Energy commercial action · Privacidad

Purpose

Management of the commercial action of the offshore foundation and platform business, substations and platform, from market prospecting to identify business opportunities, preparing the offer, and negotiating up to signing the contract. This includes the management of commercial activities related to promoting the entity at specialized events and fairs both nationally and internationally.

Entity in charge

NAVANTIA S.A. S.M.E.
A84076397
C/Velázquez, 132 - 28006 MADRID (Madrid)
(+34) 913 358 400
[email protected]
[email protected]

Legal basis

The legal bases for the processing are:

Article 6(1)(a) of GDPR: Consent of the data subject.
Article 6(1)(f) of GDPR: Processing is necessary for the purposes of the legitimate interests pursued by the controller.

Data retention periods

Data will be stored for the time necessary to comply with the purpose for which they were collected and to determine the possible liabilities that could derive from that purpose and data processing. The provisions of the file and documentation regulations applicable to Navantia will apply.

Affected groups

Supplier representatives, attendees at events or fairs in which the entity participates, agents, shareholders and commercial personnel with powers in Spain and abroad.

Data type - Infringement

Not processed.

Data types - Special categories

Not processed.

Data type - Identification data

Name and surname
Postal address
Telephone
Email address

Data type - Other

Not processed.

Security measures

The security measures applied correspond to those provided in Annex II (Security Measures) of Royal Decree 311/2022, of May 3, which regulates the National Security Scheme in the field of Electronic Administration and are described in the documents forming part of Navantia’s Data Protection and Information Security Policy. Security measures corresponding to Annex A of UNE-EN/IEC 27001 - Information Security Management Systems.

Additionally, security measures are adopted for paper-based documentation according to the risks to which they are exposed, in order to ensure the confidentiality of the processed data.

Communication

Communications are foreseen when data communication can be carried out in accordance with Article 6 of GDPR, regarding legal basis for processing to:

Entities responsible for managing events and fairs
Potential clients (provision of equipment data proposed for the programme, during the offer phase)

International transfers

Data transfers to third countries are planned, mainly to Turkey, Peru, Saudi Arabia, Australia, the United Kingdom, Mexico, the United States and Indonesia.