Your privacy is important to us. We respect it and are committed to protecting it. Below, we explain our privacy practices and how your information is collected and used in the context of entering into and executing the Contract.
Green Venture Trading, Lda., legal entity no. 516473328, headquartered at Rua do Passeio Alegre, 954, 4150 Porto (“Green Venture”), is the data controller of your personal data for the purposes of the General Data Protection Regulation (“GDPR”).
For any matter related to personal data protection, you may contact Green Venture via:
Personal data are information relating to an identified or identifiable natural person. A person is considered identifiable if a set of information can lead to their identification.
In this case, failure to provide such data will make it impossible for Green Venture to represent the Self-Consumer within the scope of this Contract and, consequently, to provide the Services covered by it. Therefore, the provision of your personal data constitutes a necessary requirement for entering into the Contract.
In the context of this contract for the aggregation of surplus self-consumption production, Green Venture collects and uses the Self-Consumer’s personal data listed below:
Personal data are collected based on the purposes and legal grounds provided in this policy and in compliance with the principles of (i) lawfulness, fairness, and transparency, (ii) purpose limitation, (iii) data minimization, (iv) accuracy, (v) storage limitation, and (vi) integrity and confidentiality.
Green Venture processes your personal data based on the following purposes and legal grounds: to provide aggregation services, based on pre-contractual measures and contract execution under Article 6(1)(b) of the GDPR; to make payments to the Self-Consumer for the sale of Surplus Energy, under contract execution as per Article 6(1)(b) of the GDPR; to manage the contractual relationship, also based on contract execution under Article 6(1)(b) of the GDPR; to communicate data to public (national and EU), tax or judicial authorities, under legal obligations as per Article 6(1)(c) of the GDPR; and to carry out statistical operations, after data anonymization, based on Green Venture’s legitimate interest in producing statistical information for managing and developing its activity under Article 6(1)(f) of the GDPR.
We process and retain your data only for as long as necessary to pursue or conclude the purposes for which the data are processed, respecting the maximum retention periods required to fulfill contractual, legal, or regulatory obligations.
As a rule, and where a contract justifies data processing, we will retain the data for the duration of the contractual relationship. Other circumstances, such as compliance with legal or regulatory obligations (e.g., tax obligations require that personal data related to invoicing be retained for up to ten years), or ongoing legal proceedings, may justify longer retention periods.
To ensure the security of your information, we have implemented a set of security measures. Your data are stored on secure networks and accessible only by a limited number of persons with special access rights, who are committed to maintaining the confidentiality of such information.
Your data are shared only to the extent necessary to provide the services you have contracted or to comply with legal obligations, under applicable data protection laws.
For the purposes mentioned in Section 2, Green Venture shares personal data with the following entities:
Where applicable, in cases of international data transfers (outside the European Union), if the European Commission has adopted an adequacy decision stating that the third country ensures a level of data protection equivalent to EU legislation, the data transfer will be based on that decision.
The full and updated list of adequacy decisions can be consulted at https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en
If the destination country does not offer an adequate level of protection, a data transfer agreement will be signed based on the European Commission’s standard contractual clauses to ensure data security.
Right of access: You have the right to obtain information about the processing of your data and its characteristics (such as data types, purposes, recipients, retention periods, and mandatory or optional data).
Right to rectification: You may request the rectification of your data to ensure accuracy and currency.
Right to erasure: You may request the deletion of your data when there are no valid grounds for its retention, unless other legal grounds exist (e.g., contract execution or legal obligations).
Right to object: You may object, on grounds relating to your particular situation, to the processing of your data where based on Green Venture’s legitimate interest or for purposes different from those initially collected.
Right to restriction: In certain cases, you may request that Green Venture restrict access to your personal data or suspend processing activities.
Right to data portability: If data processing is based on a contract or your consent, you may request your data in a structured, commonly used, machine-readable format. Where technically feasible, you may also request that Green Venture transmit your data to another data controller.
Right to lodge a complaint with the supervisory authority: You have the right to file a complaint with the Comissão Nacional de Proteção de Dados, via: - Website (https://www.cnpd.pt/);
All the rights above may be exercised, with the limitations set out in applicable law, using the contact details provided in Section 1 of this Privacy Policy.