Last updated: July 21, 2025

1. Data Controller

Grid Code acts as an integrating brand and communication hub, under which various companies specialized in energy transition solutions collaborate.

In accordance with Article 13 of Regulation (EU) 2016/679 (GDPR) and Article 10 of Law 34/2002 (LSSI-CE), you are informed that:

Each collaborating company that manages data within the framework of a service, product or consultancy acts as an independent controller, within its delimited scope of competence.
Grid Code does not constitute a separate legal entity nor assumes the status of global controller, limiting itself to the dissemination of information, advertising and institutional coordination.

Privacy-related requests or inquiries may be directed to the centralized contact channel:

📧 connect@grid-code.tech

2. Data We Collect

During navigation and use of services provided under the Grid Code identity, the following data may be collected, by way of illustration and not limitation:

Identification data: name, surname, email, phone.
Professional data: company, position, sector.
Technical data: IP address, cookies, access logs, approximate geolocation.
Usage data: queries, forms, support tickets.
Contractual data (when applicable): billing, software licenses, technical integrations.

Special categories of data are not requested or processed (art. 9 GDPR), unless the user provides them voluntarily and with express consent.

3. Purpose of Processing

Data may be processed by collaborating companies for purposes that include, in a binding but not exclusive manner:

Management of inquiries and support requests.
Formalization of contractual relationships.
Access to digital platforms (EVA, NUBA, PLUS, IRIS, Wings, etc.).
Analysis of metrics and service performance.
Sending informative or commercial communications, always with the right to object.

Grid Code, as a brand, only disseminates corporate and awareness content around energy transition, sustainability and institutional cooperation, without assuming autonomous data processing.

4. Legal Basis for Processing

Processing is based on:

Express consent of the user.
Performance of a contract or pre-contractual measures.
Compliance with legal obligations (tax, regulatory, energy).
Legitimate interest (platform security, service improvement).

In cases based on legitimate interest, the balancing test provided for in art. 6.1.f GDPR has been carried out, ensuring that the rights of the data subjects prevail.

5. Data Recipients

Data may be disclosed to:

Collaborating companies in the Grid Code ecosystem, acting as independent controllers or processors (art. 28 GDPR).
Hosting, cybersecurity and communications service providers, always under a data processing agreement.
Administrative or judicial authorities, when there is a legal obligation.

In case of international transfers, the European Commission's Standard Contractual Clauses or equivalent mechanisms will be applied.

6. Data Retention

Data will be retained for:

The time necessary for the initial purpose.
While the contractual relationship is maintained.
The periods required by legal obligations.

Subsequently, they will be blocked and securely deleted, unless there is a judicial or regulatory requirement to the contrary.

7. User Rights

The user may exercise their rights to:

Access, rectification, erasure.
Restriction or objection to processing.
Data portability.
Withdrawal of consent.

Requests must be sent to connect@grid-code.tech, attaching a copy of a document proving identity.

The response period will be one month, extendable to two months in complex cases (art. 12.3 GDPR).

The user retains at all times the right to file a complaint with the Spanish Data Protection Agency (AEPD)or the supervisory authority of their country.

8. Information Security

Appropriate technical and organizational measures are applied, including encryption, network segmentation, access monitoring and incident response protocols.

However, please note that no system is absolutely invulnerable, so Grid Code does not guarantee total immunity against security risks.

9. Cookies and Similar Technologies

This website uses its own and third-party cookies in accordance with art. 22 of the LSSI-CE, for the purposes of:

Improving user experience.
Preparing usage statistics.
Offering personalized content.

The user can configure or reject cookies at any time from the initial banner or browser settings.

10. Ethical and Sustainability Principles in Processing

Grid Code promotes the application of ESG (Environmental, Social & Governance) criteria in data management, fostering practices of transparency, respect for diversity and minimization of the environmental impact of digital infrastructures (e.g. energy efficiency in servers, reduction of carbon footprint).

These statements are for guidance only and do not alter the closed obligational nature that corresponds to each company responsible for processing.

11. Policy Modifications

This Privacy Policy may be modified based on regulatory, technological or service changes.

Substantial modifications will be notified through this website or through the usual contact channels.

12. Final Provision

This document constitutes the only valid definition with strictly exhaustive effects on the role of Grid Code in privacy matters, with a closed obligational nature.

No extensive or supplementary interpretation may attribute to Grid Code the status of direct data controller, beyond what is expressly established.

Grid Code Team

Amsterdam – European Union

Hardware

Software

Services