1.- Data Controller of your private data and Data Processor:

a) Data Controller: Forces Elèctriques d’Andorra (hereinafter, “FEDA”), domiciled at Avinguda la Bartra, S/N, AD200 Encamp (Principat d’Andorra), and with tax registration number U-132950-X.

b) Data Processor: You can contact our Data Processor at the following email address dpd@feda.ad

2.- File declared in compliance with Andorran legislation on Data Protection Agency of the Principality of Andorra:

In compliance with Law 15/2003, of 18 December, on Qualified Personal Data Protection (hereinafter “LQDP”, for its acronym in Catalan), and the regulations arising therefrom, FEDA informs you that any personal data provided in this website (hereinafter, “the Website”) shall form part of the file for which FEDA is responsible, under Decree 4-01-2006 which regulates the personal data files of the public body Forces Elèctriques d’Andorra.

3.- Provisions for the processing of personal details of children and/or third parties:

3.1. - Personal details may not be provided by any third party. Nonetheless, in cases where this may be justified, the person who provides the personal data shall assume responsibility for informing previously the holder of the data provided the content of this privacy policy.

3.2.- When processing children’s personal data, FEDA should be assured that this processing is authorized by the holders of parental authority or guardianship so that FEDA can process the data in accordance with the provisions of this privacy policy. In cases where the personal data to be processed refers to a person with limited rights, FEDA should be assured that this processing is authorized by the official tutors or guardians so that the data can be processed by FEDA in accordance with the provisions of this privacy policy.

4. - Purposes of processing, legal grounds for processing and term for the conservation of personal data:

4.1. - Purposes of processing:

FEDA may process your personal data for the purposes described below:

a)     Using the form and email addresses on the contact page of this Website and of this policy, FEDA shall collect and process your personal data with those that we may request from third parties, when necessary, for the purpose of managing your requests for information or rights, your queries or claims;

b)    Using cookies and other tracking technologies that FEDA may install in your device when you visit this Website, FEDA shall collect and process your personal data to improve your experience and our services by analyzing your browsing on our Website and your interaction with us, and to be able to display advertising based on your browsing habits;

c)     Using the forms on the pages “MW MUSEU DE L’ELECTRICITAT” and “CAMÍ HIDROELÈCTRIC”, FEDA shall collect and process your personal data to book a guided tour of the museum or the hydro-electric route of Engolasters, on the day and time of your choice, in the language of your choice from those available; and

d)    Finally, FEDA shall process your contact details (name, surname, email and contact telephone) to verify, as far as possible, the validity of the requests to exercise your rights (see section 6 of this privacy policy) and to report any breach of security that may pose a serious risk to your rights and freedom.

4.2.-Legal grounds for processing:

Your personal data may be processed in accordance with one or several of the following legal grounds:

a)     The unequivocal consent granted by you when contacting us through the forms and email addresses made available by this Website, linked to our legitimate interest in responding to your request, query, notification or claim and to allow us to install cookies and other tracking technologies that are not necessary for the correct operation of the Website in the device you use to access this website;

b)    The execution of the contract; and

c)     Compliance with legal obligations.

4.3. – Conservation Period of Personal Data:

In general, your personal data shall be kept for the term necessary to achieve the purposes established in this privacy policy. Subsequently, your data shall be kept for as long as required before any statute of limitations regarding legal liabilities arising from the processing, as set forth under the applicable legislation.

5.- Categories of recipients, including service providers, and transfers to third countries or International organizations (international transfers):

5.1. – In case it is necessary to achieve any of the above mentioned purposes, your personal data may be disclosed to the following categories of recipients:

a)              FEDA service providers who have to process your personal data as part of their service, which shall be carried out under the instructions of FEDA and in accordance with this privacy policy and with any other appropriate measure of security and confidentiality established by this entity;

b)             Third parties unrelated with FEDA, if the need to disclose the data is identified in good faith for the purpose of: (1) complying with any applicable law, regulation, legal procedure or governmental request with executive force; (2) complying with the terms and conditions of the product and/or service acquired, including the investigation of possible infringements; (3) and/or detecting, preventing or dealing with issues related with fraud, security or technical problems; and

c)              The relevant public bodies, in the cases provided for by law for the purposes defined therein.

5.2. - FEDA shall only make international transfers of personal data to countries within the European Union, in accordance with article 36.a of the LQPD and 44 of the General Data Protection Regulation of the European Union (hereinafter GDPR”).

6. - Rights related to your personal data:

In compliance with the LQPD, and the regulations derived therefrom, FEDA hereby informs you that you may exercise your right of access, rectification and cancellation of your personal data, as set forth under the above mentioned law, by sending a written and signed notice to the email address dpd@feda.ad accompanied by a copy of your passport or other national identity document.

In accordance with the GDPR, if you are within the European Union, you shall also have the following rights in addition to the above mentioned rights:

-       The right to limit the processing, the right to data portability, the right to object to processing;

-       In those cases where processing is based on your consent, your right to withdraw your consent does not affect the lawfulness of your data processing based on the consent prior to the withdrawal thereof; and

-       The right to submit a complaint before an authority of the European Union on data protection.

You may exercise the above mentioned rights by sending a written and signed notice to the email address dpd@feda.ad accompanied by a copy of your passport or other national identity document.

You may also obtain additional information about your rights by contacting a data protection authority.

7.- Security:

FEDA guarantees that the processing of your personal data shall be carried out subject to the strictest confidentiality, and that the necessary technical and organizational measures have been taken to ensure the security of your personal data and to prevent the alteration, misuse, loss, theft or unauthorized use and/or processing thereof.

8.- Changes to the Privacy Policy:

This privacy policy is subject to regular changes in accordance with the applicable legislation at all times. For this reason, we recommend that you consult this privacy policy on a regular basis.

Last updated: 16 December, 2020