Privacy Policy

At ANDROS ALICANTE, S.L., we handle personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD). In this policy, we explain what data we process, for what purpose, and what your rights are.

1. Data Controller

Controller

ANDROS ALICANTE, S.L. (BIO2ENERGIES)

Tax ID (NIF)

B54914031

Address

36 Teatro Street, Ground Floor, 03001 Alicante (Spain)

Email

ventas@bio2energies.com

Telephone and WhatsApp

+34 613 63 23 09

We have not appointed a data protection officer. For any questions regarding privacy, please contact us at the email address provided.

2. What data we process

This website does not have any forms or registration areas, and it does not use any analytics or advertising tools. We only process personal data in the following cases:

• When you contact us via email, WhatsApp or phone: your name, contact details, and any information you wish to provide in your inquiry, such as your electricity consumption, the type of installation, or the address where the work would be carried out.
• When you are a customer: in addition to the above, the data needed to prepare the quote, carry out the installation, invoice and provide the warranty and technical support, such as the tax ID (NIF) and billing address.
• When you are browsing the website: the technical data that servers automatically record during each visit, such as the IP address, date and time, requested page, and browser type.

We request that you do not provide us with information about other people without their consent, and that any information you provide to us is accurate and up-to-date.

3. What is the purpose of the treatment, and what is the legal basis for it?

Answering your enquiries and preparing quotes

Respond to any inquiries or requests for information or quotes that you send us. Legal basis: our right to apply pre-contractual measures at your request (Article 6.1.b of the GDPR) and, in general inquiries, our legitimate interest in responding to those who contact us (Article 6.1.f of the GDPR).

Managing our relationships with customers

Execute the supply and installation contract, issue invoices, and provide warranty and technical support. Legal basis: the execution of the contract (Article 6.1.b of the GDPR) and compliance with legal obligations, particularly tax and accounting obligations (Article 6.1.c of the GDPR).

Sending you marketing information

We will only send you commercial communications if you have given us your consent (Article 6.1.a of the GDPR) or, if you are already a customer, when they relate to products or services similar to those you have purchased (Article 21.2 of the LSSI-CE). You can object or withdraw your consent at any time, in a simple and free manner.

Maintaining website security

Maintaining the website's functionality, protecting it from attacks and fraudulent use, and resolving technical issues. Legal basis: our legitimate interest in the security of the network and information (Article 6.1.f and Recital 49 of the GDPR).

We do not make automated decisions or create profiles based on your data.

4. How long do we keep them?

• Enquiries and quotes not accepted: the time required to address them, and a maximum of one year from the last contact.
• Customer data: as long as the commercial relationship and the product warranty period last, and subsequently, during the legal periods of prescription; for example, six years for accounting records (Article 30 of the Commercial Code) and four years for tax purposes.
• Marketing communications: until you withdraw your consent or object.
• Technical navigation logs: the essential time required to ensure the website's security.

Once those deadlines have passed, the data is either deleted or, if the law requires it, is kept under lock and key until any potential liabilities have expired (Article 32 of the LOPDGDD).

5. Who we share it with

We do not share your data with third parties, except as required by law; for example, with the tax authorities, other relevant public authorities, or courts.

To provide our services, we work with providers who access data on our behalf, acting as data processors, and who can only process it according to our instructions and in accordance with Article 28 of the GDPR: these include web hosting and content distribution network services (Cloudflare, Inc.), email services, and accounting and tax advisory services.

If you contact us through WhatsApp, that service is provided by WhatsApp Ireland Limited, which acts as the data controller in accordance with its own privacy policy.

6. International Transfers

Cloudflare, Inc. is based in the United States and adheres to the EU-U.S. Data Privacy Framework (DPF), which was recognized by the European Commission in its decision of July 10, 2023. If any other provider processes data outside the European Economic Area, they will do so with appropriate safeguards, such as a DPF decision or standard contractual clauses approved by the European Commission.

7. Your rights

You can exercise the following rights at any time:

• Access: to find out if we are processing your data and to obtain a copy.
• Rectification: correct inaccurate or incomplete data.
• Erasure: ask us to erase your data, among other cases, when it is no longer necessary.
• Objection: object to processing based on our legitimate interest and, in any case, to the sending of marketing communications.
• Restriction: ask us to suspend processing in certain cases.
• Portability: receive the data you have given us in a structured, commonly used format, or have us transmit it to another controller.
• Withdrawal of consent that has been provided, without affecting the legality of the previous treatment.

To exercise these rights, please write to us at ventas@bio2energies.com or by postal mail to our address, indicating which right you wish to exercise. If we have reasonable doubts about your identity, we may request additional information to confirm it. We will respond within one month, with an extension of two months in complex cases (Article 12 of the GDPR).

If you believe that we have not adequately addressed your request, you can file a complaint with the Spanish Data Protection Agency (C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es).

8. Minors

This website is not intended for users under the age of 14, and we do not knowingly collect or process the personal data of minors. If you know that a minor has provided us with personal data, please inform us so that we can remove it.

9. Security

We implement appropriate technical and organizational measures to protect your data from loss, alteration, or unauthorized access. These measures include the use of encrypted connections (HTTPS) throughout the website.

10. Changes to this policy

We can update this policy to adapt it to changes in legislation or in our treatments. The current version is the one published on this page, with the date of its last update.