PRIVACY POLICY 

At MOLGAS ENERGY, S.A.U., (hereinafter, “Molgas“) we are firmly committed to the right to privacy of all our users. We want you to feel secure and have full confidence that we respect your data and will keep it safe, both in the use of our service and in any interaction, you have with us. 

We have prepared this Privacy and Data Protection Policy to explain in a clear and simple way how and why we treat your personal data and any other information that allows us to identify you. We encourage you to read it carefully and if you have any doubts, please contact us. 

Molgas reserves the right to modify this policy to adapt it to new legislation or jurisprudence, as well as modifications to the service itself. In these cases, we will announce in this Privacy Policy the changes introduced reasonably in advance of their implementation. 

The User guarantees that he/she has the full legal capacity, based on his/her age, to read and understand the provisions of the Privacy and Data Protection Policy and shall be entirely responsible for this declaration, as well as access and correct use of the Website. 

1. WHO WE ARE AND HOW WE USE YOUR PERSONAL DATA 

The Data Controller for the processing of the data collected by this means, as well as those generated as a result of the use of our service is:  

MOLGAS ENERGY, S.A.U. 

• Address: Avenida Castilla nº 2 Edf. F, Esc B, Planta 2ª Puerta 3, San Fernando business Park San Fernando de Henares (Madrid). 

• TIN: A-81466625. 

• Phone: +34 916 601 662. 

• Contact E-Mail: rgpd.mlg@molgas.es.
  

1. WHAT KIND OF PERSONAL DATA DO WE COLLECT FROM YOU? 

Information provided by the User: 

The information obtained by the User is as follows: (i) through the contact form on the Website, (ii) through the application form for the use of Molgas fuel cards for self-employed and companies, etc. We may request certain information from you through the different forms, such as name, surname, e-mail address, telephone number, etc. 

Information collected automatically:  

This Website automatically records and stores certain information about your system through the use of cookies and other types of technologies. If you want to know what cookies are, how they work, which ones and how we use them, we recommend that you consult our Cookies Policy. 

1. PURPOSES AND LEGITIMACY FOR THE PROCESSING OF PERSONAL DATA 

Molgas is entitled to process your data in order to provide its services. Below, we inform you of the purposes for which we process your personal data,
together with the legal basis for that processing:

• Use of cookies and other technologies allows collecting information related to the browser or device of Users, the use of their browsing habits, in order to improve the product or services of Molgas or adapt the content displayed to each user. Legal basis: the legal basis for the processing is the protection of Molgas’ own legitimate interests for the installation of the necessary cookies and the consent (art. 6.1.a GDPR) of the Users in other cases. The period for which the personal data are stored is specifies in the Cookie Policy.
  

• Management of applications for the use of Molgas cards for self-employed and companies: in order to carry out these procedures, certain data are required. The legal basis for the processing is the performance of a contract in accordance with Article 6.1.b of the General Data Protection Regulation.
  

• Attention and response to your requests for information by Molgas’ e-mail or telephone: attention and response to your requests by e-mail or telephone. The legal basis for the processing is the performance of a purchase contract performed by the customer (art. 6.1.b GDPR) or the consent if the request is not related to a service (article 6.1.a GDPR). We will process your data for as long as it is necessary to fulfil your request or enquiry and keep it blocked until the prescription of possible liability actions.
  

• Selection processes: to manage your participation in the corresponding selection processes by sending your data to the Molgas email address. The legal basis for the processing is to take steps prior to entering into a contract (art. 6.1.b GDPR). The personal data will be stored for the duration of the selection process and will be blocked for a maximum period of 2 years. 
  

• Maintenance and optimization: for the purpose of maintenance and analysis of the Website, as well as to resolve performance problems, improve its availability or operation and protect the conditions of use. The legal basis for processing is the protection of the legitimate interests pursued by Molgas (art. 6.1.f GDPR). We will process your data for as long as it is necessary to fulfil your request or enquiry and keep it blocked until the prescription of possible liability actions.
  

1. SHARING OF PERSONAL INFORMATION WITH THIRD PARTIES 

The personal data that we obtain will be used exclusively for the purposes indicated in this Privacy Policy and we will not share your information with any third party unless there is a legal obligation that makes such communication necessary to Administrative Authorities, Security Forces and Corps or Judges and Courts. 

Likewise, we inform you that shall not be carried out International Transfers of your personal data. In case of international data transfers outside the EEA, Molgas will ensure an adequate level of protection of the transferred data and compliance with the applicable regulations, in accordance with the guidelines of the Spanish Data Protection Agency and the European authorities. Molgas ensures that the third parties, subsidiaries/subsidiaries/agents involved comply with the terms and conditions of this Privacy Policy, adopt adequate measures and safeguards necessary to protect the confidentiality and security of personal data, including the Binding Corporate Rules and standard Contractual Data Protection Clauses. 

1. HOW LONG WE KEEP YOUR PERSONAL INFORMATION 

The personal data provided will be kept by Molgas as long as the User of the Webiste does not express his/her wish to unsubscribe from Molgas’ services, in order to receive information about the company’s services. Subsequently, if necessary, Molgas will keep the information blocked in accordance with the legally established deadlines. 

1. ARE YOUR PERSONAL DATA SAFE? 

In compliance with our obligation of secrecy regarding the personal data collected, as well as our duty to safeguard them, we have implemented security measures designed to ensure the security of your personal data and prevent their alteration, loss and treatment and/or unauthorised access, according to the state of technology, the nature, the nature of the data we handle and the risks to which they are exposed, whether from human action or the physical or natural environment in accordance with the provisions of the applicable regulations. 

We care about your privacy by reinforcing the confidentiality and integrity of the information we process and by continuously monitoring and controlling our processes to ensure respect for your privacy and the security of your data. 

1. YOUR RIGHTS IN RELATION TO THE PROCESSING OF PERSONAL DATA AND HOW TO EXERCISE THEM
   

Exercising your data protection rights is free of charge and, in order to provide the greatest transparency, we provide you with more information about these rights: 

Right of access, rectification, and deletion: You can consult your personal data by requesting a copy of them, as well as request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected. 

Right to object: Under certain circumstances and for reasons relating to your particular situation, you may object to the processing of your data. In this case, we will stop processing the data except for compelling legitimate reasons, or the exercise or defence of possible claims. 

Right to restrict processing: In certain circumstances, you may request that we restrict the processing of your data, so that we will only use your data in the cases authorised by law. 

Right to portability: Where data is collected in a structured format, you may request direct transmission of your data to other data controllers or receive your data in electronic format, for storage on your own devices, without the need to transmit it to other data controllers. 

Right to withdraw consent: Where processing is based on your consent, you may withdraw your consent at any time without affecting the lawfulness of the processing carried out prior to the withdrawal. 

To exercise these rights, the interested party may send a message to this effect, indicating name, surname, email address to the following email address: rgpd.mlg@molgas.es. Likewise, you may send a letter to the following address: Avenida Castilla nº 2 Edf. F, Esc B, Planta 2ª Puerta 3, San Fernando business Park San Fernando de Henares (Madrid). If we are unable to identify you in our systems, we may request additional information. 

In addition, we inform you that the interested party may exercise their rights by filing a complaint with the Spanish Data Protection Agency, when they consider that we have not processed their data in accordance with the regulations, through the Website enabled for this purpose by the corresponding Control Authority. 

1. HOW DO WE UPDATE OUR PRIVACY POLICY?
   

Molgas reserves the right to make, at any time, modifications, or updates to adapt them to changes made in the contexts or circumstances that affect the activities they cover, such as new legislation, jurisprudence, development, use of new functionalities, internal policies, commercial practices, requirements for the provision or offering of its products, etc. In view of the foregoinf, we use our best efforts to keep our Privacy Policy fully updated. This Privacy Policy has been reviewed and posted on 25/11/2024. 

1. CONTACT AND ACCEPTANCE OF THE PRIVACY POLICY
   

For any query related to the processing of personal data carried out by MOLGAS or the Privacy Policy, you can contact the following email address: rgpd.mlg@molgas.es.  

The interested party ACKNOWLEDGES AND ACCEPTS HAVING READ AND UNDERSTANDED this Privacy Policy, the content of which supersedes the entirety between the User and the Controller with respect to the use and processing of his/her personal information. The data subject expressly agrees to be bound by the terms of this Privacy Policy, in its entirety and scope, without exception to any of its provisions.