The owner and data controller responsible for the personal data collected through the website www.enflexa.com (hereinafter, the “Website”) is:
GREENING GROUP GLOBAL, S.A. (hereinafter, “GREENING” or “ENFLEXA”)
ENFLEXA is Greening’s energy flexibility platform, focused on optimizing energy storage systems through forecasting, optimization and connection to electricity markets.
This Privacy Policy informs Website users about the processing of their personal data so that they may freely and voluntarily decide whether to provide the information that may be requested through the different forms, contact channels or services available.
Personal data will be processed in accordance with Regulation (EU) 2016/679 of April 27, 2016 (GDPR), Spanish Organic Law 3/2018 of December 5, on Personal Data Protection and the Guarantee of Digital Rights (LOPD-GDD), and any other applicable regulations.
GREENING reserves the right to amend this Privacy Policy in order to adapt it to legislative, regulatory, judicial or technical developments, or to changes in the services offered through ENFLEXA. Any amendments will be published on this page.
The personal data processed will depend on the user’s relationship with ENFLEXA and on the services used.
We may process, among other data:
The user guarantees that the personal data provided are true, accurate and up to date, and undertakes to notify ENFLEXA of any changes.
Personal data may be processed for the following purposes:
Responding to information requests and inquiries
To manage and respond to inquiries, requests for information or other requests made through the forms available on the Website, by email, phone or through other contact channels made available by ENFLEXA.
This includes requests relating to:
Management of commercial and pre-contractual relationships
To manage professional contacts, business opportunities, meetings, proposals, preliminary studies, pre-contractual relationships and, where applicable, contractual relationships with clients, potential clients, suppliers, collaborators and other business partners.
Technical management and Website security
To manage the proper functioning of the Website, ensure its security, detect errors, prevent unauthorized access, cyberattacks, fraud or other unlawful uses, and carry out technical maintenance activities.
Website analytics and improvement
Where user consent is required, to analyze the use of the Website through cookies or similar technologies in order to understand how the Website is used, prepare usage statistics and improve browsing, content and services.
Further information about these technologies is available in the Cookie Policy.
Commercial communications
Where there is a valid legal basis, ENFLEXA may send information relating to its services, solutions, technology, news, projects, publications, activities or other content related to energy flexibility and energy storage.
Where such communications are based on the user’s consent, the user may withdraw that consent at any time.
Where there is a prior contractual relationship, communications relating to products or services similar to those previously contracted may be sent in accordance with applicable law, without prejudice to the user’s right to object at any time.
User consent
Where the user voluntarily provides personal data through a form, accepts the use of certain cookies, requests commercial communications or expressly authorizes a specific processing activity.
Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before such withdrawal.
Performance of a contract or pre-contractual measures
Where processing is necessary to respond to a request for a proposal, commercial information, demonstration, project assessment, collaboration or to manage an existing contractual relationship.
Legitimate interest
Where processing is necessary to:
In such cases, the relevant balancing test will be carried out between the organization’s interests and the rights and freedoms of the data subjects.
Compliance with legal obligations
Where processing is necessary to comply with legal, tax, accounting, commercial or regulatory obligations, or with requests from public authorities, regulatory bodies, courts or tribunals.
Fields identified as mandatory in the forms must be completed in order for the relevant request to be processed properly.
Failure to provide certain data may prevent ENFLEXA from responding to an inquiry, preparing a proposal, contacting the user or providing the requested service.
Information requested in non-mandatory fields is optional.
Personal data will only be retained for as long as necessary to fulfill the purpose for which they were collected.
As a general rule:
Once the applicable retention periods have expired, the data will be deleted, anonymized or blocked where required by law.
As a general rule, ENFLEXA will not disclose personal data to third parties unless this is necessary to fulfill the purposes described in this Privacy Policy or there is a legal obligation to do so.
Where necessary, personal data may be accessible to:
Where a third party processes personal data on behalf of the data controller, it will act as a data processor and will be subject to the obligations set forth in Article 28 of the GDPR.
ENFLEXA forms part of the Greening business ecosystem.
Certain corporate services may be provided centrally within Greening Group, including administrative, technology, financial, commercial, human resources, compliance, information security and data protection functions.
Where necessary for these purposes, certain Greening Group companies may have access to personal data, always in accordance with the purposes previously disclosed, with appropriate security measures and in compliance with applicable law.
The Data Protection Officer is also appointed at Greening Group level.
Some technology providers used by ENFLEXA or Greening Group may provide services from countries outside the European Economic Area or may use internationally located infrastructure.
Where international transfers of personal data take place, such transfers will be carried out using one of the mechanisms permitted under the GDPR, including, where applicable:
Where necessary, additional safeguards will also be adopted to ensure an adequate level of protection for personal data.
Right of access
Users have the right to know whether ENFLEXA is processing their personal data and, where applicable, to obtain information about such data and a copy of them.
Right to rectification
Users may request the correction of personal data that are inaccurate or incomplete.
Right to erasure
Users may request the deletion of their personal data where, among other circumstances, the data are no longer necessary for the purposes for which they were collected.
Right to restriction of processing
Users may request that the processing of their personal data be restricted in the circumstances provided for by law.
Right to object
Users may object to the processing of their personal data where such processing is based on certain legitimate interests.
Where personal data are processed for direct marketing purposes, users may object at any time.
Right to data portability
Where applicable, users may receive the personal data they have provided in a structured, commonly used and machine-readable format and transmit those data to another controller.
Right to withdraw consent
Where processing is based on consent, users may withdraw their consent at any time without affecting the lawfulness of processing carried out before such withdrawal.
Right not to be subject to automated decision-making
Where applicable, users have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
Users may exercise their rights or submit any inquiry relating to data protection by contacting Greening Group’s Data Protection Officer:
By email:
[email protected]
By mail:
Data Protection Officer
GREENING GROUP GLOBAL, S.A.
C/ Alcayata, No. 4
Pol. Ind. El Florío
18015 Granada
Spain
The request must provide sufficient information to identify the data subject and specify the right the user wishes to exercise.
Where there are reasonable doubts regarding the identity of the person making the request, additional information or documentation strictly necessary to verify their identity may be requested.
Where a request is submitted by a representative, documentation proving such representation may be required.
If the user considers that the processing of their personal data infringes applicable data protection law, they may lodge a complaint with the competent supervisory authority.
In Spain, the competent supervisory authority is:
Spanish Data Protection Agency (AEPD)
www.aepd.es
Users may also contact Greening Group’s Data Protection Officer beforehand at:
GREENING adopts appropriate technical and organizational measures to ensure a level of security appropriate to the risk and to protect personal data against destruction, loss, alteration, disclosure or unauthorized access.
These measures may include, where appropriate:
However, no system connected to the Internet can guarantee absolute security.
Where a user provides personal data relating to another person, the user declares that they are authorized to do so and that the data subject has been duly informed about the processing of their personal data in accordance with applicable law.
The user is responsible for ensuring that the data provided are accurate and that any necessary authorization has been obtained before such data are disclosed.
ENFLEXA’s services are mainly intended for professionals and companies and are not specifically directed at minors.
ENFLEXA does not knowingly seek to collect personal data from minors through the Website.
If ENFLEXA becomes aware that personal data relating to a minor have been collected without an appropriate legal basis, the necessary steps will be taken to delete such data.
The Website may use first-party and third-party cookies for technical, analytics or other purposes.
Cookies that are not strictly necessary will only be used where there is a valid legal basis and, where required, after the user has provided consent.
Users may accept, reject or configure cookies through the settings panel available on the Website.
Detailed information about the cookies used, their providers, purposes and retention periods is available in ENFLEXA’s Cookie Policy.
GREENING may amend this Privacy Policy where necessary due to legislative, regulatory, technical or organizational changes, or changes relating to ENFLEXA’s services.
Where changes are relevant to users, GREENING will seek to provide notice through the Website or other appropriate means.
Users are encouraged to review this page periodically.
This Privacy Policy is primarily governed by:
For any questions relating to this Privacy Policy, the processing of personal data or the exercise of data protection rights, please contact:
GREENING GROUP GLOBAL, S.A. – ENFLEXA
C/ Alcayata, No. 4
Pol. Ind. El Florío
18015 Granada, Spain
Data Protection Officer:
[email protected]
Phone:
(+34) 958 19 84 31
Website:
www.enflexa.com
Privacy Policy last updated in October 2026.
