This Privacy Policy applies to any processing of personal data carried out by PLENERGY GRUPO, S.L., a company registered with the Commercial Registry of Madrid, with Tax ID (CIF) B93275394, having its registered office at C/Torrelaguna 64, Edificio Fiteni III, 2nd Floor – Postcode 28043 – Madrid, and PLENERGY PORT, UNIPESSOAL, LDA., a company registered with the Porto Commercial Registry Office, under Tax ID (NIPC) 516697030, having its registered office at Avenida da Boavista, no. 1837, 9, 9.3, 9.4, 4100-133 Porto (hereinafter jointly referred to as “PLENERGY”), as joint controllers of the processing of personal data, on the Internet domains www.plenergy.pt (hereinafter, the “Site” or “Website”) and on its mobile application “Plenergy” (hereinafter, the “APP”).
Our Privacy Policy has been prepared to ensure transparency in the processing of personal data of our customers and users. For this reason, we provide this document, where you can identify how our Information Security Management System processes your data, as well as offering accessible information about your rights as a user. This document has been developed taking into account the legislation established by the General Data Protection Regulation 2016/679 of 27 April 2016 (known as the “GDPR”), its adaptation into Spanish law through Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights (“LOPDGDD”), and into Portuguese law through Law no. 58/2019, of 8 August, which ensures the implementation, in the Portuguese legal order, of the GDPR (“LERGPD”).
PLENERGY GRUPO, S.L. and PLENERGY PORT, UNIPESSOAL, LDA. (“PLENERGY”) are considered joint controllers of the processing of personal data provided by users through this SITE and the App.
PLENERGY undertakes to ensure that personal information is protected and not misused, through an up-to-date Information Security System subject to Internal Audits.
In this document we explain who the controller is, for what purpose personal data will be processed, the lawful basis for processing, to whom we may disclose personal data, how we collect it, why we collect it, how we use it, the rights you have and the processes that have been implemented to protect privacy. By providing us with personal information and using our Site and our App, we understand that you have read and understood the terms related to the personal data protection information presented here. At PLENERGY we assume responsibility for complying with applicable national and European data protection legislation, and we aim to process data lawfully, fairly and transparently.
In accordance with applicable legislation, the controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing.
In this case, PLENERGY is responsible for processing the personal data it collects from its customers and users, in particular the following entities:
Depending on the products, services or features that customers and users wish to use at any given time, PLENERGY will need to process certain data which, as applicable, will be as follows:
When PLENERGY asks customers and users to fill in their personal data in order to access any feature or service on the Site or the APP, it will indicate some fields as mandatory, as these are necessary to provide the service or grant access to the relevant feature. If such data are not provided, user registration may not be guaranteed or it may not be possible to use some services or features.
We manage the data of customers and users of the Site and our APP for the following purposes, based on the lawful bases identified below:
The customer and/or user will be solely responsible if they complete forms with false, inaccurate, incomplete or outdated data. All data provided by the customer and/or user will be treated confidentially.
As a general rule, the Controller will not disclose customer and user data, except in the situations indicated below.
Personal data collected on this Site, through the APP or through user registration, respectively, are collected for the purpose of providing our information service about our locations, services and products of PLENERGY.
In order to offer you our services with the best quality and to comply with our tax obligations, we inform you that the data you provide to us in that section may be disclosed to the following company, with which we collaborate on a regular basis: INDICUS SOFTWARE, S.L. (B 83535237), for the purpose of developing, updating and maintaining the site plenergy.es, plenergy.pt and the APP, which entails access to personal data.
Personal data collected by PLENERGY may be stored and processed in a country with different data protection safeguards where PLENERGY, its affiliates, subsidiaries or service providers have operational facilities. The choice of storage locations is determined by principles of operational efficiency, performance improvement and the creation of redundancies to protect data in the event of disruptions or other issues.
PLENERGY undertakes to ensure that personal data collected are processed in accordance with the terms set out in this Policy and in compliance with applicable legal requirements, regardless of the location of the personal data.
Within the scope of this commitment, PLENERGY may transfer personal data from the European Economic Area to third countries. Should such transfers occur, PLENERGY undertakes to ensure that each transfer complies with applicable legal requirements, in particular regarding the assessment of the adequacy of data protection in the destination country and compliance with the mandatory rules for such transfers.
You have the right to control the personal information that we collect both on our Site and on our APP, thus ensuring that it is accurate and truthful.
You also have the right to obtain access to your personal data, as well as to request the rectification of inaccurate data or, where applicable, request erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
In certain circumstances, and for reasons related to your particular situation, you may object to the processing of your data. Your personal information will no longer be processed for the purposes to which you have objected. Likewise, you may exercise the right to restriction of processing of your personal information by requesting that we retain it.
Similarly, in certain circumstances, you may request the portability of your data to another controller.
You may exercise your rights free of charge and you are entitled to receive a response within the time limits established by applicable data protection legislation, and you may choose any of the following means:
We only store your personal information to the extent that we need it to use it in accordance with the purpose for which it was collected, and in accordance with the lawful basis for processing it under applicable law. We will keep your personal information for as long as a contractual and/or commercial relationship exists with you or for as long as you do not exercise your right to erasure, restriction of processing, portability and/or to be forgotten.
In such cases, we will keep the information duly blocked, without making any use of it, for as long as it may be necessary for the exercise or defence of claims or as long as some form of judicial, legal or contractual liability may arise from its processing, which must be addressed and for which its recovery may be necessary. In no case will your data be kept for more than 10 years from the end of the contractual relationship, the mandatory retention period established in Spain by Law 10/2010, of 28 April, on the prevention of money laundering and terrorist financing, and in Portugal for compliance with legal obligations to retain tax and accounting documents.
PLENERGY has implemented an Information Security System and we are committed to protecting your personal information. We use appropriate technical and organisational measures in order to protect your personal data and your privacy, and we review these measures periodically. We protect your personal information by using a combination of physical, IT or logical security controls, including access controls that restrict and manage the way in which your information and your personal data are processed, administered and managed. We also ensure that our employees are properly trained to protect your personal information. We have the following Procedures within our organisation relating to what is indicated here:
We use cookies, web analytics services and social network plug-ins on our Website to improve your browsing experience. For more information, you can consult our cookie policy.
It may be necessary to update this Privacy Policy; therefore, it is important that you review this policy periodically and, if possible, whenever you access the Site and the APP, in order to be properly informed about the type of information collected and how it is processed.
You can find the Privacy Policy in the footer of the Site and the APP. However, we will notify you of any changes to this privacy policy that affect the processing of your personal data.
This Privacy Policy was last updated in Porto, on 27 May 2025.