PRIVACY POLICY

Last updated: June 13, 2024

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR), SVAN Solar, 2026, SL informs users (hereinafter, the “Users" or the "User”) of the Website (hereinafter, the “Website”), regarding the processing of personal data that has been voluntarily provided during the process of registration, access and use of the service.

The user is informed that this Privacy Policy refers exclusively to those data that will be collected and processed by browsing and using the Website. In this sense, you need counselling for the Privacy Policy corresponding to any other services provided by the SVAN GROUP .

1. WHO IS THE CONTROLLER?

IBERIA HOUSEHOLD APPLIANCE SUPPLIES, SL. (forward, the “Responsible and adaptable" or "SVAN”, interchangeably), is the entity responsible for the processing of data provided by Web clients.

Home address: C/Lamination 36, Warehouse 02, 46500- Sagunto (Valencia)

Company Tax Code: B09822925

Registry information: registered in the Mercantile Registry of Valencia in Volume 11149, Book 8427, Folio 1, Section 8, Page V-203648, I/A 1.

To contact Users should contact the Responsible person by email for: tecnico@svansolar.com

2. WHAT DATA WILL WE COLLECT AND FOR WHAT PURPOSE WILL IT BE PROCESSED?

The collection, storage, modification, structuring and, where appropriate, deletion of the data provided by Users shall constitute processing operations carried out by the Controller, with the aim of ensuring the correct functioning of the Website, maintaining the service provision and/or commercial relationship with the User, and for the management, administration, information, provision and improvement of the service.

Communication with SVAN via email	Contact and identification data (name, email and data provided by the user in the message)
Communication with SVAN by phone	Phone number, voice and other data you provide during the call.
Contact and customer service form	Contact and identification data (name, email, telephone)
Commercial communications	Contact information (email)
Conducting surveys, quality controls and satisfaction checks.	Contact and identification data (name, email, telephone)
Social Social	Data published by the users themselves that they send privately to the SVAN corporate profile on social networks.

The User guarantees and is responsible, in any case, for the accuracy, validity and veracity of the data collected by the Controller and undertakes to keep them duly updated.

The personal data provided by the User - especially the email address - may also be used to send newsletters, as well as commercial communications regarding promotions and/or advertising on the Website, provided that the User has previously given his or her express consent to receive these communications electronically.

3. WHAT IS THE LEGAL BASIS FOR THE PROCESSING?

If the User does not provide the Controller with his/her data, or does so in an erroneous or incomplete manner, it will not be possible to proceed with the use of the Website.

The legal basis for data collection is that contemplated in the following provisions:

Communication with SVAN via email

Consent of the interesting, art. 6.1.a) of the GDPR.

Execution of a contract, art. 6.1.b.) of the GDPR.

Compliance of a legal obligation, art.

6.1.c) of the GDPR, in relation to Royal Legislative Decree 1/2007, of November 16, approving the revised text of the General Law for the Defense of Consumers and Users and other complementary laws.

Communication with SVAN by phone

Consent of the interesting, art. 6.1.a) of the GDPR.

Execution of a contract, art. 6.1.b.) of the GDPR.

Compliance of a legal obligation, art.

Contact and customer service form

Consent of the interesting, art. 6.1.a) of the GDPR.

Execution of a contract, art. 6.1.b.) of the GDPR.

Compliance de a legal obligation legal, art.

6.1.c) of the GDPR, in relation to Royal Legislative Decree 1/2007, of November 16, approving the revised text of the General Law for the Defense of Personal Data

	de Consumers and Users and other complementary laws.
Commercial communications	Consent of the interested, art. 6.1a) of the GDPR. Legitimate Interest, art. 6.1 f) GDPR.
Conducting surveys, quality controls and satisfaction checks.	Execution of a contract, art. 6.1.b.) of the GDPR.
Social Social	Consent of the interested, art. 6.1a) of the GDPR.

This website is intended for adults with the capacity to consent to the processing of personal data. In accordance with the provisions of articles 7 LOPDGDD in relation to art. 8 RGPD, only those over 14 years of age may give their consent for the processing. In the case of minors under 14, the consent of the holders of parental authority or guardians will be required.

4. HOW LONG WILL THE DATA BE KEPT?

The Controller will process the User's data for as long as they are necessary for the purpose for which they were collected.

The data will be kept as long as they are necessary to provide the service. All of this without prejudice to the conservation of the blocked data for a maximum period of 5 years in order to address possible liabilities, in accordance with the limitation periods for actions in consumer and user regulations and the Civil Code. Due to their blocked status, it will not be possible to use the data for any specific purpose. Once this time has elapsed, or when the User requests it, the data will be permanently deleted from the Controller's database.

5. WILL WE SHARE YOUR DATA WITH THIRD PARTIES?

The data will not be communicated to any third party outside the SVAN GROUP (which includes the Controller and any affiliates or subsidiaries within the corporate family), for purposes other than those stated in the preceding sections, except in the case of legal obligation or, in any case, upon request for the consent of the User. All of the above without prejudice to the fact that the Controller may grant access to or transmit the personal data provided by the User to third-party service providers with whom it has signed data processing agreements and who only access said information to provide a service in favour of and on behalf of the Controller. Those in charge of managing the data processing, under their own responsibility and obligation of due diligence in the processing, may access and use the data provided by the User solely and exclusively for the specific tasks assigned to the service contracted by the Controller, who excludes any type of liability for breaches attributable to those in charge of managing the data processing, without prejudice to the provisions of current legislation.

Likewise, the data will be communicated to the relevant entities for the purposes of (i) complying with current legislation and regulations; (ii) complying with the formalities of a legal process; (iii) responding to requests from public and government authorities; (iv) protecting our operations, businesses or systems; (v) protecting our rights to privacy, security or property and/or those of other users; (vi) applying available remedies or limiting the damages that may be caused to both the Controller and the Users.

6. WILL WE TRANSFER YOUR DATA OUTSIDE THE EUROPEAN ECONOMIC AREA?

The data will not be transferred to countries outside the European Economic Area. However, if such a transfer were to occur, it will be done, with the User's prior consent, in accordance with the measures established in the GDPR by signing the Standard Contractual Clauses adopted by the European Commission through Implementing Decision 2021/914 of June 4, also adopting additional guarantees to the contract itself.

7. ARE WE GOING TO RETAIN THE DATA?

The Controller informs the User that, as a provider of data hosting services and pursuant to the provisions of Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI), it will retain, for a maximum period of 12 months, the essential information to identify the origin of the hosted data and the time at which the provision of the service began.

The retention of this data does not affect the confidentiality of communications and may only be used within the framework of a judicial procedure or to safeguard public security, being made available to the judges and/or courts or the Ministry that so requests.

The communication of data to the State Security Forces and Corps will be done in accordance with the provisions of the regulations on personal data protection, and with the utmost respect for it.

8. HOW DO WE PROTECT HOSTED INFORMATION?

The Data Controller adopts the necessary measures to guarantee the security, integrity and confidentiality of the data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free circulation of the same.

9. HOW CAN THE USER EXERCISE HIS/HER RIGHTS?

The Controller informs the User that he/she has the rights recognized by the LOPDGDD and the RGPD.

Specifically, the User has the following rights:

1. Access to personal data provided to and processed by the controller.

2. Rectification of your personal data, in the event that they are inaccurate or incomplete and the User wishes to modify them.

3. Deletion, in the event that any of the assumptions contemplated in the GDPR occur (i.e. unlawful processing or when the purpose that motivated the processing has disappeared). All of this without prejudice to the provisions of the clauses relating to the conservation and retention of data.

4. Limitation of treatment, provided that any of the following conditions are met:

a) When the interested party challenges the accuracy of the data.

b) If the processing is unlawful but the data subject decides to exercise his or her right to restriction instead of deletion.

c) In the event that the Controller does not need the data, but the interested party does need them to exercise or formulate any claims.

d) When the interested party has exercised his right to object, for the time necessary to verify whether the reasons of the Controller prevail over the user's right.

5. Right to Portability, which allows the User to request that the Controller receive a file containing the personal data that concerns him/her, for common use and machine-readable, and transmit it to another controller without any interference.

6. Right to refuse data processing.

7. You may also express your refusal to be subject to automated profiling.

Specifically, to exercise the aforementioned rights, the User must send an email to tecnico@svansolar.com, attaching a letter stating:

The identity of the rights holder and username and, where applicable, the identity of the legal representative acting on his/her behalf.

Expression of the right you wish to exercise.

In any case, a copy of the ID of the holder of the right in order to prove his/her identity.

Copy of the power of representation and ID of the representative, if applicable.

To exercise the right to object to the receipt of communications, a communication sent to the indicated email address will suffice, without the need to provide a copy of the ID.

The User has, in any case, the right to revoke the consent initially given, and to file claims of rights against the Spanish Data Protection Agency (AEPD), through its Electronic Headquarters – Spanish Data Protection Agency (sedeagpd.gob.es), or, where appropriate, by sending a complaint to the Inspection Sub-Directorate of the Spanish Data Protection Agency, located at Calle Jorge Juan, 6, 28001- Madrid.

10. WILL YOU RECEIVE COMMERCIAL COMMUNICATIONS ELECTRONICALLY?

In accordance with the LSSI (Information Society Services Act), SVAN will not send advertising or promotional communications by email or other equivalent means of electronic communication that have not been previously requested or expressly authorized by the recipients thereof.

In the case of users with whom there is a prior contractual, legal or service relationship, the Data Controller is authorized to send commercial communications regarding products or services of the Controller that are similar to those that were initially contracted with the client.

If the User wishes to unsubscribe from receiving the aforementioned communications, he/she may do so by sending his/her wishes by e-mail to the following address: technician@svansolar.com.

11. CHANGES IN THE PRIVACY POLICY

This document is subject to updates and modifications in order to adapt it to the regulations in force at any given time, as well as to reflect changes implemented in information processing and security practices. Users will be informed of any modifications via email specified in the user account or through a notice on the Web prior to, in any case, the entry into force of any change.