Privacy policy

Our commitment

• To respect the privacy of our users and process their personal data with their consent.
• To process the personal data that we strictly need to provide the requested service and process the data securely and confidentially, taking the necessary measures to prevent unauthorized access and improper use thereof.
• Not to use personal data for purposes for which we have not previously obtained consent. Not to send personal information to third parties or share such data.
• To keep personal data for as long as is strictly necessary for the specific purpose for which the data were provided, with regular revision of those needs and deletion of data that are not necessary.

This Privacy Policy explains

1. Who is the data controller
2. What are personal data and processing of personal data
3. When do we carry out data processing?
4. What data do we collect and for what purposes?
   1. Secure provision of the website
   2. Contact form (‘Contact us’ button in website)
   3. User information request
   4. Careers
   5. Application form in website (‘Apply for this position’ button in Open Positions)
   6. Active Sourcing
   7. Request of a demo
   8. Downloadable resources
   9. Live Chat
   10. Events - registration and attendance
   11. Newsletter
   12. Login and use of pvDesign
5. Your control over your personal information
6. What rights do you have over the personal data provided?
7. Data security and storage
8. To whom we might share information
9. When and how we share information with third parties
   1. Integration of Social Media Plugins
   2. Information on the use of cookies and other technologies
   3. Hyperlinks to third party websites
10. Transfer of personal data to countries outside the EU and EEA

This Privacy Statement does not apply to personal information arising from RatedPower’s employment-related activities.

Who is the data controller

Name of the Company RATED POWER, S.L.U.

TAX ID B87769709

Address: Calle de Don Ramón de la Cruz, 84, Planta 0 (28006) Madrid, Spain

Rated Power, S.L.U. is a Spanish-based company that offers Software as a Service services to domestic and international business customers. As a result, information that we collect, including personal information, may be transferred to our Spanish offices to permit us to comply with the Spanish legal and contractual obligations, and to provide information and services to prospective and current clients, and to perform related business activities.

What are personal data and processing of personal data

‘Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Moreover, ‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

When do we carry out data processing?

We process your data in the following situations:

• Securing provision of the website.
• Contact form (‘Contact us’ button in website).
• User information requests.
• Careers site.
• Request a demo.
• Downloadable resources.
• Live Chat.
• Events - registration and attendance.
• Newsletter.
• Login and use of pvDesign.
• Email.

What data do we collect and for what purposes?

It is important for the user to be aware of the data provided and the purpose for which it is provided because in doing so, YOU as a user authorize US to collect, store and use such data for any relevant purpose AND you may AT ANY TIME withdraw the consent provided by the appropriate channels.

In accordance with the the EU General Data Protection Regulation (‘GDPR’) and its transposition by the Spanish Law, Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y garantía de los derechos digitales (‘LOPD’), your consent as a user and interested party is the legal basis and legitimacy of the processing of your personal data.

Through our website we may collect personal data for different purposes:

Secure provision of the website

In case you visit our website, the web server temporarily collects the following personal data and/or Personal Identifiable Information (‘PII’) to display the website and stores such information in so-called server log files:

• Processed categories of data
  • Browser type and version
  • Operating system used
  • Referrer URL
  • Browser string
  • Hostname of the accessing computer
  • Time of the server request and
  • IP address.
• Purposes: RatedPower's interest is the secure and functional operation of the website. The logged data is used in particular for the purposes of data security, to defend against attempts of attack on our web servers. We reserve the right to carry out statistical evaluation of anonymous data records.
• Legal basis: The processing of this data is based on Art. 6 para. 1 f GDPR: We have a legitimate interest in ensuring data security and trouble-free operation.
• Storage periods or criteria for determination: The data will be deleted after 180 days at the latest.

Contact form (‘Contact us’ button in website)

In case you visit our website, the web server temporarily collects the following personal data and/or Personal Identifiable Information (‘PII’) to display the website and stores such information in so-called server log files:

Since not all questions may be served immediately and conclusively by the explanations on our website, we would like to provide you with the opportunity to address your concerns directly to RatedPower experts. For this purpose, we offer the ‘Contact us’ button on our website.

• Processed categories of data (Mandatory data in contact forms, which are absolutely necessary to answer your request, are marked with an asterisk [*]):
  • Contact information
    • First name, last name
    • Job title
    • Work Email address
    • Phone number
    • Company name
  • Topic-specific information
    • Company profile (energy industry related)
    • Pipeline projects for next year (energy industry related)
  • Content of your inquiry
    • Inquiry specific information
• Purposes: Ensuring that your inquiry is processed quickly in accordance with RatedPower's quality standards. This includes record, allocation and processing of the inquiry by the relevant company departments.
• Legal basis: The processing of the data is based on Art. 6 para. 1 lit. f GDPR: We have a legitimate interest in processing this data for the purpose of processing your request. If you use the contact form to convey an interest in purchasing our products and services, this is a contract-relevant inquiry based on Art. 6 Para. 1 lit. b GDPR.
• Storage periods or criteria for determination: In case you send us a contact request, we will store this data for the duration of processing your request. Further storage may be necessary, depending on separate storage obligations with regard to your query.

User information request

In the event you voluntarily provide us with personal data in order to request for additional information, we will capture the personal data that you have provided us in order to manage the information request sent via email, postal address and/or phone number provided in the website.

• Possible processed categories of data:
  • Contact information
    • First name, last name
    • Address (private, practice or business address, customer number)
    • Email address
    • Phone number
  • Topic-specific information
    • Energy/SaaS industry
    • Your relationship to RatedPower (e.g. interested party, user, collaborator, etc.)
  • Content of your inquiry
    • Inquiry specific information
• Purposes: RatedPower’s interest is to give a proper answer to your request.
• Legal basis: The processing of the data is based on Art. 6 para. 1 lit. a GDPR: We have a legitimate interest in processing this data for the purpose of processing your request.
• Storage periods or criteria for determination: In case you send us a voluntary request for additional information, we will store this data for the duration of processing your request. Further storage may be necessary, depending on separate storage obligations with regard to your query.

Careers

You may use our Careers page purely for informational purposes. Additionally, you may register by filling the relevant on our Careers page to apply for vacant positions in RatedPower.

Automated decision-making does not take place.

Application form in website (‘Apply for this position’ button in Open Positions)

• Processed categories of data (Mandatory data in contact forms, which are absolutely necessary to answer your request, are marked with an asterisk [*]):
  • Contact information
  • First name, last name
  • Email address
  • Phone number
  • Years of experience in a similar role
  • Linkedin
  • Level of English
  • Other languages
  • Interest in the application
  • CV and other education professional data.
• Purposes: We process the personal data you provide us with to bring forward your application. Thus, we process your personal data as part of the recruiting platform in order to find suitable candidates for open positions.
• Legal basis: In the context of your specific application, we process your data in order to make a decision on the conclusion of an employment contract. The legal basis for this is Art. 6 (1) (b) GDPR.
• Who receives your application data? Within RatedPower, access to your personal data is granted on a need-to-know basis and in order to make decisions on the conclusion of an employment contract or to process your e-recruiting candidate-profile (e. g. HR, works council, department heads).
• Storage periods or criteria for determination: In general, your data will be kept until the award of a job or until you exercise your right of deletion, always for a maximum of 365 days from the moment of its reception.

Active sourcing

For recruiting purposes, we also actively search social networks, forums or other freely available sources on the internet for interesting candidate profiles.We usually contact the candidates via contact form, to fill with the information stated above. For this purpose of future touch base, we will ask for the candidate’s prior consent.

• Processed categories of data: Same as article 4.4.1 above.
• Purposes: Same as article 4.4.1 above.
• Legal basis: The search for interesting candidate-profiles and the initial contact is carried out on the basis of the user agreement with the social network or on the basis of our legitimate interests in recruiting new talents for RatedPower. The legal basis for this are Art. 6 (1) (b) and (f) GDPR.
• Who receives your data? Same as article 4.4.1 above.
• Storage periods or criteria for determination: Same as article 4.4.1 above.

Request of a demo

 You may have interest in being provided with a free demo, which can be done by filling a form.

• Processed categories of data (Mandatory data in contact forms, which are absolutely necessary to answer your request, are marked with an asterisk [*]):
  • Contact information
    • First name, last name
    • Job title
    • Work Email address
    • Phone number
    • Company name
  • Topic-specific information
    • Company profile (energy industry related)
    • Pipeline projects for next year (energy industry related)
• Purposes: Ensuring that your inquiry is processed quickly in accordance with RatedPower's quality standards. This includes record, allocation and processing of the inquiry by the relevant company departments.
• Legal basis: The processing of the data is based on Art. 6 para. 1 lit. f GDPR: We have a legitimate interest in processing this data for the purpose of processing your request.
• Storage periods or criteria for determination: In case you send us a free demo request, we will store this data for the duration of processing your request. Further storage may be necessary, depending on separate storage obligations with regard to your query.

Downloadable resources

You may have interest in any of our content (pvDesign documentation, success stories, ebooks, reports or other forms of content created by RatedPower team and available throughout the website if filling a form.

• Processed categories of data (Mandatory data in contact forms, which are absolutely necessary to answer your request, are marked with an asterisk [*]):
  • Contact information
    • First name, last name
    • Job title
    • Work Email address
    • Phone number
    • Company name
  • Topic-specific information
    • Company profile (energy industry related)
    • Pipeline projects for next year (energy industry related)
• Purposes: Ensuring the proper provision of content materials. We use this data to check the accuracy of your email address and to ensure that the content material is correctly tailored with the information that is appropriate for you.
• Legal basis: The processing of the data is based on Art. 6 para. 1 lit. f GDPR: We have a legitimate interest in processing this data for the purpose of processing your request.
• Storage periods or criteria for determination: As soon as the data is no longer required for the purposes we pursue or you have withdrawn your consent and there is no other legal basis, the data will be deleted. If the latter is the case, we will delete the data where the other legal basis has ceased to apply.

Live Chat

 If you use the Live-Chat offered on the website, we process particular data, depending on your interest.

• Processed categories of data
  • Contact information
  • First name, last name
  • Email address
  • Topic-specific information
  • Company profile (energy industry related)
  • Pipeline projects for next year (energy industry related)
  • Connection information
  • Browser version
  • operating system
  • Chat contents

Apart from aforementioned data, no further personal data is collected, unless you provide this information voluntarily inside the chat.

• Purposes: Opportunity for direct exchange with our users and potential customers.
• Legal basis: The data will be processed exclusively on the basis of your consent. The processing is therefore based on Art. 6 para. 1 a GDPR. Withdrawal of your consent: You have the right to withdraw your consent at any time. You may exercise your right to withdraw by sending an informal email to dpo@ratedpower.com. Please note that this does not affect the permissible data processing that took place until the withdrawal.
• Storage periods or criteria for determination: we store the communication for the duration of processing or until your consent is withdrawn. If further storage is required, depends on separate storage obligations with regard to our commune chat.

Events - registration and attendance

 You may have interest in attending an event where we are going and meeting with us. We ask you to provide us with some data so that we can process your registration and manage your inquiries.

• Possible processed categories of data (Mandatory data in contact forms, which are absolutely necessary to answer your request, are marked with an asterisk [*]):
  • Contact information
    • First name, last name
    • Address (private, practice or business address, customer number)
    • Email address
    • Phone number
  • Topic-specific information
    • Energy/SaaS industry
    • Your relationship to RatedPower (e.g. interested party, user, collaborator, etc.)
  • Content of your inquiry
    • Inquiry specific information
• Purposes: To enable you to register for and/or attending an event and/or meeting with us (e.g., sending you login details or other updates prior to the event; providing event-related information after the event).
• Legal basis: The personal data you are required to provide when you register for and attend an event will be processed in line with Article 6, paragraph 1 b of the GDPR.
• Storage periods or criteria for determination: we store your data until no longer needed or your consent is withdrawn, provided we are not required by law to store your data any particular amount of time.

Newsletter

If you are interested in the latest news on renewable and solar energy, in our latest podcast, products and services, you may agree to receive our newsletter.

To send you the most suitable information in the requested material, we process your email address.

• Purposes: Ensuring the proper provision of requested material and to establish contact with you. We use this data to check the accuracy of your email address and to ensure that the requested material is correctly tailored with the information that is appropriate for you.
• Legal basis: The data will be processed exclusively on the basis of your consent: The processing is therefore based on Art. 6 para. 1 a GDPR.
• Withdrawal of your consent: You have the right to revoke your consent at any time. You may exercise this right of revocation via informal email notification to dpo@ratedpower.com. You may revoke the receipt of newsletters directly via the corresponding "unsubscribe"-function in the newsletter. Please note that this does not affect the permissible data processing that took place up to the point of withdrawal.
• Storage periods or criteria for determination: As soon as the data is no longer required for the purposes we pursue or you have withdrawn your consent and there is no other legal basis, the data will be deleted. If the latter is the case, we will delete the data where the other legal basis has ceased to apply.

Login and use of pvDesign

In the event you login and/or use our pvDesign tool, we will capture some relevant personal data and/or other PII in order to provide you with the appropriate relevant agreed between you or the company you work for and us.

• Possible processed categories of data:
  • Browser type and version
  • operating system used
  • Referrer URL
  • browser string
  • Hostname of the accessing computer
  • Time of the server request
  • IP address
  • Language
  • Contact information
    • First name, last name, or customer corporate name & logo
    • Address (business address, city, zip code, country)
    • Email address
    • Phone number
    • Job title
  • Content of the use of services
    • project specific information
    • Subscription specific information (type, start and expiration date, login dates, number of projects, etc.)
• Purposes: RatedPower’s interest is to provide you with a proper service.
• Legal basis: The processing of the data is based on Art. 6. 1. b GDPR: We have a legitimate interest in processing this data for the purpose of processing the performance of a contract to which you or the company you are working for are a party or to take steps at your request to enter into a contract with us.
• Storage periods or criteria for determination: We will store this data for the duration of our collaboration or agreement with you and to comply with any other legal or contractual requirements.

Email

In the event you voluntarily provide us with personal data in order to start using RatedPower services, or in order to collaborate with us somehow, we will capture the personal data and/or other PII that you have provided us in order to manage the information request sent via email, postal address and/or phone number provided.

• Possible processed categories of data:
  • Contact information
    • First name, last name and/or customer corporate name
    • Address (private, practice or billing/business address, customer number & logo)
    • Email address
    • Phone number
    • Invoice number
    • Bank account number
    • ID number
    • Title of company representation
  • Topic-specific information
    • Energy/SaaS industry
    • Your relationship to RatedPower (e.g. interested party, user, collaborator, etc.)
  • Content of your inquiry
    • Inquiry specific information
• Purposes: RatedPower’s interest is to provide you with a proper service.
• Legal basis: The processing of the data is based on the basis of your consent (Art. 6.1 a) if you want to collaborate with us anyhow or; on the basis of Art. 6. 1. b GDPR: We have a legitimate interest in processing this data for the purpose of processing the performance of a contract to which you are a party or to take steps at your request to enter into a contract with us.
• Storage periods or criteria for determination: In case you send us information voluntarily, we will store this data for the duration of our collaboration or agreement with you and to comply with any other legal or contractual requirements.

Your control over your personal information

You may decline to share certain personal information with us, in which case we may not be able to provide to you some of the features and functionality of our Services or fulfill your requests. For example, we need your email address to authenticate you and perform account services such as password resets, or to provide you with customer support.

You may decline to accept cookies, but that decision may affect the functionality and performance of our services.

You may opt out of receiving promotional communications from RatedPower by using the unsubscribe link within each email. Note that, as long as you maintain an account with us, you will continue to receive messages from us regarding the services provided by RatedPower.

What rights do you have over the personal data provided?

As a user, you can exercise the following rights:

1. Right of access: You have the right to obtain from the Company confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data.
2. Right to rectification: You have the right to obtain from the Company without undue delay the rectification of inaccurate personal data concerning you. In the rectification application you should specify the personal data you wish to rectify.
3. Right to object: You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on legitimate interest. The Company shall no longer process the personal data unless the Company demonstrates compelling legitimate grounds for the processing which override the interest, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.
4. Right to erasure: You have the right to obtain from the Company the erasure of personal data concerning you.
5. Right to data portability: You have the right to receive your personal data, which you have provided to the Company, in a structured, commonly used and machine- readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.
6. Right to restriction of processing: You have the right to obtain from the Company restriction of processing where: The accuracy of the personal data is contested by the data subject; the processing is unlawful and the data subject opposes the erasure of the personal data and request the restriction of their use instead; the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims.

You can exercise your rights by sending a request to the address specified above or via e-mail to the following e-mail address dpo@ratedpower.com with your request you must send a copy of your ID. As soon as you have withdrawn your consent and there is no other legal basis, the data will be deleted. If the latter is the case, we will delete the data where the other legal basis has ceased to apply.

Likewise, we inform you that if you are not pleased with our answer, you can fill a complaint in front of the competent authority (Agencia Española de Protección de Datos, ‘Spanish Data Protection Agency’).

Data security and storage

RatedPower protects personal information under its control, and requires its service providers to also protect against, accidental or unlawful destruction, loss, alteration, unauthorized disclosure of or access to, personal data transmitted, stored, or otherwise processed.

Please see our Security Policy  and Cookie settings for more details. If you have concerns about the security of your information with RatedPower, please contact us immediately at cybersecurity@ratedpower.com to report an issue.

Data Retention

We will retain the data for the time strictly necessary for the provision of the requested service and as long as the data subject does not request its deletion, adopting the appropriate technical and organizational measures against unauthorized or illegal processing and against accidental loss, destruction or damage, and doing everything possible to protect and maintain the data securely.

Changes to this Policy

We may change this Privacy Policy from time to time. If we make any changes, we will notify you by revising the version and date at the top of this Privacy Policy and, in some cases, where appropriate we may provide you with additional notice (such as adding a statement to the log-in screen or sending you an email notification). You will always find the current version on this website.

To whom we might share information

• To processors – companies that RatedPower commissions with the processing of data within the legally stipulated framework (Art. 28 GDPR - service provider). In this case RatedPower remains responsible for the protection of your data. Our processors are carefully selected, are bound by our instructions and are regularly checked by us. We only commission processors who offer sufficient guarantees that suitable technical and organizational measures are taken in such a way that processing is carried out in accordance with the requirements of GDPR and guaranteeing the protection of your rights.
• To private entities that provide services in connection with a RatedPower contract. This is the case if we integrate private agencies due to legal permission. If, in the course of processing, we nevertheless disclose your data to third parties, transfer it to them or otherwise grant them access to that data, this will also be done exclusively on the basis of one of the legal bases established in GDPR.
• To government agencies to which we transfer certain data due to legal obligations.

9. When and how we share information with third parties

We share certain personal information with third parties, complying with the obligations established under the EU GDPR. These are:

• Integration of Social Media Plugins.
• Information on the use of cookies and other technologies.
• Hyperlinks to third party websites.

Integration of Social Media Plugins

 Our web page contains buttons from social media networks with which you can inform other people about the digital presence and offers from RatedPower.

We have integrated the following social networks via a plug-in:

• Twitter
• Linkedin
• Instagram
• Youtube

If you agree to the use of social media plug-ins, the following data will be processed:

• IP address
• Browser information
• Operating system
• Call to previous website (referrer URL)
• Current URL
• Screen resolution
• Installed browser plug-ins (e.g. Adobe Flash Player)
• Purposes: To provide a comprehensive internet presence and logical linking of internet sites.
• Legal basis: The activation of the plug-in or the link is based your explicit consent on Art. 6 par. 1 lit. a. GDPR.

Information on the use of cookies and other technologies

To ensure that our websites works securely and properly and to offer you relevant products and services, we use cookies and other technologies on our websites. Here you can find further information and you may change or withdraw your consent settings at any time.

Hyperlinks to third party websites

On our websites we use hyperlinks to third parties sites. Only by clicking on the hyperlink, you will be directed to that external website. The processing of your data on these websites is the responsibility of such website provider.

Transfer of personal data to countries outside the EU and EEA

In strict adherence to the European Data Protection Regulation (GDPR), RatedPower contemplates and oversees safe international data transfers with Enverus, its parent company. For more information, please refer to the Enverus Privacy Policy: https://www.enverus.com/privacy-policy/