Privacy policy

Introduction to the Privacy Policy

The website is property of and operated by BIZKAIA ENERGY S.L.U. who are responsible for processing the personal data of the people referred to in this privacy policy.

Contact Details:

• Business address: Poligono Industrial Boroa, Insula AI-1, 48403 Amorebieta (Bizkaia)
• General email address: bizkaia@bizkaiaenergia.com
• Address for data protection rights correspondence: lopd@bizkaiaenergia.com
• Telephone number: +34 94 630 11 50

In this privacy policy the following companies, which are related according to their description, are mentioned:

• Bizkaia Energía S.L.U. is the corporate owner of the combined cycle energy generator plant in Amorebieta. Bizkaia Energía manages the processing of personal data that are mentioned in the section “Treatment of Personal Data”.
• Bizkaia Facility Management (BFM) is the company contracted for the supply of operational service and maintenance of the facility for Bizkaia Energía and shares responsibility for the treatment of personal data.

The Privacy Policy of this site is intended to fulfil the obligation, established in article 12 of the EU regulation 2016/679 for the protection of personal data, of providing information and transparency. As such, the cases in which the duty to provide information has been fulfilled by way of basic information referred to as “first layer” in accordance with provisions in “el articulo 11 de la Ley organic 3/2018 de proteccion de datos personales y garantía de derechos digitales”, this privacy policy corresponds to additional information considered as “second layer” in which additional elements required, in articles 13 and 14 of the EU Reglamentation 2016/679 for the protection of personal data, are described.

The Meaning of Personal Data

“Personal data” is defined as any information related to an identified or identifiable person. This means any person who can be directly or indirectly identified by reference to an identifier such as name, ID number, location, on line identifiers (for example, IP addresses – if they can be used for identification) or one or more specific factors from physical identity, physiology, genetic, mental, economic, cultural or social of the individual.

In brief, this includes such data alone or combined with other data that we have in our power or that we may have at our disposition that can be used to identify the individual.

Proscessing of Personal Data

The operations or set of operations undertaken with your personal data are identified through processes. Bizkaia Energía sets out below the detailed information of each process according to the guide established by “la Agencia Española de Protección de datos”.

Processing Applications

whose aim is the administration of résumés of people applying for work, and also the administrative operations of the selection procedure.

1. Category of data: identifiers which include contact details, ID and personal images; career information.
2. Legal Basis: consent of the applicant (art 6.1 a RGPD) in the case of self-proposal and in all other cases, pre-contractual relationship (art. 6.1 a RGPD)
3. Data validity duration: data are valid for three years.

Entry Control Processing

whose aim is to register the individuals who wish to enter the facilities.

1. Category of data: identifiers
2. Legal basis: legitimate interest based on the necessity to maintain the safety of the people within the facilities (Art. 6.1.f RGPD).
3. Duration of the validity of data: data remain valid for 30 days. Once this limit is reached the data are eliminated.

Processing Contact Management

whose aim is to provide access to the data of contact persons that work with our clients and suppliers, such as the data of people we have a business or institutional relationship with.

1. Category of data: identifiers such as first name and surname, contact details such as telephone and fax numbers, email addresses, professional data such as professional position.
2. Legal base: legitimate interest based on the need to maintain business and mercantile relationships (Art. 6.1. RGPD).
3. Data validity duration: data remain valid for as long as the relationship for which it was collected. Once the relationship has ended the data can be blocked according to “articulo 32 de la LO 3/2018” in the event of ensuing legal responsibility.

External Personnel Processing

Whose aim is the completion of the set of operations established in the coordination of commercial activities defined in la Ley 31/1995 de “Prevención de Riesgos Laborales” and which is developed in “el Real Decreto 171/2004”.

1. Category of data: identifiers such as forename and surname; professional data about position and type of contract; payslip data included in the “TC1, TC2 and ITA de la Seguridad Social” forms; personal safety data such as assigned PPE; facility-entry-registration data.
2. Legal basis: fulfilment of all legal obligations stipulated by “la prevensión de riesgos laborales (Art 6.1.c RGPD)”.
3. Duration of the validity of data: data remain valid as long as the relationship that generated its collection lasts. Once the relationship is ended the data can remain blocked as stipulated in “articulo 32 de la LO 3/2018” in case legal responsibility ensues.

Processing Video Surveillance

whose aim is perimeter security of the facilities as well as the materials and people within the facilities.

1. Category of data: images recorded on camera.
2. Legal basis: legitimate interest based on the need to maintain the security of the facilities (Art. 6.1.f RGPD)
3. Data validity duration: data remain valid for a maximum of 30 days. Once the this period has ended the data are eliminated.

Information about Navigation of the Webpage

For tracking and production of statistical information about our platforms, and analysis and improvement of their functionality. To know the detail of the information collected, the type of data and the validity of the aforementioned “Cookies” policy of the web at the address: https://www.bizkaiaenergia.com/politicacookies

should be consulted.

Anonymisation of Data

At Bizkaia Energía techniques for anonymisation of data are not used.

Disclosure of Your Personal Data to Third Parties

We may disclose your personal data to third parties, including, among others, the following:

1. 1. within our group of companies.

• Bizkaia Energía S.L.takes responsibility for communicating data to Bizkaia Management S.L., who shares responsibility for maintaining the aims and bases that legitimise processing.
• Bizkaia Energy is property of Castelton Commodities International LLC, a Europe based company to which personal data are communicated while maintaining the objective and legitimisation of processing.

2. third parties who supply us with services and who help us and our group of companies to operate our business. For example, sometimes a third party may have access to your personal data with the aim of assisting our information technology or to manage correspondence in our name. With these third parties we have commissioned the corresponding processing.
3. our legal advisers and other advisers and professional auditors.
4. as required to fulfil a legal request, to protect vital interests, to protect the security or the integrity of our data bases or this site, to take precautions against legal responsibility.
5. the regulatory authorities, tribunals and government bodies to comply with court orders, legal requirements, and government requests.

International Data Transfers

Transfers of personal data are not envisaged outside of Europe.

Safety of Personal Data

We strive to use the appropriate technical and physical security measures to protect the personal data that are transmitted, stored, or processed and to protect personal data from accidental or illegal destruction, loss, alteration, unauthorised dissemination or access, in relation to our site. These measures include information technology safeguards, protected archives and installations. Our service suppliers are also carefully selected and must use the appropriate means of protection. In the Web SSL industrial standard encryption is used to protect transmission of data. The majority of the current search engines permit the level of security necessary to use these areas.

Your Rights arising from Data Protection Legislation

You have several rights in law for the protection of data. These may include (if applicable)

• • • • any individual has the right to know and obtain information as to whether Bizkaia Energía is processing or not data that is of their concern
      • the right to request access to personal data, which means knowing what data we have about you
      • the right to rectification, including the right to demand we correct inexact personal data
      • the right to request the restriction of processing what concerns you or to oppose the processing of your personal data
      • the right to request the suppression of your personal data when they are no longer necessary for the purposes for which they were compiled
      • the right to oppose processing of your data provided that you have not consented previously and no legitimate imperative motives exist or the defence of possible complaints exist
      • the right to portability of data in a common-use-machine-legible format in certain circumstances, provided the processing is automated
      • the right to withdraw consent for a process for which you have previously consented.

It is important to be aware that some of these rights may have restrictions in their implementation, there being legal limitations or another type that the organization will have to justify in the reply to your request. An example is the request for the removal of data that may be limited if said data are subject to any observance of legal validation. In these cases “el articulo 32 de la Ley Organica 3/2018 Protection de Datos Personales y garantía de Derechos Digitales” has a proviso of the possibility for blocking the data until its elimination is possible.

You may request your rights in writing addressed to the email address: lopd@bizkaiaenergia.com or consult about your rights by using the channels of contact identified in the introduction.

In order to process the request for sight of your rights, it will be necessary to verify the identity of the petitioner and to verify that the data belongs to the petitioner, such that in said communication, forename, surname, ID number should be included, the specific request, the address to which the response needs to be notified. Were it necessary, we can solicit a copy of the document which accredits your identity.

If you wish we can send a form that will help you to fill out the request for sight of rights in accordance with what is established in “la Ley Orgánica 3/2018 de Protección de Datos Personales y garantía de Derechos Digitales”.

The supervisory authority in Spain corresponds to “la Agencia Española de Prodección de Datos (AEPD), whose web page is www.aepd.es

The forms to exercise your rights are available in the AEPD Web. These forms must be signed electronically or have a copy of the person's ID card attached to be valid.

Links

The BIZKAIA ENERGÍA webpage can include hyperlinks to other sites that are not operated or controlled by BIZKAIA ENERGÍA. As a result, BIZKAIA ENERGÍA does not guarantee, nor does it take responsibility for the legality, reliability, usability, veracity or the updating of the contents of such websites or their privacy policies. Please, before providing your personal information to sites external to BIZKAIA ENARGÍA bear in mind that their compliance with data protection may be different to ours.

Updating and changes in the privacy policy

The text for this privacy policy was updated in January 2021.

BIZKAIA ENERGÍA may modify, without prior notice, its privacy policy in accordance with the applicable legislation at any time and in accordance with the changes produced in its system of privacy management.