Privacy Policy
Privacy Policy
1. Data Controller
Exus Management Renewables, S.L.U. (“EXUS”), located at Paseo de la Castellana, 60 – 3rd floor, 28046 Madrid and registered before the Commercial Registry of Madrid un number B-87053443.
Contact information: info@exusrenewables.com.
2. What Data Do We Process and for How Long?
EXUS will process:
(i) Personal data provided in electronic communications or general contact inquiries.
(ii) Data derived from the commercial relationship with EXUS, including the services used.
(iii) Information generated through IT processes, such as browsing habits, IP address, and data collected through cookies, pixel tags, and other technologies.
(iv) Information inferred from lawfully obtained data.
Retention period:
- Data will be processed while the user remains active in the digital environment, a commercial or contractual relationship exists, or as required for legal compliance.
- Once the relationship ends, data will be deleted unless necessary for compliance with applicable legal obligations.
3. Purposes of Data Processing
EXUS will process personal data for the following purposes:
(i) To professionally, administratively, financially, and, where applicable, fiscally manage the contracted services.
(ii) To send necessary information for service provision.
(iii) To evaluate résumés in recruitment processes.
(iv) To comply with legal obligations.
(v) To manage inquiries, suggestions, and requests.
(vi) To send information about new services similar to those contracted or of interest to the user, via any means, including electronic communication.
Legal basis for processing:
- Performance of a contract: Contractual relationship with the user.
- Compliance with legal obligations: Applicable regulations (e.g., anti-money laundering laws).
- Legitimate interest: Commercial communications while a legal relationship exists between the parties.
- Explicit consent: When legitimate interest does not apply.
- User Responsibility: If the user provides third-party data, they guarantee that these individuals are of legal age, that the data provided is accurate and truthful, and that they have been informed of the content of this privacy policy.
4. Is Data Shared with Third Parties?
Yes, EXUS may share data with:
- External service providers required for the execution of contracted services, such as consultants, lawyers, accounting firms, notaries, appraisers, etc.
- Government authorities, law enforcement agencies, judges, and courts in compliance with legal requirements.
EXUS does not share data with third parties for commercial purposes without the user's prior consent.
International Data Transfers:
In the event of international data transfers, such as communications with Exus Renewables North America, appropriate measures will be implemented to ensure data protection in compliance with applicable regulations.
5. User Rights
Users may exercise their rights at any time:
- Access: Request information about personal data processed by EXUS.
- Rectification: Correct inaccurate or incomplete data.
- Erasure: Request the deletion of personal data.
- Objection: Object to data processing for legitimate reasons.
- Restriction of processing: Limit the use of personal data in certain cases.
- Data portability: Obtain data in a structured, commonly used format or request its transfer to a third party.
To exercise these rights, users may contact info@exusrenewables.com or visit EXUS at Paseo de la Castellana, 60 – 3rd floor, 28046 Madrid.
6. Security Measures and Confidentiality
EXUS adopts technical and organizational measures to protect personal data against loss, alteration, misuse, unauthorized access, and theft, ensuring its integrity, availability, and confidentiality.
7. Changes to the Privacy Policy
EXUS reserves the right to modify this policy to adapt to regulatory changes or organizational updates. Any modifications will be notified on the website.