Privacy policy

Who is the controller

Responsible party: Bamboo Energy Platform SL (B01706860.)

Postal address: Carrer de Llacuna, 162, 3rd floor.

Telephone: +34 936277618

Contact email (privacy): rgpd@bambooenergy.tech

Website: https://bambooenergy.tech/es/

We have not appointed a Data Protection Officer (DPO) as this is not required. For any privacy issues, please use the email above.

What we use your data for and what the legal basis is Depending on the channel and purpose, we process your data on these legal bases:

Site navigation and operation

Purpose: to enable access, site security, performance, cookie consent management, technical maintenance.

Legal basis: legitimate interest (art. 6.1.f RGPD) in administering the site and its security; and compliance with art. 22.2 LSSI for technical cookies.

Web analytics/measurement

Purpose: to measure the use of the site in order to make improvements.

Legal basis: your consent (art. 6.1.a RGPD) through the cookie banner/panel.

Security and third-party services in forms

Purpose: to protect against automated spam/abuse.

Legal basis: legitimate interest in security (art. 6.1.f RGPD). The execution of the service involves third-party cookies that will require your consent through the cookies panel.

Social sharing buttons/services

Purpose: to enable sharing functions and, where appropriate, associated metering.

Legal basis: your consent (art. 6.1.a RGPD).

Contact form and request form

Purpose: to deal with requests, provide support and manage communications.

Legal basis: application of pre-contractual measures and/or legitimate interest in fulfilling your request (art. 6.1.b and 6.1.f RGPD).

Sending of informative or commercial communications

Purpose: to send you content, news and/or invitations to events.

Legal basis: your consent (art. 6.1.a RGPD). You can unsubscribe at any time.

Applications and recruitment (if you send your CV via the web or email)

Purpose: to manage your current or future applications (if you consent).

Legal basis: application of pre-contractual measures (art. 6.1.b RGPD) and your consent to keep the CV for future processes.

Representatives of legal entities and contacts of customers, potential customers and suppliers

Purpose:

• Sending of commercial communications about products/services similar to those contracted (soft opt-in LSSI), always with the option of opposition in each sending.

Legal basis:

• Execution of the contract and pre-contractual measures (art. 6.1.b RGPD).
• Compliance with legal obligations (art. 6.1.c RGPD).
• Legitimate interest in managing B2B contacts and customer/supplier portfolio, information security and quality of service (art. 6.1.f GDPR).
• Consent to commercial communications where the prior customer regime does not apply (art. 6.1.a RGPD).

We do not make automated decisions with legal effects on you and we do not create profiles with significantly similar effects.

What data we process

• Identity and contact details: name, surname, email, telephone, company and position.
• Site navigation/usage data: IP address, online identifiers, device/browser, pages visited, times, language, approximate country/city (derived from IP), based on accepted cookies.
• Content of your communications: texts, data and files that you send us via forms, email or attachments.
• CV data: education, experience and any other information you submit (please do not include special categories of data unless strictly necessary and duly justified).
• Contractual and economic: VAT number if applicable, invoicing/payment details, orders and services, correspondence and support.
• Minimum technical access to portals or tools (professional users).

Where the data comes from

Directly from you, through the forms on the site or by email/phone.

From your browsing on the site (cookies/similar technologies, see Cookie Policy).

From third party services that you voluntarily integrate (e.g. social sharing).

Who we share your data with

Providers acting as processors, with access necessary to provide their services under contract:

• Web hosting and maintenance provider.
• Analytics platform: Google Analytics 4 (Google Ireland Limited/Google LLC).
• Anti-spam protection: reCAPTCHA (Google).
• Social sharing service: ShareThis, Inc.
• Mail and office automation services, where appropriate.
• Public bodies and authorities, where there is a legal obligation.
• IT providers (hosting, office suites) as data processors

We do not sell your data.

International transfers

Google (Analytics and reCAPTCHA): Google LLC is adhered to the EU-U.S. Data Privacy Framework (adequacy decision, art. 45 GDPR). Policy: https://policies.google.com/privacy

You will find more details in the Cookie Policy and in the configuration panel, with links to the policies of each third party.

How long we keep data

Cookie preferences/consent: up to 24 months (AEPD recommendation) or sooner if you withdraw consent.

Analytics/measurement: according to cookie expiry (e.g. _ga up to 24 months) or periods configured in the tool.

Contact/support: up to 12 months from the last interaction, unless it leads to a contractual relationship.

Newsletter/communications: until you unsubscribe or withdraw your consent.

Nominations: during the process and, if you consent to their retention, for up to 12 months.

Customers/suppliers:

Contracts, invoices and support: for the duration of the relationship and, after that, for the legal deadlines

Business contacts (non-customers): up to 24 months from the last interaction or earlier if you object.

Technical and safety records: up to 12-24 months, unless incidents require an extension.

Commercial communications: If you are already a customer, we may send you communications about similar products/services (art. 21.2 LSSI). You may object at any time by the means indicated in each mailing or by writing to rgpd@bambooenergy.tech.

Your rights You can exercise them free of charge, where applicable:

• Access, rectification, deletion.
• Opposition and restriction of processing.
• Portability of your data.
• Withdraw consent at any time, without retroactive effect.

Complaint to the supervisory authority: Agencia Española de Protección de Datos (AEPD), www.aepd.es, C/ Jorge Juan 6, 28001 Madrid.

How to exercise them: send an email to rgpd@bambooenergy.tech indicating the right you wish to exercise, attaching a copy of a document proving your identity. If you are acting on behalf of a third party, provide sufficient authorisation or representation.

Minors

Our services are not specifically directed to minors. If you are under 14, please ask your parent or guardian to complete the forms and manage cookies. If we detect any unauthorised information from children, we will delete it.

Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or accidental alteration, taking into account the state of the art, the nature of the data and the risks.

Social networking and third party sites

Our network presence is governed by the terms and policies of each platform. Use of third party buttons or widgets (e.g. social sharing) may involve sending information to those third parties; please review their policies and manage your cookies in the dashboard.

Cookies We use cookies and similar technologies. You can set your preferences at any time using the “Configure cookies” link in the footer. For more information, please see the Cookie Policy.

Changes to this policy We may update this Privacy Policy to reflect legal or processing changes. We will indicate the “Last Updated” and, if the changes are material, we will notify you by reasonable means.

Last update: November 2025.