PRIVACY POLICY

This Privacy Policy aims to help you understand what data we collect and for what purpose we process it, as well as our efforts to protect it under appropriate safeguards and in accordance with current regulations.

The personal data you provide through this website located at the URL https://suntrack.energy/ will be processed as described in detail below:

Who is responsible for processing your data?

In accordance with Law 34/2002 on Information Society Services and Electronic Commerce (hereinafter, LSSI), Regulation (EU) 2016/679 General Data Protection Regulation (hereinafter, GDPR), and Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (hereinafter, LOPDgdd), we inform you that Suntrack is a registered trademark owned by P4Q Electronics SLU (hereinafter, P4Q).

Please note that the personal data provided when completing and submitting the forms published on the website will be incorporated into the files that make up the P4Q Electronics SLU activity records, with tax identification number B95019212, registered office at C/Nuestra Señora de la Guía 19, Alonsotegi 48810, Spain, and registered in the Commercial Registry of Vizcaya, Volume 3756, Book 0, Folio 93, Section 8, Page BI-24387, Entry 1.

What personal data do we process?

P4Q will process the following categories of user data:

• Identification data: first and last names.
• Personal or professional contact details: postal address, email address, phone number.
• Academic data: if you participate in selection processes.
• Other data: data provided by the individuals themselves in the interest of fostering commercial and mutual relationships.

For what purpose and on what legal basis do we process your data?

• Managing contact requests and information received via email and/or web form. Legal basis: consent of the data subject (Art. 6.1(a) GDPR) and/or legitimate interest of the data controller (Art. 6.1(f) GDPR).
• Managing recruitment processes. Legal basis: taking pre-contractual steps at the request of the data subject (Art. 6.1(b) GDPR).
• Managing relationships with our customers. Legal basis: compliance with legal obligations (Art. 6.1(c) GDPR), as well as the legitimate interest linking the parties (Art. 6.1(f) GDPR), in relation to Article 19 of Organic Law 3/2018, dated December 5, on the Protection of Personal Data and the guarantee of digital rights.
• Managing relationships with our suppliers. Legal basis: performance of a contract (Art. 6.1(b) GDPR) and compliance with legal obligations (Art. 6.1(c) GDPR). In the case of representatives of legal entity suppliers, the legitimate interest (Art. 6.1(f) GDPR) that links the parties, in relation to Article 19 of Organic Law 3/2018, will also apply.
• Handling the sending of commercial communications. Legal basis: explicit consent of the data subject (Art. 6.1(a) GDPR).
• Exercising rights and managing privacy. Legal basis: compliance with a legal obligation (Art. 6.1(c) GDPR).
• Whistleblowing channel. Legal basis: compliance with a legal obligation (Art. 6.1(c) GDPR).
• Video surveillance. P4Q has surveillance cameras on its premises to ensure the security of people, property, and facilities. Legal basis: legitimate interest of the data controller (Art. 6.1(f) GDPR).

To whom will we disclose your personal data?

P4Q will only disclose personal data to:

• Third parties, agencies, and public institutions of the State Administration, regional and local administrations, including judicial bodies to whom it is legally required to provide the data.
• Service providers contractually linked to P4Q, who will process your data strictly following privacy information instructions and with the necessary safeguards for the purposes of processing.
• As part of the P4Q Group, other entities within the group when strictly necessary for the requested purpose and/or when needed for administrative purposes within the business group.

How long will we retain your data?

Depending on the purpose for which we process your data, the retention period may vary:

• Managing contact requests and information received via email and/or web form. If you contact P4Q to request information, your data will be retained for a period of two years from the last communication made by the user, which will be renewed with each new contact or relationship initiated by the user.
• Handling the sending of commercial communications. If you are not a P4Q customer, your data will be processed for this purpose until you withdraw your consent or object to receiving commercial communications. If you are a customer, your data will continue to be retained to manage our contractual relationship, but commercial communications will cease from the moment you object to such communications.
• Managing relationships with our customers and suppliers. The personal data of our customers and suppliers will be retained for the duration of the contractual relationship and, thereafter, until the expiration of possible legal liabilities, duly blocked.
• Managing recruitment processes. The curriculum vitae and any other data provided for participating in our recruitment processes will be retained during the selection process. If P4Q believes your resume may be of interest for future selection processes, the candidate’s consent will be requested to retain the resume for two years from its receipt.
• Exercising rights and managing privacy. If you have exercised your data protection rights or we need to process your data to comply with legal obligations established by data protection regulations, your data will be retained for the time necessary to fulfill our obligations and, thereafter, until the expiration of possible legal actions, duly blocked.
• Whistleblowing channel: Personal data contained in communications received through our whistleblowing channel will be processed for as long as strictly necessary. Unnecessary personal data contained in the communication will be deleted immediately. Personal data necessary for managing investigations will be retained during the investigation and, thereafter, until the expiration of possible legal actions, duly blocked.
• Video surveillance: Personal data captured by surveillance cameras are retained for a period of one month from the time of recording. However, they may be retained for longer periods if needed to verify the commission of acts that endanger the integrity of people, property, or facilities.

What security measures will be applied to your personal data?

P4Q has implemented the necessary technical and organizational security measures to ensure an adequate level of security, taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of processing, as well as varying probability and severity risks to the rights and freedoms of natural persons, in compliance with Article 32 of Regulation (EU) 2016/679 General Data Protection Regulation. Specifically, P4Q has relied on meeting the requirements of ISO/IEC 27001:2013 Information Security Management Systems.

How can you exercise your rights in relation to your personal data?

To revoke the consent given, as well as to exercise the rights of access, rectification, deletion, objection, restriction, and portability, as well as the right not to be subject to automated individual decision-making, you can send a written request to the postal address located at C/Nuestra Señora de la Guía 19, Alonsotegi, 48810, Spain; or to the email address marketing@p4q.com.
If you believe that the above rights have not been addressed in accordance with current legislation, you can file a complaint for the protection of rights with the Spanish Data Protection Agency.