Privacy Policy

The information on this website and in this Privacy Policy is provided for general information purposes only. While we strive to keep the information up-to-date and accurate, we make no guarantees or warranties, express or implied, regarding its accuracy, completeness, or suitability for your particular situation.

By using this website, you agree to the terms outlined in this policy. If you do not agree with this Privacy Policy, please do not use our services.

We collect personal data in accordance with the principles of data minimisation and purpose limitation, meaning we only collect what is necessary for the services we provide.

1.1 Personal Data

This includes:

• Identity Data: Name, surname

• Contact Data: Email address, phone number, mailing address

• Payment Data: Credit or debit card information (processed securely through third-party gateways)

• Technical Data: IP address, device identifiers, browser type, operating system, and location data

1.2 Special Categories of Data

We do not collect sensitive personal data (such as health or biometric data) unless specifically required for the service and only with your explicit consent.

1.3 Cookies and Tracking Technologies

Cookies and similar tracking technologies are used to analyse how you interact with our website and improve your experience. By default, non-essential cookies are disabled and are only enabled if you provide consent through our cookie banner. See our Cookies Policy for more details.

​

We only use your personal data when permitted by law. Below are the lawful bases for processing your data:

• Performance of a Contract: To provide the requested services (e.g., processing orders).

• Consent: When you provide consent (e.g., subscribing to newsletters).

• Legal Obligation: To comply with EU laws or regulations.

• Legitimate Interests: For purposes such as improving our website or preventing fraud, provided these do not override your data rights.

We never sell or rent your personal data. However, we may share it with:

• Service Providers: Companies we collaborate with to perform technical, payment, and delivery services.

• Authorities: When required by law or to protect our legal rights.

• Business Transfers: If the business undergoes a merger or sale, your personal data may be transferred to new ownership.

All third-party service providers must comply with GDPR requirements and provide adequate data protection measures.

Your personal data may be transferred and processed in countries outside the European Economic Area (EEA). If we transfer data to a non-EEA country that does not have adequate privacy protections, we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

As an EU resident, you have the following rights under the GDPR:

• Right to Access: Request access to your personal data.

• Right to Rectification: Request correction of inaccurate or incomplete data.

• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data, subject to certain conditions.

• Right to Restrict Processing: Request that we restrict the use of your data in specific cases.

• Right to Object: Object to processing of your personal data based on legitimate interests.

• Right to Data Portability: Request a copy of your data in a machine-readable format for transfer to another service.

• Right to Withdraw Consent: Withdraw your consent at any time, where consent is the legal basis for processing.

To exercise these rights, please contact us at:
Email: [Insert your contact email]

We will respond to your request within one month, as required by GDPR. If your request is complex, we may extend the response period by two additional months but will notify you if this is the case.

We have implemented appropriate technical and organizational measures to ensure your personal data is secure. These measures include encryption, access controls, and regular system monitoring. However, please note that no online transmission or storage is 100% secure.

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for legal, tax, or regulatory reasons. When your data is no longer required, we will securely delete or anonymise it.

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16 without parental consent, we will delete it promptly.

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We recommend reviewing the privacy policies of these third parties before providing any personal data.

Our website uses cookies to enhance user experience and analyse website traffic. Essential cookies are necessary for the website to function, while non-essential cookies require user consent before being used. You can adjust your cookie preferences through the cookie banner or browser settings.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with the updated effective date.

If the changes are significant, we will notify you by email (if you have provided one) or display a notice on the website.

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: info@workkingsolarandheating.com
Phone: 658-302-698
Address: Calle Mimosa 15 BJ, Pinar de Campoverde, Alicante, 03191

If you believe that we have not complied with GDPR, you have the right to lodge a complaint with your local Data Protection Authority (DPA).