Privacy Policy

In accordance with the principles of lawfulness, fairness and transparency, Olivoenergy Consulting S.L. makes this Privacy Policy available to you.

1. Data Controller

Controller: Olivoenergy Consulting S.L.
Tax ID No. (NIF): B93612687
Registered office: C/ Echegaray, 3 2D, 29015 Málaga, Spain
Email: info@olivoenergy.com
Telephone: +34 951 990 833

[Data Protection Officer (if applicable): insert contact details if one has been appointed]

2. Scope of this Policy

This Privacy Policy applies to the processing of personal data carried out by Olivoenergy Consulting S.L. in the context of its business and professional activities, including personal data collected through its website, contact forms, commercial communications, contractual relationships, recruitment processes, and browsing activity where applicable.

3. Purposes of the Processing

Depending on the category of data subject, Olivoenergy Consulting S.L. processes personal data for the following purposes:

a) Prospective customers

To manage a potential commercial and/or professional relationship, respond to requests, enquiries or quotations, send the information requested, and, where appropriate, send information about services and/or products that may be of interest.

b) Customers

To manage the commercial and/or professional relationship, provide the contracted services and/or products, handle administrative, accounting and tax matters arising from the contractual relationship, and, where appropriate, send information about similar services and/or products that may be of interest.

c) Suppliers

To manage the commercial and/or professional relationship, including procurement, accounting, administrative and payment management.

d) Job applicants

To manage recruitment and personnel selection processes and to assess professional profiles submitted to Olivoenergy Consulting S.L.

e) Website users

To manage the website, ensure its security, analyse browsing activity where consent has been given where required, and improve the user experience and website performance.

4. Categories of Data Processed

Depending on each case, Olivoenergy Consulting S.L. may process the following categories of personal data:

  • Identification data: name, surname, company name, tax identification number, etc.

  • Contact data: email address, telephone number, postal address.

  • Professional and business data: company, position, professional activity.

  • Contractual, billing and payment data.

  • Data contained in messages, requests, enquiries or forms submitted by the data subject.

  • Recruitment data included in CVs, cover letters and supporting documentation.

  • Browsing and technical data, such as IP address, device information, cookies and similar technologies, subject to applicable law and cookie settings.

Olivoenergy Consulting S.L. does not intentionally process special categories of personal data unless this is strictly necessary and legally justified.

5. Legal Basis for Processing

The legal basis for the processing of personal data depends on the category of data subject and the specific purpose pursued:

a) Prospective customers

  • Article 6(1)(b) GDPR: processing is necessary in order to take steps at the request of the data subject prior to entering into a contract, such as preparing quotations, proposals or service offers.

  • Article 6(1)(f) GDPR: legitimate interest in responding to requests, handling queries and managing professional communications.

  • Article 6(1)(a) GDPR: consent of the data subject, where required, for sending commercial communications or offers.

b) Customers

  • Article 6(1)(b) GDPR: processing is necessary for the performance of a contract to which the data subject is a party.

  • Article 6(1)(c) GDPR: processing is necessary for compliance with legal obligations applicable to Olivoenergy Consulting S.L., including accounting, tax and commercial obligations.

  • Article 6(1)(f) GDPR: legitimate interest in managing the business relationship and, where applicable, sending information about similar services or products.

c) Suppliers

  • Article 6(1)(b) GDPR: processing is necessary for the performance of a contract.

  • Article 6(1)(c) GDPR: processing is necessary for compliance with legal obligations.

  • Article 6(1)(f) GDPR: legitimate interest in managing supplier relationships and business continuity.

d) Job applicants

  • Article 6(1)(a) GDPR: consent of the data subject when submitting their application.

  • Article 6(1)(b) GDPR: where applicable, processing necessary to take steps prior to entering into an employment or professional relationship.

e) Website users

  • Article 6(1)(a) GDPR: consent of the data subject for the use of non-essential cookies and similar technologies where legally required.

  • Article 6(1)(f) GDPR: legitimate interest in maintaining website security, preventing fraud, and ensuring proper technical functioning, where applicable.

6. Provision of Data

The data requested is adequate, relevant and limited to what is necessary for the purposes for which it is processed.

Providing personal data is voluntary in principle; however, failure to provide the data requested in mandatory fields or required for a particular service may prevent Olivoenergy Consulting S.L. from responding to the request, entering into a contract, or providing the service properly.

7. Data Retention Periods

Personal data will be retained for no longer than is necessary for the purposes for which it was collected and, thereafter, for the period required to comply with legal obligations or to establish, exercise or defend legal claims.

In particular:

  • Prospective customer data: for the time necessary to manage the request or enquiry and, in general, for a maximum period of 12 months from the last interaction, unless a contractual relationship is established earlier.

  • Customer data: for the duration of the contractual relationship and, thereafter, for the statutory limitation periods applicable under accounting, tax, commercial and civil law.

  • Supplier data: for the duration of the contractual relationship and, thereafter, for the statutory limitation periods applicable under accounting, tax and commercial law.

  • Job applicant data: for a maximum period of 12 months from receipt of the application, unless the applicant requests earlier deletion or a longer retention period is justified and consented to.

  • Website user data: for the period strictly necessary for the purpose for which it was collected and, in the case of cookies, in accordance with the retention periods stated in the Cookie Policy.

8. Recipients of Data

Olivoenergy Consulting S.L. will not disclose personal data to third parties unless such disclosure is required by law, is necessary for the performance of a contract, or the data subject has been informed accordingly.

Personal data may be communicated to:

  • Banks and financial institutions for the management of collections and payments.

  • Public administrations, courts, tribunals, law enforcement bodies, and other competent authorities, where required by law.

  • Service providers acting as data processors, such as hosting providers, email service providers, IT support providers, cloud service providers, accounting, legal or administrative support providers, where necessary for the provision of services and subject to the corresponding data processing agreements.

9. International Data Transfers

As a general rule, personal data will not be transferred to recipients located outside the European Economic Area.

However, where the provision of services requires the use of service providers located outside the European Economic Area, or where remote access from outside the EEA may occur, Olivoenergy Consulting S.L. will ensure that such transfers are carried out in compliance with the GDPR and subject to appropriate safeguards, such as:

  • an adequacy decision adopted by the European Commission,

  • the Standard Contractual Clauses approved by the European Commission, or

  • any other valid transfer mechanism under Articles 44 to 49 GDPR.

Further information on international data transfers and the safeguards applied may be requested by contacting Olivoenergy Consulting S.L. at info@olivoenergy.com.

10. Source of the Data

As a general rule, the personal data processed by Olivoenergy Consulting S.L. is obtained directly from the data subject.

Where personal data has not been obtained directly from the data subject, the relevant information regarding the source of the data, the categories of data processed, and any other information required by applicable law will be provided within the time limits established by the GDPR.

11. Data Subject Rights

Data subjects may exercise the following rights, where applicable:

  • Right of access to their personal data.

  • Right to rectification of inaccurate or incomplete data.

  • Right to erasure of their data.

  • Right to object to the processing of their data.

  • Right to restriction of processing.

  • Right to data portability.

  • Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects them.

Requests to exercise these rights may be sent in writing to the registered office of Olivoenergy Consulting S.L. or by email to info@olivoenergy.com, attaching, where appropriate, proof of identity sufficient to verify the requester’s identity.

Further information about data protection rights and official complaint forms is available from the Spanish Data Protection Agency (AEPD).

12. Automated Decisions and Profiling

Olivoenergy Consulting S.L. does not carry out automated individual decision-making, including profiling, that produces legal effects on the data subject or similarly significantly affects them.

If this practice changes in the future, the data subjects will be informed accordingly in compliance with applicable law.

13. Withdrawal of Consent

Where the processing of personal data is based on consent, the data subject may withdraw that consent at any time, without affecting the lawfulness of the processing carried out prior to such withdrawal.

14. Complaints Before the Supervisory Authority

If a data subject considers that their personal data is not being processed correctly, or that a request to exercise their rights has not been handled properly, they may lodge a complaint with the competent supervisory authority.

In Spain, the competent supervisory authority is the Agencia Española de Protección de Datos (AEPD).

15. Security Measures

Olivoenergy Consulting S.L. has adopted the appropriate technical and organisational measures necessary to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, taking into account the state of the art, the nature of the data processed and the risks to the rights and freedoms of natural persons.

However, absolute security cannot be guaranteed.

The data subject is responsible for ensuring that the personal data provided is true, accurate and kept up to date, and must notify Olivoenergy Consulting S.L. of any change thereto.

16. Confidentiality

Personal data will be processed with the utmost confidentiality by all personnel and authorised collaborators involved in any phase of the processing, all of whom are subject to appropriate duties of confidentiality and secrecy.

17. Cookies and Similar Technologies

This website may use cookies and similar technologies for technical, personalisation, analytical and, where applicable, advertising purposes.

For detailed information about the cookies used, their purposes, retention periods, and how to configure or withdraw consent, please consult our Cookie Policy. The use of non-essential cookies is subject to the user’s prior consent where required by law.

18. Changes to this Privacy Policy

Olivoenergy Consulting S.L. reserves the right to amend this Privacy Policy at any time in order to adapt it to legislative, jurisprudential or operational changes.

Any updated version will be published on this website. Users are therefore encouraged to review this Privacy Policy periodically.

Last updated: 11/03/2026