Plenergy estações de serviço

Privacy policy

This Privacy Policy applies to any processing of personal data carried out by PLENERGY GRUPO, S.L., a company registered with the Commercial Registry of Madrid, with Tax ID (CIF) B93275394, having its registered office at C/Torrelaguna 64, Edificio Fiteni III, 2nd Floor – Postcode 28043 – Madrid, and PLENERGY PORT, UNIPESSOAL, LDA., a company registered with the Porto Commercial Registry Office, under Tax ID (NIPC) 516697030, having its registered office at Avenida da Boavista, no. 1837, 9, 9.3, 9.4, 4100-133 Porto (hereinafter jointly referred to as “PLENERGY”), as joint controllers of the processing of personal data, on the Internet domains www.plenergy.pt (hereinafter, the “Site” or “Website”) and on its mobile application “Plenergy” (hereinafter, the “APP”).

 

Our Privacy Policy has been prepared to ensure transparency in the processing of personal data of our customers and users. For this reason, we provide this document, where you can identify how our Information Security Management System processes your data, as well as offering accessible information about your rights as a user. This document has been developed taking into account the legislation established by the General Data Protection Regulation 2016/679 of 27 April 2016 (known as the “GDPR”), its adaptation into Spanish law through Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights (“LOPDGDD”), and into Portuguese law through Law no. 58/2019, of 8 August, which ensures the implementation, in the Portuguese legal order, of the GDPR (“LERGPD”).

 

1. Background

PLENERGY GRUPO, S.L. and PLENERGY PORT, UNIPESSOAL, LDA. (“PLENERGY”) are considered joint controllers of the processing of personal data provided by users through this SITE and the App.

PLENERGY undertakes to ensure that personal information is protected and not misused, through an up-to-date Information Security System subject to Internal Audits.

In this document we explain who the controller is, for what purpose personal data will be processed, the lawful basis for processing, to whom we may disclose personal data, how we collect it, why we collect it, how we use it, the rights you have and the processes that have been implemented to protect privacy. By providing us with personal information and using our Site and our App, we understand that you have read and understood the terms related to the personal data protection information presented here. At PLENERGY we assume responsibility for complying with applicable national and European data protection legislation, and we aim to process data lawfully, fairly and transparently.

 

2. Who is the controller?

In accordance with applicable legislation, the controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing.

In this case, PLENERGY is responsible for processing the personal data it collects from its customers and users, in particular the following entities:

  • Corporate name: PLENERGY GRUPO, S.L.
  • Tax ID (CIF): B93275394
  • Registered office: C/Torrelaguna 64, Edificio Fiteni III, Floor 2 – Postcode 28043 – Madrid
  • Email: protecciondedatos@plenergy.es
  • Telephone: 91 568 74 97
  • Website: plenergy.pt
  • Mobile application: APP – PLENERGY
  • Corporate name: PLENERGY PORT, UNIPESSOAL, LDA.
  • Tax ID (NIPC): 516697030
  • Registered office: Avenida da Boavista, no. 1837, 9, 9.3, 9.4, 4100-133 Porto
  • Email: protecaodedados@plenergy.pt
  • Telephone: 91 568 74 97
  • Website: plenergy.pt
  • Mobile application: APP – PLENERGY

 

3. For what purpose do we collect personal information?

Depending on the products, services or features that customers and users wish to use at any given time, PLENERGY will need to process certain data which, as applicable, will be as follows:

  • Identification data (for example, first name, surname, language and country from which you interact, contact details, etc.);
  • Economic and transactional information (for example, payment or card details, information about purchases made, orders, returns, etc.);
  • Connection, geolocation and browsing data (if interacting via the APP);
  • Commercial information;
  • Data about the customer’s or user’s tastes and preferences.

When PLENERGY asks customers and users to fill in their personal data in order to access any feature or service on the Site or the APP, it will indicate some fields as mandatory, as these are necessary to provide the service or grant access to the relevant feature. If such data are not provided, user registration may not be guaranteed or it may not be possible to use some services or features.

We manage the data of customers and users of the Site and our APP for the following purposes, based on the lawful bases identified below:

  • To provide the services included on the Site and the APP and/or to provide the information requested, whether through the site, by email or by telephone. Emails may generate a receipt and read confirmation through the channels provided for that purpose in the various contact forms. The lawful basis for this processing is the performance of a contract or the taking of pre-contractual steps at the data subject’s request, covering the management of contact forms, information requests and any interaction necessary to provide the services offered.
  • https://clientes.plenergy.es/login
  • https://plenergy.pt/gerimos-o-seu-posto/
  • https://plenergy.pt/estacoes-de-servico/
  • To offer a mobile APP that provides useful information to users and improves their browsing experience, facilitating access to and interaction with the content and services available. The lawful basis for this processing is the performance of a contract (to the extent that the customer and/or user registers or uses the APP as part of the service) and/or legitimate interests (to improve the user experience and optimise the services offered).
  • To maintain a direct relationship with the customer for advertising, promotional and/or statistical purposes (including profiling/segmentation to tailor offers and marketing activities to each customer and/or user), related to activities carried out by PLENERGY by conventional and/or electronic means (emails, SMS, purchase receipt…), both on the Site and in the APP. In addition, such communications may refer to benefits or advantages of our own, always communicated by PLENERGY. The lawful bases for this processing are legitimate interests, where there is a prior contractual relationship and the user has not objected, or your consent.
  • To enable the participation of users interested in potential recruitment processes. The lawful basis for this processing is the taking of pre-contractual steps at the request of the data subject, insofar as the user submits their application.
  • https://plenergy.pt/oportunidades-de-emprego-na-plenoil/
  • To carry out segmentation and profiling tasks through analysis of the use of the services offered, in order to tailor offers and marketing activities to each customer and/or user, offering personalised products and services. The lawful basis for this processing is the data subject’s consent where advanced segmentation or profiling with significant impact is involved. For basic segmentation that does not produce legal or similarly significant effects for the user, the basis is legitimate interests.
  • To respond to any query, request or incident submitted to us through customer support. The lawful basis for this processing is the performance of a contract or the taking of pre-contractual steps at the request of the data subject.
  • https://plenergy.pt/contato/
  • To deal with incidents that may occur, as well as to prepare satisfaction surveys regarding the contracted product or service, and to improve the service provided. The customer or user may be contacted if detected or if there are well-founded suspicions of possible fraud or identity theft. The lawful bases for this processing are the performance of a contract (incident management) and legitimate interests (service improvement and fraud prevention).
  • If necessary, to manage economic information in a file for private use by PLENERGY for the same purposes. The lawful bases for this processing are the performance of a contract (payment and collections management) and/or compliance with a legal obligation (tax and accounting obligations).
  • To collect geographical location data from the customer’s or user’s device or terminal, provided that they have given their consent, for the purpose of facilitating service provision, carrying out advertising actions and offering personalised information appropriate to their location, such as the nearest service stations. Customers and users may, at any time, disable access to geolocation data and revoke the consent given for geolocation through the settings of their device or terminal. The lawful basis for this processing is the data subject’s consent, which must be explicitly granted for geolocation.
  • Where customers and users have accessed the Site or the APP by registering via social networks, to validate their identification data; to contact the customer and/or user if detected or if there are well-founded suspicions regarding possible fraud or identity theft or activity on the networks; to contact them and send them personalised commercial communications and/or offers through profiling and segmentation tasks; to carry out behavioural advertising studies or obtain statistical samples that may help the company improve the personalisation of the offers it makes of its products and services. The lawful bases for this processing are the performance of a contract (identity validation for access and use of services), legitimate interests (fraud prevention and service improvement) and consent (for personalised commercial communications and behavioural advertising studies).
  • To manage the possible sending of satisfaction surveys based on the purchase of the product or service carried out by PLENERGY, in order to improve the experience of our customers and users on a daily basis. The lawful basis for this processing is legitimate interests (improving service quality and customer satisfaction).

The customer and/or user will be solely responsible if they complete forms with false, inaccurate, incomplete or outdated data. All data provided by the customer and/or user will be treated confidentially.

 

5. To whom may we disclose your personal information?

As a general rule, the Controller will not disclose customer and user data, except in the situations indicated below.

Personal data collected on this Site, through the APP or through user registration, respectively, are collected for the purpose of providing our information service about our locations, services and products of PLENERGY.

  • In the Job Bank contact form, the only recipient is PLENERGY itself and, where justified, in order to enhance the user’s application, it may be forwarded to companies participated in by PLENERGY.

In order to offer you our services with the best quality and to comply with our tax obligations, we inform you that the data you provide to us in that section may be disclosed to the following company, with which we collaborate on a regular basis: INDICUS SOFTWARE, S.L. (B 83535237), for the purpose of developing, updating and maintaining the site plenergy.es, plenergy.pt and the APP, which entails access to personal data.

  • Companies belonging to the corporate group of PLENERGY GRUPO, S.L. so that they can carry out the same actions subject to the purposes previously identified in their respective territories.
  • Third-party suppliers to provide services to the joint controllers, related to the purposes about which the customer and/or user has been informed. These suppliers will only access personal data to perform their services on behalf of PLENERGY, under an obligation of confidentiality and always following its instructions. All suppliers indicated will not process your data for their own purposes that have not been previously instructed by PLENERGY. We may potentially enable some type of alternative communication for which you may give your consent and in which your information may be provided to suppliers solely in order to optimise the process of sending information, and such suppliers may be located within or outside the European Economic Area. In the latter case, PLENERGY guarantees that the transfer will be carried out with appropriate safeguards and always protecting the security of personal data.
  • Customer and user data may also be disclosed to competent authorities and bodies, courts, tribunals or any other third parties entitled under applicable law.

 

6. International transfers of data

 Personal data collected by PLENERGY may be stored and processed in a country with different data protection safeguards where PLENERGY, its affiliates, subsidiaries or service providers have operational facilities. The choice of storage locations is determined by principles of operational efficiency, performance improvement and the creation of redundancies to protect data in the event of disruptions or other issues.

PLENERGY undertakes to ensure that personal data collected are processed in accordance with the terms set out in this Policy and in compliance with applicable legal requirements, regardless of the location of the personal data.

Within the scope of this commitment, PLENERGY may transfer personal data from the European Economic Area to third countries. Should such transfers occur, PLENERGY undertakes to ensure that each transfer complies with applicable legal requirements, in particular regarding the assessment of the adequacy of data protection in the destination country and compliance with the mandatory rules for such transfers.

 

7. How can you exercise your rights?

You have the right to control the personal information that we collect both on our Site and on our APP, thus ensuring that it is accurate and truthful.

You also have the right to obtain access to your personal data, as well as to request the rectification of inaccurate data or, where applicable, request erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, and for reasons related to your particular situation, you may object to the processing of your data. Your personal information will no longer be processed for the purposes to which you have objected. Likewise, you may exercise the right to restriction of processing of your personal information by requesting that we retain it.

Similarly, in certain circumstances, you may request the portability of your data to another controller.

You may exercise your rights free of charge and you are entitled to receive a response within the time limits established by applicable data protection legislation, and you may choose any of the following means:

  • By post to the address C/Torrelaguna 64, Edificio Fiteni III, Floor 2 – Postcode 28043 – Madrid.
  • By sending a request to the email address: protecaodedados@plenergy.pt.
  • You may also lodge a complaint with the competent authority when you are not satisfied with the response to the exercise of your rights. In Spain, with the Spanish Data Protection Agency (“ANPD”), whose contact details can be consulted at aepd.es. In Portugal, with the National Data Protection Commission, whose contact details can be consulted at www.cnpd.pt

 

8. For how long do we store your personal information?

We only store your personal information to the extent that we need it to use it in accordance with the purpose for which it was collected, and in accordance with the lawful basis for processing it under applicable law. We will keep your personal information for as long as a contractual and/or commercial relationship exists with you or for as long as you do not exercise your right to erasure, restriction of processing, portability and/or to be forgotten.

In such cases, we will keep the information duly blocked, without making any use of it, for as long as it may be necessary for the exercise or defence of claims or as long as some form of judicial, legal or contractual liability may arise from its processing, which must be addressed and for which its recovery may be necessary. In no case will your data be kept for more than 10 years from the end of the contractual relationship, the mandatory retention period established in Spain by Law 10/2010, of 28 April, on the prevention of money laundering and terrorist financing, and in Portugal for compliance with legal obligations to retain tax and accounting documents.

 

9. How do we protect your personal information?

PLENERGY has implemented an Information Security System and we are committed to protecting your personal information. We use appropriate technical and organisational measures in order to protect your personal data and your privacy, and we review these measures periodically. We protect your personal information by using a combination of physical, IT or logical security controls, including access controls that restrict and manage the way in which your information and your personal data are processed, administered and managed. We also ensure that our employees are properly trained to protect your personal information. We have the following Procedures within our organisation relating to what is indicated here:

    • Internet use/backup procedure
    • Risk assessment and analysis
    • Management and registration of processing activities
    • Procedure for assigning Information Security responsibilities to Human Resources

 

10. Use of cookies

See (cookie policy)

We use cookies, web analytics services and social network plug-ins on our Website to improve your browsing experience. For more information, you can consult our cookie policy.

 

11. When do we update our privacy policy?

It may be necessary to update this Privacy Policy; therefore, it is important that you review this policy periodically and, if possible, whenever you access the Site and the APP, in order to be properly informed about the type of information collected and how it is processed.

You can find the Privacy Policy in the footer of the Site and the APP. However, we will notify you of any changes to this privacy policy that affect the processing of your personal data.

This Privacy Policy was last updated in Porto, on 27 May  2025.