In accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), you are informed of how personal data is processed on this website.
Data controller
- Controller: Zelestra Corporación, S.A.U. («Zelestra»)
- Tax ID (N.I.F.): A-95363859
- Registered office: Alameda de Urquijo, 13, 48008 Bilbao (Bizkaia), Spain
- Data protection contact: rgpd@zelestra.energy
What data we process
This website has no forms, does not require registration and does not use analytics or advertising cookies. Only the following data is processed:
- Browsing data: IP address, date and time of access, page requested and technical data about your browser, which the server records automatically.
- Language data: the language set in your browser and the approximate country you are connecting from, which the network provider infers from your IP address. They are only used on your first visit to show you the website in English or Spanish, and they are not stored.
- Contact data: the data you provide if you write to any of the Zelestra email addresses shown on the website.
Purposes, legal basis and retention
| Purpose | Legal basis | Retention |
|---|---|---|
| Ensuring the operation and security of the website and preventing misuse (browsing data). | Zelestra’s legitimate interest (Article 6(1)(f) GDPR). | For a limited period, after which the server logs are deleted. |
| Showing the website in your language (language data). Your choice is remembered with a technical cookie, described in the cookie policy. | Zelestra’s legitimate interest in offering the content in the most suitable language (Article 6(1)(f) GDPR). | Not stored. The language cookie lasts 1 year. |
| Handling and responding to the queries you send us by email (contact data). | Zelestra’s legitimate interest in responding to the queries it receives (Article 6(1)(f) GDPR). | Until the query has been resolved. |
Where required, data will be kept blocked, solely available to judges and courts, the Public Prosecutor’s Office and the competent public authorities, for the limitation periods of any liabilities arising from the processing, after which it will be deleted.
Recipients
Personal data will not be disclosed to third parties, except where required by law to public administrations, judges and courts. Zelestra engages website hosting and maintenance providers that act as data processors on its behalf, only on Zelestra’s instructions and under a data processing agreement.
International transfers
No international transfers of personal data are carried out through this website. Should any be carried out in the future, they will be subject to the safeguards required by Chapter V of the GDPR, such as the Standard Contractual Clauses approved by the European Commission.
External platforms linked from this website
This website links to other platforms that collect personal data under their own privacy notices:
- Zelestra corporate website (zelestra.energy): the contact form and job opportunities are governed by its privacy policy.
- Ethics Channel (zelestra.integrityline.com): communications are processed in accordance with the privacy notice available on that platform.
Your rights
You may exercise your rights of access, rectification, erasure, restriction of processing, portability and objection by writing to rgpd@zelestra.energy or to Zelestra’s registered office (Alameda de Urquijo, 13, 48008 Bilbao, Bizkaia, Spain). In particular, you may object at any time to the processing of your data based on Zelestra’s legitimate interest.
If you consider that your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Changes to this policy
Zelestra may amend this privacy policy in accordance with the applicable legislation. Changes take effect from the date of publication and, if they are significant, we will inform you through this website.