PRIVACY POLICY
OUR PRIVACY POLICY AT A GLANCE
Who are we? We are INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. and we process your data as Data Controller. This means that we are responsible for how we use and protect your personal data.
What do we use your data for? We use the data you have provided online or by any other means to deal with your queries and suggestions, to provide you with the services or products you have requested, to register you as a user, to send you the personalised communications to which you have subscribed and to process your online booking.
Why do we have them? We are entitled to process your data for various reasons. When you fill in a form or send us an e-mail with a query or suggestion, we have a legitimate interest in dealing with it. When you make a reservation or purchase we must perform the contract you accept with us, just as we have a legal obligation to issue an invoice containing your data when the service is carried out. We are also entitled to your consent when you give us permission to send you our newsletter and personalised offers.
With whom do we share your data? We will only share your data with those companies that collaborate with us in order to attend to the requests received and provide our services or products, banks and organisations required by law. Under no circumstances will we sell your data to third parties.
What rights do you have? You have the right to access, rectify or delete your personal data. You also have the right to object to our use of data that you have previously authorised us to use, to transfer it and not to be subject to automated individualised decisions.
In processing your personal data, we apply the following principles to ensure the greatest possible protection for you:
- Principle of lawfulness, fairness and transparency: We will always require your consent to the processing of your personal data for one or more specific purposes that we will inform you of in advance with absolute transparency.
- Data minimisation principle: We will only request data that is strictly necessary in relation to the purposes for which we require it. As little as possible.
- Principle of limitation of the storage period: the data will be kept for no longer than necessary for the purposes of the processing, depending on the purpose, we will inform you of the corresponding storage period, in the case of subscriptions, we will periodically review our lists and delete those records inactive for a considerable time.
- Principle of integrity and confidentiality: Your data will be treated in a way that ensures adequate security of personal data and guarantees confidentiality. You should be aware that we take all necessary precautions to prevent unauthorised access or misuse of our users’ data by third parties.
In this privacy policy you will find more detailed information about the use we make of the personal data of our customers, suppliers and users, and in general of all the people who maintain contact with us, regardless of the means they have used to communicate with us (online form, by telephone or by e-mail, in person).
We like to be transparent about what we do with your personal data, so that you understand the implications of the uses we make of it, or the rights you have in relation to your data. That is why we keep our Privacy Policy, Legal Notice and Cookie Policy up to date, information that you can consult on this website.
If you have any questions or would like more information about the privacy policy, please read on.
INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A., undertakes to comply with the legislation in force at all times with regard to the processing of personal data. By means of the following privacy policy INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A., in accordance with the requirements of the RGPD and the LOPDGDD, informs users and persons whose data it processes of:
1. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?
INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. is responsible for the processing of your data:
| Identity | INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. – A38259115 |
| Address | Polígono Industrial Granadilla. Parque Eólico, 38600 – Granadilla (Santa Cruz De Tenerife) |
| Telephone | 922747700 |
| Fax | 922391001 |
| Web | https://www.iter.es/ |
| iter@iter.es | |
| Data Protection Officer | Aixa corpore, S.L. |
INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. informs the user that the data provided through browsing our website, the different data collection forms or when sending e-mails, will be processed by INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S. A. and that this processing is included in the Register of Processing Activities managed by INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. in accordance with that established in the Register of Processing Activities. A. and that such processing is included in the Register of Processing Activities managed by INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. in accordance with the provisions of the RGPD.
2. WHAT ARE YOUR PERSONAL DATA USED FOR?
At casas.iter.es, we process data both from users of our website and from third parties who maintain relationships with us. In order to make it easier for you to know how we process your data, we have differentiated the purpose for which we use the data, the types of data and the basis of legitimacy according to the category of people whose data we process. Below, we classify the people whose data we process according to the type of relationship they have with INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A.
- Web users
What data do we collect from our website users?
- Data of users who fill in any of the available forms: The personal data that INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. requests include:
- Identification data: name and surname, telephone number, postal and e-mail address.
- Data relating to the application
- Data of users who subscribe to the newsletter:
- Identification data: Name and surname, e-mail address.
- Data of users who register on our platform:
- Identification data: Name and surname, postal and e-mail address, telephone, billing address.
- Data of users who browse our website: Data provided by cookies and analytical tools.
For what purposes will we process your personal data?
When you accept our privacy policy, you authorise us to use the personal data provided for the following processing:
- To send you the information and provide you with the service you request through the various forms available on our website.
- Organising, communicating and holding events or similar.
- Send you the newsletter when you are subscribed, with the events, activities and promotions of INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. and the sector that may be of interest to you.
How do we get your data?
We obtain your data by:
- The form filled in by the web user for the purpose stated therein. The form is subject to acceptance of this privacy policy by ticking the box indicated.
- We obtain browsing data from the different cookies that the user accepts when accessing casas.iter.es for the first time.
What is the legitimacy for the processing of your data?
The express consent of the user (article 6.1.a. RGPD) expressed by filling in the different forms, ticking the box to send the newsletter and promotions of INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. and of the sector that may be of interest to the user is what legitimises the processing of data by INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A.. The user may revoke the consent given at any time, although if the consent is revoked, this does not affect the processing of data carried out prior to the revocation of consent.
Legitimate interest for the elaboration of browsing profiles and the detection of preferences through the installation of cookies.
The execution of a contract or the adoption of pre-contractual measures when the client makes a request through the different forms available to the user on our website or requests information on the services provided by INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A..
- Suppliers
What data do we collect from our suppliers?
- Supplier identification data: The personal data that INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. requests includes:
- Identification data: name and surname, telephone number, postal and e-mail address.
- Employment and professional data
- Activities and business
How do we get your data?
We obtain your data by:
- The signing of the contract that binds us, the acceptance of the budget presented, the receipt of invoices from the supplier and the signing of the contract of the Data Processor, if applicable, for the service provided.
For what purposes will we process your personal data?
To manage information relating to the details of our suppliers of goods and services and their representatives.
Maintaining the contractual relationship with our suppliers.
Management of payments and collections relating to the contracts that bind us.
What is the legitimacy for the processing of your data?
In the execution of a pre-contract/contract to send you the information and carry out the management of the service provided, otherwise it will not be possible to carry it out.
In the legitimate interest of managing the data relating to the representatives of INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A.’s suppliers.
- Clients
What data do we collect from our customers?
- Data of customers who fill in any of the forms available in casas.iter.es as well as in the physical establishment of INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A.
- Identification data: name and surname, telephone number, postal and e-mail address.
- Data relating to the application
- Data of customers who register on our platform:
- Identification data: Name and surname, postal and e-mail address, telephone, billing address.
- Details of customers who make a reservation or order in our establishment in person:
- Identifying data: Name and surname, postal and e-mail address, telephone, billing address
- Customer data obtained from our contracts and quotations
- Data on customers who make a purchase online or in person:
- Identifying data: Title, name, surname, first name, postal and e-mail address, telephone number, billing address.
- Transaction data: Products purchased/services rendered and means of payment, invoice or purchase receipt.
How do we get your data?
If you are an online customer we obtain your data by:
- The form filled in by the user to request information and/or a quotation, order or to complete the online purchase in our e-commerce. The form is subject to the acceptance of this privacy policy by ticking the box indicated.
- We obtain the browsing data from the different cookies that the client accepts when accessing iter.es for the first time.
If you are a face-to-face customer we obtain your details by:
- The customer registration form.
- Acceptance of the budget submitted.
- The signed contract.
For what purposes will we process your personal data?
- Generate and manage the documentation associated with your requests and purchases.
- To provide you with information about offers, products and services in connection with your purchase.
- Process your reservation or purchase on-line through our platform.
What is the legitimacy for the processing of your data?
In the execution of a pre-contract/contract to send you information and carry out the management of the service provided or the product supplied, which cannot be carried out otherwise.
The user’s consent to receive the newsletter and commercial communications regarding offers, activities and promotions of INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. and the sector that may be of interest to the user and the management of our blog. The user may revoke the consent given at any time.
In the legitimate interest of sending information on the latest news and personalised information and for sending satisfaction surveys on the products or services purchased.
- Job applicants and candidates.
What data do we collect from applicants?
- Candidate data requested in the ‘work with us’ form by INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A.:
- Identification data: name and surname, telephone number, postal and e-mail address.
- Academic and employment data
- Data that the candidate himself/herself includes as annexed documents
How do we get your data?
We obtain your data by:
- By handing in a CV at our premises or by filling in the ‘Work with us’ form on our website.
For what purposes will we process your personal data?
The personal data provided by candidates are only used for the selection processes that are open or will be carried out in the event that the data provided are for our employment exchange.
What is the legitimacy for the processing of your data?
The user’s consent through the inclusion of their data and curriculum vitae on the INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. website to participate in the selection processes that are currently active as well as in future processes that may be carried out as long as they do not oppose the processing of their data.
- Social Networking Contacts
What data do we collect?
- Identifying data in the Social Network: INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. will not ask you for any data beyond that which you have included in your user profile.
For what purposes will we process your personal data?
To answer and manage your queries, requests or petitions.
Engage with you as long as you are part of our community of supporters.
What is the legitimacy for the processing of your data?
In the execution of a pre-contract/contract binding you to the relevant social network and in accordance with its privacy policies:
Facebook http://www.facebook.com/policy.php?ref=pf
Instagram https://help.instagram.com/155833707900388
Twitter http://twitter.com/privacy
LinkedIn http://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
Pinterest https://about.pinterest.com/es/privacy-policy
Youtube https://policies.google.com/privacy?hl=es&gl=es
casas.iter.es will try at all times to establish appropriate mechanisms to obtain the consent of the user for the installation of cookies that require it. When a user accesses our website a pop-up appears informing them of the existence of cookies and that if they continue browsing our website they are giving their consent to the installation of cookies. Acceptance of the installation of cookies implies acceptance of the conservation of the IP address in the records of casas.iter.es, along with the date of acceptance, for a period of one year, in order to demonstrate the consent given. You can obtain more information in our ‘Cookies Policy’.
3. HOW LONG DO WE KEEP YOUR DATA?
- Web users
Data that are processed on the basis of the consent of the web user will be retained for as long as they are relevant for the purpose for which they were collected and the consent is not revoked.
Those data that are processed on the basis of legitimate interest will be kept for a period of time linked to that which motivated the collection of the data, always ensuring adequate guarantees and respect for the rights and freedoms of the data subjects.
Those data that are processed on the basis of the execution of a contract or the adoption of pre-contractual measures will be retained for the duration of the contractual relationship and for the time thereafter that they must be retained by legal obligation.
The IP address obtained through cookies will be kept for a period of one year, in order to demonstrate the user’s consent.
Regarding the period of conservation of cookies, you can obtain more information on our website in the section ‘Cookies policy’.
- Suppliers
Those data that are processed on the basis of legitimate interest will be kept for a period of time linked to that which motivated the collection of the data, always ensuring adequate guarantees and respect for the rights and freedoms of the data subjects.
Data that are processed on the basis of a contract, as well as if part of the processing is legitimised by a legal obligation, the data will be kept for as long as the contractual relationship is in force. The data will be kept for as long as the contractual relationship ends, or in the event that the processing is linked to a legal obligation, for as long as it is legally required. The data cannot be revoked by the data subject except in the case of legally required blocking of the data.
- Clients
Data that are processed on the basis of the customer’s consent will be retained for as long as they are relevant for the purpose for which they were collected and the consent is not revoked.
Those data that are processed on the basis of legitimate interest will be kept for a period of time linked to that which motivated the collection of the data, always ensuring adequate guarantees and respect for the rights and freedoms of the data subjects.
Data that are processed on the basis of a contract, as well as if part of the processing is legitimised by a legal obligation, the data will be kept for as long as the contractual relationship is in force. The data will be kept for the duration of the contractual relationship, in the event that the processing is linked to a legal obligation, and the data may not be revoked by the data subject, except in the case of the legally stipulated blocking of the data.
- Job applicants and candidates
Those data that are processed on the basis of the consent of the job applicant and candidate will be kept for as long as the selection process to which he/she applied is still open. In the event that the application is not for a specific selection process and is for future applications, the period of conservation will be a maximum of one year, at which time the CV will be deleted and destroyed, unless the interested party expresses their wish to keep it and it is updated.
- Social Networking Contacts
The data processed on Social Network contacts will be maintained as long as the user and INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. maintain a relationship on the social network. As INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. does not directly depend on INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A., we will only be able to consult or remove your data in a restricted manner. We will treat your data for as long as the user of the social network is linked to INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. as a ‘friend’, ‘like’, ‘follow’ or similar buttons.
INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. will not be responsible for rectifying your data, restricting the information or the publications you share, but the user of the Social Network will have to do so by configuring their profile in accordance with the privacy policy of the Social Network itself.
Regardless of the legitimacy that supported the collection of the data, it may be processed for scientific, historical or statistical research purposes, always implementing the appropriate safeguards and respecting the rights and freedoms of data subjects.
4. ADDITIONAL INFORMATION ON DATA PROCESSING
Only those over 14 years of age may provide data through our website and e-mail. If you are under this age you must have the consent of your parents or legal guardians.
The user guarantees the authenticity and timeliness of all data provided to INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. and declares that he/she is over 14 years of age, and shall be solely responsible for any false or inaccurate statements made.
In the case of making a reservation of a service or purchase online, the interested party must be over 18 years of age, the age legally established in the civil code to acquire the age of majority and capacity to act.
The personal data processed by INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. may be compulsory or voluntary. No data of special categories will be requested through the web forms in order to guarantee your privacy. In the event that in order to provide you with a service it is necessary to collect data of special categories, they will be requested by another means. The data that will be requested in the forms are:
- Identification data: name and surname, telephone, postal and e-mail address.
- Data relating to the application.
- Data of users who subscribe to the newsletter/ wish to receive information, commercial communications and information.
- Data of users who register on our platform.
Voluntary information is information that the user is not obliged to provide in order to contact us.
The fields marked with an asterisk (*) or with the word (required) in our forms are obligatory, refusal to provide them will mean that we will be unable to provide you with the service or deal with your request.
In the event that you provide us with third party data, you declare that you have their consent and undertake to provide them with the information provided in this clause, exempting INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. from any type of obligation. However, INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. may carry out verifications to verify that the third party has been informed, adopting the diligence measures established in the data protection regulations.
5. TO WHOM WILL YOUR DATA BE DISCLOSED?
No data will be passed on to third parties unless legally obliged to do so or in the event that it is necessary in order to deal with your request.
Among the recipients to whom your data may be disclosed are:
- Group companies.
- Public Administrations and Bodies when so required by tax, labour, Social Security or any other applicable regulations. Companies in charge of data processing (suppliers of fraud detection and prevention, technological services, customer services, advertising and marketing services, and, in general, third party suppliers that are necessary for the provision of the services offered by INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. such as courier and transport service providers, etc.).
International data transfers may also take place in the context of the aforementioned transfers/communications for which INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. will use the tools provided in articles 46 and 49 of the RGPD as a guarantee for those transfers made to countries that do not have an adequacy decision from the European Commission.
In any case, third parties with whom certain personal data is shared will have previously accredited the adoption of appropriate technical and organisational measures for the correct protection of the same and will only be carried out with third countries when there is a binding legal instrument in accordance with articles 46 and following of the RGPD. By accepting this privacy policy, you accept that an international transfer of data may take place in accordance with the guarantees indicated.
If the conditions referred to in Article 46 are not met, the data subject may consent to the international transfer or a contract may be executed in the interest of the data subject. Otherwise, authorisation shall be sought from the supervisory authority.
Likewise, we inform you that some services provided by and for INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. may involve the transfer of personal data to a third country outside the EU, in ‘cloud’ services offered by some of the main international providers (e.g. Google, Microsoft). In these services, the aforementioned compliance will be confirmed.
INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. does not sell customer data to third parties under any circumstances.
6. WHAT RIGHTS DO YOU HAVE AND HOW CAN YOU EXERCISE THEM?
The user may exercise the following rights before INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A.:
- Accessing your personal data
- Rectify them when they are inaccurate or incomplete
- Request the deletion or cancellation of data when, among other reasons, they are no longer necessary for the purposes for which they were collected.
- Oppose your treatment
- To request the restriction of the processing of their data when any of the conditions provided for in the regulations are met
- Request the portability of your data in the cases foreseen in the regulations.
- Prevent automated decisions
- Revoke consents given
In order to exercise their rights, users must send a written request indicating the right they wish to exercise and enclose a document accrediting their identity and a postal or e-mail address for notification purposes. This request can be made either by post to: INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. Polígono Industrial Granadilla. Parque Eólico, 38600 – Granadilla (Santa Cruz De Tenerife), or at the following e-mail address: iter@iter.es.
The data subject is informed that INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. has appointed a Data Protection Delegate to whom he/she may submit any questions regarding the processing of his/her personal data. The interested party may contact the Data Protection Delegate via the following e-mail address dpd@iter.es or at the following postal address: Polígono Industrial Granadilla. Parque Eólico, 38600 – Granadilla (Santa Cruz De Tenerife).
INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. shall reply to the request for the exercise of rights within one month of receiving the request. This period may be extended by a further two months if necessary, taking into account the complexity and number of requests. We will inform you of any extension within one month of receipt of the request, stating the reasons for the delay.
Likewise, the interested parties have the right to complain to the competent Control Authority (Spanish Data Protection Agency) when they consider that INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. has infringed the rights that the data protection regulations recognise in www.aepd.es.
7. ARE MY DETAILS SECURE?
INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. has a contract in force with the hosting company Telefónica De España for the hosting of its web page.
In any case, INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. guarantees the adoption of the appropriate measures to ensure the confidential treatment of your data, taking into account their confidential nature, and undertakes to keep such data secret, treating them with the utmost confidentiality, and declares to have implemented in its information system, the security policies corresponding to the type of data handled in accordance with the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR).
All data provided through our platform is collected using a secure protocol. Our website has an SSL certificate that allows an encrypted connection to be established when a user visits our website and exchanges information with us.
8. LINKS TO OTHER WEBSITES
If you choose to leave our website via links to other websites that do not belong to our company, INSTITUTO TECNOLOGICO Y DE ENERGIAS RENOVABLES, S.A. shall not be held responsible for the privacy policies of these websites or for the cookies that they may store on the user’s computer.
Date: 26 May 2021
Version: V.1.0