Privacy Policy

Data Protection Policy

About us and our Website

XUNZEL ENERGY S.L. (hereinafter, XUNZEL), is the owner of this website, with registered office at:

Igartualdea 57, 20850, Mendaro, Gipuzkoa, Spain.

Tax Identification Number (CIF): ES-B-20961561

Registered in the Mercantile Register of Guipúzcoa, Volume 2359, Book 0, Folio 120, Page 22-29857.

To contact us:

Contact e-mail: info(@)xunzel.com
Tel: +34 943531681


Guiding principles

We take the protection of your information very seriously. That is why we take great care in the processing of your personal data and comply with data protection regulations. In order to protect all our websites against threats to the processing of personal data, all technical and organisational security measures have been implemented. Third parties who cooperate with us in the operation of this website comply with the same guidelines.

Collection of browsing data

You can access all areas of our website where passwords are not required without revealing your identity. Generally, we log any use of our website to prevent attacks, correct bugs and investigate any security incidents. You can find more information about the collection of browsing data in the section “How do we process your data”.

What authorisations do we have to process your data?

We respect your privacy. Therefore, we only process your personal data when we are authorised to do so. You will find an overview of the different cases in which we are authorised to process your personal data at the end of this Data Protection Policy. On the one hand, you can give us your consent to the processing of your personal data, where the processing requires it. In other cases, we process your data because we are legally entitled to do so. If, for example, you place an order on our website, we are authorised to process your data for the purpose of executing this contract. The same applies if you use other services on our website that require your data in order to be performed. We are also entitled to process your data if we have a legitimate interest in doing so. An example of this is the logging of entries that we collect to ensure, for example, that our website operates faultlessly (including technical maintenance of the website). In any case, we will inform you about the processing of personal data that is carried out, and of course, your rights and interests will always be taken into account. Should you have any queries about your personal data, you will find your data protection rights at the bottom of this page.

In the following section, you will find details of the circumstances in which we are authorised to process your personal data. You can find detailed information on the collection, processing and use of your data in the same section of our website (e.g. type, area and purpose of data processing).

What else should I know?

Users under the age of 16 should only provide their details with the consent of their parents or legal guardians.

Our website may contain links to other websites, which are not operated by us. XUNZEL is not responsible for the processing of your data on these third-party sites or their compliance with data protection provisions. Please note the data protection information they provide.

How do we process your data (website appearance, connections, cookies, tracking, etc.)?

Appearance of the website, navigation data
To display the website in your browser, we use various devices to ensure that all content (text, images, video, etc.) is always up-to-date. To ensure that your user experience, in particular the loading speed of the website, is constantly improved, we also use technical service providers that enable us to display the content necessary for the appearance of the website (hereinafter referred to as a “Content Delivery Network” or “CDN”). These CDN technical service providers work on the instructions of XUNZEL and a corresponding data processor contract has been concluded with them. The data collected for this purpose will only be used to display the contents of the website more quickly in your browser and will be deleted immediately after you have accessed the website.

For technical reasons, every time your browser accesses our website, information (e.g. browsing data) is automatically sent to our server. Some of this information is stored in log files, such as:

• date of access

• time of access

• URL of the page

• HTTP protocol version

• files accessed

• volume of data transferred

• type of internet browser and its version

• type of operating system

• IP address (anonymised)

Browsing data does not include personal data. We only analyse browsing data when necessary, in particular for the purpose of troubleshooting our website or resolving security issues. We store this data indefinitely.

Occasionally, it is necessary for us to collect your device’s IP address and browsing data for troubleshooting purposes or to preserve evidence in connection with security incidents. This data is deleted once the breach has been resolved or the security incident has been fully resolved, or if the initial purpose of the processing has ceased to exist for other reasons. In the event of a security breach, we will disclose the relevant connection data to the investigating authorities, where necessary and permitted by law.

We store browsing data separately from other data collected in connection with the use of our website.

Registration on our website
You can register on our website to use various services. As part of the registration process, we collect and process the following data:

Mandatory data:

• First name and surname

• Full address

• Telephone number

• E-mail address

• Password

Optional data:

• Consent to receive advertising and the possibility to revoke it.

We store the data of registered users until the user deletes their account. Registered users can delete their account at any time via the “My Details” section of their user account. The user account also allows the user to modify or delete the information provided at the time of registration at any time.

Quick registration (Option to register via a social network)
To register on our website, you can also use the quick registration (via a social network). This option is available for several social networks. To register, you will be redirected to the website of the relevant social network, where you can register with your social network login details. This page will link your social network profile to your user account on our website. Upon linking, we will automatically receive the data required for registration from your social network. If you would like to know what data is communicated to us from the social network when you register, please review the terms and conditions and privacy policy of the relevant social network. We only store and process your name and email address to provide you with our services.

By linking the two accounts, you will no longer need to register additionally on our website. For this purpose, a cookie will be set in your browser and used on your next visit to the website.

The purpose of processing personal data in this context is to be able to provide you with the services of our website, in particular the registration option via a social network. We store data of registered users until the account is deleted. Registered users can delete their accounts at any time via the “My Data” page. The user account also gives the option to change or delete some data that was entered during registration, at any time.

Shopping on our website
Through our website you can also access payment services (e.g. orders in the online shop for products and/or accessories). When orders are placed, we collect and process the following information:

Mandatory data:

First name and surname
Full address
Telephone number
Email address
Payment information (depending on the type of payment we allow and that the user chooses)
Optional information:

Company name
NIF/CIF Number
As a registered user, you can also access all information about your orders (time of purchase, items purchased, etc.) in your user account. In this way, you can also track your orders.

To ensure the security of your data during communication, we use encryption techniques (e.g. SSL) via HTTPS.

When you place an order, we use your information for the sole purpose of processing that order and to show you the history of your purchases. We store the order information at least until the mandatory retention period expires. The data provided at registration is stored until you delete your account.

Contact form
If you choose to contact us outside of a contractual relationship (e.g. an order) or without registering, you can contact us through various channels, such as the websites and their chat rooms.

In order to process your request correctly when you contact us, we may ask you to provide us with personal data such as your name, e-mail address, telephone number and any other information related to your request and your message. Optionally, you may provide your postal address. We collect the requested information solely for the purpose of processing your request. The data will not be used for any other purpose and will not be passed on to third parties without your express consent, unless we are authorised to do so by law. If we are not required by law to retain your personal data, it will be deleted once your request has been processed.

Use of our website as distributors
On our website we offer different services and information to distributors to facilitate business relationships. In addition to product information and marketing content, a full range of services is available to you as a distributor upon request.

Access to certain areas of our website is restricted to registered distributor. In some countries it is possible to register directly on our website. Access to distributor content on our site requires the existence of a business relationship with us.

When you use our website as a distributor, we only process your master data, including the history of previous business relationships, as well as personal data that you may have provided for the provision of services. If you take advantage of our home delivery option, we will also process the delivery address of the relevant end user (first and last name, full postal address, telephone number).

During the course of a business relationship, we do not delete the data of our distributor.

In addition, upon your request, we will provide you with information about the data we hold about you, correct any inaccurate information or delete information we hold, unless we are required by law to retain certain information. To request this, we refer you to the contact information listed at the end of this Data Protection Information.

Commercial communications
XUNZEL offers the option of subscribing to commercial communications through different channels. If you sign up to receive communications from us, and therefore consent to us sending them to you, your data will only be used for this purpose. We are authorised to process your data in this context with your consent (Article 6(1a) of Regulation (EU) 2016/679). You can revoke this consent at any time and a link to this effect is included in every copy of our newsletters. We will note your unsubscription in our database.

In our marketing communications campaigns such as newsletters, we use analytical tools to tailor our communications to your needs, for advertising purposes and also for market research. To fulfil this purpose, we collect and process personal data related to your use of our e-mails. When you open our marketing communication, a file (called a web beacon) connects to our server so that we can see whether an e-mail has been opened and what content has been clicked on. In addition, we collect technical information about the device on which the email content is displayed (e.g. display time, operating system and browser type). We use this data only for statistical purposes for our e-mail campaigns.

We use the double opt-in system for you to confirm your consent to receive commercial communications expressly and unequivocally, in order to verify that your email address is the one that has been registered. Therefore, you will only be able to receive our communications if you click on the confirmation link in the email. We record every step of the process for evidence.

Please note that if you have had a contractual relationship with XUNZEL (for example, if XUNZEL has carried out a repair on one of its products or if you have purchased through one of XUNZEL’s websites) we are authorised by law to send you commercial communications.

Satisfaction surveys (NPS)
In order to improve the quality of our services, XUNZEL may send you satisfaction surveys, being authorised to do so by law on the basis of legitimate interest.

However, the completion of the satisfaction survey you receive is voluntary. XUNZEL will keep the data processed in this context until it is no longer required for the purpose stated.

Participation in promotions/sweepstakes
When you register for promotions/sweepstakes, we store and use the information you provide to run the promotion/sweepstakes and to fulfil any subsequent stages. The data we collect for this purpose depends on the registration form on the relevant sweepstake or contest page.

Your personal data will be deleted when it is no longer required for the promotion/sweepstakes or to track the promotion/sweepstakes.

Participation in surveys/evaluations
You can participate in various surveys on our website. These are normally conducted anonymously. If, exceptionally, we collect data while you are taking the survey, we will store this information only for the purpose of monitoring the survey. Your data will be deleted when it is no longer needed to track the survey.

You can also review certain products on our website. The data we collect for this purpose is the data we collect through the form. We work with service providers to manage these reviews.

Participation in events
When you register for an event, we store and use the information you provide to run the event and to fulfil any subsequent stages. The data we collect for this purpose depends on the registration form on the event page of the event in question. We delete your personal data when it is no longer required for the further management of the event.

Some events require you to make payment directly on our website. However, to participate in other events you may be asked to make payment to third parties in whole or in part via their websites, in which case the data relating to payment (name, surname, postal address, number of participants and payment methods) is communicated to the provider managing the event or payment process.

Our social media pages
The protection of your privacy in the processing of personal data is important to us. We process the personal data transmitted to us and collected during your visit to our respective social media pages (e.g. Facebook Fanpage, Instagram/Pinterest Page) confidentially and only in accordance with the statutory provisions.

The data controller for the processing of your data via our social media pages is the operator of the respective social network (see examples below), together with us. Insofar as the processing of this data takes place within our area of responsibility, we are available to you in all questions relating to data protection and the exercise of your rights in accordance with the content of this data protection information.

Data processed by Social Media provider

The social media service processes your personal data when you access one of our pages. Your data is processed, for example, in the following cases:

Viewing a page, a post or a video from a page.
Subscribing to or unsubscribing from a page
Marking a page or post with “Like” or “Dislike” or similar functions
Recommend a Page in a post or comment
Comment, share or reply to a Page post (including the type of reply)
Hide a Page post or mark a report as spam
Click on a link to the social network from another web page
Move the mouse over the name or profile picture of a page to see a preview of the content
Using the social network provider’s features, such as the website, phone number, “Plan route” button or any other button
Information on whether the login is made via a computer or a mobile device
You can find out which personal data is collected by the social network provider, how it is processed and what data protection rights you have against the social network provider in the data protection policy of the social network provider. We are not responsible for the data processing by the social network provider.

Data processed by us

On the website provided by us through the social network, the social network provider grants us access to the following categories of data:

Statistical analyses that provide information about the use of our social network page. The analyses visible to us do not allow us to individually analyse the usage behaviour of individuals. We can only see aggregated data (such as number of visits, likes, followers, region of origin, age group, gender, etc.) that informs us about our audience and the use of our page. The user data on which the analyses are based is not passed on to us.
We can segment the target group we want to reach for the social network page or for individual posts. The settings are based on general parameters (e.g. age group, language, region, interests) which can be used to tailor our content to specific groups. It is not possible for us to target or identify individual persons on the basis of the data provided to us by the social network provider.
If you contact us directly via the social network provider or interact with us in any other way and knowingly transmit personal data (e.g. via chat or direct message to us via the social network), we store and process this personal data for the purposes for which you transmitted it to us.
We process this data exclusively for the purpose of making the content of our social network page known to the target group, as well as to better understand and optimise the use of the social network page.
Furthermore, we have no control over the purpose or the data processing carried out by the social network provider.

To find out which personal data is collected by the social network provider, how it is processed and what data protection rights you have vis-à-vis the social network provider, please refer to the following data protection guidelines:

a) Facebook Inc. 1601 S California Ave, Palo Alto, California 94304, EE.UU.; http://www.facebook.com/policy.php. Facebook has submitted to the EU-US Privacy Shield.

b) Twitter, Inc. 1355 Market St, Suite 900, San Francisco, California 94103, EE.UU.; https://twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield.

c) Instagram, provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland; https://help.instagram.com/519522125107875

d) Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Irland; https://policy.pinterest.com/en/privacy-policy

e) Snapchat for the European Union (EU), European Economic Area (EEA) and Switzerland: SNAP GROUP LIMITED 7-11 Lexington Street, London, United Kingdom, W1F 9AF. For all other countries: SNAP Inc, 2772 Donald Douglas, Loop North Santa Monica, CA 90405, USA. La SNAP Inc has submitted to the EU-US Privacy Shield.

f) LinkedIn for the European Union (EU), European Economic Area (EEA) and Switzerland: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Irland. For all other countries: LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. The LinkedIn Corporation has submitted to the EU-US Privacy Shield.

g) Xing SE, Dammtorstrasse 30, 20354 Hamburg, Germany; https://privacy.xing.com/en/privacy-policy

Information on the EU-US Privacy Shield can be found at https://www.privacyshield.gov/EU-US-Framework.

What types of cookies we use and how they work
Cookies are small text files that are stored in a special memory area of your browser. However, cookies cannot be used to launch programs or transfer viruses to your computer. Cookies are set when you visit our website or when a pixel code or a web beacon causes a cookie to be set. However, cookies can only be read by the web server of the same domain from which they were originally set.

You can also view our website without cookies. Internet browsers are regularly set to accept cookies. To prevent the use of cookies in your Internet browser, you can deactivate the use of cookies through the settings of your Internet browser and delete cookies already set. The help functions of your Internet browser tell you how to deactivate and delete cookies from your browser. Please note that deactivating/deleting cookies may cause individual functions of our website to no longer work as expected. In addition, deactivating/deleting cookies only affects the Internet browser you are currently using. For other Internet browsers, the deactivation/deletion of cookies must be performed again. Cookies, which may be necessary for certain functions of our website, are shown below.

In addition, there are several ways to prevent the installation of certain cookies, either by selecting them in the banner we show you when you access our website, or individually for the relevant service provider whose tools we use for certain purposes. We will indicate the latter possibility in the section on the Cookies policy.

Session cookies

For the proper functioning of our websites, we use session cookies which we store on your device when you visit our website – regardless of whether or not you accept cookies in the banner – and which are always automatically deleted when you close your internet browser (i.e. when you close the program). This enables us to offer you various functions on our website using the information in the cookies.

We use the following session cookies for the following purposes:

to ensure flawless playback of video or audio content (e.g. to play videos from Vimeo or YouTube);
to temporarily store certain user input (e.g. the contents of a shopping basket or an online form);
to improve usability and statistical measurement.
Session cookies where we process personal data:

Those that are used to temporarily identify or authenticate a user (e.g., using a session ID to temporarily store the contents of a shopping cart).
Session cookies are automatically deleted after you close your Internet browser, or at the latest at the end of the lifetime of the respective cookie.

Persistent cookies

Persistent cookies are cookies that remain stored on your device even after you have closed your internet browser. We use the information contained in these cookies to provide you with convenient functions on our website (e.g. to save certain user preferences or for search or language settings), but also to collect your usage behaviour on our website and use this information to improve our website (e.g. to detect errors) and to personalise the advertising we show you.

Persistent cookies with personal data to collect your usage behaviour are only processed with your consent, which you can give us the first time you visit our website via the banner we show you. You can revoke your consent to process your usage behaviour at any time by deleting all cookies set in your Internet browser. In this case, however, it may be necessary to reselect the cookies that you consent to us processing for the above-mentioned purpose via the banner. You can also revoke your consent given to each of the web analytics/marketing tools by following the instructions below.

Data from persistent cookies is stored until the end of the validity period of the respective cookie or until you delete the cookies from your browser.

In the following, we explain in detail which technologies and providers we use to analyse your user behaviour:
Web analytics using pseudonymised user profiles

We use web analytics tools for the purposes of advertising, market research and user feedback on the design of our website (and, where appropriate, our newsletters). For these purposes, we use analytics and/or JavaScript cookies that collect and process usage data about your visit to our website and the links you click in our newsletters. The collection of your usage data and the creation of a profile from it is carried out using a cookie ID. Your IP address is either not collected or anonymised immediately after collection. It is therefore not possible to deduce your identity directly from the ID used.

Below, you will find additional information about the web analytics tools used by us and our providers, and how you can prevent or restrict each tool from collecting and processing your data.

Adobe Analytics (Adobe Marketing Cloud)

For web analytics we use Adobe Audience Manager and Adobe Tracking (“Adobe Analytics”), a service provided by Adobe Systems Software Ireland Ltd., 4-6 Riverwalk, Citywest Business Park, Dublin 24, Ireland (“Adobe”). Information regarding your use of our website is transferred to Adobe’s servers, analysed and returned to us in aggregate data only. This data allows us to identify trends in overall website usage. We do not link the resulting usage profiles to your name or any other details that might reveal your identity, such as your email address. Usage data is stored by the service used for a maximum period of 37 months from the date it was collected.

Opt-out: Use the Adobe website if you wish to prevent your usage data from being collected. You can find information on how Adobe Analytics cookies work and opt-out/opt-out at the following link: http://www.adobe.com/privacy/opt-out.html

Adobe Test & Target

Adobe Test & Target (a service provided by Adobe Systems Software Ireland Ltd., 4-6 Riverwalk, Citywest Business Park, Dublin 24, Ireland “Adobe”) works by performing A/B tests. This means that certain people using our website are shown a different version of the original website (for example, with a modified layout and content). The comparison of the two versions provides us with information about which version of our website users prefer. When using Adobe Test & Target, the only information about you that is processed cannot be used to identify you. IP anonymisation is also activated, which means that your IP address is shortened before Adobe Test & Target carries out any further processing. We do not link the resulting usage profiles to your name or any other details that could reveal your identity, such as your email address.

You can find information about how Adobe Test & Target cookies work and opt-out at the following link: https://www.adobe.com/privacy/opt-out.html

Mouseflow

To improve our website and the services it offers, we log the mouse movements and clicks of some randomly selected users of our website, where their IP address is anonymised.

We use the service provider Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark; for the purpose of collecting this usage data.

We do not link the resulting usage profiles to your name or any other details that could reveal your identity, such as your e-mail address. Usage data is deleted three months after the date of collection.

Opt-out: Please use the Mouseflow website if you wish to prevent the collection of this usage data: https://mouseflow.com/opt-out/

Zoovu

This website offers an Interactive Product Guide to help users find the product that best suits their needs. This service is provided by XUNZEL’s supplier, Zoovu (Germany) GmbH, Skalitzer Str. 104, 10997 Berlin. We use this tool on our own responsibility and have entered into a data processor contract with Zoovu which stipulates that customer data may only be processed on the basis of our instructions, may not be passed on to third parties and must be sufficiently protected technically.

When you use the service and if you have given us permission to do so, e.g. by giving us your consent via the tracking banner, we collect the following usage data:

– Event data: (performance of the digital assistant, answers to questions, navigation, product recommendations, purchase).

– Browser / operating system / device used

– Traffic source

We use this collected data (through the use of a cookie ID) to improve the Digital Assistant experience as well as for technical purposes to improve the service. Your IP address is not collected; therefore, it is not possible to deduce the identity of the user from the ID used.

If you have not given us permission to do so, for example by refusing consent via the tracking banner, only those cookies necessary to provide the service will be set, but no tracking of usage data will take place as described above.

Use of “usage profiles”
We use various marketing tools on our website if you have given us permission to do so, for example, by giving us your consent via the cookie banner. These marketing tools allow us to provide you with information about our products on our website and on other pages that may be of interest to you during your visit to our website. To do this, we collect and process your behaviour, such as pages visited, browsing patterns, products purchased and similar data. The collection of your usage data and the creation of a usage profile from this data is carried out in a way that saves the data using a cookie ID or other technologies.

We also use marketing tools from our suppliers. They process your data on their own responsibility. Below you will find information on the technologies and providers we use, as well as information on how you can prevent the collection and processing of the data described above. In a separate section we refer to the marketing tools for which we are responsible.

These marketing tools are based on displaying ads that are relevant to users on our own and third-party sites, which may improve campaign performance reporting and prevent a user from seeing the same ads more than once. In addition, we may also record whether ad requests have been successfully played (conversions). This is the case, for example, if a user sees an ad displayed by us and then buys something from the same web browser on our website.

When you visit our website, your Internet browser automatically establishes a direct connection to the server of the respective service provider. Through this integration, the service provider receives the information that the relevant part of our website has been accessed or that you have clicked on an advertisement and transmits the corresponding evaluations to us.

If you are registered with a service of the respective service provider, the service provider can assign the visit to your user account. Even if you are not registered with the respective service provider or are not logged in, your IP address will be transmitted to the provider as part of the above-mentioned technical process, insofar as this is necessary for the provision of the service. For example, some service providers also create a profile for unregistered users that is not associated with an account. You can avoid this by not accessing the relevant content on our website (e.g. third-party videos).

We also use technology to improve the quality of our advertisements. This includes that advertisements are only delivered to users with a potential interest in our advertised products and services or to users with certain but abstract characteristics (so-called “custom audiences”).

In the following, we will inform you about the providers of these marketing tools that we use, their data protection regulations and also about how you can – in relation to the respective providers – permanently prevent the collection of usage data. In addition, in order to prevent the use of cookies in your Internet browser, you can also deactivate the use of cookies directly via the settings of your Internet browser and delete the cookies already set. Please note that this measure does not delete user profiles already created by the provider, but only prevents the future collection of further user data.

Google Ad Server

We use the online marketing tool Google Ad Server (formerly DoubleClick) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

The usage data will be deleted after 540 days from the time of collection. For more information about DoubleClick, please visit https://www.google.com/doubleclick or Google’s privacy policy in general: https://policies.google.com/privacy.

We use Google’s online marketing tools at our own risk. To this end, we have agreed with Google in a data protection agreement that the data of our customers may only be processed on the basis of our instructions, may not be passed on to third parties and must be sufficiently protected technically.

Opt-out: In order to permanently prevent the collection of usage data, Google offers a plug-in for various Internet browsers: http://www.google.com/settings/ads/plugin

To deactivate interest-based advertising only, you can block the use of third-party cookies or cookies from the domain “www.googleadservices.com” or deactivate interest-based advertising using this link at https://www.google.com/settings/ads

Facebook Pixels and Custom Audiences

We use the online marketing tools “Facebook Pixels and Custom Audiences” from Facebook Inc. 1 Hacker Way, Menlo Park, CA 94025, USA and Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, if you are a resident of the EU (“Facebook”).

Facebook processes your data under its own responsibility as part of Facebook’s data usage policy. You can find information about Facebook ads and Facebook pixels under the following links: https://www.facebook.com/policy and https://www.facebook.com/business/help/651294705016616

Opt-out: To permanently prevent the collection of usage data, please visit Facebook’s data protection policy. As a registered Facebook user, you can also determine which types of advertisements are displayed on Facebook. To do so, please click on the following link: https://www.facebook.com/settings/?tab=ads

Google Ads and Remarketing

This website uses the online marketing tools “Google Ads & Remarketing” of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google has submitted to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework

We use Google’s online marketing tools at our own risk.

The cookies used in this service generally lose their validity after 30 days and do not serve to identify you personally. Google only provides us with statistical evaluations and processes your information in accordance with Google’s data usage policy. You can find more information at the following link: https://policies.google.com/privacy

Opt-out: To permanently prevent the collection of usage data, Google offers a plug-in for various Internet browsers: http://www.google.com/settings/ads/plugin to deactivate interest-based advertisements, you can block the use of third-party cookies or cookies from the domain “www.googleadservices.com” or deactivate interest-based advertisements via this link at https://www.google.com/settings/ads

Interest-based ads can also be deactivated via the link http://www.aboutads.info/choices if the provider has joined the self-regulatory campaign “About Ads”.

Adform

Adform sets different cookies in the user’s browser during browsing that allow better adapted advertisements to be displayed, limit the frequency and respect the user’s privacy preferences.

Opt-out: To prevent the collection of usage data for the duration of the cookie, Adform provides the following URL: https://site.adform.com/privacy-center/platform-privacy/opt-out/ . To do so, click on the “opt-out” button on the right and adform will take all necessary steps to ensure that your browser is not being tracked.

Social networking and similar networks and services
The content of our website can be shared on social networks via the Share button. All content sharing buttons are integrated through the use of simple links rather than social plugins developed by social media providers. This ensures that your data is not automatically transmitted to social media servers as soon as you access our website. Furthermore, when you share content from our website, we only transmit to the social network the information necessary to share the respective content (e.g. the link to the content you want to share). We do not transfer personal data in this context.

In turn, simple links to our web pages can be found on social networks. If you access a link to our website from a social network, or if you log into your social network to share content from our website, your data will be processed by the provider of the social network in question.

If you are registered and logged in to other networks or services that require registration while using our website or individual functions (e.g. Vimeo, YouTube), the respective network/service may collect information about your usage or adopt settings, such as video playback status. However, this data is only collected by the respective network/service under its own data protection responsibility and processed by the respective provider.

For more information on the purpose and scope of data collection, its further processing and use by the social network provider, as well as the associated rights and setting options for protecting your privacy, please refer to the Data Protection Information published on the website of the respective provider.

Distributor search with Google Maps
One of the functions available to you as a user of our website is a map of our partner distributors in your area. We use Google Maps to provide you with this map. Google Maps is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. You can find information on how your data is processed when using Google Maps at the following link:

https://policies.google.com/privacy?hl=es

If you want to see the partner distributors in your area, you will need to indicate a location, either by entering your location manually or automatically using the geolocation function of your web browser. If you enter your information manually, no personal data is processed, as long as you do not provide your home address. The automatic identification of your location by means of the geolocation function in an internet browser requires the processing of your IP address. In this context we are entitled to process your information with your consent (Article 6(1a) of Regulation (EU) 2016/679) which will be requested by your internet browser when accessing the map. In this context, we do not store your IP address.

Cases in which we transfer your data
We work in partnership with a number of service providers necessary for the proper functioning of our website. We have carefully selected these service providers and have entered into a data processor agreement with each service provider to keep your data safe.

The service providers with whom we typically implement and operate our website are:

Service providers for hosting services, including associated technical services (e.g., site performance monitoring and measurement, content delivery networks)
Service providers for the provision of additional functionalities for our website (e.g. videos, product catalogues, etc.)
Sales and marketing service providers
Support service providers
We only disclose your data to other recipients for the performance of a contract concluded with you, if we or the recipient have a legitimate interest in the disclosure of your data, or if you have given your consent to this disclosure of data. In such cases, your data will be processed in accordance with the data protection regulations of the recipient of your data in question. The recipients may be service providers and other companies in our corporate group. In addition, data may be passed on to other recipients if we are obliged to do so by law or by administrative or judicial decisions.

Other recipients of your data may include

Transport agencies for shipping/collection of products.
Contact information for data protection issues
If you have any questions regarding data protection or the exercise of your rights, you can use the contact information below to contact our Data Protection Officer directly:

XUNZEL ENERGY S.L.

Data Protection Officer

Igartualdea 57, 20850, Mendaro, Gipuzkoa, Spain

support(@)xunzel.com

Changes to the Data Protection Policy
This Data Protection Policy has been drawn up in consideration of the current data processing on our website. In the event of changes in data processing, this data protection information will be updated accordingly. We always make the latest version of this data protection information available on our website so that you can inform yourself about the scope of data processing on our website.

Supplementary information pursuant to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data and repealing Directive 95/46/EC (GDPR).

How do we process your data (website appearance, connections, cookies, tracking, etc.)?

Legal basis for data processing

We base the above personal data processing operations on:

The performance of a contract to which you are a party or for the implementation of pre-contractual measures that you have requested, in accordance with Article 6(1)(b) of Regulation (EU) 2016/679:
Registration on our website
Shopping on our website
Quick registration (Registration via social network)
Online request for a repair
Participation in sweepstakes/contests
Participation in surveys, evaluations
Participation in events
Use of our website as a dealer
Legitimate interest of XUNZEL or a third party in accordance with Article 6(1)(f) of Regulation (EU) 2016/679:
Appearance of the website (e.g. content distribution networks).
Additional functions of the website (e.g. product videos).
Registration data
Contact us
Online repair request (data processing for address verification)
Use of our website as a distributor (DIDO)
Session cookies and persistent cookies for convenience
Web Analytics and Marketing
Adobe Analytics
Adobe Test & Target
Your consent in accordance with Article 6(1)(a) of Regulation (EU) 2016/679:
Dealer search with Google Maps
Newsletters
Persistent cookies to record usage behaviour
Web Analytics and Marketing
Mouseflow
DoubleClick
Facebook Pixels and Custom Audiences
Google Ads and Remarketing
Zoovu Interactive Digital Assistant
Your rights

Below you will find a description of your rights:

Unsubscribe from receiving promotional communications: If you wish to revoke your consent to receive commercial communications by electronic means, you can use the unsubscribe link at the end of the corresponding e-mail or send an e-mail to support(@)xunzel.com with the subject “Unsubscribe from receiving commercial communications by electronic means”, indicating your name, surname(s) and e-mail address.
Exercising your data protection rights: Please use the following contact channels for your requests:

I. Consumers: Please contact our support department at support(@)xunzel.com.
II. Distributor/Supplier and their employees: Please contact our sales or purchasing department.
III. Our employees: Please contact our Human Resources department.
Right of access to information about you: Upon your request, we will provide you with information about the data we hold about you.

Right to rectification of your data: Where you notify us, we will correct any inaccurate personal data concerning you. If you request us to do so, we will complete any personal data that is incomplete, provided that it is necessary for the intended purpose of the processing of your data.

Right to erasure of your data: Upon your request, we will delete the data we hold about you. However, some data will only be deleted after a certain retention period, for example, where it must be retained for compliance with a legal obligation, or because we need the data to fulfil contractual obligations towards you.

Right to block your data: In those cases in which the legislation allows the limitation in the processing of your data, these will be blocked.

Right to withdraw your consent: At any time, you may withdraw your consent to the processing of your data, with effect from that time. This will not affect the lawfulness of the processing carried out until then.

Right to object to the processing of your data: You shall have the right to object at any time to your personal data being processed on the basis of Article 6(1)(e) and (f) of Regulation (EU) 2016/679. In case you object, we will stop processing the personal data, provided that there are no compelling legitimate grounds for further processing. For us, processing your data for direct marketing purposes will never constitute a compelling legitimate reason.

Right to portability: Upon your request, we will make your personal data available to you in a structured, commonly used and machine-readable format.

Right to complain to a supervisory authority: You can lodge a data protection complaint with the competent supervisory authority. To do so, contact the data protection authority in your place of residence or the data protection authority in our jurisdiction (listed below).

Spanish Data Protection Agency (AEPD); www.agpd.es
Transmission to recipients outside the EEA

We also transmit personal data to recipients located outside the European Economic Area (EEA), in so-called third countries. In this case, we ensure – before sharing any data – that the recipient maintains an adequate level of data protection (e.g. on the basis of an adequacy decision taken by the EU Commission for the respective country or by signing an agreement with EU standard contractual clauses between the European Union and the recipient) or that you have given your consent to such disclosure.

Upon request, we will provide you with a list of recipients in third countries and a copy of the specific provisions agreed to ensure an adequate level of data protection. To request this, please use the contact information provided in the “Contact information for any data protection related issues” section of this Data Protection Policy.

Valid from: 01.12.2020

Version: EN22101.03_MA