Privacy Policy

Introduction

 

The protection of personal data is one of the values of our company. We are fully committed to complying with the regulations on the protection of personal data in force, being this compliance a priority objective.

The purpose of this policy is to explain how personal data are treated within the NEXUS ENERGÍA website, forms, apps and other digital platforms or electronic media owned by NEXUS ENERGÍA. This policy is also applicable, insofar as it may affect the processing of data of users of social networks on which NEXUS ENERGÍA performs a processing of their data and depending on their relationship with NEXUS ENERGÍA.

You will be able to join the groups that our company has in different social networks. The user who becomes a fan of the company or a member of any of these groups must accept the terms of use and privacy policy of the corresponding social network.

The person in charge of the treatment

The person responsible for the processing of your personal data is our company: NEXUS ENERGÍA with NIF A-62.332.580 and address at Avenue Diagonal 575, module II, floor 5a – 08029 – Barcelona guarantees the processing of personal data with the utmost confidentiality and confidentiality and only for those purposes for which consent has been given or has been informed, all in accordance with the General Data Protection Regulation (“GDPR”) and any other applicable regulations.

Your data may also be processed, under identical conditions, by THE YELLOW ENERGY S.L.U., a company belonging to the same business group, located at Avenue Diagonal 575, module II, floor 5a – 08029 – Barcelona (NIF B66027731).

NEXUS ENERGÍA, S.A. and THE YELLOW ENERGY S.L.U. have appointed a Data Protection Delegate, with whom the user can contact to resolve any questions at the following email: privacidad@nexusenergia.com

 

Purposes of treatment

Our company collects the user’s personal data according to the relationship established with the user, based on the following purposes:

  • In order to manage the queries and requests made by the user.
  • To offer you the services and products in which the user registers or has given his consent and which are offered by our company.
  • To send commercial communications with prior consent by e-mail or equivalent means of electronic communication, SMS, regular mail or telephone contact.
  • If the user is our customer or has expressly consented to receive our newsletters or information about certain products or services, his/her data will be processed for the management and control of the sending of such information.
  • To comply with legal obligations, or in connection with any contractual relationship we may have with you.
  • In case of contracting Nexus Energía products, to manage your existing contractual relationship and the management of user care. Nexus Energy may consult economic solvency files to assess the degree of compliance with contractual obligations. In case of non-payment, our company may communicate it to these files, provided that respecting the applicable regulations and ensuring all user rights
  • Likewise, navigation data and user cookies may be processed for the purpose of improving your accessibility as a user, customizing and analyzing your navigation, as well as to display advertising and ads based on your interests always according to our cookies policy, which must be accepted prior to browsing our digital platform.
  • Other purposes indicated in the data collection forms within the digital platform, whose data have been provided by the user.

Any other purpose will be communicated to you before proceeding to the processing of your data in the corresponding link provided for this purpose.

Nexus Energy may use automated systems and other means to define user profiles in order to make offers, or actions to improve services or products, using its own information, as well as information from third party sources, if the user had also consented. Additionally, Nexus Energy may use the data dissociated from the user, always preserving their anonymity, even after the end of the relationship, in order to use them within their support systems for decision making and business management.

Call recording

Calls from/to our customer service and sales department

Through the calls you may make or receive from our customer service and/or sales department we may collect the information you provide during the conversation, such as your name and surname, address, email, among others, and we will use them to manage the request, reported incident or process the contracting of a service. We will proceed to the recording of those calls related to claims and complaints in order to attend, manage and accredit them and guarantee the quality of the service; we will also record those related to the formalization and contractual modifications in order to manage and accredit the services or procedures that are requested by you or offered by us. The legal basis for this data processing is the execution of the pre-contractual and contractual relationship, compliance with legal obligations and our legitimate interest to be able to deal with possible claims or actions that may be exercised. The period of conservation of the recordings will be the necessary to fulfill the informed purpose. However, after fulfilling this purpose, they will remain blocked to meet possible liabilities that may arise, and only at the disposal of judges and courts.

 

Conservation periods

 

Your data will be kept for the period established in each section of the website in which personal data are requested, or in any form, application or other means by which you have given your consent, unless you consent to retain them for a longer period, without prejudice to conservation and maintenance under proper blocking for their availability to the authorities with jurisdiction in the various matters that are applicable and to deal with claims. In such a case, the data will be kept blocked until the expiration of the statute of limitations, at which time it will be deleted.

 

Legitimacy for the processing of your data

 

The legal basis on which the processing of your data is based may be the performance of a contract, compliance with a legal obligation, consent obtained from the user, or legitimate interest, as applicable from time to time and in accordance with the regulations in force.

You may withdraw or modify the consent given at any time based on your rights.

If for the performance of any contract management or specific request, it is necessary for the user to provide personal data of persons other than the owner, the user must previously and expressly inform them of the content of this policy and obtain their prior consent for the processing of their data.

Access and registration on social networks is prohibited to minors under fourteen (14) years, so that it is also prohibited access and use of minors under fourteen (14 years) to the official page of NEXUS ENERGÍA, S.A. in the same. For its part, if the user is incapable, NEXUS ENERGÍA, S.A. warns that the consent of the holder of parental authority or guardianship of the user or his legal representative will be required for access and use of this official website NEXUS ENERGÍA, S.A. The company will be expressly exonerated from any liability that may arise from the use of its official website by minors and incompetents being the responsibility of their legal representatives in each case.

 

Recipients of personal data and international transfers

 

Your data will not be sold or rented.

Nexus Energía may give access to certain service providers who perform certain activities for the company, but in no case will process the data for their own purposes. In the event of contracting the supply, the customer’s data will be communicated to the distribution company and will be included in a file under the responsibility of the latter, called Supply Point Information System, in accordance with the provisions of the legislation in force.

The company may report the situation of non-payment to companies that provide solvency and credit services in compliance with the applicable regulations. It may also transfer the data to the competent authorities and agencies in compliance with the corresponding legal and tax obligations. The data related to possible supply contracts will also be communicated to the Tax Administration for the purposes set forth in Law 58/2003 General Tax Law and/or Law 36/2006, on measures for the prevention of tax fraud. Likewise, by virtue of Royal Decree 897/2017 regulating among other issues the figure of the vulnerable consumer, Nexus Energía may communicate the data of customers in a situation of non-payment to the corresponding administration so that it can determine the situation of vulnerability.

In some cases, personal data may be communicated to or accessed by companies outside the European Union. In these situations our company will implement all measures and controls to ensure and protect the processing of your personal data.

The main measures adopted by our company when an international transfer of personal data takes place are the signing of standard contractual clauses approved by the European Commission or, where applicable, any competent supervisory authority in accordance with Article 46 of the GDPR, as well as adherence to Codes of Conduct or other certification mechanisms approved in accordance with Article 46 of the GDPR. You can request the list of providers that process data in a third country at privacidad@nexusenergia.com.

Data transfers in social networks such as Facebook and Twitter, located in the United States, which users can join, will be covered by the same mechanisms indicated in the previous paragraph.

The user is informed that all information and content posted on the official website of NEXUS ENERGÍA, S.A. in any social network may be known by other users of the official website and the platform of that social network. Consequently, all information and content posted by the user on the official website of NEXUS ENERGÍA, S.A. in the relevant social networks will be communicated to other users by the very nature of the service.

Regarding the use of social networks, NEXUS ENERGÍA, S.A. informs the user that this entity is only responsible and guarantees the confidentiality, security and data processing in accordance with this policy, with respect to personal data collected from the user through social networks, not having any responsibility for the processing and subsequent use of personal data that could be made both by the owner of the social network and by third party service providers of the information society that may access such data because of the provision of their services or exercise of their activity, third parties that establish hyperlinks to the social network, or those responsible to whom through hyperlinks NEXUS ENERGÍA, S.A. refers users attached to the official page of Nexus Energía in social networks.

 

Exercise of rights

 

As a consequence of the processing of your personal data by our company, the legislation in force grants you the following rights:

Right of access: You have the right to know what personal data we process about you in accordance with the purposes we have informed you about.

Right of rectification: You have the right to rectify any data that is inaccurate or incomplete.

Right of deletion: You may request that your personal data be deleted from our systems.

Right to object: You may object to the processing of your data in connection with direct marketing activities. As well as for personal reasons, unless the basis for the processing is legitimate interest.

Right to limitation of processing: You may request the limitation of processing in the event that its accuracy is contested or when it is unlawful and you object to the deletion of your personal data and request instead the limitation of its use. Also when the data are no longer necessary for processing, but you need them for the formulation, exercise or defense of claims.

Right to data portability: You will have the right to obtain a copy of all data you have provided to us and where technically feasible, you will have the right to request that your personal data be communicated to another data controller.

You may exercise these rights by contacting the Data Protection Delegate of our company through any of the following means and enclosing a copy of your ID card or equivalent document:

  1. By e-mail to be sent to privacidad@nexusenergia.com.
  2. By mail addressed to Avenue Diagonal 575, module II, floor 5a – 08029 – Barcelona.

In the event that you have the need to make a query or suggestion regarding the processing of your personal data, you may also contact the addresses provided for the exercise of rights.

You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD), the competent data protection authority in Spain.

 

About information security

 

NEXUS ENERGY uses information security techniques generally accepted in the industry, such as firewalls, access control procedures and cryptographic mechanisms, all in order to prevent unauthorized access to data. To achieve these purposes, the user/customer accepts that the provider obtains data for the purposes of the corresponding authentication of access controls.