Contact us
Industry
Energy Efficiency and Circularity for ArcelorMittal in Spain
CASO DE EXITO

Energy Efficiency and Circularity for ArcelorMittal in Spain

Find out more
Public Administrations
Barcelona: Efficient Smart Public Lighting and Photovoltaics
CASO DE EXITO

Barcelona: Efficient Smart Public Lighting and Photovoltaics

Find out more

Privacy Policy

Below, we provide the Privacy Policy (hereinafter, “Privacy Policy” or “Policy”) governing the web platform https://edisonnext.es/ (hereinafter, “the Platform”), under the ownership of Edison Next Spain, S.L.U. (hereinafter, “Edison Next” or “we”), an entity with Tax Identification Number (NIF) B-33798455, and registered office at C/ Juan Esplandiú 11-13, 28007 Madrid (Spain). 

PLEASE TAKE A FEW MINUTES TO READ OUR PRIVACY POLICY. THROUGH IT, WE AIM TO EXPLAIN IN A SIMPLE, CLEAR, AND TRANSPARENT MANNER HOW WE PROCESS AND PROTECT YOUR PERSONAL INFORMATION AND YOUR RIGHTS. YOUR SECURITY AND THAT OF YOUR PERSONAL DATA ARE FUNDAMENTAL TO US, AND WE TAKE THEIR ADEQUATE PROTECTION VERY SERIOUSLY. 

 

1. TO WHOM DOES THIS POLICY APPLY? 

This policy applies to all users of the Platform, whether or not they are customers of Edison Next (hereinafter, interchangeably, “the user” or “the users”) who are considered natural persons. By personal data, we refer to all information about an identified or identifiable natural person. 

If you are already a customer of Edison Next by having signed a contract with us, you must also refer to the information contained therein regarding specific privacy terms. 

This Platform is addressed to users over 18 years of age; its use by minors is prohibited. Furthermore, the user responsibly acknowledges that they possess sufficient legal capacity to subscribe, if applicable, to the services offered by Edison Next. 

 

2. WHO IS THE DATA CONTROLLER FOR YOUR PERSONAL DATA? 

The Data Controller for your personal data is: 

  • Full entity name: Edison Next Spain, S.L.U. 
  • Registered office: C/ Juan Esplandiú 11-13, 28007 Madrid (Spain). 
  • Contact telephone: +34 911 250 829 
  • Contact email (general): info@edisonnext.es 

For any matters concerning the protection of your personal information, you may send an email to: privacidad@edison.es 

 

3. WHO IS THE DATA PROTECTION OFFICER (DPO)? 

The Edison Next Group has appointed a DATA PROTECTION OFFICER (DPO), whom users may contact regarding all matters related to the processing of their personal data and the exercise of their rights under the GDPR: 

  • Postal address: EDISON S.p.A., C/ Juan Esplandiú 11-13, 28007 Madrid. Spain. 
  • Contact email: privacidad@edison.es 

 

4. WHAT TYPE OF DATA DO WE PROCESS? 

The processing of your data is necessary to provide you with access to the contents and/or functionalities of the Platform or, should you require it, to be able to send you information or provide the services arranged through the same. In this regard, we maintain a firm commitment to treating your personal data in a legitimate and consistent manner in accordance with the legal principles and obligations set forth by current personal data protection regulations. 

When you browse through our Platform and, in particular, when you interact with us, you provide us with data directly—for example, when you fill out any online form or request in accordance with the processing purposes indicated in each case (for instance, through the contact form). 

The data you provide through such forms or requests may vary depending on the type of form involved, but we will always request those data that are adequate, relevant, and limited to what is necessary in relation to the purposes of the processing: 

  • Personal identification data (name and surname). 
  • Personal contact data (telephone or mobile, email). 
  • Data on personal characteristics (associated needs or doubts that you provide to us through our contact form or other means we make available to you)." 

 

5. FOR WHAT PURPOSES DO WE USE YOUR DATA? 

The personal data you provide will be processed for the specific purposes set forth in this privacy policy and, where applicable, in the various data forms provided herein. In this regard, your personal data may be processed for the following purposes: 

  • To enable you to browse our Platform, allowing you access to the information and content provided therein. 
  • To address the petitions or requests you send us for the purpose of participating in the personnel selection processes offered by us through the Platform or that we may activate in the future, including the comprehensive management of said processes. 
  • If you are informed through such forms of the possibility of sending you promotions, advertising, or offers for our own and/or third-party products or services, and you unequivocally consent to such delivery, including by electronic means, we may use your data for commercial purposes. We inform you that you may withdraw or revoke such authorization at any time by writing to us at: privacidad@edison.es, although this will not affect the processing of your data carried out prior to the withdrawal of consent. 
  • To resolve, in an agile and effective manner, any doubts you may raise about our products or services through the various channels provided for this purpose (email, telephone, etc.). 
  • Comprehensive management of your personal account as a customer, where applicable, by having formally entered into our terms and conditions. 
  • To allow uses associated with the Platform's cookies as described in our cookies policy. 

In the event that you have accepted the use of different types of cookies and, in particular, analytical cookies (browsing/user profile), to perform such analysis and statistics associated with web browsing in order to improve our services and the quality of their provision. At any time, if you so wish, you may configure the use of analytical cookies, holding a right to revoke your consent regarding the purposes associated with these cookies. We inform you that the revocation of your consent to the processing of your data regarding the use of certain types of cookies, such as session or technical cookies, may prevent you from browsing our platform (see cookies policy). 

  • To adopt all applicable protection measures in accordance with current regulations, including the possible anonymization of your personal data by applying the appropriate techniques available for this purpose. Consequently, anonymization and pseudonymization processing may also be carried out in this area for the better protection of your personal data. 

 

  • To apply the relevant security, technical, and/or organizational measures to your personal data with a focus on the risk existing at any given time, including the pseudonymization or encryption of personal data provided through our platform. 

 

6. ON WHAT BASIS DO WE LEGITIMATELY PROCESS YOUR DATA? 

Purposes of Processing  Legal Basis for Processing
To enable you to browse our Platform, thereby allowing you access to the information and content provided therein. Your consent and, depending on the case, satisfaction of a legitimate interest (own or third-party) associated with the proper management, maintenance, development, and evolution of the platform, tools, network, and associated information systems, allowing for correct operation, functionalities, and access to content and services, as well as the general security of all the above. 
To address the petitions or requests you send us. Your consent. 
To send you promotions, advertising, or offers for our own and/or third-party products or services that may be of interest to you. Your consent. 
To resolve, in an agile and effective manner, any doubts you raise about our products or services. Your consent and, depending on the case, the execution of pre-contractual measures at the user's request. 
Comprehensive management of your personal account as a customer. Execution of the contract that you may have signed with Edison Next. 
In the event that you have accepted the use of cookies, to perform the relevant analysis derived from your web browsing for analytical and/or statistical and advertising purposes. Your consent. 
To adopt all applicable protection measures in accordance with current regulations, including the possible pseudonymization and anonymization of your personal data by applying the appropriate techniques available for this purpose. Compliance with a legal obligation (REGULATION (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, "GDPR"). In the case of processing aimed at guaranteeing the security of the Platform, the network, and the associated information system, the satisfaction of the legitimate interest of Edison Next or, where appropriate, a third party, may be invoked when applicable. 
To apply the relevant security, technical, and/or organizational measures to your personal data with a focus on the risk existing at any given time. Compliance with a legal obligation (REGULATION (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, "GDPR"). In the case of processing aimed at guaranteeing the security of the platform, the network, and the associated information system, the satisfaction of the legitimate interest of Edison Next or, where appropriate, a third party, may be invoked when applicable. 
To conduct satisfaction surveys regarding our products or services for the customer. Satisfaction of own legitimate interest associated with the maintenance of the commercial relationship and direct marketing purposes. 

 

When the legitimate basis for the processing of your personal data is your consent, we remind you that you have the right to revoke it at any time in a simple and free manner by writing to us at privacidad@edison.es, without this affecting the lawfulness of the processing based on consent prior to its withdrawal. 

 

7. HOW LONG DO WE RETAIN YOUR DATA?

Personal data associated with the informed processing purposes Retention periods or criteria for your personal data 
Data associated with user navigation through our platform - In general, your data collected for this purpose will be kept for the time essential and necessary to enable correct navigation and use of our platform and the content made available through it which you access. 
To address the petitions or requests you send us. 

- For the time essential to correctly address your specific petitions and/or requests on a case-by-case basis. 

- If these consist of a request to participate in personnel selection processes, it will be understood that you remain interested in being considered for such processes as long as you do not request opposition to processing for this purpose or the deletion of your personal data. 

- If it concerns the execution of your request for pre-contractual measures or the signing of a contract with Edison Next, your data will be kept for the time necessary to provide due satisfaction to such pre-contractual measures or the contract between the parties. 

To resolve, in an agile and effective manner, any doubts you send us about our services. For the time strictly necessary to resolve or address them. 
Comprehensive management of your personal account as a customer, where applicable. During the periods necessary to provide due satisfaction to the execution of the contract between the parties (duration of the contract between the parties). 
To adopt all applicable protection measures in accordance with current regulations. For as long as the user's personal data are processed, including the retention of such data during the provided legal periods, and regardless of the legitimate basis for processing. 
To apply the relevant security, technical, and/or organizational measures to your personal data with a focus on the risk existing at any given time.For as long as the user's personal data are processed, including the retention of such data during the provided legal periods, and regardless of the legitimate basis for processing. 

In any case, and without prejudice to the foregoing, the user is also informed of the following: Regarding the retention period for cookies, the user is recommended to consult our Cookies Policy (retention section). 

In general, when personal data are no longer necessary for the processing purposes for which they were collected, they will be blocked. They will remain available solely to competent authorities for the possible determination of legal liabilities arising during their processing, always in accordance with applicable regulations, and may not be used for purposes other than these. Once the corresponding legal periods for blocking have elapsed, such personal data will be deleted as provided by applicable regulations, or, if applicable, may be securely anonymized by Edison Next (anonymized/non-personal data). 

In this regard, for the purposes of addressing possible responsibilities in matters of data protection, and in accordance with Article 72 of Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, Edison Next may securely retain personal information for three years (the statute of limitations for very serious infringements in this field). 

 

8. WHAT ARE THE CONSEQUENCES OF NOT PROVIDING US WITH YOUR DATA? 

We endeavor to request or apply the minimum and essential data to carry out the personal data processing we perform in the development of our corporate purpose and goals. All this is in line with the principles contained in the applicable regulations. 

However, failure to provide your personal data could lead to the impossibility of: 

  1. Navigating correctly through our Platform (non-acceptance of technical or session cookies). 
  2. Accessing certain content or services (for example, if you do not provide us with your data to receive our newsletter, you will not receive it, nor the information or content associated with it). 
  3. Processing your specific request or petition (for example, due to failure to complete or insufficient completion of the corresponding form or request). 

In any case, the information and personal data you provide, depending on each case, must always be: 

  • Sufficient, though adjusted, limited, and proportionate to the legitimate processing purposes informed in each case, with maximum respect for the principles of purpose limitation and data minimization. 
  • Accurate, up-to-date, and truthful, in order to properly verify identity, capacity, and, where appropriate, representation, as well as to be able to adjust the data processing performed to your specific needs and real situation. All this in accordance with the principle of accuracy of personal data. 

Users shall be fully responsible for the data and personal information they provide to Edison Next within the framework of the platform and, where applicable, for the products or services they require or contract from us. 

 

9. DO WE SHARE YOUR PERSONAL DATA WITH THIRD PARTIES? 

In general, we do not share your data with third parties, nor do we sell or offer it to them. However, as Edison Next belongs to the Edison Next Group, your personal data may be shared for purely administrative and internal purposes with other entities that make up the Group of companies in which Edison Next is integrated (https://www.edison.it/it). 

Similarly, it is possible that certain third parties may access your personal information in the performance of services they may provide to Edison Next. In this sense, Edison Next has various data processors under its control, allowing them access as trusted providers and to the extent strictly necessary for the provision of the services contracted with them. Such processors operate under a service contract in the terms, conditions, and guarantees contained in Article 28 of the GDPR, with Edison Next performing the corresponding controls, inspections, and audits in this area to verify that such processors strictly comply with the contracts signed for this purpose and current regulations. 

 

10. ARE INTERNATIONAL TRANSFERS OF YOUR PERSONAL DATA MADE? 

We inform you that, in general, international transfers of your personal data are not planned, with Edison Next adopting the necessary measures and guarantees in this area in accordance with current personal data protection regulations. 

 

11. WHAT RIGHTS DO YOU HAVE, WHAT DO THEY MEAN, AND HOW CAN YOU EXERCISE THEM? 

Your Rights What does it consist of? How to exercise it? 
Right to information The right to be provided with appropriate information by Edison Next, both at the time personal data are collected (whether obtained directly from the data subject or from a third party) and at any subsequent time, regarding the privacy policy to be followed in the processing of your personal data. Edison Next endeavors to provide you with all necessary information about the processing of your personal data in application of Articles 12 to 14 of the GDPR. However, if you have any questions or doubts about our privacy policy, please do not hesitate to write to us via email at: privacidad@edison.es, and we will attend to your additional request for information. 
Right of access The right to obtain confirmation from Edison Next as to whether or not personal data concerning you are being processed, and information related to such processing (Article 15 of the GDPR), as well as to obtain a copy of the personal data undergoing processing. By sending a written communication via email to privacidad@edison.es with the Ref. "Exercise of Rights," accompanying it, if necessary to prove your identity, with a copy of your national identity document or equivalent identifying document (passport, N.I.E., etc.). 
Right to rectification The right to obtain from Edison Next, without undue delay, the rectification of personal data in the terms of Article 16 of the GDPR. By sending a written communication via email to privacidad@edison.es with the Ref. "Exercise of Rights," accompanying it, if necessary to prove your identity, with a copy of your national identity document or equivalent identifying document (passport, N.I.E., etc.). 
Right to erasure (right to be forgotten) The right to obtain from Edison Next, without undue delay, the erasure of personal data in the terms of Article 17 of the GDPR. By sending a written communication via email to privacidad@edison.es with the Ref. "Exercise of Rights," accompanying it, if necessary to prove your identity, with a copy of your national identity document or equivalent identifying document (passport, N.I.E., etc.).
Right to restriction of processing 

The right to obtain from Edison Next the restriction of data processing when: 

- The accuracy of the personal data is contested, for a period enabling Edison Next to verify its accuracy. 

- The processing is unlawful and the data subject opposes the erasure (requesting restriction instead). 

- Edison Next no longer needs the personal data, but they are required by the data subject for the establishment, exercise, or defense of claims. 

Its exercise shall be limited to what is described in Article 18 of the GDPR. 

By sending a written communication via email to privacidad@edisonnext.es with the Ref. "Exercise of Rights," accompanying it, if necessary to prove your identity, with a copy of your national identity document or equivalent identifying document (passport, N.I.E., etc.). 
Right to data portability The right to receive the personal data concerning you that you have provided to us, in a structured, commonly used, and machine-readable format, or to transmit them to another controller when technically possible under the terms described in Article 20 of the GDPR.By sending a written communication via email to privacidad@edisonnext.es with the Ref. "Exercise of Rights," accompanying it, if necessary to prove your identity, with a copy of your national identity document or equivalent identifying document (passport, N.I.E., etc.). 
Right to object The right to object at any time to the processing of personal data concerning you, including profiling, as described in Article 21 of the GDPR. By sending a written communication via email to privacidad@edisonnext.es with the Ref. "Exercise of Rights," accompanying it, if necessary to prove your identity, with a copy of your national identity document or equivalent identifying document (passport, N.I.E., etc.). 
Your Rights What does it consist of? How to exercise it? 
Right not to be subject to a decision based solely on automated processing (including profiling)The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, under the terms of Article 22 of the GDPR. By sending a written communication via email to privacidad@edisonnext.es with the Ref. "Exercise of Rights," accompanying it, if necessary to prove your identity, with a copy of your national identity document or equivalent identifying document (passport, N.I.E....). 
Right to withdraw granted consent You shall have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Through the forms, content, and privacy configuration spaces provided by Edison Next, as the case may be. For example, you may request to unsubscribe from the newsletter service or requested commercial communications through the link provided for this purpose. Nevertheless, you may always direct a communication to the email: privacidad@edisonnext.es so your right can be duly addressed in accordance with applicable regulations. 
Right to lodge a complaint with the competent supervisory authority (AEPD) This implies the possibility of turning to the supervisory authority if you believe your personal data protection rights have been violated (Articles 13 and 14 of the GDPR). Before filing any report or complaint with the Spanish Data Protection Agency (AEPD), we recommend you contact us to analyze the specific situation and attempt to find an effective and amicable solution. Regardless of the above, if you wish, you may also refer to the AEPD website: www.aepd.es. 

12. ARE SECURITY AND PROTECTION MEASURES APPLIED TO YOUR PERSONAL DATA? 

Taking into account the nature, scope, context, and stated purposes of the processing, as well as the risks of varying probability and severity to your rights and freedoms, Edison Next applies (and will apply) appropriate technical and organizational measures to ensure the proper security and protection of your personal data based on privacy by design and by default criteria, as well as applying a concurrent risk-based approach system that will be reviewed and updated by Edison Next when necessary. 

The use of the Hyper-Text Transfer Protocol (HTTPS) on our platform is a reinforced guarantee for the security of your personal data. 

 

13. VALIDITY AND MODIFICATION OF THE PRIVACY POLICY 

This policy is effective as of April 1, 2021. 

Edison Next reserves the right to modify this policy to adapt it to applicable legislative, doctrinal, or jurisprudential developments, or for technical, operational, commercial, corporate, and business reasons, being duly published as it appears here. Therefore, it is recommended that this policy be read in detail every time this Platform is accessed. 

Likewise, Edison Next may inform you personally and prior to the projected changes in this policy before they come into effect, provided that this is technically and reasonably possible—particularly when you have the status of a registered user or are a customer of Edison Next. 

 

14. COMPETENCE AND APPLICABLE JURISDICTION 

In general, any controversy or conflict shall be submitted preferentially by the parties to their own knowledge for the purpose of seeking an amicable solution and mutual agreement using, for these purposes, the channel and email address provided in section 11 of this policy. 

Should this not be possible, based on the criteria contained in the GDPR for determining the competence of the lead or main authority regarding the knowledge of any conflict, controversy, or claim surrounding this privacy policy—at least through administrative channels—you are informed that such authority shall be the Spanish Data Protection Agency (AEPD), in compliance, in any case, with the provisions of Article 56 of the GDPR. Regarding the right to effective judicial protection against Edison Next, in these cases, the provisions of Article 79.2 of the GDPR shall also apply, and the corresponding action may be exercised before the Judges and Courts of the City of Madrid, insofar as the responsible entity is a company based in Spain. Current Spanish and European regulations applicable in this field shall be observed.