Privacy policy

Here we explain what data of yours we process, what for, who we share it with and what you can do about it. It has been drafted in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

Controller	HOLDING NEXT TRADING TRACE CAPITAL, S.L.
Tax ID (NIF)	B23921513
Address	Llull 321, 08019 Barcelona, Spain
Contact	info@nxtecnics.com

For any matter related to data protection you can write to that address, stating “Data protection” in the subject line.

2. What data we process and why

We process different data depending on how you interact with us:

a) Study request

Data: name and position, email address, phone number, company, title and goal of the study and any comment you write to us.

Purpose: to handle your request, prepare the sizing study and contact you to complete it, answer questions and discuss the results.

Legal basis: taking steps at your request prior to entering into a contract (art. 6.1.b GDPR). The phone number is needed because studies are discussed by phone when supply details need clarifying.

b) Supply data and consumption curve

Data: location and activity of the supply, tariff and contracted power, CUPS if you provide it, and the consumption curve file (and, where applicable, the generation file) you upload.

Purpose: to analyse your consumption profile and calculate the sizing, the estimated savings and the profitability indicators.

Legal basis: carrying out your request (art. 6.1.b GDPR).

The consumption curve is company data, not data about a natural person, but we handle it with the same care because it is linked to your contact details.

c) User account

Data: first name and surname, company, email address and password (which is stored encrypted, never in plain text).

Purpose: to create and maintain your account, verify your email, let you access your studies and retrieve your reports.

Legal basis: performance of the service contract (art. 6.1.b GDPR), which you accept when you register.

d) Demo request for the professional channel

Data: name, company, email address, phone number, professional profile and message.

Purpose: to handle your demo request and assess a possible commercial partnership.

Legal basis: taking steps at your request prior to entering into a contract (art. 6.1.b GDPR).

e) Security and operation of the site

Data: IP address, date and time of access and technical browser data, collected in the server logs and by the forms’ anti-bot system.

Purpose: to keep the service secure, prevent fraudulent use and diagnose incidents.

Legal basis: our legitimate interest in protecting the service (art. 6.1.f GDPR).

3. Automated processing and artificial intelligence

To recognise the format of the curve files you upload and to organise their data, we use a third-party artificial intelligence service (Anthropic). The file, or a sample of it, is sent to that service for interpretation.

There are two things you should know. First, that tool is used to read the file, not to make decisions about you: there are no automated decisions with legal effects within the meaning of article 22 GDPR, and the study calculations are carried out by our own engine. Second, the provider acts as a data processor, under a signed contract, and does not use your data to train its models.

If you would rather your curve did not go through this processing, write to us before uploading it and we will find a manual alternative.

4. Who we share your data with

We do not sell your data or transfer it to third parties for commercial purposes. Only the providers we need to deliver the service have access to it, all of them under a data processing agreement in accordance with article 28 GDPR:

We may also disclose data to judges, courts and public authorities when required by law.

To prepare the studies we consult public data sources such as ESIOS (Red Eléctrica), the Spanish Official State Gazette (BOE) and the European Commission’s PVGIS service. These queries do not include your personal data: we only request prices, regulations and solar radiation data.

5. International transfers

As the table above shows, some providers are located outside the European Economic Area. In those cases the transfer is covered by the standard contractual clauses approved by the European Commission, together with the corresponding additional technical measures. You can ask us for a copy of these safeguards by writing to us.

6. How long we keep your data

• Study requests and supply data: for as long as the relationship lasts and, afterwards, up to three years, in case you resume the project or ask for an update.
• User accounts: while the account remains active. If you ask us to close it, we delete it.
• Demo requests: up to two years from the last contact.
• Security logs: up to twelve months.
• Data subject to legal retention obligations (tax, accounting): the period set by the applicable regulations.

After those periods, the data are deleted or anonymised.

7. Your rights

You can exercise the following rights at any time:

• Access: to know what data of yours we process.
• Rectification: to correct inaccurate data.
• Erasure: to ask us to delete them when they are no longer necessary.
• Restriction: to ask us to keep them but not use them, in the cases provided for by law.
• Portability: to receive your data in a structured, commonly used format, or have us send them to another controller.
• Objection: to object to processing based on our legitimate interest.

To exercise them, write to info@nxtecnics.com or to HOLDING NEXT TRADING TRACE CAPITAL, S.L., Llull 321, 08019 Barcelona, Spain, stating the right you wish to exercise. We may ask you to prove your identity. We will reply within one month.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid, www.aepd.es).

8. Security

We apply technical and organisational measures to protect your data: traffic encryption over HTTPS, passwords stored with key derivation functions, role-based access control, anti-bot protection on public forms and regular backups. No system is infallible, but we review these measures continuously.

9. Minors

The service is aimed at companies and professionals. It is not intended for minors and we do not knowingly collect their data.

10. Changes to this policy

We may update this policy if the service, the providers or the regulations change. The version in force is the one published on this page, with its date at the top. If the change is substantial and you have an account, we will notify you by email.