PRIVACY POLICY

Purpose

The purpose of this Privacy Policy is to make known the way in which China Three Gorges carries out the processing of personal data of the user of this website, so that you know how the data you provide is collected and protected and freely decide whether or not you want us to carry out its treatment. Accordingly, it is intended to comply with appropriate data processing in accordance with the General Regulation on the protection of personal data 2016/679 (hereinafter RGPD) and the Organic Law 3/2018 on the protection of personal data and guarantee of digital rights (hereinafter LOPDGDD).

Identification of the Controller / Information Society Service Provider.

Identity – Entity: China Three Gorges (Spain) SL
CIF/NIF: B02731693
Postal address: C/ Serrano 67 6ª 28006 – Madrid
Telephone: (x)
E-mail: (X)
Company object: Renewable energy generation
Website: https://ctgeu.com
Registration data: Registered in the Commercial Registry of Madrid, registered on November 30, 2020, in volume 41135, folio 130, entry 1 with page M-729351.

Processing of personal data

The personal identification and contact data that you have provided us, through our contact forms, email, etc., will be treated confidentially and only by personnel authorized by our company.
All categories and types of personal data processed will be duly identified in the corresponding processing activities owned by our company.

Purpose

If you are a customer or supplier, your personal data will be processed for the purpose of establishing and maintaining a pre- and post-contractual, business or commercial relationship, either for the provision of services, for accounting and billing management, or other purposes to which we are obliged to comply with such relationship.
We do not send advertising without the prior consent of the interested parties, except to our clients with a current relationship through a formalized contract.
If you are a potential customer or an applicant for information, we will process your data exclusively to respond to your requests, always with the appropriate prior consent.
The purposes that motivate the processing of personal data will be duly identified in the corresponding processing activities owned by our company.

Legitimation

The processing of your personal data by our company is carried out on the following legitimate bases:

  • The request made voluntarily on your part either for information, employment or contracting our services.
  • For the fulfillment of the contractual, business or commercial relationship with you.
  • For the defense of our interests.
  • To attend to the exercise of your rights regarding the protection of personal data.
  • To comply with other legal obligations.
  • The express, free, informed and unequivocal consent, since we inform you of this privacy policy, which after reading this and being in agreement, you can voluntarily accept by checking the boxes provided for this purpose.
  • We inform you in this regard, that at any time you can change your mind and withdraw your consent. In the event that the user is under 14 years of age, it will be necessary to have the consent of parents, guardians or legal representative, to treat their data. The user is solely responsible for the accuracy of the data he/she sends us.

Data Retention

The personal data provided will be kept for the time necessary to fulfill the purpose for which they are collected, for the time required by law and as long as necessary to purge possible liabilities arising from the treatments mentioned in the purposes.
In the case of job applications, they will be kept for a maximum period of (x) year or until the interested party asks us to delete their data.

Profiling

We do not elaborate profiles using your personal data, but in the case of doing so, you will be informed and asked for prior permission to do so.
Likewise, you have the right to object to this type of processing at any time.

Transfer of data

If you are an information seeker or user of our website, your data will not be transferred to third parties, unless we are legally obliged to do so.
If you are a job applicant, your data may be transferred to other companies in our group, although due authorization will be required in this regard.
If you are a customer or supplier, personal data may be transferred to third parties in compliance with a legal obligation (Tax Agency or other state authority), or in those cases in which it is necessary to provide a service of unavoidable nature to third parties.
Likewise, if you are a client or supplier, personal data may be transferred to entities in which this entity outsources services in order to develop its economic activity.
While it is true, such treatment guarantees the protection of personal data, while the entity guarantees that all outsourced services have committed, through a processing manager contract, to comply with the same security measures implemented by our entity, as well as to submit to the duty of secrecy and confidentiality of personal data processed.
In case of transfers to other entities or to other countries outside the EEA, we will inform you and ask for your prior and express consent.

Security Measures

The entity establishes technical measures to protect personal data in order to avoid its loss, theft or unauthorized use.
These measures have been created according to the type of data processed and the purposes that motivate such processing. These are periodically verified in our internal controls of compliance with personal data protection regulations.

Rights of data subjects

You have the right to know if our entity is processing your personal data; therefore, you have the right to access your data, rectify it if it is inaccurate or request its deletion when the data is no longer necessary, provided that it is legally possible.
You can also exercise your right of opposition, limitation or portability if you deem it appropriate and to do so you can do so in writing by email (x), attaching a copy of your ID to provide identification.
If the exercise of the rights corresponds to a minor under 14 years of age, it may be carried out by their parents or legal guardians.
If you want to make a claim for understanding that your rights have been violated, you can do so before the Spanish Data Protection Agency.

Commitment to Personal Data Protection

Scope of application – China Three Gorges (Spain) intends to show its commitment to the applicable regulations on data protection, so that this privacy policy, as well as all applicable provisions on the subject will be complied with by all departments, employees of our company and those acting on our behalf.

Object – We have established the necessary protocols and procedures for the correct treatment of personal data in accordance with the applicable regulations on the subject. Principles Confidentiality and Active Responsibility, Data Minimization, Accuracy, Retention Period Limitation, Integrity, Lawfulness, Loyalty, Transparency,

Special category of data China Three Gorges (Spain) prohibits any processing involving the dissemination of ethnic or racial origin, political opinions, religious or philosophical beliefs, trade union membership, the processing of genetic or biometric data, data concerning health or data concerning sexual orientation of individuals, except in the legally authorized exceptions and with the prior consent of the data subject.

Rights of data subjects – All interested parties have the right to access their personal data, as well as the right to rectification, deletion, limitation. As well as, to have the possibility to receive their data easily and in structured formats and common use of the responsible, as well as to have their data used for profiling and to oppose the processing at any time.

Activity Logging, Impact Assessment and Security Measures

Our entity will keep a record of processing activities and analyze the purposes of processing, categories of data subjects and data, recipients, international transfers, storage periods, etc., in order to assess the risks of processing and implement the necessary security measures to ensure the confidentiality, integrity and availability of personal data.
Likewise, the need to carry out an impact assessment and the need to appoint a Data Protection Officer with appropriate training in order to comply with the requirements deriving from this position (If you have appointed a Data Protection Officer, please include this paragraph. Otherwise, do not)

Updating this Policy

China Three Gorges (Spain) reserves the right to modify this privacy policy when it deems appropriate and, in any case, in the face of any regulatory changes that may occur in the applicable legislation.
The Management of China Three Gorges (Spain) Updated on December 28, 2022