Privacy Policy
This privacy policy applies to the processing of personal data of users who access and use the website https://nievesenergia.com/ (the ‘Website’).
1. Data Controller and Data Protection Officer
NIEVES FAMILY CORPORATION, S.L. (“Nieves“), domiciled at Calle Camí Ral, 73 – 75, Esparreguera, 08292 Barcelona, is responsible for the processing of users’ personal data collected or generated as a result of access to and use of the Website.
You can contact Nieves through any of the following means of contact:
- Address: Calle Camí Ral, 73 – 75, Esparreguera, 08292 Barcelona.
- Telephone: 900 500 111.
- E-mail address: info@nievesenergia.com.
You may also contact Nieves’ data protection officer at the following e-mail address: proteccióndedatos@nievesenergia.com.
We hereby inform you that Nieves is part of a group of companies comprising the following companies: Nieves Mobility, S.L.; Axoil Energy, S.L.; Nieves Butano, S.L.; Nieves Energía, S.L.; Nieves Energytech, S.L.; and Nieves Family Corporation, S.L. (hereinafter, “Nieves Group“).
2. Purposes and grounds for legitimizing the processing of data
Users’ personal data will be processed in accordance with the provisions of the applicable regulations on personal data protection, including the General Data Protection Regulation (EU) 2016/679 (“GDPR“), the Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (“LOPDGDD“) and the Law 34/2002 on Information Society Services and Electronic Commerce (“LSSI“).
Before providing personal data to Nieves, please ensure that you have carefully read and fully understand this Privacy Policy. Furthermore, by accepting this Privacy Policy you warrant that the personal data provided to Nieves is accurate, truthful and up to date.
Users’ personal data collected through the Website will be processed for the following purposes and on the basis of the following grounds of legitimacy:
| Purpose | Categories of personal data | Basis of legitimacy | Retention period |
| 1. Management of the functionalities of the Web Site | |||
| Navigation on the Website: Nieves processes the information that results from your navigation on the Website. | – IP address. | Article 6.1.b) of the RGPD: management, control and execution of the contractual relationship between the user and Nieves. | 3 years (article 72.1 of the LOPDGDD) |
| Registration and access to the “customer area” and development, fulfillment and execution of the associated services: Nieves needs to process the personal data of the users to identify them and give them access to the functionalities and services available to the customers. | – Identification and contact information: name and surname, e-mail address, telephone number and national identity document. – IP address. – Commercial information and transactional data related to the services contracted by the customer. | Article 6.1.b) of the RGPD: management, control and execution of the contractual relationship between the user administrator and Nieves. | 5 years (Article 1964.2 of the Civil Code). |
| Management of the mailboxes “Request your fuel card for Individuals” and “Request your professional card” and development, fulfillment and execution of the card services: Nevis needs to process the personal data of the users to identify them and carry out the necessary steps for the issuance of the cards. | – Identification and contact data: name and surname, e-mail address, telephone and national identity document, postal address, vehicle registration number. – Data on the economic-financial situation. – Commercial information and transactional data related to the services contracted by the customer. | Article 6.1.b) of the GDPR: management, control and execution of the contractual relationship between the user administrator and Nieves. | 10 years (Article 131 of the Criminal Code and Article 25 of Law 10/2010 of 28 April on the prevention of money laundering and terrorist financing). |
| Analysis of solvency: in cases where the customer applies for credit or has requested the conclusion of a contract involving financing, deferred payment or periodic billing, Nevis will consult and process the information obtained from common solvency files. Nevis may process, where appropriate, the data obtained from different entities issuing reports on its financial solvency (in particular, Informa D&B S.A.U. and Yndika). Based on these inquiries, it may make profiles of your creditworthiness. Nieves shall always give the user the opportunity to make any claim he deems appropriate in order to defend his right or interest. Failure to comply with the monetary obligations assumed by the user may result in the inclusion of his personal data in a file relating to the fulfillment or non-fulfillment of monetary obligations. | – Identification and contact data: name and surname, e-mail address, telephone and national identity document, postal address, vehicle registration number. – Data on the economic-financial situation. | Article 6.1.f) of the RGPD and Article 20 of the LOPDGDD: legitimate interest of Nieves consisting of analyzing the solvency of customers. | 10 years (Article 131 of the Criminal Code and Article 25 of Law 10/2010, of April 28, 2010, on the prevention of money laundering and terrorist financing). |
| Verification of the status of beneficiary of public aid: when clients receive aid from social services, Nieves must verify the client’s status as a beneficiary. | – Identification and contact data: name and surname, e-mail address, telephone and national identity document, postal address, vehicle registration number. – Data related to the aid received. – Commercial information and transactional data related to the services contracted by the customer. | Article 6.1.c) of the GDPR: compliance with Nieves’ legal obligations. | 10 years (Article 131 of the Penal Code) |
| Management of the “Contact” mailbox and answering queries raised by the user through the contact channels enabled: manage doubts, queries, complaints and/or suggestions received through the contact channels available on the Website. | – Identification data and contact data: name and surname, e-mail address and/or telephone number (depending on the contact channel used by the user). – Any information that may be provided by the user in connection with the corresponding inquiry or request. – In the case of telephone consultation: voice. | Article 6.1.b) of the RGPD: management, control and execution of the contractual and legal relationship between the user and Nieves. | 5 years (Article 1964.2 of the Civil Code). |
| Improving customer service: communications to customer service may be processed to improve and evaluate the quality of service, as well as to constitute evidence in judicial or extrajudicial proceedings. In particular, telephone conversations may be recorded. | – Identification data and contact data: name and surname, e-mail address and/or telephone number (depending on the contact channel used by the user). – Any information that may be provided by the user in connection with the corresponding inquiry or request. – In the case of telephone consultation: voice. | Article 6.1.f) of the GDPR: legitimate interest of Nieves to improve and evaluate the quality of the service. | 3 years (Article 72.1 of the LOPDGDD). |
| Management of the “Work with us” form and selection process: Nieves will process personal data to manage the participation of candidates in the selection process. | – Identification and contact information: name and surname, e-mail address and/or telephone number. – Academic and professional data. – Curriculum Vitae. | Article 6.1.b) of the RGPD: management of the pre-contractual relationship with the candidate. | 2 years (article 4 of Royal Legislative Decree 5/2000, of August 4, which approves the revised text of the Law on Infractions and Penalties in the Social Order). |
| 2. Security and operation of the Web Site | |||
| Develop internal reports, statistics and analysis to improve the Web Site: analyze, manage and develop internal reports and statistics on user behavior in order to implement improvements in the Application. | – Technical data of the device. – Browsing data and IP address. | Article 6.1.f) of the RGPD: legitimate interest of Nieves consisting of analyzing the use and operation of the Website, improve and identify errors and anomalies. | 3 years (Article 72.1 of the LOPDGDD). |
| Optimization of services and detection of errors and problems: to improve and optimize the services offered on the Website, as well as to detect errors and technical problems. | – Technical data of the device. – Browsing data and IP address. | Article 6.1.f) of the RGPD: legitimate interest of Nieves consisting of analyzing the use and operation of the Website, improve and identify errors and anomalies. | 3 years (Article 72.1 of the LOPDGDD). |
| 3. Legal obligations | |||
| Compliance with legally established obligations: when the processing is necessary to comply with a legal obligation derived from the regulations applicable to Nieves. | – Identification and contact information: name and surname, e-mail address, telephone number. – Any other personal data of users required by the competent authorities within the framework of their powers. | Article 6.1.c) of the GDPR: compliance with the legal obligations of Nieves. | 10 years (Article 25 of Law 10/2010, of April 28, 2010, on the prevention of money laundering and terrorist financing). |
| 4. Commercial communications | |||
| Management of promotions and sweepstakes: Nieves processes the personal data of users in the framework of promotional campaigns and sweepstakes. | – Identification and contact information: name and surname, e-mail address, telephone number. | Article 6.1.b) of the RGPD: management, control and execution of the contractual and legal relationship between the user and Nieves. | 5 years (Article 1964.2 of the Civil Code) |
| Sending commercial communications of similar products and services: Nieves will process personal data to send commercial communications regarding Nieves products or services that are similar to those that were initially contracted. | – Identification and contact information: name and surname, e-mail address. | Article 21.2 of the LSSI. | 2 years (article 45 of the LSSI) |
| Sending newsletters or other publications: when the user has given his consent, Nieves will process his personal data to send him commercial communications. | – Identification and contact information: name and surname, e-mail address. | Article 6.1.a) of the GDPR: user consent. | 3 years (article 72.1 of the LOPDGDD) |
| Sending commercial communications of products and services of the Nieves Group: when the user has given his consent, the companies of the Nieves Group will process your personal data to send you commercial communications regarding their products or services. | – Identification and contact information: name and surname, e-mail address. | Article 6.1.a) of the GDPR: user consent. | 3 years (article 72.1 of the LOPDGDD) |
3. International data transfers and assignments
Nieves will transfer user data to third parties when necessary for the management and control of the Website and the contractual relationship between the user and Nieves and to the competent authorities and agencies, courts, tribunals or any other third parties legitimized under applicable law in those cases in which it is required by these authorities. Nieves will not process personal data outside the European Economic Area.
Similarly, when the user has consented, Nieves may transfer your data to other companies in the Nieves Group to send commercial communications. We remind you that the Nieves Group companies are: Nieves Mobility, S.L.; Axoil Energy, S.L.; Nieves Butano, S.L.; Nieves Energía, S.L.; Nieves Energytech, S.L.; and Nieves Family Corporation, S.L.
Likewise, users’ data may be processed by data processors as long as it is necessary to comply with the contractual relationship and the provision of the service.
4. Third party data
If a user provides third party data to Nieves, the user expressly states that the data are entered with the express consent of the owner, after having previously informed the latter of the processing thereof.
5. Use of cookies and other similar technologies
The Web Site uses cookies when a user browses the Web Site. Through these cookies, information may be collected to generate profiles about users and their use of the Website. You can find more information about the use of cookies in our Cookie Policy: https://www.nievesenergia.com/politica-de-cookies/.
6. Data protection rights
Users may exercise any of the rights granted to them by data protection regulations, which consist of:
- right to access and obtain a copy of your personal data (right of access),
- the right to rectify any data that is not correct (right of rectification),
- the right to delete your personal data when permitted by law (right of erasure),
- right to object to the processing of data (right to object),
- the right to limit the processing of personal data (right of limitation),
- the right to receive certain personal data in a structured, commonly used and machine-readable format (right to portability),
- the right to withdraw previously given consent (right to withdraw consent), and
- right to object to automated individual decisions, including profiling.
In order to exercise all these rights, users may send a written request via e-mail to the e-mail address protecciondedatos@nievesenergia.com, indicating which right they wish to exercise.
Users also have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es) to claim the exercise of their rights or any other issue related to the protection of their personal data.
7. Security
The Web Site uses information security techniques generally accepted in the industry, such as firewalls, access control procedures and cryptographic mechanisms, all in order to prevent unauthorized access to data.
Both Nieves and those involved in any phase of the processing of personal data and the entities to whom they have been communicated ¾underthe authorization given by the user, or other legal legitimacy ¾ expressly undertake to adopt the levels of protection and the necessary technical and organizational measures to ensure the security of the data and prevent its alteration, misuse, loss, theft, unauthorized access or treatment, both externally and within the structure and staff dependent. Likewise, the processing and recording in files, programs, systems, equipment, premises and centers, which comply with the requirements and conditions of integrity and security established in the current regulations, is guaranteed.
8. Privacy Policy Updates
Nevis reserves the right to review and revise this Privacy Policy at any time. For this reason, we ask that you regularly check this privacy statement for the most current version of the Nieves Privacy Policy.
Last revision: September 2025
Barcelona, © NIEVES FAMILIY CORPORATION, S.L. Reproduction in whole or in part is prohibited. All rights reserved.