Privacy policy

“Plug & Go” is deeply committed to compliance with Spanish and European regulations on the protection of personal data and guarantees full compliance with the obligations set forth therein, as well as the implementation of the security measures provided for in the General Data Protection Regulation (GDPR) (EU) 2016/679 of 27 April, and in Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD and GDD, hereinafter LOPD).

In accordance with these regulations, we inform you that the use of our website may require the provision of certain personal data through contact forms or by sending emails, and that such data will be processed by “Plug & Go”, as Data Controller, whose details are as follows:

Company name: Plug & Go Arquitectura Corporativa, S.L.
Tax ID: B87054524
Registered office: Av. Manoteras 38, D613-614, 28050, Madrid, Spain
Telephone: +34 914 384 599
Email: info@plugandgo.es

Collection and Processing of Personal Data

Personal data is any information relating to an individual: name, email, address, telephone number, ID number, etc. Additionally, when a user visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by their Internet service provider.

“Plug & Go”, as Data Controller, has the duty to inform users of its website about the collection of personal data that may take place, either by sending emails or by completing the forms included on the website.

Only the data strictly necessary to provide the contracted service or to adequately respond to the user’s request for information will be collected. The data collected is identifying data and corresponds to a reasonable minimum required to carry out the activity. In particular, no specially protected data is collected at any time. In no case will the data be used for purposes other than those for which it was collected.

Contact forms / email

Purpose: To respond to your request for information submitted through our contact form(s).

Legal basis: The legal basis that legitimizes this processing is the user’s consent, which may be withdrawn at any time.

Data transfers: Personal data will be processed through servers managed by STRATO, which will act as Data Processor.

Minors

Only persons over 14 years of age may provide personal data on this website. As required by the LOPD and GDD, in the case of minors under 14 years of age, the consent of their parents or legal guardians will be mandatory in order for us to process their personal data.

Furthermore, only persons over 18 years of age may contract our services. In the case of minors under 18 years of age, the consent of their parents or legal guardians will be mandatory in order for us to provide the services offered, unless the minor is legally emancipated.

Security Measures

Users of the “Plug & Go” website are hereby informed that appropriate technical and organizational security measures have been adopted to prevent the loss, misuse, alteration, unauthorized access, and theft of data, thus guaranteeing the confidentiality, integrity, and quality of the information contained therein, in accordance with current data protection regulations. The personal data collected through forms will be processed solely by “Plug & Go” staff or by duly appointed Data Processors.

The “Plug & Go” website also uses SSL encryption, which allows users to securely send their personal data through the website’s contact or registration forms.

Accuracy of data

The user declares that all data provided is true and accurate and undertakes to keep it up to date. The user shall be responsible for the accuracy of their data and shall be solely liable for any disputes or claims that may arise from inaccuracies. In order to keep personal data updated, it is important that the user informs “Plug & Go” of any changes thereto.

Data disclosure

“Plug & Go” will not transfer or disclose your data to any third party, except in cases provided for by law or where strictly necessary for the provision of a service. Specifically, data may be disclosed to:

Technology or IT service providers
Payment service providers
Courier and parcel delivery companies
Third parties or intermediaries acting as service providers on our behalf (accounting firms, consultants, etc.).

Data disclosures will be carried out with the utmost confidentiality, using the necessary measures such as the signing of confidentiality agreements or adherence to the privacy policies published on their respective websites. The user may object to the disclosure of their data to Data Processors by submitting a written request through any of the means indicated above.

Additionally, where necessary, client data may be disclosed to certain authorities in compliance with a legal obligation: Spanish Tax Agency, Labour Inspectorate, etc.

Exercise of User Rights

The LOPD and the GDPR grant data subjects the possibility to exercise a series of rights related to the processing of their personal data. To do so, the user must contact us by email at info@plugandgo.es or by written communication to the address indicated in our Legal Notice, providing proper identification. Such communication must include the following information: user’s full name, the purpose of the request, address, and supporting documentation.

The exercise of rights must be carried out by the user themselves. However, it may also be exercised by an authorized representative, provided that documentation proving such representation is supplied.

The user may request the exercise of the following rights:

The right to request access to personal data, i.e., the right to obtain information on whether their personal data is being processed, the purpose of such processing, and the available information on the origin of the data and any communications made or planned.
The right to request rectification of inaccurate or incorrect data, or the erasure of data that is inadequate or excessive.
The right to request the restriction of processing, in which case “Plug & Go” will only retain the data strictly necessary for the exercise or defense of legal claims.
The right to object to processing, referring to the right of the data subject to prevent or cease the processing of their personal data where consent is not required, where it relates to direct marketing activities, or where it involves automated decision-making, unless processing is required for legitimate reasons or for the exercise or defense of legal claims.
The right to data portability, whereby, if the user wishes their data to be processed by another company, “Plug & Go” will provide the data in an exportable format.

Where consent has been given for a specific purpose, the user has the right to withdraw such consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

We undertake to comply with all such rights within the maximum legal period (1 month).

If a user believes there is a problem with the way “Plug & Go” handles their data, they may submit a complaint to the Security Officer or to the relevant data protection authority, which in Spain is the Spanish Data Protection Agency.

Data retention

Personal data of users who use the contact form or send an email requesting information will be processed for the time strictly necessary to respond to the request, or until consent is withdrawn.

Personal data of clients will be processed for the duration of the contractual relationship. The data retention period will be the minimum necessary and may be maintained for:

4 years: Law on Social Order Offences and Sanctions (obligations relating to registration, contributions, salary payments, etc.); Articles 66 et seq. of the General Tax Law (accounting records, etc.).
5 years: Article 1964 of the Civil Code (personal actions without a specific limitation period).
6 years: Article 30 of the Commercial Code (accounting books, invoices, etc.).
10 years: Article 25 of the Law on the Prevention of Money Laundering and Terrorist Financing.
No time limit: aggregated and anonymized data.

Personal data of users who subscribe to the newsletter will be retained indefinitely until consent is withdrawn.

In the case of processing candidate data (CVs), “Plug & Go” may retain the curriculum vitae for a maximum of two years for inclusion in future recruitment processes, unless the candidate states otherwise.

Social media

“Plug & Go” maintains profiles on some of the main social networks on the Internet (Pinterest, Twitter, LinkedIn, Instagram). The purpose of data processing by “Plug & Go” will be to inform its followers about its activities, using the tools provided by the respective social network, and to offer personalized customer service. Users should be aware that the use of these social networks is subject to their respective terms of use and privacy policies. “Plug & Go” recommends that users review these terms and privacy policies before using the links or applications provided.

Under no circumstances will “Plug & Go” extract data from social networks unless the user’s explicit consent has been obtained. Furthermore, “Plug & Go” is not responsible for the privacy practices of these social networks or their applications, particularly with regard to confidentiality, personal data processing, and content.

Recruitment

Applicants who send electronic communications to “Plug & Go” for the purpose of participating in recruitment processes authorize us to analyze the documents submitted (e.g., CV), any content directly accessible through internet search engines (e.g., Google), professional social network profiles (e.g., LinkedIn), data obtained in selection tests, and information disclosed during job interviews, in order to assess their application and, where appropriate, offer them a position. If the candidate is not selected, “Plug & Go” may retain the CV for a maximum of two years for future recruitment processes, unless the candidate states otherwise. The legal basis for this processing is the data subject’s consent, which may be withdrawn at any time.

Confidentiality

The information provided by the user shall in all cases be considered confidential and shall not be used for purposes other than those described herein. “Plug & Go” undertakes not to disclose or reveal information regarding the user’s requests, the reasons for the advisory services requested, or the duration of their relationship.

Validity

This privacy and data protection policy was drafted on 08 October 2025. It may be amended due to changes in legislation or case law. It is the responsibility of the data subject to read the updated document in order to be aware of their rights and obligations at all times.