Privacy Policy

GHB ENERGIAS RENOVABLES, S.L. (hereinafter BARGA GROUP) makes available to you through the web page the present data protection policy with the purpose of informing you, in a detailed way, about how we treat your personal data and how we protect your privacy and the information you provide us. In case of introducing modifications in the future we will inform you through the website or through other means so that you can know the new privacy conditions introduced.

In compliance with Regulation (EU) 2016/679, General Data Protection and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights we inform you of the following:

  1. Minors

In accordance with the provisions of the data protection regulations BARGA GROUP determines as an essential requirement for you to access this website that the user must be over 14 years old. If you are under 14 years old and you have accessed this website, you must not provide us with any of your data. The responsibility of the veracity of this information falls on you. BARGA GROUP, in the event that it verifies that the aforementioned requirement is not met, has the power to ignore the request for information sent. Under no circumstances will data relating to the professional or economic situation or to the intimacy of the other members of the family be collected from the minor without their consent.

  1. Who is responsible for the processing of your data?

GHB ENERGIAS RENOVABLES, S.L., with Tax Identification Number B-71255996, with address at Polígono Industrial Sarrarte, Errotabide nº 20, ES31830 Lakuntza (Spain), telephone: +34 948 464 848 and e-mail address:

  1. What information do we collect and for what purpose?

From BARGA GROUP we process the personal information that the user provides us directly.

In general, we will process identification data (such as name, surname, tax identification number, telephone number, postal address, e-mail address, IP address).

The user guarantees the authenticity, accuracy and truthfulness of all the information provided, undertaking to keep personal data updated so that they respond, at all times, to their real situation. The user will be solely responsible for any false or inaccurate statements and the damages that they may cause.

The personal data you provide us with as part of our services are mandatory and are the minimum necessary for us to be able to process your order.

The data you provide may be used for one or more of the purposes indicated below, which will be determined by factors such as your relationship with BARGA GROUP or by the means used to send the data. The data processing referred to in this policy, without prejudice that there may be others for which you will be informed or asked for the appropriate authorization, are the following:

  • Compliance with legal obligations

It may be necessary to process personal data in order to comply with applicable legal requirements. In particular, in order to comply with legislation on data protection, tax, statistical, insurance, etc.

  • Formalization and execution of the contract 

The personal data of the person concerned are processed for the purpose of managing the contractual relationship and comply with the terms of the contract, and our tax obligations, fulfilling, controlling and executing, where appropriate, the provision guaranteed in the contract formalized.

  • Communication-contact 

The data you send us by email, instant messaging applications, or make a complaint, are used to respond to the request made.

  • Job vacancies 

We will process your data for the inclusion of your CV in our job vacancies whenever there are vacancies for the post you have applied for. In the event that you send us your CV or register for our job offers, your data will be stored in order to make you part of the job offers that may fit your profile. We will process your data in order to evaluate and manage your job application.

  • Video surveillance 

The images captured by the security cameras located in our facilities are treated in order to ensure the safety of the facilities and people.

  1. How do we obtain your personal data?

We collect your personal information by different means, but you will always be informed at the time of collection by means of informative clauses about the person responsible for the processing, the purpose, as well as how you can exercise your rights regarding data protection and where to find additional information about the processing of your data.

In general, the personal information we process is limited to identification data (name and surname, image and e-mail).

Through our website we collect personal information related to your navigation through the use of cookies. To know clearly and precisely what cookies we use, what their purposes are and how you can configure or disable them, see our Cookies Policy.

  1. How long will we keep your data?

We only keep your information for the period of time necessary to fulfil the purpose for which it was collected, to comply with the legal obligations imposed on us and to meet the possible responsibilities that may arise from the fulfilment of the purpose for which the data were collected. Your personal data will be kept for the duration of the legal and/or contractual relationship and, thereafter, provided that you have not exercised your right of deletion, will be kept taking into account the legal deadlines that apply in each specific case, taking into account the type of data, as well as the purpose of processing.

In the event that you exercise your right to erasure and it is appropriate, in compliance with art. 32 LOPDGDDD it will be blocked, being available only at the request of the Courts and Tribunals, the Ombudsman’s Office, the Public Prosecutor’s Office or the competent Public Administrations during the period of limitation of the actions that may arise and, after this, it will be completely erased.

We treat your data in a lawful, loyal, transparent, adequate, relevant, limited, accurate and updated way. That is why we undertake to take all reasonable measures to ensure that they are deleted or rectified without delay when they are inaccurate.

  1. What is the legitimacy for the processing of your data?

Depending on the relationship we have and therefore the purpose of the processing, the legal basis may be different. Below, we set out the different applicable bases depending on the processing carried out:

  • CONTRACTUAL RELATIONSHIP: For the provision of services or the purchase of contracted products.
  • LEGITIMATE INTEREST: Among others, for profiling, quality or opinion surveys, to manage our complaints channel in order to comply with and enforce our code of ethics to interested parties, maintenance of the website, telephone support, or contact you to maintain professional relations under the terms of art. 19 LOPDGDD.
  • LEGAL OBLIGATION: For compliance with the obligations established in any other applicable regulations.
  • CONSENT: When you provide us with your data through the contact forms on the web, incorporation into our job bank.

You should know that in those treatments in which you are asked for consent, its non-granting or eventual withdrawal at a later date will not have negative consequences for you.

  • MISSION OF PUBLIC INTEREST: Regarding CCTV images taken to ensure the safety of facilities and people.

In the event that third party data is provided, you declare that you have the consent of the owners of said data for the aforementioned communication of data or, if applicable, that you are their legal representative, exempting BARGA GROUP and the rest of its partners from any responsibility.

  1. What types of data do we process?

The categories of data we process are

  • Contact: identification data (name, email, country and IP address).
  • Contractual compliance: Identification data, personal characteristics data, social circumstances data, academic and professional data, employment details data, commercial information data, economic, financial and insurance data, goods and services transaction data, health or disability data.
  • Recruiting processes: Identification data, personal characteristics data, social circumstances data, academic and professional data, employment details data (profession, job position, non-financial payroll data, employee history), health data or disabilities.
  • Video surveillance: Identification data (image).
  1. To which entities will your data be communicated?

Depending on the services we provide, your personal data may be communicated to third parties, being such communication necessary for the proper fulfilment of legal obligations and / or contractual. These suppliers will not process your data for their own purposes that have not been previously informed by BARGA GROUP.

In those cases in which, for a better management and provision of the services, an access to data is produced on behalf of third entities, BARGA GROUP guarantees the maintenance of the confidentiality in the treatment of the personal data. In any case, these transfers will be conveniently warned to the user, detailing the identity of the Assignee and the purpose of it.

Your data may be transferred to:

  • BARGA GROUP Companies
  • Whatsapp Ireland.
  • Financial institutions.
  • Tax Consultancy.
  • Labour Consulting.
  • General Treasury of the Social Security.
  • Labour Inspection.
  • National Employment Institute.
  • Competent Tax Administration.
  • Entity entrusted with the management of occupational hazards.
  • Entity entrusted with the management for the training of workers.
  • Insurance companies.
  1. What are your rights when you provide us with your data?



Channels of attention


You have the right to obtain confirmation as to whether BARGA GROUP is processing your personal data.

Polígono Industrial Sarrarte, Errotabide nº 20, ES31830 Lakuntza (Spain)


You will be able to modify your data when they are inaccurate.


You may request the deletion of your data.


You may request that your data no longer be processed.

Limitation of processing

You may request the limitation of the processing of your data in the following cases:

-While the accuracy of your data is being verified.

-When the processing is unlawful and you object to the deletion of the data.

-When BARGA GROUP does not need to process your data, but you need them for the exercise or defence of claims.

-When you have objected to the processing of your data for the satisfaction of a legitimate interest of BARGA GROUP, while we verify whether this interest prevails over your rights and freedoms.


You may receive, in electronic format, the personal data you have provided us with and those obtained from your contractual relationship with BARGA GROUP, as well as the right to transfer them to another entity of your choice.

You have the right to withdraw consent at any time. The withdrawal of consent will not affect the lawfulness of the processing based on the consent prior to its withdrawal.

The maximum time limit for a decision is one month from receipt of your request, which may be extended for a further two months depending on the number of requests received or the complexity of the same.

If you consider that your request has not been correctly dealt with, you may contact the Spanish Data Protection Agency ( and file a complaint.

To exercise your rights, accompany your request with a copy of your Passport or other document proving your identity.

Exercising these rights is free of charge.

These rights are characterized by the following:

  • Its exercise is free of charge, except in the case of manifestly unfounded or excessive requests (e.g. repetitive nature), in which case BARGA GROUP may charge a fee proportional to the administrative costs incurred or refuse to act.
  • You can exercise your rights directly or through your legal representative or volunteer.
  • We must respond to your request within one month, although, taking into account the complexity and number of requests, the deadline can be extended by a further two months.
  • We have the obligation to inform you about the means to exercise these rights, which must be accessible and without being able to deny you the exercise of the right for the sole reason of choosing another means. If the request is submitted electronically, the information will be provided by electronic means where possible, unless you ask us to do otherwise.
  • If BARGA GROUP does not give course to the request, it will inform you, at the latest in one month, of the reasons for not acting and the possibility of claiming before a Control Authority.
  1. How do we protect your information?

At BARGA GROUP we are committed to protecting your personal information. We use measures, controls and procedures of a physical, organizational and technological nature, reasonably reliable and effective, aimed at preserving the integrity and security of your data and ensure your privacy.

In addition, all staff with access to personal data have been trained and are aware of their obligations in relation to the processing of your personal data.

All of these security measures are reviewed periodically to ensure their adequacy and effectiveness.

However, absolute security cannot be guaranteed and no security system is impenetrable, so in the event that any information under our control is compromised as a result of a security breach, we will take appropriate steps to investigate the incident, notify the Control Authority and, where appropriate, those users who may have been affected to take appropriate action.

  1. Commercial communications by electronic means

BARGA GROUP informs you that it complies with the Law 34/2002 of 11 July, of Services of the Information Society and Electronic Commerce and does not carry out SPAM practices, therefore it will ask for your consent to the treatment of your email or mobile phone for commercial purposes at all times.

  1. Privacy Policy Update

BARGA GROUP reserves the right to modify its privacy policy or conditions of use of its services for reasons of adaptation to current legislation, or other reasons, when this happens, we will notify you of any changes and ask you to re-read the latest version of our policy and if necessary to confirm your acceptance. The absolute confidentiality and privacy of the personal data collected is assured and therefore security measures have been adopted in order to avoid the alteration, loss, treatment or unauthorized access, and thus guarantee its integrity, availability and security. However, BARGA GROUP will not be responsible for the incidences that can arise around personal data when these are derived: either from an attack or unauthorized access to the systems in such a way that it is impossible to detect it or prevent it even adopting the measures according to the state of the current technology.

Last updated on May 31, 2021