PRIVACY POLICY

1.- Who is the data controller?

The data controller for the personal data you provide to us is Aby Marketing Dreams SL, with VAT ESB65209801, with its registered office at Hijas de la Caridad 108, 48003, Bilbao, Spain.

 

Data controller: ABY MARKETING DREAMS SL

Address: Hijas de la Caridad 108, 48003, Bilbao.

 

VAT: ESB65209801

Contact: contacto@aby.group

Website: https://aby.group

 

Data Protection Officer (DPO) contact details: dpo@aby.group

 

2.- For what purpose do we collect your personal data?

In accordance with Regulation (EU) 2016/679, General Data Protection Regulation, and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, Aby collects your personal data for the specific purposes listed below:

• To correctly handle your contact and subscription requests through our form on our Website, as well as your requests for information, suggestions and any possible complaints.

 

• To provide you with the best possible service, manage the maintenance of the data, as well as the professional, commercial and/or contractual relationship that you establish with us, including the corresponding invoicing and delivery.

 

• To carry out surveys, statistics, market studies and commercial prospecting in order to assess service quality, market trends, consumption habits, profile analysis, analysis of sales trends and business and investment decision-making.

 

• To send you commercial communications and keep you informed about services, products, offers, promotions, opportunities, events or news that may be relevant for users, by email, instant messaging systems such as WhatsApp, Telegram, etc., postal mail, telephone calls, automated telephone calls, including with Artificial Intelligence assistance, SMS, push messages, as well as IDchek, unless you object to such processing by the means provided for that purpose as indicated below. To this end, ABY guarantees compliance with the applicable regulations on electronic communications. If you wish to stop receiving such communications, you can unsubscribe by clicking on the link included in the communication itself or by sending an email to the following address: bajas@aby.group

 

• If you have given your consent, to transfer your data to sponsors or clients of Aby so that their partners or clients, or third-party companies from any sector (including, among others, the energy sector for commercial purposes), may send you commercial offers by email, telephone and/or SMS. The list of sponsors is available in this Privacy Policy. The transfer of your data to third parties includes the possibility of data aggregation operations within their databases, deduplication and any other processing that may be necessary to fulfil the purpose of processing your data. We will require those third parties to comply with Regulation (EU) 2016/679, European Data Protection Regulation.

 

• To comply with legally established obligations, as well as to verify compliance with contractual obligations, including fraud prevention.

 

3.- What personal data do we process?

To browse our Website you do not need to provide us with your personal data.

You will only need to provide them if you contact us through the form on our Website or by any communication sent by email.

In such cases, Aby will collect and process the data strictly necessary for the purposes described in the previous section.

We will therefore only collect your contact details in order to identify you and to handle your communications initially and, subsequently, the relationship that may be established.

The data that we will collect and process as from the registration process are:

• Identification and contact details: first name, surname(s), date of birth, full postal address, gender, email address, telephone number and any other data that may be requested in the form relating to socio-economic information.
• Commercial information data.
• Data regarding your browsing, traffic and location.

The data that we will collect and process from cross-checks with databases, where applicable, are:

• Data related to economic, academic, professional and sociological profiles.

The data that we will collect and process from the user in the context of email marketing campaigns refer to:

• Commercial interest data.
• Data regarding your browsing, traffic and location.

Aby does not collect personal data from minors, so by accepting our privacy policy you confirm that you are over 18 years of age and that the data you provide are true, accurate, complete and up to date.

In this regard, as a user you will be responsible for any false or inaccurate information that you provide to us via the Website or email and, therefore, for any damage and loss, whether direct or indirect, caused to Aby or third parties.

Lastly, if you provide us with data of third parties, you guarantee that you have obtained their corresponding consent, so that Aby is exempt from any liability in this respect.

Notwithstanding the above, Aby may carry out any checks it deems appropriate and necessary.

For its part, Aby guarantees that it has the necessary technical measures in place to ensure the security of your data.

 

4.- What is the legal basis for processing your data?

The legal basis or legitimisation for carrying out the processing activities indicated is your free, informed and unequivocal consent.

Data may also be processed on the basis of legitimate interest, where a balancing of interests authorises the processing and in the case of processing contact persons of legal entities.

Furthermore, data are processed on the basis of the pre-contractual and contractual relationship that ultimately binds us in order to provide you with the service you request.

Consent may be withdrawn at any time.

If you withdraw your consent for any of the processing activities, this will not affect the lawfulness of the processing carried out previously.

 

5.- How long do we keep your data?

We will retain your data for as long as is necessary for each of the purposes above. In particular:

• Your contact details will be kept for 30 days until your contact request, request for information or any other communication has been dealt with.
• The data necessary to manage and maintain the professional, commercial, pre-contractual and/or contractual relationship that we establish will be stored and processed until that relationship has ended.
• We will also retain your data thereafter for the periods legally established and for as long as they may be necessary for the formulation, exercise or defence of claims and to comply with legal obligations and any liability arising from the previous relationship.
• Where the legal basis is consent, we will process your data until you withdraw your consent or object to the processing. When you withdraw your consent or object to the processing, your data will be kept, duly blocked, for as long as claims may be brought.

 

During this period, your data will be duly blocked and made available to Judges and Courts or the competent Public Authorities and, in particular, to the data protection authorities, in order to address any potential liability arising from the processing of the data.

 

6.- To whom may we disclose your data?

Aby may disclose your personal data, in accordance with the purposes described in section two of this policy, to the following categories of recipients, which include entities in the sectors of activity that you can consult by clicking here:

• Consultancy, audit, administrative, financial and banking services.

• Postal, distribution and courier services.
• Archiving, custody and digitisation services, data storage and processing services.
• Security, IT, hosting and cloud services.
• Information removal and destruction services.
• Advertising and communication services.
• Legal services, public bodies and authorities where there is a legal obligation.
• Services provided by third-party companies in the energy sector for commercial mailings.

The recipients of the services indicated may be located within or outside the European Economic Area. In the latter case, we will be duly legitimised to carry out international data transfers. To this end, Aby guarantees the adoption of all measures necessary to safeguard your rights.

 

7.- What are your rights?

You have the rights of access, rectification, objection, erasure, restriction, portability and not to be subject to automated individual decision-making.

By exercising your right of access, you may, at any time and at no cost, access your data, know which personal data you have provided to us, correct them if they are incorrect, inaccurate or incomplete and request that we erase them when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

By exercising your right of objection, you may object to the processing of your data, so that your personal information will no longer be processed for those purposes in respect of which you have expressed your objection.

Right of rectification: you may request the rectification of inaccurate or incomplete data.

Right of erasure: you may request the erasure of your personal data when the circumstances provided for in Article 17 of Regulation (EU) 2016/679 apply.

Right to restriction of processing: if you so wish, and when the conditions laid down in the data protection regulations are met, you may request that we restrict the processing of your data.

Right to data portability: in certain circumstances, you may request that we port your data to another data controller.

Right not to be subject to a decision based solely on automated processing, including profiling, if it produces legal effects concerning you or similarly significantly affects you.

In the cases above, Aby may retain your data for the formulation, exercise or defence of claims and to comply with legal obligations and any liability arising from the previous relationship.

To exercise the rights above, you only need to inform us by sending a signed written request addressed to ABY at Aby Marketing Dreams SL, VAT ESB65209801, registered office at Hijas de la Caridad 108, 48003 Bilbao, Spain, or by email to: bajas@aby.group

Lastly, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) if you consider that Aby has infringed the rights granted to you by data protection regulations. For more details you can consult the website www.aepd.es. You may also choose to submit your complaint to the Data Protection Officer by sending it to dpo@aby.group

 

8.- Where are the data stored?

Your data are stored on European servers and are not transferred outside the European Union.

 

9.- Changes to this information

We will review and update this data protection information at least once a year or whenever there are changes in legislation or in any of the procedures for processing your personal information, indicating the date of the latest update, content and date.

If we have your email address, we will send you an email with information about these changes.

Where necessary, we will renew your consent so that you can confirm that you agree with these changes.

10.- Commercial communications

Participants in the various free promotions are informed that, whenever they give their authorisation by ticking the corresponding box, their data may be processed for advertising purposes and they may therefore receive commercial messages from companies in the sectors referred to in this privacy policy to which their data have been previously disclosed.

Such communication may be carried out through any of the channels provided by the participant: email, SMS, telephone, postal mail or through the use of software applications and social networks. These communications may, where appropriate, incorporate cookies / beacons / tags that, anonymously and without affecting any personal data, allow the controller and/or the companies with which it collaborates to interact more effectively with the participant.

 

Furthermore, if you tick any of the options listed below, you may stop receiving, by any of the means described, information and advertising from other related companies or entities regarding the following sectors, which may not be of interest to you:

 

Water	Food	Insurance
Automotive	Beauty	Collectibles
Consultancy / Legal advice	Cosmetics	Drugstore / Household products
Publishing	Energy	Esotericism
Financial / Banking	Education / Training	Mass consumption (FMCG)
Games	Toys	Cleaning
Furniture	Fashion	Music
Leisure	NGOs	Hobbies / Pastimes
Health	Insurance and private security	Telecommunications
Textile	Travel	Videos
Market research	Pollsters and surveys

You may also receive commercial offers from other companies or entities together with the prizes obtained.

Participants may revoke, totally or partially and at any time, the consent given for the processing of their data and the receipt of advertising communications by sending a notification to the email address (bajas@aby.group).

In addition to what is provided for in the legislation applicable to the controller of the commercial promotion, all persons whose personal data are processed may freely exercise the rights of objection, access, rectification, cancellation, information, portability, restriction of processing and any others that may be granted under their own national legislation, in the same way and under the same conditions.

This data protection information was reviewed and last updated in October 2023.