This Privacy Policy explains how Sufervil Ingeniería Sostenible, S.L., trading as SIS Proyectos Energía, collects and processes personal data provided through this website.
1. Data Controller
Registered company name: Sufervil Ingeniería Sostenible, S.L.
Trading name: SIS Proyectos Energía
CIF: B72703994
Address: Avenida Rafael Cabrera, 10, entreplanta, oficina B, 35002 Las Palmas de Gran Canaria, España.
Data protection email: gdpr@sisenergia.es
Telephone: +34 621 313 326
Website: https://sisenergia.es
2. Purposes of Processing
Personal data submitted through our forms and contact channels will be used to:
- Receive, manage and respond to enquiries.
- Assess the initial requirements of proposed energy projects.
- Prepare preliminary assessments and commercial proposals where appropriate.
- Contact interested parties to request additional information or explain the next steps.
- Maintain administrative records of enquiries.
- Comply with applicable legal obligations.
- Protect the website's technical security and prevent fraudulent activity.
Personal data submitted for enquiries will not be used to send unsolicited marketing communications without an appropriate legal basis.
3. Legal Bases for Processing
Depending on the purpose, personal data processing is based on the following provisions of the General Data Protection Regulation (GDPR):
Article 6(1)(b) — Pre-contractual Measures
Processing necessary to respond to requests for project assessments, technical enquiries or proposals made before entering into a potential contract.
Article 6(1)(c) — Legal Obligation
Processing necessary to comply with applicable legal obligations.
Article 6(1)(f) — Legitimate Interests
Proportionate processing to ensure website security, prevent unauthorised access and protect technological infrastructure, taking into account the rights and interests of the individuals concerned.
Where consent is legally required, processing will be based on Article 6(1)(a) GDPR and will only take place after valid consent has been obtained.
4. Personal Data Collected
Our energy project assessment form may collect:
- Contact person's name.
- Email address.
- Telephone number, if provided.
- Company name, if provided.
- Type of energy project.
- Province or project location.
- Description of project requirements and objectives.
- Additional information voluntarily provided by the user.
Your name, email address, project type and description are required to process an enquiry.
The remaining fields are optional.
The operation and security of the website may also involve processing technical information, including access logs and security events.
Users are advised not to include sensitive personal information in free-text fields.
5. Recipients and Service Providers
Personal data may be processed by the following parties, within the scope of their respective responsibilities:
- Authorised SIS Proyectos Energía personnel responsible for handling enquiries.
- Website hosting, maintenance and technical support providers, including Olibyte, where necessary to deliver their services.
- Email service providers used to receive and manage communications, including Google under the current enquiry-handling configuration.
- Public authorities and competent bodies where disclosure is required by law.
Service providers acting as data processors must provide the safeguards required by data protection legislation and be subject to the relevant agreements.
Personal data will not be sold to third parties for advertising purposes.
6. International Data Transfers
The use of technology and email services provided by international companies, including Google, may involve the processing of or access to personal data from countries outside the European Economic Area.
Where international transfers occur, they must comply with Articles 44 and following of the GDPR through the applicable transfer mechanisms and safeguards.
Individuals may request information about international transfers and the relevant safeguards by contacting the data controller.
7. Data Retention Periods
Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected.
The following criteria will apply:
Enquiries That Do Not Result in a Contract
Personal data will ordinarily be retained for a maximum of 12 months after the last communication concerning the enquiry, unless earlier deletion is appropriate or a legitimate additional retention obligation applies.
Contractual Relationships
Where an enquiry leads to a contract, personal data will be retained throughout the contractual relationship and subsequently for any applicable statutory retention periods.
Security Records
Technical data will be retained for periods proportionate to security requirements and applicable legal obligations.
Once the relevant retention period expires, personal data will be deleted or restricted in accordance with applicable legislation.
8. Data Subject Rights
Individuals may exercise the following rights where provided for by law:
- Access: Request information about the personal data being processed.
- Rectification: Request the correction of inaccurate or incomplete data. request the correction of inaccurate or incomplete data.
- Erasure: Request the deletion of personal data where legally applicable. request the deletion of your data when the legal circumstances exist.
- Objection: Object to certain types of processing.
- Restriction: Request restrictions on processing in the circumstances established by law.
- Data : Receive personal data in a structured format and transmit it to another controller where applicable.
- Withdrawal of Consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of previous processing
To exercise these rights, please contact:
Requests may also be submitted by post to the registered address specified in Section 1.
Requests must sufficiently identify the individual concerned and specify the right being exercised. Additional identity verification information will only be requested where reasonable doubts exist regarding the applicant's identity.
Requests will be handled within the time limits established by applicable legislation.
9. Right to Lodge a Complaint
Individuals who believe that the processing of their personal data does not comply with applicable legislation may lodge a complaint with the Spanish Data Protection Agency.
Spanish Data Protection Agency (AEPD): https://www.aepd.es
10. Automated Decision-Making
Personal data submitted through the website's enquiry form is processed for the purpose of receiving and managing requests for information.
Under the current configuration, no decisions are made solely through automated processing that produce legal effects concerning individuals or similarly significantly affect them.
11. Cookies and Similar Technologies
The website may use technical cookies and, where implemented and the necessary consent has been obtained, measurement and analytics technologies.
Information about cookies and available management options is provided in our Cookie Policy.
12. Updates to This Policy
SIS Proyectos Energía may update this Privacy Policy to reflect changes in applicable legislation, technology or services.
Material changes will be reflected in the published policy.
Last update: October 30, 2026.
