Plenergy estações de serviço

Spanish
Contact
Customer area

Privacy policy

1. Overview

This Privacy Policy (“Policy”) describes the collection, processing, and use of Personal Data through this website and mobile application (“Digital Platforms”) provided by Plenoil, S.L., headquartered at C/Torrelaguna 64, Edificio Fiteni III, Planta 2, 28043 Madrid, with tax identification number B93275394, registered in the Commercial Registry of Madrid under the same number (“Plenergy”). This Policy details Plenergy’s data protection practices and informs users (“Users” or “Data Subjects”) about how they can exercise their rights regarding their Personal Data. It has been developed in accordance with the applicable national and European data protection legislation, including Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (“GDPR”), as well as other laws, regulatory requirements, and best practices. Please read this Policy carefully before using the Digital Platforms, as it contains important information about Users’ rights and obligations, along with conditions, limitations, and exclusions that may apply. Additionally, this document identifies how Plenergy’s Information Security Management System properly controls and retains Users’ Personal Data. By using the Digital Platforms, clicking “I Accept” when prompted, or indicating acceptance in an opt-in box, Users confirm that they understand and fully agree to comply with this Policy. If Users do not agree with this Policy, they should refrain from accessing or using the Digital Platforms.

2. Data controller

The Data Controller for the Personal Data collected through the Digital Platforms is Plenergy:
  • Company Name: Plenoil, S.L.
  • Tax Identification Number: B93275394
  • Headquarters: C/Torrelaguna 64, Edificio Fiteni III, Planta 2, 28043 Madrid
  • Email Address: protecciondedatos@plenergy.es
  • Registry: Commercial Registry of Madrid
  • Corporate Purpose: Sale and supply of fuels through dispensers.
  • WEBSITE: https://plenergy.pt/
  • APP: Plenergy
For questions related to privacy and Personal Data protection, Users can contact Plenergy through:

3. Why do we collect personal data?

Plenergy only processes Users’ Personal Data when duly authorised to do so. For the processing of Personal Data to be lawful, the GDPR requires an appropriate legal basis for each specific processing activity. The processing of Personal Data is lawful when at least one of the following conditions is met:
  • The Data Subject has given their consent for the processing of their Personal Data for one or more specific purposes.
  • The processing is necessary for the performance of a contract to which the Data Subject is a party, or for pre-contractual measures at the Data Subject’s request.
  • The processing is necessary to comply with a legal obligation to which the Data Controller is subject.
  • The processing is necessary to protect the vital interests of the Data Subject or another natural person.
  • The processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by third parties, except where such interests are overridden by the interests or fundamental rights and freedoms of the Data Subject that require the protection of personal data.
  • In this context, Plenergy processes the following Personal Data on the Digital Platforms:
  • Email Address.
  • Phone Contact.
  • Financial and Billing Information (business name, tax identification number, fiscal domicile).
  • Geolocation Data.
Plenergy processes the aforementioned Personal Data on the Digital Platforms for the following purposes:
    • Provide the services included on the Website and/or deliver the information requested by Users, either through the web, by email, or by phone. Emails may confirm receipt and reading through the channels provided for this purpose in the various contact forms:
  • Create and manage the Customer Area available on the Digital Platforms, whether Website or mobile application (hereinafter, APP).
  • In both cases, Website and APP, maintain a direct relationship with the customer for advertising, promotional, and/or statistical purposes (including profile segmentation to tailor offers and marketing activities to each customer), related to activities conducted by Plenergy via conventional and/or electronic means (email, SMS, ticket purchases, etc.). These communications may also reference benefits or own advantages, always communicated through Plenergy.
  • Enable interested users to participate in potential recruitment processes.
  • Perform segmentation and profiling by analysing the use of the services offered to tailor marketing activities and offers to each customer, providing personalised products and services.
  • Handle any incidents that may arise, as well as conduct satisfaction surveys on the product or service contracted. The customer may be contacted in the event of reasonable suspicion or detection of fraud or identity theft.
  • Manage financial information in a file for Plenergy’s private use for the same purposes, if necessary.
  • Geolocation data is collected from the customer’s device or terminal, provided they have given their consent, to facilitate service provision, perform advertising activities, and offer personalised information tailored to their location, such as nearby service stations. The customer may, at any time, disable access to geolocation data or revoke consent by adjusting their device or terminal settings.
  • When the customer accesses the Website through social media registration, validate their identification data, contact the customer in case of detected or suspected fraud or impersonation of their identity or activity, and send them personalised commercial communications/offers through profiling and segmentation. Behavioural advertising studies or statistical sampling may also be conducted to improve the personalisation of product and service offers.
  • Manage the potential sending of satisfaction surveys based on the purchase of a Plenergy product or service to improve our customers’ daily experience.
  • Process and manage whistleblowing reports submitted through the channel available on the Digital Platforms for this purpose ( https://plenergy.pt/wp-content/uploads/2024/12/17.12.2024-Politica-de-Utilizacao-e-Funcionamento-do-Canal-Etico-PT-MA.pdf).
The present processing activities are based on the Data Subjects’ consent and Plenergy’s legitimate interests (Article 6 (1) of the GDPR). The User will be solely responsible if they provide false, inaccurate, incomplete, or outdated data in the forms. All data provided by the User will be treated confidentially.

4. How long do we retain personal data?

Personal Data collected through the Digital Platforms is processed in strict compliance with applicable law and stored in dedicated databases created for this purpose. This Personal Data is kept in a format that allows the identification of Data Subjects only for the time necessary for the purposes for which it is processed. The retention period for Personal Data varies depending on the purpose for which the information is used. However, there are legal requirements that oblige the retention of certain Personal Data for a specific period. In the absence of such legal requirements, Personal Data will be stored and maintained only for the minimum period necessary for the purposes for which it was collected or subsequently processed, after which it will be deleted.

5. To whom can we disclose personal data?

The Personal Data of Users collected through the Digital Platforms is not shared with third parties without their consent, except in cases where such transmission or communication is necessary to fulfill Plenergy’s legitimate interests, to perform a contract entered into with the Users, for pre-contractual measures at the request of the Data Subject, or when necessary to comply with a legal obligation to which Plenergy is subject. Thus, Plenergy may need to communicate or grant access to Users’ Personal Data to third parties who collaborate with it, mainly to ensure the proper functioning and security of all services available on the Digital Platforms. These third parties may include external consultants, cooperation partners, and IT support services. Plenergy guarantees that each of these third parties respects the confidentiality of Personal Data through the execution of Data Processing Agreements with these entities. Furthermore, as mentioned, Plenergy may share Users’ Personal Data with third parties whenever there is a good-faith belief that such is necessary for the following purposes:
  • Comply with applicable law or respond to court orders.
  • Respond to requests from public or governmental authorities, particularly for national security or law enforcement purposes.
  • Protect the vital interests of Users, customers, or other third parties. This includes efforts to prevent spam, deter fraudulent activities related to Plenergy’s products, and prevent potential loss of life or severe injuries.
  • Operate and maintain the security and integrity of the Digital Platforms, including preventing or stopping attacks on Plenergy’s computer systems or networks.
  • Protect the rights, interests, or property of Plenergy.
  • Enforce Plenergy’s Terms and Conditions.
Additionally, Plenergy may use and share aggregated, non-personal information with third parties for marketing, advertising, and analytical purposes. The Personal Data collected on this website / APP (under the “CONTACT” or “USER REGISTRATION” section, respectively, is collected with the purpose of providing the service of accessing our information service about the location of our stations, services, and products from Plenergy. In the “Employment” contact form, the only recipient is Plenergy itself and, if necessary, to promote the user’s application, it may be forwarded to companies in which Plenergy participates. To provide our services with better quality and fulfill our tax obligations, we inform you that the data you provide in this section may be transferred to the following company with which we regularly collaborate:
  • SQUET DESIGN REAL, S.L., (B86158433)
    • Mission Objective: Development, update, and maintenance of the web portal https://plenergy.pt/ and the Plenergy APP, involving information access.
All the suppliers mentioned above will not process your data for their own purposes that have not been previously informed by Plenergy. Potentially, we may activate an alternative communication channel to which you can give your consent, and through which your information may be provided to suppliers solely to optimize the information delivery process. This may be located within or outside the European Economic Area; in the latter case, international data transfers will be duly legitimized (EU/Switzerland Security Shield).

6. Data transfers to third countries

The Personal Data collected by Plenergy may be stored and processed in Spain or any other country where Plenergy, its affiliates, subsidiaries, or service providers have operational facilities. The choice of storage locations is determined by principles of operational efficiency, performance improvement, and redundancy creation to protect the data in case of interruptions or other issues. Plenergy is committed to ensuring that the Personal Data collected is treated in accordance with the terms established in this Policy and in compliance with applicable legal requirements, regardless of the location of the Personal Data. As part of this commitment, Plenergy may transfer Personal Data from the European Economic Area to Third Countries. Should such transfers occur, Plenergy is committed to ensuring that each transfer complies with applicable legal requirements, especially regarding the adequacy of data protection in the destination country and compliance with mandatory rules for such transfers. For more details about European Commission decisions regarding the adequacy of Personal Data protection in countries where Plenergy may process Personal Data, please refer to this link: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en .

7. How do we protect personal data?

To ensure the security and strict confidentiality of Users’ Personal Data, Plenergy processes all information provided with the utmost care, in accordance with internal security and confidentiality policies and procedures, which are periodically updated as necessary and in compliance with applicable legal requirements. Considering the nature, scope, context, and purposes of the Personal Data processing, as well as the potential risks to the rights and freedoms of Data Subjects, Plenergy is committed to implementing appropriate technical and organisational measures both at the initial stage of defining processing means and during the processing itself. In general, Plenergy adopts the following security measures:
  • Risk Assessments and Analyses
  • Management and Recording of Processing Activities
  • Regular audits to evaluate the effectiveness of implemented technical and organisational measures.
  • Continuous training and awareness for the team involved in Personal Data processing operations.
  • Pseudonymisation and encryption of Personal Data, when appropriate.
  • Appropriate procedures to ensure the confidentiality, integrity, availability, and ongoing resilience of processing systems and services.
  • Procedures to restore the availability and access to Personal Data in a timely manner in case of a physical or technical incident.
  • Measures to ensure that processing operations are conducted in accordance with applicable legal provisions.

8. How can you exercise your rights?

Under the GDPR, Users have the following rights concerning their Personal Data:
  • Right of Access: The right to request access to Personal Data relating to them.
  • Right to Rectification: The right to request the correction of incorrect or incomplete Personal Data relating to them.
  • Right to Erasure: The right to request the deletion of their Personal Data when it is no longer necessary for the purposes for which it was collected or processed, when they withdraw their consent, or when they object to the processing.
  • Right to Restriction of Processing: The right to request the restriction of the processing of their Personal Data in certain circumstances.
  • Right to Data Portability: The right to receive their Personal Data in a structured, commonly used, and machine-readable format and to transmit it to another Data Controller, whenever technically possible.
  • Right to Object: The right to object to the processing of their Personal Data in certain circumstances.
To exercise any of the aforementioned rights, Users can contact Plenergy through:

9. Cookies

Cookies are small information files, typically in .html format, stored by a website on your device (computer, laptop, smartphone, tablet, etc.). This Policy governs all Cookies and other technological forms of user tracking, such as tags, pixel tags, web beacons, user IDs, or other developing technologies (collectively referred to as “Cookies”). On each visit to the Digital Platforms, Users’ browsers allow access to the Cookies installed on their devices, enabling the recognition and memorisation of the identifier associated with them (when applicable), as well as the immediate activation of their usage preferences. Users can consult Plenergy’s Cookie Policy to obtain more information regarding the processing of Personal Data carried out through Cookies.

10. Changes to the policy

Plenergy reserves the right to modify this Policy at any time. If changes are made, the “Last Updated Date,” available at the end of this page, will also be updated. If the change is substantial, a notice will be placed on the Digital Platforms. By continuing to use the Digital Platforms after the “Last Updated Date,” Users confirm and consent to accept these changes.

11. Applicable law and jurisdiction

This Policy, as well as the collection, processing, or transmission of Users’ Personal Data, are governed by the provisions of the GDPR and the applicable legislation and regulations in Spain. Any disputes arising from the validity, interpretation, or execution of this Policy, or related to the collection, processing, or transmission of each User’s Personal Data, shall be subject to the rules established in the Legal Notice of the Digital Platforms. Last Updated Date: 10/12/2024.C
Contacto
Contact