Privacy policy

Introduction

At DENERGYGROUP we recognise the importance of protecting the privacy and personal data of everyone who interacts with us. We therefore undertake to process it lawfully, fairly, transparently and securely, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD) and other applicable legislation.

This Privacy Policy governs the processing of personal data carried out by DENERGYGROUP and by all brands, projects, centres, services, activities and business lines that form part of the group, including, among others, Energy Dance Studios, Energy Kids and any other current or future brand or project managed under its direction, unless they expressly have a specific privacy policy.

In certain activities carried out for third parties or jointly with other entities, DENERGYGROUP may act as Data Controller or Data Processor, as applicable in each case and in accordance with current legislation and the agreements signed between the parties.

This Policy applies to anyone who visits our websites, contacts us, requests information, takes part in activities, hires services, submits a job application, collaborates with DENERGYGROUP or interacts with any of its brands by any means, including forms, email, apps, digital platforms, social media or in person.

If you have any questions about the processing of your personal data or wish to exercise your rights, you can contact us by email at hola@denergygroup.es or through any of the official channels provided by DENERGYGROUP.

Using any of our services or interacting with any of our brands involves the processing of the personal data needed to provide the services properly, for administrative and contractual management, customer service, internal organisation, compliance with legal obligations and the other purposes described in this Privacy Policy.

Likewise, since the various brands, projects, centres and business lines form part of DENERGYGROUP, personal data may be accessed, shared, communicated and processed internally between them when necessary for the proper management of the relationship with the data subject, the provision of the contracted services, administrative coordination, customer service, commercial management, invoicing, internal organisation or any other legitimate purpose described in this Privacy Policy, always respecting current data protection legislation and applying the corresponding security measures.

Summary of key points

This summary offers an overview of the most important aspects of this Privacy Policy.

You can find the full detail of each matter in the corresponding sections of this document.

What personal data do we process?

We may process identification, contact, academic, professional, financial, invoicing, contracting, payment and browsing data, images, recordings and any other information necessary to provide our services or comply with our legal obligations.

Do we process specially protected data?

Only when necessary to provide the service and a valid legal basis exists, such as the express consent of the data subject or their legal representative, for example in relation to health data or specific needs.

How do we obtain your data?

Mainly from the data subject, although it may also come from legal representatives, partner companies, schools, social media, forms, digital platforms or authorised third parties in accordance with current legislation.

What do we use your data for?

To manage our services, handle requests, organise activities, communicate with you, carry out administrative and accounting tasks, manage payments, improve our processes, comply with legal obligations and, where applicable, send commercial or promotional communications.

Do we share your data?

Yes, when necessary, with providers, technology platforms, partner organisations, public authorities or between the various brands and projects within DENERGYGROUP for the proper provision of services and internal management, always in accordance with applicable legislation.

How do we protect your information?

We apply technical and organisational measures designed to guarantee the confidentiality, integrity and security of personal data, limiting access to authorised persons only.

What are your rights?

You can exercise your rights of access, rectification, erasure, objection, restriction of processing, portability and withdrawal of consent where applicable, and lodge a complaint with the Spanish Data Protection Agency.

Who can you contact?

For any query relating to data protection or the exercise of your rights, you can write to hola@denergygroup.es.

1. WHAT INFORMATION DO WE COLLECT?

At DENERGYGROUP we collect and process the personal data you provide to us directly, that we obtain while providing our services, or that we legitimately receive from authorised third parties, always in accordance with current data protection legislation.

Information provided by the data subject

We may collect and process, among others, the following personal data:

• Identification data, such as first and last names, national ID (DNI), foreigner ID (NIE), passport, date of birth or photograph.
• Contact data, such as postal address, email, phone, WhatsApp or other means provided by the data subject.
• Data of the legal representative, guardian or authorised person where applicable.
• Data relating to the contracting and provision of services, including registrations, bookings, enrolments, groups, schedules, attendance, incidents, authorisations, service history and contractual documentation.
• Financial, tax and invoicing data, such as tax ID, tax address, IBAN, payment methods, payment history, invoices or any information necessary for administrative management.
• Communication preferences, participation in promotions or authorisations granted.
• Images, videos, voice recordings or any other audiovisual content where there is consent, authorisation or a legal basis that legitimises their processing.
• Any other information the data subject voluntarily decides to provide to us during their relationship with DENERGYGROUP.

Data of minors

Many of the services provided by DENERGYGROUP are aimed at minors. In these cases, personal data may be provided by their parents, legal guardians or authorised representatives, who guarantee that they have the necessary capacity and authority to do so.

Where applicable legislation requires it, DENERGYGROUP will request the corresponding consent or authorisation from the legal representative before carrying out any processing that requires it.

Legal representatives will be responsible for the accuracy and updating of the information provided about the minor, and for reporting any relevant change that may affect the proper provision of services.

Specially protected data

When necessary to adapt a service, ensure the safety of the data subject or address specific needs, we may process data relating to health, allergies, injuries, physical limitations or similar circumstances, only where a valid legal basis exists and, where applicable, the express consent of the data subject or their legal representative.

Information collected automatically

When you use our websites, apps or digital platforms, we may automatically collect technical and usage information, such as IP addresses, device type, browser, operating system, identifiers, cookies, access logs, browsing statistics or any other data necessary for the operation, maintenance, security, analysis or improvement of our services.

Information from third parties

We may also obtain personal data through legal representatives, authorised family members, partner companies, schools, public authorities, providers, social media, technology platforms, selection processes, forms, marketing agencies or any third party entitled to provide it in accordance with current legislation.

Accuracy of information

The data subject guarantees that all data provided is truthful, accurate, complete and up to date, and undertakes to report any changes.

When providing data of third parties, you declare that you have the necessary authority to do so and that you have informed them of the content of this Privacy Policy where required.

Open categories of data

The categories described in this section are illustrative and not exhaustive. DENERGYGROUP may process any other personal data reasonably necessary for the proper provision of its services, the management of the relationship with the data subject, compliance with legal obligations or the development of its activities, always respecting current data protection legislation.

2. HOW DO WE PROCESS YOUR INFORMATION?

At DENERGYGROUP we process personal data lawfully, fairly and transparently, only where a legal basis permits it and always for specified, explicit and legitimate purposes.

Depending on your relationship with us, we may use your information to:

• Manage requests for information, quotes, bookings, registrations, contracts, enrolments and any other procedure related to our services.
• Provide, organise, coordinate, develop and improve the activities, classes, events, shows, productions, training, marketing services, projects or any other business line of DENERGYGROUP.
• Manage the relationship with clients, students, beneficiaries, legal representatives, employees, candidates, collaborators, suppliers, artists and other people linked to the group.
• Carry out administrative, contractual, employment, tax, accounting and financial management, including issuing invoices, managing payments, collections, refunds, payroll, insurance, grants, subsidies, tax obligations or any other action necessary for the functioning of the organisation.
• Communicate with you through any of the contact details provided, including email, phone, SMS, WhatsApp, messaging apps, social media, digital platforms, notifications or any other channel enabled to maintain effective communication.
• Manage incidents, queries, complaints, support requests, technical assistance or customer service.
• Organise groups, schedules, levels, bookings, waiting lists, make-up classes, competition teams, castings, entry tests and any other management necessary to provide the services.
• Manage personnel selection, hiring, human resources, internal training, time recording, occupational risk prevention, team organisation and compliance with obligations arising from the employment or professional relationship.
• Send information about activities, news, promotions, commercial campaigns, newsletters, reminders, events or any other communication related to DENERGYGROUP or its brands, where a legal basis permits it.
• Carry out marketing, advertising, remarketing, audience segmentation, communication automation, email marketing campaigns, SMS marketing, WhatsApp Business, social media advertising or any other promotional action aimed at improving the relationship with our users or making our services known.
• Analyse browsing behaviour, use of our services, interactions with campaigns or internal statistics in order to better understand the needs of our users, measure results, optimise processes, improve the experience, develop new services and make strategic decisions.
• Prepare reports, studies, statistics, performance analyses, forecasts, dashboards, internal metrics and business intelligence processes, using aggregated, anonymised or pseudonymised data where possible.
• Ensure the safety of people, premises, systems, networks, platforms and services, prevent fraud, detect misuse, manage incidents and protect the legitimate interests of DENERGYGROUP.
• Comply with applicable legal, judicial, tax, employment, administrative or regulatory obligations, and respond to requests from competent authorities.
• Defend the rights and interests of DENERGYGROUP in judicial or out-of-court proceedings, retain evidence, prove contractual relationships or manage possible liabilities.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

DENERGYGROUP only processes personal data where a legal basis legitimises it, in accordance with the General Data Protection Regulation (GDPR) and applicable legislation.

Depending on the situation, processing may be based on one or more of the following legal bases:

• The performance of a contract or the application of pre-contractual measures, when necessary to manage requests for information, quotes, bookings, registrations, enrolments, contracts, provision of services, management of employees, collaborators, suppliers or any other legal relationship with DENERGYGROUP.
• The consent of the data subject, when necessary for certain processing, such as sending commercial communications, processing specially protected data, use of image or voice where applicable, or any other purpose for which the law requires express authorisation.
• Compliance with a legal obligation, when we must process data to meet tax, accounting, employment, administrative, security, fraud prevention or any other obligations imposed by current legislation or by a competent authority.
• The legitimate interest of DENERGYGROUP, when necessary for the internal management of the organisation, improvement of services, customer service, security of premises and systems, fraud prevention, legal defence, coordination between the group's various brands, statistics, internal analysis, communications relating to similar services or any other legitimate purpose that does not override the rights and freedoms of the data subject.
• The protection of vital interests, when processing is necessary to protect the life or physical integrity of the data subject or another person, especially in emergency situations during activities or events organised by DENERGYGROUP.
• The performance of a task carried out in the public interest or in the exercise of official authority, where applicable due to the nature of certain activities carried out jointly with public administrations, schools or other entities.

When processing is based on consent, it may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.

Where the data subject is required to provide certain data for the provision of a service or compliance with a legal or contractual obligation, refusal to provide it may prevent the relationship from being formalised or the requested service from being properly carried out.

DENERGYGROUP may rely on several legal bases simultaneously for the same processing where necessary and permitted by current legislation.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

At DENERGYGROUP we only share personal data when it is necessary for the proper provision of our services, there is a legal obligation, we have a legal basis that permits it or the data subject has given their consent.

Depending on the situation, data may be communicated or made available to:

• The various brands, projects, departments, centres or business lines integrated within DENERGYGROUP, when necessary for administrative, commercial, employment or organisational management or for the proper provision of the contracted services.
• Employees, collaborators, teachers, instructors, coordinators, human resources managers or authorised staff who need access to the information to perform their duties.
• Technology providers and data processors, such as management platforms, CRM, ERP, invoicing systems, cloud storage, communication tools, artificial intelligence, automation, marketing, analytics, videoconferencing, document management, email, payment gateways or any other service necessary for the operation of DENERGYGROUP.
• Financial institutions, payment platforms and service providers related to collections, payments, direct debits, refunds or financial management.
• Advisors, administrative agents, auditors, lawyers, consultants or external professionals who provide services to DENERGYGROUP and need access to certain data to fulfil their duties.
• Public administrations, official bodies, law enforcement, courts, tribunals or competent authorities where there is a legal obligation or a valid request.
• Schools, town councils, associations, federations, event organisers, partner companies or third parties with whom joint activities are carried out, only where necessary for the proper performance of the contracted service.
• Insurance companies, medical or emergency services when necessary to protect vital interests or manage incidents related to the activity.

DENERGYGROUP may use any current or future software, platform or technology provider to manage its activities, and may store or process personal data in those systems provided that the guarantees required by applicable legislation are respected and, where applicable, the corresponding data processing agreements are signed.

Likewise, data may be accessed or shared internally between the various brands and projects of DENERGYGROUP in order to offer comprehensive service, avoid duplication, improve the user experience, manage commercial or administrative relationships and facilitate the provision of the different services offered by the group.

We will never sell personal data to third parties or transfer it for commercial purposes unrelated to DENERGYGROUP without a legal basis that legitimises it or without the data subject's consent where required.

DENERGYGROUP may use national or international technology providers to provide its services, which may involve the processing, storage or access to personal data from different countries or territories, provided that such processing is carried out with appropriate safeguards and in accordance with current data protection legislation.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

Yes. DENERGYGROUP and its various brands may use cookies, pixels, tags, SDKs, identifiers, activity logs and other similar technologies to ensure the proper functioning of their websites, apps, platforms and services, and to improve the user experience, analyse the use of our systems, personalise content, carry out statistical measurement and develop marketing or advertising actions.

These technologies may be first-party or third-party and allow, among other functions:

• Remembering user preferences and settings.
• Keeping sessions logged in or maintaining authentication processes.
• Analysing traffic and browsing behaviour.
• Measuring the performance of advertising campaigns or marketing actions.
• Producing usage statistics, reports and metrics.
• Personalising content, recommendations or experiences.
• Detecting technical incidents, preventing fraud and improving security.
• Integrating third-party services or additional features.

Likewise, DENERGYGROUP may use analytics, advertising, automation, artificial intelligence or measurement tools provided by third parties, which may install their own cookies or similar technologies in accordance with their respective privacy policies.

The use of non-essential cookies or technologies will be subject, where legally required, to the user's prior consent, which they may accept, reject or configure through the cookie management system provided on our websites.

Detailed information on the cookies used, their purpose, duration, provider and how to manage them can be found in DENERGYGROUP's Cookie Policy, which complements this Privacy Policy and may be updated at any time to adapt to technological or regulatory changes.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

At DENERGYGROUP we will keep personal data only for as long as necessary to fulfil the purposes for which it was collected, provide the requested services, maintain the existing relationship with the data subject and comply with applicable legal obligations.

In general:

• Data of clients, students, legal representatives, beneficiaries and users will be kept while the relationship with DENERGYGROUP remains in force and, afterwards, for the periods necessary to address possible legal, contractual or administrative liabilities.
• Data of employees, candidates, collaborators, suppliers and professionals will be kept for the time necessary to manage the corresponding relationship and for the legally required periods after it ends.
• Data used to send commercial communications will be kept while a legal basis permits it or until the data subject withdraws their consent or chooses to stop receiving such communications.
• Financial, tax, employment and accounting data will be kept for the periods established by applicable legislation.
• Images, recordings, authorisations and other documentation may be kept while they are necessary for the purposes for which they were obtained, while a legal basis permits it or for the time necessary to address possible liabilities.

Once the retention periods have ended, data will be securely deleted or anonymised, unless it must be kept blocked to comply with legal obligations or to defend the rights and legitimate interests of DENERGYGROUP.

However, when necessary to prove contractual relationships, handle claims, comply with requests from competent authorities or protect the interests of DENERGYGROUP, certain information may be kept for the time strictly necessary for those purposes, even after the relationship with the data subject has ended.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

At DENERGYGROUP we adopt appropriate technical and organisational measures to protect personal data against loss, alteration, unauthorised access, disclosure, destruction or any other unlawful processing, taking into account the state of the art, the nature of the data processed and the risks involved.

Among other measures, we apply access controls, confidentiality policies, authentication systems, backups, encryption where appropriate, internal security protocols and procedures designed to ensure the integrity and availability of information.

Likewise, only those persons, employees, collaborators or providers who need it to perform their duties and who are subject to the corresponding confidentiality and data protection obligations will have access to the data.

DENERGYGROUP may store and process information on its own servers or those of third parties, both inside and outside the European Economic Area, provided that the guarantees required by applicable legislation are respected and appropriate security measures are adopted.

However, no computer system or means of transmitting information can guarantee absolute security. Therefore, although DENERGYGROUP makes all reasonable efforts to protect personal data, it cannot ensure the absence of unauthorised access, cyberattacks, technical errors or incidents beyond its control.

In the event of a security breach that may affect the rights and freedoms of data subjects, DENERGYGROUP will act in accordance with current legislation, adopting the necessary measures to mitigate its effects and, where applicable, making the corresponding notifications to the competent authorities and those affected.

8. WHAT ARE YOUR PRIVACY RIGHTS?

In accordance with current data protection legislation, anyone whose personal data is processed by DENERGYGROUP may exercise, at any time and free of charge, the following rights:

• Right of access: to know whether we are processing your personal data and obtain information about that processing.
• Right to rectification: to request the modification or updating of data that is inaccurate, incomplete or out of date.
• Right to erasure (right to be forgotten): to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected or when there is any other legal reason that justifies it.
• Right to object: to object to the processing of your data when the circumstances provided for by applicable legislation apply.
• Right to restriction of processing: to request that the processing of your data be restricted in the cases established by law.
• Right to portability: to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transmitted to another controller where technically possible.
• Right to withdraw consent: to withdraw at any time the consent given for processing based on it, without affecting the lawfulness of processing carried out previously.
• Right not to be subject to decisions based solely on automated processing, including profiling, where they produce legal effects concerning you or significantly affect you, except in cases permitted by current legislation.

To exercise any of these rights you can contact DENERGYGROUP by email at hola@denergygroup.es, stating the right you wish to exercise and identifying yourself appropriately so that we can handle your request.

DENERGYGROUP may request additional information or supporting documentation when necessary to verify the identity of the applicant or ensure the security of the procedure.

If you consider that the processing of your personal data does not comply with current legislation or your rights have not been satisfied, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) or with the competent supervisory authority.

9. DO YOU HAVE TO KEEP YOUR DATA UP TO DATE?

Yes. The data subject is responsible for ensuring that the personal data provided to DENERGYGROUP is truthful, accurate, complete and duly updated.

Likewise, they undertake to report any change affecting this information, especially regarding their contact details, identification, personal situation, legal representative, bank details or any other data relevant to the proper provision of services or compliance with legal obligations.

When the data subject provides personal data of third parties, they guarantee that they have the necessary authority to do so and that they have informed those persons about the processing of their data where required.

DENERGYGROUP will not be liable for any harm arising from the inaccuracy, lack of updating or falsity of the data provided by the data subject, and reserves the right to suspend or limit the provision of certain services when the information provided is insufficient, incorrect or prevents its proper management.

10. DO WE UPDATE THIS NOTICE?

Yes. DENERGYGROUP may modify or update this Privacy Policy at any time in order to adapt it to legislative, case-law, organisational or technological changes, or to the incorporation of new services, brands, projects, activities or tools used by the group.

The current version will always be the one published on DENERGYGROUP's official channels and will indicate, where applicable, the date of its last update.

When changes substantially affect the rights of data subjects or applicable legislation so requires, DENERGYGROUP may communicate such changes through the available contact details or through the channels it considers appropriate.

We recommend reviewing this Privacy Policy periodically to stay informed about how we protect and process personal data.

11. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

Email: hola@denergygroup.es Address: C/ Antonio Machado 64, Esc. C, Ground floor, Door 6. 08630 Abrera, Barcelona

12. HOW CAN YOU REVIEW, UPDATE OR DELETE THE DATA WE COLLECT FROM YOU?

You can request at any time access to, review, updating, rectification, restriction, portability or erasure of your personal data, and exercise any other right recognised by current data protection legislation.

To do so, you must send your request by email to hola@denergygroup.es, clearly stating the right you wish to exercise and providing the information or documentation needed to verify your identity where necessary.

DENERGYGROUP will review each request and respond within the legally established deadlines. Where there is a legal obligation to keep certain information or it is necessary to keep it for the establishment, exercise or defence of claims, the data may be kept duly blocked for the time required by applicable legislation.

Likewise, you may update your personal data or report any relevant change at any time using our official communication channels, in order to ensure that the information processed is accurate and permanently up to date.

13. Data processing on this website

Trial class form

If you fill in the “free trial class” form, we process the data you enter (name of the person who will try the class, phone number and chosen location) and the origin of the request (for example, the class page you are writing from) in order to manage your request and contact you. The legal basis is your consent. This data is stored in our CRM (Zoho Bigin) and passes through an automation tool (Zapier) that acts as data processor. If the student is a minor, the form must be completed by their parent or legal guardian.

Other technical services on the website

This website is hosted on Cloudflare, which may process technical connection data (such as the IP address) to deliver the site and ensure its security. Fonts are loaded from Google Fonts, so your browser may send its IP address to Google when loading the page. You can see how we use cookies in our Cookie Policy.