Privacy policy

What you write yourself in the contact form. We do not buy databases and we do not obtain your data from third parties. What the measurement tools collect when you accept them is a separate matter, and it is precisely what this page has yet to describe.

The form asks for first name, last name, email, phone, what you need, province, when you need it, where the installation would be and a free-text message. Of all of those, the only compulsory one is the phone number: without a way of contacting you there is no enquiry to deal with. You can leave the rest blank and the form still sends.

The free-text message is yours, so avoid writing there data that is not needed for what you are asking us. If you tell us something in a special category (health, trade union membership, beliefs), we will process it for the same purpose, but we do not need it in order to carry out a technical survey.

We also record that you ticked the consent box, because it is the evidence that you gave it. The form includes an anti-fraud technical measure that collects no data about you.

We keep the form data for as long as the business relationship lasts and, thereafter, for the applicable statutory limitation periods

After that period it is deleted, unless there is a legal obligation to keep it longer or it is needed to deal with a claim. If you withdraw your consent before then, it is deleted as soon as you ask us.

We do not sell your data and we do not pass it to third parties for them to use on their own account.

The providers we need in order to operate do have access to it, and only in order to provide us with their service and following our instructions, under a signed data processing agreement: Vercel Inc., which hosts the site and executes the form submission, and Google Ireland Limited (Google Workspace), where the email notification is received. Enquiries are filed on EVenergia’s own systems

In addition, the data may be disclosed to public authorities, the courts or law enforcement where a rule requires it.

Some of our processors are established in the United States. Those transfers rely on the adequacy decision for the EU-US Data Privacy Framework and, in the alternative, on the standard contractual clauses approved by the European Commission, which form part of the processing agreement signed with each of them.

There is no automated decision-making or profiling producing legal effects on you or similarly significantly affecting you. Your enquiry is read by a person.

The server that serves these pages may automatically record technical data about each request (IP address, date, browser) for security and to diagnose faults. The legal basis for that processing is our legitimate interest in keeping the service available and protected (article 6.1.f of the GDPR).

The site is hosted by Vercel Inc. (Delaware, United States), which acts as data processor under its data processing agreement.

Our hosting provider keeps those execution logs for one day, after which they are deleted. We do not use them to profile you and we do not cross-reference them with any other data.

The site is always served encrypted and the form submission travels encrypted from your browser to our server and from there to the system that receives enquiries.

We apply the technical and organisational measures required by article 32 of the GDPR and we limit access to the data to those who need to see it in order to help you. When we log a failed submission so that we can fix it, no personal data is left in that log: only which form it was and why it failed.

This site is aimed at people over 14 years of age. We do not knowingly request or process data about anybody younger; if any reaches us, we delete it.

We may update it when the law changes or when what the site does changes. The version in force is the one published here and its review date is above: 23 September 2026.

If the change affects something you consented to, we will ask you again instead of assuming it.