Any personal data that you provide via this website, using any of the means enabled for this purpose, will be processed in accordance with this Privacy Policy.
1. Identity of the data controller
All the processing referred to in this privacy policy is carried out by the International Smart Grid Action Network (ISGAN).
2. Data processing
This Privacy Policy details the processing of personal data, including the legal basis in accordance with the GDPR and the specific retention period of the data. These periods may be extended to allow for compliance with legal obligations and to address any liabilities that may arise in relation to the fulfilment of the purpose for which the data were collected. If your authorisation is requested for the processing of your data for a purpose for which your consent is required, failing to grant it (or subsequently withdrawing it) will not have any consequences for you.
Data relating to our relationship with you
Processing and purposes | Data we collect | Legal basis (GDPR) | Retention period |
Requests for information or queries (by any means you use, including collection at events and phone calls): We will use your data to respond to your requests for information, queries or complaints and manage what is necessary. | Name, email address, organisation, telephone number, geographical location (region and country), tracking URLs (web addresses that allow us to see how you found our website), and any other information you voluntarily provide in forms. | 6.1(a) The data subject has given consent to the processing. 6.1(b) Processing is necessary for the performance of pre-contractual measures at the request of the data subject. | As long as is necessary to address and manage your request and/or complaint. |
Use of the website and marketing emails: We will use data from your visits to the website to show you relevant content (including targeted advertising) and analyse metrics and web traffic to better understand how you interact with ISGAN. We may also analyse how you interact with marketing communications in order to assess their quality, level of interest and effectiveness. | IP address, tracking URLs, device identifiers, approximate geographical location, how you interact with the website or email, and any other data through cookies, in accordance with our Cookie Policy. | 6.1(a) The data subject has given consent to the processing. | Provided you do not object and the data controller is authorised to process it. |
In-person events and webinars: We will use your data to manage your participation. If the event is held online, your image or voice may be processed during the event. | Name, email address, organisation, interests, attendance, voice, image, and tracking URLs. | Art. 6.1(a) The data subject has given consent to the processing. Art. 6.1(b) Processing is necessary for the performance of a contract to which the data subject is a party. | Provided the data controller is authorised to process it. |
Commercial communications: We will use your data to send you information that we think may interest you. These may include publications or newsletters. | Name, email address, geographical location (region or country), tracking URLs (web addresses that allow us to see how you found our website), identifiers that allow us to understand how you interact with our campaigns. | Art. 6.1(a) The data subject has given consent to the processing. | As long as you do not withdraw your consent. |
Data associated with regulatory compliance
Processing and purposes | Data we collect | Legal basis (GDPR) | Retention period |
Attention to the exercise of the rights of the data subjects: If you exercise any of your rights you have in relation to your personal data, we will use the information you provide to evaluate and address your request. | Name, email address, address, and any other data necessary to prove your identity. | Art. 6.1(c) Compliance with a legal obligation applicable to the controller, as set out in articles 15–22. | As long as is necessary to address the exercise of rights communicated to the controller. |
Cookies
If you have agreed to accept cookies when you visiting this website for the first time, the website’s Cookie Policy will apply to you.
3. Data transfers
As a general rule, your data will not be shared with any third party without your explicit prior express consent, unless required by law. However, certain regulations or obligations to public administrations, the Public Prosecutor’s Office, judges and courts, and security forces and bodies may require the communication and/or transfer of data to third parties. Other communications and/or transfers will either be a necessary consequence of providing the requested service or the result of your express consent. Any data hosted on our website will be shared with the web hosting provider.
The following third-party services involve international data transfers outside the European Economic Area (EEA). These transfers comply with the applicable legal framework for international data transfers, the EU-U.S. Data Privacy Framework, as established by the European Commission through standard contractual clauses.
- Google Analytics is used for web analytics.
- Mailchimp is used for email marketing.
- Microsoft is used for data hosting and videoconferencing.
4. Rights
Regarding the personal data collected for processing, you have the right to access, rectify, delete and port your data. In certain circumstances, you also have the right to request the restriction or objection to the processing of your data. In this case, the controller will stop processing your data, but may still keep it if there is a legal obligation to do so or until the statute of limitations for potential claims has expired.
If you have any queries or wish to exercise your rights, please contact Zabala Innovation Consulting, S.A. at gdpr@zabala.es.
You can also contact the supervisory authority at any time to file a complaint, for example, in the country where you have your habitual residence, where you work, or where you believe the alleged infringement occurred. In Spain, the supervisory authority is the Spanish Data Protection Agency, and you can exercise your rights using the forms provided by the entity for this purpose.
5. Mandatory and optional nature of the information provided by the user
By selecting the appropriate boxes and entering information into the different form fields on the website, users explicitly, voluntarily and unambiguously consent to the provider using their data. Inclusion of data in optional fields is voluntary. Users guarantee that the personal data they provide to the data controller is accurate and are responsible for communicating any changes.
