legal

Privacy policy

PROSOLIA ENERGY INTERNACIONAL SL, with registered office at C/ VIENTO Nº 14 (03006 ALICANTE) ALICANTE, tax ID B97961452 (hereinafter, “Prosolia Energy”), as the controller of your personal data, informs you about the processing of your personal data so that you understand, among other things:

why we need to process your data;
what data we may hold and how we obtain it;
how long we keep it;
with whom we share it; and
what your rights are and how to exercise them

Prosolia Energy will process your data in full compliance with the applicable data protection regulations. Your data will not be subject to decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you. Nor will your data be used for purposes other than those set out in this document.

A) DATA PROCESSING ACTIVITIES:

Below you will find detailed information on the processing activities we carry out—depending on the categories of individuals we interact with or the activities we perform—the purposes pursued, the legal bases relied upon, the retention periods applied, and, where applicable, with whom we share such data.

1. CUSTOMERS:

a) Purposes and legal basis for processing. Your data will be processed for the following purposes:

Provision of the contracted services (by the entity with which you have independently contracted the service), including project handling and implementation, administrative management (including project/service-related communications), invoicing for industrial self-consumption, collections, etc. Legal basis: performance of the contract we have with you as a customer.
Accounting and tax management of Prosolia Energy. Legal basis: compliance with legal obligations applicable to us.
Sending you communications related to special occasions, such as Christmas or birthday greetings, based on our legitimate interests in maintaining the most cordial relationship with our customers in line with established social customs.
Sending you electronic proposals or communications with information about us and our activities and events. Legal basis, as applicable: (a) your explicit consent; and/or (b) our legitimate interests in promoting services identical or similar to those you have previously contracted with us, in accordance with Article 21(2) of the Spanish Information Society Services Act.
Sending you proposals or communications by post or telephone with information about us and our activities, based on our legitimate interests in promoting services identical or similar to those you have previously contracted with us.
Compliance with our obligations related to compliance programs (data protection, criminal law, etc.) and internal legal advice, based on our legitimate interests and on legal obligations applicable to us.

b) Origin and retention period: The data have been provided by you or your legal representative, or obtained from other sources (our whistleblowing channel, witnesses, or competent authorities). As a general rule, we keep your data for the duration of the contractual relationship and thereafter, duly blocked, for the statutory limitation period to bring or defend against claims.

Regarding the sending of proposals or informational communications about us and our activities and events, we will retain your data until you revoke your consent or object to such communications.

c) Categories of data. Identifiers, contact details, economic and financial data and transaction-related data, as well as any data necessary for the proper provision of the contracted service. In very rare cases, we may also process other information relevant to a possible incident, investigation, or claim.

d) Disclosure of your data: We may share your personal data with:

Public Administrations, other Public Bodies and entities authorized by law, for obtaining licences and permits or where required or necessary (including law enforcement authorities, courts, tribunals, and other dispute resolution bodies).
Financial institutions (for payments or collection/SEPA remittances).
Group companies, other supplier or partner entities, Notaries and Registries, and experts and translators (where necessary for project execution and in accordance with the contract).
Consultancy firms, legal counsel, and court attorneys (only if needed due to a claim).

Additionally, with the following service providers, strictly to the extent required to render their services to us:

Auxiliary service providers (CRM, e‑mail marketing, accounting, cloud office productivity, document management, IT).
Advertising companies.

If you wish to obtain specific or more detailed information about any of these third parties, you can request it through our contact point indicated below.

e) International data transfers: In relation to projects outside the European Economic Area (EEA) that so require, we will transfer your personal data to Prosolia Group companies, as well as to companies and bodies outside the EEA as necessary for performance of the contract with you. Where required for destinations not ensuring an adequate level of protection, Prosolia will implement appropriate safeguards to duly protect the data in those destinations, mainly based on the Standard Contractual Clauses approved by the European Commission or the competent authority.

2. PROSPECTIVE CUSTOMERS:

a) Purposes and legal basis for processing. Your data will be processed for the following purposes:

To send you electronic proposals or communications with information about us and our activities, on the basis of your request or explicit consent.
To send you proposals or communications by post or telephone, on the basis of our legitimate interests in promoting our services that we believe may be of interest to you.
To send you communications related to special occasions, such as Christmas or birthday greetings, based on our legitimate interests in maintaining a cordial relationship with our contacts in line with established social customs.
To comply with compliance obligations (data protection, criminal law, etc.) based on our legitimate interests and in order to retain appropriate evidence, as well as compliance with legal obligations applicable to us.

b) Origin and retention period: The data have been provided by you (or your legal representative) or obtained from other sources (LinkedIn or third‑party referrers). We retain the data until you object to the processing or, where applicable, withdraw the consent previously granted, and thereafter, duly blocked, for the statutory limitation period to bring or defend against claims.

c) Categories of data: Identifiers and contact details. In very rare cases, we may also process other information relevant to a possible incident, investigation, or claim.

d) Disclosure of your data: We may share your personal data with Public Administrations, other Public Bodies and entities authorized by law, where required or necessary.

Additionally, we can share your data with the following service providers, strictly to the extent required to render their services to us:

Auxiliary service providers (CRM, e‑mail marketing, cloud office productivity, document management, IT)
Advertising companies.

If you wish to obtain specific or more detailed information about any of these third parties, you can request it through our contact point indicated below.

e) International data transfers: In relation to projects outside the EEA that so require, we will transfer your personal data to Prosolia Group companies, as well as to companies and bodies outside the EEA as necessary for performance of the contract with you. Where required for destinations not ensuring an adequate level of protection, Prosolia will implement appropriate safeguards, mainly the Standard Contractual Clauses approved by the European Commission or the competent authority.

3. SUPPLIERS AND PROSPECTIVE SUPPLIERS:

a) Purposes and legal basis for processing. Your data will be processed for the following purposes:

To contract your services or products, based on the pre‑contractual relationship between us, and, where applicable, to manage and oversee the relationship with our suppliers and partners, based on performance of the contract already in force.
Accounting and tax management of Prosolia Energy, based on compliance with legal obligations applicable to us.
Sending communications related to special occasions, such as Christmas or birthday greetings, based on our legitimate interests in maintaining a cordial relationship with our customers in line with established social customs.
Compliance with compliance obligations (data protection, criminal law, etc.), based on our legitimate interests and in order to retain appropriate evidence, as well as compliance with legal obligations applicable to us.

b) Origin and retention period: The data have been provided by you or your legal representative, or obtained from other sources (third‑party recommendations, advertising spaces, or through your corporate website). We retain the data for the duration of the contractual relationship and thereafter, duly blocked, for the statutory limitation period to bring or defend against claims.

c) Categories of data: Identifiers and contact details, professional data, and transaction-related data. In very rare cases, we may also process other information relevant to a possible incident, investigation, or claim.

d) Disclosure of your data: We may share your personal data with:

Public Administrations, other Public Bodies and entities authorized by law, where required or necessary (including law enforcement authorities, courts, tribunals, and other dispute resolution bodies);
Financial institutions (for payments);
Group companies, other supplier or partner entities, Notaries and Registries, and experts and translators (where necessary for contract performance);
Consultancy firms, legal counsel, and court attorneys (only if needed due to a claim).

Additionally, with service providers strictly to the extent required to render their services to us: Auxiliary service providers (CRM, accounting, cloud office productivity, document management, IT).

If you wish to obtain specific or more detailed information about any of these third parties, you can request it through our contact point indicated below.

e) International data transfers. Where necessary due to the existing contractual or pre‑contractual relationship, we will transfer your personal data to Prosolia Group companies, as well as to companies and bodies outside the EEA. Where required for destinations not ensuring an adequate level of protection, Prosolia will implement appropriate safeguards, mainly the Standard Contractual Clauses approved by the European Commission or the competent authority.

4. LEGAL REPRESENTATIVES AND CONTACT PERSONS OF THIRD PARTIES

a) Purposes and legal basis for processing.

Management and development of the relationship we maintain with third parties, natural or legal persons, through their legal representatives and, where applicable, contact persons, based on our legitimate interests in maintaining an appropriate relationship with such third parties.
Sending communications related to special occasions, such as Christmas or birthday greetings, or, as appropriate, messages of condolence, based on our legitimate interests in maintaining the most cordial relationship with you in line with established social customs.
Compliance with compliance obligations (data protection, criminal law, etc.), based on our legitimate interests and in order to retain appropriate evidence, as well as compliance with legal obligations applicable to us.

b) Origin and retention period: The data have been provided by you or your legal representative, or obtained from other sources (the company for which you provide services, LinkedIn, or the corporate website of the company for which you work). We retain the data for as long as the relationship with the entity for which you provide services remains in force, and thereafter, duly blocked, for the statutory limitation period to bring or defend against claims.

c) Categories of data: Identifiers, contact details, and employment/position data. In very rare cases, we may also process other information relevant to a possible incident, investigation, or claim.

d) Disclosure of your data: We may share your personal data with:

Public Administrations, other Public Bodies and entities authorized by law, where required or necessary (including law enforcement authorities, courts, tribunals, and other dispute resolution bodies);
Financial institutions (for payments);
Group companies, other supplier or partner entities, Notaries and Registries, and experts and translators (where necessary for contract performance);
Consultancy firms, legal counsel, and court attorneys (only if needed due to a claim).

Additionally, with the following service providers strictly to the extent required to render their services to us: auxiliary service providers (CRM, accounting, cloud office productivity, document management, IT).

If you wish to obtain specific or more detailed information about any of these third parties, you can request it through our contact point indicated below.

5. JOB APPLICANTS

a) Purposes and legal basis for processing.

Management of recruitment processes, based on our legitimate interests in recruiting personnel to fill positions, and on the request made by the applicant.
Compliance with compliance obligations (data protection, criminal law, etc.), based on our legitimate interests and in order to retain appropriate evidence, as well as compliance with legal obligations applicable to us.

b) Origin and retention period: The data have been provided by you or your legal representative, or obtained from other sources (platforms such as LinkedIn or talent search firms). We retain the data until the end of the selection process in which you participate, unless they are needed for longer to bring or defend against potential claims or to investigate possible irregularities or criminal acts.

c) Categories of data: Identifiers, contact details, academic and/or professional data, employment/position data, and CV‑related data (education, qualifications, languages, professional experience, skills and knowledge). In very rare cases, we may also process other information relevant to a possible incident, investigation, or claim.

d) Disclosure of your data: We may share your personal data with the Prosolia entity to which the candidate applies, as well as with Public Administrations, other Public Bodies and entities authorized by law, where required or necessary. In addition, our cloud office and storage providers and our ERP provider will also have access to your data, strictly to the extent required to render their services to us.

If you wish to obtain specific or more detailed information about any of these third parties, you can request it through our contact point indicated below.

e) International data transfers: We will transfer your personal data outside the EEA when you submit your application to Prosolia Group companies outside that territory, as necessary in response to your pre‑contractual request.

6. WEBSITE USERS

a) Purposes and legal basis for processing.

Setting cookies in your browser to analyse visits to our corporate website and enable certain user preferences, based on the consent you provide or request you make, as well as for technical purposes necessary for the proper functioning of the website, including the prevention of fraud and/or cyber‑attacks, based on our legitimate interests. For more information on cookies, in addition to what we offer here, please refer to our Cookie Policy available at http://prosolia.com/cookies-policy/.
Registration and handling of communications or requests received through the website contact form and the e‑mail address published on the website for such purposes, based on our legitimate interests in appropriately assisting users of our website.
Sending commercial communications by electronic means (including our Newsletter), based on the consent given when subscribing via the relevant web form.

b) Origin and retention period: The data have been provided by you or your legal representative. Data obtained, where applicable, through cookies are retained for the period indicated for each cookie or type of cookie in our cookie notice and/or Cookie Policy. As regards data you provide when sending us an e‑mail or through the contact form, they will be kept until the communication received has been definitively handled and thereafter, duly blocked, for the statutory limitation period to bring or defend against claims. As regards electronic commercial communications (including our Newsletter), we will retain the data of subscribers until they unsubscribe or revoke their consent.

c) Categories of data: Identifiers, contact details, and any other information you provide through your communication with us; in the case of cookies, identifiers (visitor ID), data relating to the device used to access our website (such as IP address and browser used), and browsing habits and preferences.

d) Disclosure of your data: Your data will be shared with the cookie providers indicated in our Cookie Policy (http://prosolia.com/cookies-policy/).

e) International data transfers: We transfer your data to Google as the provider of the Google Analytics cookie, established in the United States; Google adheres to the EU–US Data Privacy Framework, which ensures an adequate level of protection for personal data.

7. SOCIAL NETWORK CONTACTS

a) Purposes and legal basis for processing: On those social networks where Prosolia Energy has an account or profile, your data will be processed by Prosolia Energy to interact with you in the ways permitted by each social network. Such processing will always take place within the context of those platforms and is subject to—and based on—their Terms and Conditions.

b) Origin and retention period: Your personal data will be those you have provided to the respective social network of which you are a user and will only be used within that network as a result of the interaction between you and Prosolia Energy through the mechanisms available on the various social networks or platforms.

Since we do not store your personal data in our own systems, this processing will last for as long as you interact with us via mechanisms available on the networks or platforms where we are present (e.g., “follow”, “connect”, “like”, or similar buttons).

c) Categories of data: Identifiers, contact details, and any information you choose to share via the platform through which you interact with us.

d) Disclosure of your data: We will not share your data with third parties. However, please remember that the platform through which you interact with us will process your personal data for its own purposes, including enabling your use of the social network or platform, and it may disclose your personal data to third parties. For more information, please refer to the privacy notice of the relevant platform.

e) International data transfers: We will not disclose your data to third parties outside the EEA. Nevertheless, please note that the platform through which you interact with us may do so. For more information, please refer to the privacy notice of the relevant platform.

B) IS IT MANDATORY TO PROVIDE YOUR PERSONAL DATA?

You must provide the data that—as described for each category of individuals below—are necessary for those purposes based on the performance of a contract we have with you or for compliance with legal obligations. In such cases, if you do not provide those data, it will not be possible to handle your request or to perform the relevant contract in whole or in part.

C) ABOUT OUR SUPPLIERS

When selecting suppliers whose services involve processing personal data on our behalf, Prosolia Energy applies strict criteria to choose only those offering an adequate level of guarantees. We also contractually require them to adopt the technical and organisational measures necessary to ensure the protection of the rights and freedoms of the data subjects, and to use the personal data only as strictly necessary according to the service provided and for the duration of such service.

D) YOUR RIGHTS AND HOW TO EXERCISE THEM

You have the right to obtain information about the processing of your data, to access your data, and to have it rectified or, where appropriate, erased. In certain circumstances, you also have the right to restriction of processing, in which case we will only keep your data for the establishment, exercise or defence of legal claims; the right to object to processing; and the right to data portability, by which we transmit your data to you or directly to another company you designate.

Withdrawal of consent. For processing activities carried out on the basis of your consent, you have the right to withdraw your consent at any time. Withdrawal will not have retroactive effect, so it will not affect processing carried out up to that time.

You may exercise your right to object with respect to the purposes described above that are based on legitimate interests or public interest. However, that right may be refused where—having regard to the request—compelling legitimate grounds for the processing are deemed to override your interests, rights and freedoms, or where the data are necessary for the establishment, exercise or defence of legal claims.

To exercise any of these rights, you may contact Prosolia Energy by post at C/ VIENTO Nº 14 (03006 ALICANTE) ALICANTE, or by e‑mail at protecciondedatos@prosolia.com.

If you consider that there has been any kind of infringement in relation to the processing of your personal data, you may lodge a complaint with the competent supervisory authority (in Spain, the Spanish Data Protection Agency – www.aepd.es – ). For other European countries, please refer to the authorities listed here: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

E) ACCURACY AND TRUTHFULNESS OF THE DATA PROVIDED

By providing personal data to us through any of our web forms or e‑mails, the user warrants that the data provided are truthful, accurate, complete, and up‑to‑date, and undertakes to inform us of any change, using the channels provided for that purpose and specified in section G) of this Policy. The data subject shall be liable for any damage or harm, whether direct or indirect, arising from failure to comply with this obligation.

Users who provide data relating to third parties declare that they have obtained the consent of the data subjects, or are otherwise entitled to do so, and that they have informed them in advance of the content of this clause, exempting the organisation from any liability arising from non‑compliance with this obligation.

F) STAY INFORMED ON OUR SOCIAL MEDIA

To foster participation in our activities and keep you informed of our news, please note that Prosolia Energy has created social media profiles. All users are invited to join our social networks or groups, in which case we ask you to take into account the information provided in section A) 7 of this Policy.

G) CONTACT POINT

For additional information or for any other matter relating to the processing of your data, please do not hesitate to contact us at:

Postal address: C/ VIENTO Nº 14 (03006 ALICANTE) ALICANTE.
E‑mail: protecciondedatos@prosolia.com

H) AMENDMENTS AND UPDATES

This Privacy Policy may be amended or updated to comply with legal requirements, adapt to the instructions of the Spanish Data Protection Agency, or as a result of changes to our website. We therefore recommend that users periodically review the Privacy Policy.

Current version dated 3 March 2026.