
• The data subject may request the restriction of the processing of their data, in which case we will only keep it for the exercise or defence of claims.

• Likewise, in certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data, as well as withdraw the consent given for such processing. CYE ENERGÍA, S.L.U. will stop processing the data, except for compelling legitimate reasons, or for the exercise or defence of possible claims.
• The data subject has the right to receive the personal data concerning them, which they have provided to us, in a structured, commonly used and machine-readable format, and to transmit it to another data controller without hindrance from the controller to whom the data was provided.
• The data subject has the right not to be subject to a decision based solely on automated processing of their data, including profiling, which produces legal effects concerning them or similarly significantly affects them. Profiling refers to any form of processing of personal data that evaluates personal aspects, in particular to analyse or predict aspects related to work performance, economic situation, health, personal preferences or interests, reliability or behaviour.

To exercise these rights, you may send a written request to the following address: C/ ANTONIO FERRANDIS, 8, ENTRESUELO OFICINA 1-K, VALENCIA, or to the following email address: rgpd@cye-energia.com. We will contact you to indicate the steps to follow in order to exercise your data protection rights. Likewise, we inform you that you may file a complaint with the Spanish Data Protection Agency, especially if you consider that the exercise of your rights has not been duly satisfied.

Contact details of the Spanish Data Protection Agency

Address: C/ JORGE JUAN, 6, 28001 MADRID

Contact telephone numbers: 901 100 099 – 912 663 517

Website: www.aepd.es

1.2. Mere access to the website, as well as to all or part of its content and services, implies full acceptance of this Privacy Policy, which also applies prior to the possible contracting of the services that CYE ENERGÍA, S.L.U. makes available to customers. This Privacy Policy must be accepted and complied with before accessing and potentially contracting through the website.

1.3. You accept that browsing the website constitutes a freely expressed act of will for the collection and processing of data by CYE ENERGÍA, S.L.U. CYE ENERGÍA, S.L.U. may freely make changes to the website’s Privacy Policy. Such changes will be indicated in this Privacy Statement, as well as in any other place we consider appropriate so that you are aware of the information collected, how we process it and under what circumstances, where applicable, we disclose it.

2. Data collection in the possible contracting of services from CYE ENERGÍA, S.L.U.

2.1. At the time of accepting the contracting conditions for the services of CYE ENERGÍA, S.L.U., the company will need to collect certain basic and essential data for the provision of the services. The aforementioned data are real name and surname, form of address, address, optional address, postcode, town/city, country, DNI/National ID, a valid email address and contact telephone number, as well as any other information that may be relevant for contractual purposes regarding your person and representation.

At all times, the user will be informed of the necessary nature of collecting such data for the proper management of the provision of services.

2.2. Likewise, for the provision of the services, CYE ENERGÍA, S.L.U. may request a series of additional data from the user through in-person or telephone assistance. The user will be informed, at the appropriate time, of the collection and processing of such data.

2.3. Whenever CYE ENERGÍA, S.L.U. requests the bank current account number of a customer who wishes to contract our services, it will do so in encrypted form and in compliance with the strictest duty of confidentiality.

2.4. For a better provision of services, you authorise CYE ENERGÍA, S.L.U. to verify, investigate and/or check the data provided. You accept that CYE ENERGÍA, S.L.U. may disclose your personal data in compliance with the requirements of a legal proceeding, court order or judicial process. In addition, you accept that, if CYE ENERGÍA, S.L.U. sells part or all of the company or merges with another company, it may disclose your information to the new business partners.

3. Limitation of liability

CYE ENERGÍA, S.L.U. is responsible only for the information it requests and collects from users who wish to contract its services, and shall not be liable at any time for any other personal information that may eventually be transferred, transmitted or provided by the users of the website themselves through any other mechanism.

4. Data quality guarantee

You guarantee that the data provided are true, accurate, complete and up to date, and you shall be responsible for any direct or indirect damage or loss that may arise as a consequence of the breach of this obligation, both to CYE ENERGÍA, S.L.U. and to third parties.

5. Consent for compliance with the LSSI-CE

5.1 In compliance with Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce, CYE ENERGÍA, S.L.U. will request, and the user may give, their consent so that, if they so wish, CYE ENERGÍA, S.L.U. may use their data for the purpose of sending them information and advertising both about the website and about the different offers, special promotions and third-party service providers.

5.2 CYE ENERGÍA, S.L.U., in order to guarantee the security and confidentiality of your personal data, has adopted the relevant security measures and has installed the technical means available to it to prevent the loss, misuse, alteration, unauthorised access and theft of the personal data provided to CYE ENERGÍA, S.L.U.

Social Media Privacy Policy

1. Introduction

In compliance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE), CYE ENERGÍA, S.L.U. informs users that it has created a page on the Social Networks FACEBOOK (CYE Energia), TWITTER (@CYE_Energia), INSTAGRAM (@cye.energia), YOUTUBE (CYE Energia), LINKEDIN (CYE Energía), with the main purpose of advertising its products and services. Details of CYE ENERGÍA, S.L.U.:

Company name: CYE ENERGÍA, S.L.U.

DNI: B-98516693

Address: C/ ANTONIO FERRANDIS, 8, ENTRESUELO OFICINA 1-K, VALENCIA

Email: rgpd@cye-energia.com

Telephone: 963814388

Website: WWW.CYE-ENERGIA.COM

The user has a profile on the aforementioned social networks and has decided to join the page created by CYE ENERGÍA, S.L.U., thereby showing interest in the information advertised on the network. By joining our page, the user gives their consent for the processing of the personal data published on their profile.
The user may access the privacy policies of the social networks themselves at any time, as well as configure their profile to guarantee their privacy.
CYE ENERGÍA, S.L.U. has access to and processes the user’s public information, especially their contact name. These data are used only within the social networks themselves. They are not processed for any other purpose.
With regard to the rights of access, rectification, erasure, objection, restriction, right to be forgotten and portability available to you, which may be exercised before CYE ENERGÍA, S.L.U. in accordance with the General Data Protection Regulation, you should take the following details into account:

• Access: This will be defined by the functionality of the Social Networks and the ability to access information from user profiles.
• Rectification: This may only be satisfied in relation to information that is under the control of CYE ENERGÍA, S.L.U., for example, deleting comments published on the page itself. Normally, this right must be exercised before the Social Networks.
• Erasure, Objection, Restriction: As in the previous case, these may only be satisfied in relation to information that is under the control of CYE ENERGÍA, S.L.U., for example, ceasing to be connected to the profile.
• Right to be forgotten: As in the previous case, this may only be satisfied in relation to information that is under the control of CYE ENERGÍA, S.L.U., for example, ceasing to be connected to the profile, or by directly exercising this right before Google through the following link: https://www.google.com/webmasters/tools/legal-removal-request?complaint_type=rtbf&visit_id=1-636549141159245608-1035498732&rd=1#

CYE ENERGÍA, S.L.U. will carry out the following actions:

• Access to the public information of the profile.
• Publication on the user’s profile of any information already published on the CYE ENERGÍA, S.L.U. page.
• Sending personal and individual messages through the channels of the Social Network.
• Updates to the page status that will be published on the user’s profile.
• The user can always control their connections, delete content that is no longer of interest to them and restrict with whom they share their connections. To do so, they must access their privacy settings.

2. Publications

Once the user has joined the CYE ENERGÍA, S.L.U. page, they may publish comments, links, images or photographs, or any other type of multimedia content supported by the Social Network. In all cases, the user must be the owner of such content, hold the copyright and intellectual property rights, or have the consent of the affected third parties. Any publication on the page, whether texts, graphics, photographs, videos, etc., that violates or may violate morality, ethics, good taste or decorum, or that infringes, violates or breaches intellectual or industrial property rights, image rights or the Law, is expressly prohibited. In such cases, CYE ENERGÍA, S.L.U. reserves the right to immediately remove the content and may request the permanent blocking of the user. CYE ENERGÍA, S.L.U. shall not be held responsible for content freely published by a user. The user must bear in mind that their publications will be known to other users, and therefore they are primarily responsible for their own privacy. Images that may be published on the page will not be stored by CYE ENERGÍA, S.L.U., although they will remain on the Social Network.

3. Contests and promotions

CYE ENERGÍA, S.L.U. reserves the right to carry out contests and promotions in which users connected to its page may participate. The rules of each contest or promotion, when the Social Network platform is used for this purpose, will be published on the same platform. This will always be carried out in compliance with the LSSI-CE and any other applicable regulation. The Social Network does not sponsor, endorse or administer any of our promotions in any way, nor is it associated with any of them.

4. Advertising

CYE ENERGÍA, S.L.U. will use the Social Network to advertise its products and services. In any case, if it decides to process your contact details in order to carry out direct commercial prospecting actions, this will always be done in compliance with the legal requirements of the General Data Protection Regulation and the LSSI-CE.
Recommending the CYE ENERGÍA, S.L.U. page to other users so that they may also enjoy promotions or be informed of its activity shall not be considered advertising. Below, we provide the links to the privacy policies of the Social Networks:

FACEBOOK: https://www.facebook.com/privacy/explanation

TWITTER: https://twitter.com/es/privacy

INSTAGRAM: https://www.instagram.com/terms/accept/?hl=es

YOUTUBE: https://www.youtube.com/intl/es/about/policies/#community-guidelines

LINKEDIN: https://es.linkedin.com/legal/privacy-policy

VALENCIA, 4 MARCH 2021