This Privacy Policy applies to any processing of personal data carried out by PLENERGY GRUPO, SL or any of the companies in its group of companies, including PLENERGY CANARIAS SL and PLENERGY PORT UNIPESSOAL LDA.

Our Privacy Policy regarding the treatment of the personal data of our customers and users is designed to be transparent. Therefore, we provide the following document where you can identify how our Information Security Management System exercises the corresponding control and preservation of your data and offers you accessible information about your rights as a user. It has been developed considering the regulations established according to the General Data Protection Regulation 2016/679 of 27 April 2016 (known as “GDPR“) and its adaptation to Spanish law through Organic Law 3/2018, of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (“LOPDGDG“).

1. Background

PLENERGY GRUPO, SL hereinafter, PLENERGY, with Tax Identification Code B93275394, registered office and address C/Torrelaguna 64, Edificio Fiteni III, Planta 2- CP 28043 – Madrid is the owner of the Internet domain www.plenergy.es (hereinafter referred to as  the “website“) and of its Application for mobile devices (hereinafter referred to as “App“). PLENERGY is responsible for the processing of personal data provided by users through this website and the App.

PLENERGY is committed to ensuring that personal information is protected and not misused, through an up-to-date Information Security System and Internal Audits.

This document explains who the data controller is, for what purpose personal information will be processed, the legitimate basis for processing, to whom we may disclose personal information, how we collect it, why we collect it, how we use it, your rights, and it also explains the processes that are in place to protect your privacy. By providing us with personal information and using our website, we understand that you have read and understood the terms relating to personal data protection information set out below. PLENERGY is responsible for complying with national and European data protection legislation, and we aim to process data in a lawful, fair and transparent manner.

2. Who is responsible for the processing?

According to the regulations in force, it is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing. In this case, PLENERGY is responsible for the processing of personal information about its customers and users.

• Website: plenergy.es
• App “Plenergy”.
• Company name is PLENERGY GRUPO, SL.
• Tax ID B93275394
• Contact Email: protecciondedatos@plenergy.es
• Tel: 91 568 74 97
• Fiscal address: C/Torrelaguna 64, Edificio Fiteni III, Planta 2- CP 28043 – Madrid
• Its corporate purpose is the sale of fuel and refuelling through dispensers.

3. For what purposes do we collect personal information?

Depending on the products, services or functionalities that customers and users wish to enjoy at any given time, PLENERGY will need to process various data, which will be, as the case may be, the following:

• Identifying data (e.g. name, surname, first name, language and country from which you interact, contact details, etc.);
• Financial and transactional information (e.g. payment or card details, information about purchases made, orders, returns, etc.);
• Connection, geolocation and navigation data (when interacting through the App);
• Commercial information;
• Data on the tastes and preferences of the client or user.

When PLENERGY asks customers and users to fill in their personal data in order to provide access to some functionality or service of the website or the App, it will mark some fields as mandatory, as they are data that it needs in order to provide the service or provide access to the functionality in question. Failure to provide such data may not guarantee that registration as a user will be completed or that you will be able to use these services or functionalities. 

We manage the data of customers and users of the website and our App for the following purposes, based on the legitimate uses identified below:

• To provide the services included in the website and in the App and/or to provide the requested information, either via the web, by email or by telephone. Emails may report a confirmation of receipt and reading through the channels provided for this purpose in the different contact forms. The legitimate basis for this processing is the performance of a contract or the implementation of pre-contractual measures at the request of the data subject, covering the management of contact forms, requests for information and any interaction necessary for the provision of the services offered.  
  • https://plenergy.es/contacto/
  • https://plenergy.es/empleo/
• To offer an App for mobile devices that provides useful information for users and improves their browsing experience, facilitating access to and interaction with the available content and services. The legitimate basis for this processing is the performance of a contract (insofar as the customer and/or user registers or uses the App as part of the service) and/or legitimate interest (to improve the user experience and optimise the services offered).
• To maintain a direct relationship with the customer for advertising, promotional and/or statistical purposes (including the segmentation of profiles to adapt offers and marketing activities to each customer and/or user), related to the activities that PLENERGY carries out by conventional and/or electronic means (emails, SMS, sales tickets, etc.), both on the website and on the App. Likewise, such communications may refer to benefits or advantages of their own, always communicated through PLENERGY. The legitimate basis for this processing is legitimate interest in the case of a prior contractual relationship and as long as the user has not objected or has consented.
• To enable the participation of interested users in potential selection processes. The legitimate basis for this processing is the execution of pre-contractual measures at the request of the data subject, insofar as the user sends in their application.
• To carry out segmentation and profiling tasks through the analysis of the use of the services offered, in order to adapt the offers and marketing activities to each client and/or user, offering personalised products and services. The legitimate basis for this processing is the consent of the data subject in the case of advanced segmentation or profiling with significant impact. For basic segmentations that do not have a legal or significant effect on the user, it is the legitimate interest.
• To deal with any query, request or incident that you may make through our customer service. The legitimate basis for this processing is the performance of a contract or the implementation of pre-contractual measures at the request of the data subject.
• To deal with any incidents that may arise, as well as to carry out satisfaction surveys on the product or service contracted, and to improve the service provided. The customer or user may be contacted in the event that fraud or identity theft is detected or there are reasonable grounds for suspicion. The legitimate grounds for this processing are the performance of a contract (for the management of incidents) and legitimate interest (for the improvement of the service and prevention of fraud).
• Where appropriate, to manage financial information in a file for private use by PLENERGY for the same purposes. The legitimate basis for this processing is the performance of a contract (management of payments and collections) and/or compliance with a legal obligation (tax and accounting obligations).
• To collect geographic location data of the device or terminal of the customer and user, provided that they have given their consent to do so, in order to facilitate the provision of services, carry out advertising activities and offer them personalised information appropriate to their location, such as the nearest service stations. Customers and users may at any time deactivate access to geolocation data, as well as revoke the consent given for their geolocation, by configuring the settings of their device or terminal. The legitimate basis for this processing is the consent of the data subject, who must give explicit permission for geolocation.
• In those cases where customers and users have accessed the website or the App by registering from social networks, to validate their identification data, contact the customer and/or user in the event that they are detected or there are well-founded suspicions in relation to possible fraud or impersonation of their identity or activity on the networks. It is also used to contact them and send them communications and/or personalised commercial offers by obtaining profiles and segmentation work, carry out behavioural advertising studies or obtain statistical samples that may help the company to improve the personalisation of the offers it makes for its products and services. The legitimate basis for this processing is the performance of a contract (validation of identity for access and use of services), legitimate interest (prevention of fraud and improvement of services) and consent (for personalised commercial communications and behavioural advertising studies).
• To manage the potential sending of satisfaction surveys based on the purchase of the PLENERGY product or service carried out, in order to improve the experience of our customers and users on a daily basis. The legitimate interest (improvement of the quality of service and customer satisfaction) is the basis for this processing.

The customer and/or user shall be solely responsible in the event that they fill in the forms with false, inaccurate, incomplete or outdated data. All data provided by the customer and/or the user will be treated confidentially.

5. To whom may we disclose your personal information?

In general, the Data Controller will not transfer the data of customers and users, except in the cases set out below.

Personal data collected on this website or through the App or during user registration, respectively, are collected for the purpose of providing the service of using our information service about our locations, services and products of PLENERGY. 

• In the Job Opportunities contact form, the only recipient is PLENERGY itself and, if necessary, in order to promote the user’s candidacy, it may be referred to companies in which PLENERGY has a stake.

In order to offer you our services with better quality and to comply with our tax obligations, we inform you that the data you provide us with in this section may be transferred to the following company with which there are regular collaborative processes: INDICUS SOFTWARE, S.L. (B 83535237). Purpose of the assignment of the data: Development, updating and maintenance of the plenergy.es website and the Plenergy App, which involves access to information.

• Companies belonging to the business group of PLENERGY GRUPO, SL so that they may carry out the same actions subject to the purposes identified above in their respective territories.
• Third-party suppliers to provide services to the Controller, related to the purposes about which the customer and/or user has been informed. These providers will only access personal data in order to carry out their services on behalf of and for the account of the Controller, under an obligation of confidentiality and always following the instructions of the Controller. All the suppliers indicated will not process your data for their own purposes that have not been previously informed by PLENERGY. Potentially, we may activate an alternative communication method to which you may consent and in which your information may be provided to suppliers for the sole purpose of optimising the information sending process and which may be located within or outside the European Economic Area. In the latter case, the Controller guarantees that the transfer will take place in compliance with appropriate safeguards and will always safeguard the security of the personal data.
• Customer and user data may also be transferred to competent authorities and bodies, courts, tribunals or any other third parties legitimised in accordance with the applicable regulations.

6. How can you exercise your rights?

You have the right to have control over the personal information we collect both on the website and on our App so that we also ensure that it is accurate and truthful.

You also have the right to obtain access to your personal information, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, and for reasons related to your particular situation, you may object to the processing of your data. Your personal information will no longer be processed for the purposes to which you have objected. You may also exercise your right to limit the processing of your personal information by requesting that we retain it.

You may also, in certain circumstances, request the portability of your data to another data controller.

You may exercise your rights free of charge, and you will have the right to receive a response within the time limits established by current data protection legislation, and you may choose from the following means:

• By post to the address C/Torrelaguna 64, Edificio Fiteni III, Planta 2- CP 28043 – Madrid.
• By sending your request to the following email address: protecciondedatos@plenergy.es
• You can lodge a complaint with the Spanish Data Protection Agency, especially when you are not satisfied with the response to the exercise of your rights. For more details, please consult the website www.aepd.es

7. How long do we store your personal information?

We only store your personal information to the extent that we need it in order to use it for the purpose for which it was collected, and in accordance with the legal basis for processing it in accordance with applicable law. We will keep your personal information for as long as there is a contractual and/or commercial relationship with you or as long as you do not exercise your right to erasure, limitation of processing, portability and/or deletion of your data.

In these cases, we will keep the information duly blocked, without making any use of it, as long as it may be necessary for the exercise or defence of claims, or as long as any type of judicial, legal or contractual liability may arise from its processing, which must be attended to and for which its recovery is necessary. In no case will your data be kept for more than 10 years from the end of the contractual relationship, which is the mandatory retention period established by Law 10/2010, of 28 April, on the prevention of money laundering and the financing of terrorism.

8. How do we protect your personal information?

PLENERGY has an Information Security System, so we are committed to protecting your personal information. We use appropriate technical and organisational measures to protect your personal information and privacy, and we review these measures regularly. We protect your personal information by using a combination of physical, computer and logical security controls, including access controls that restrict and manage how your personal information and personal data is processed, administered and managed. We also ensure that our employees are properly trained to protect your personal information.  We have the following procedures included in our organisation in respect of the above;

• • Internet use/back up procedure
  • Risk Assessment and Analysis
  • Management and Registration of Processing Activities
  • Procedure for assigning Information Security responsibilities to HR

9. Use of cookies

See (cookies policy)

We use cookies, web analytics services and social media plug ins on our website to improve your browsing experience, and to consult our cookies policy.

10. When do we update our privacy policy?

This Privacy Policy may need to be updated; therefore it is necessary that you review this policy periodically and if possible each time you access the website and the App in order to be adequately informed about the type of information collected and its treatment.

You can find the Privacy Policy at the bottom of the website and the App. Notwithstanding the foregoing, we will notify you of any changes to this Privacy Policy that affect the processing of your personal data.

This Privacy Policy was last updated in Madrid, on [14] May 2025.