Corporación de Reservas
Estratégicas
de Productos Petrolíferos

Public Law Corporation
under the aegis of the
Ministry for the
Ecological Transition and
the Demographic Challenge

Privacy policy

The CORPORACIÓN DE RESERVAS ESTRATÉGICAS DE PRODUCTOS PETROLÍFEROS (hereinafter, “CORES”) employs various data processing procedures related to the services provided via its websites (hereinafter, the “Websites”): www.cores.es (“CORES Website”) and https://infocores.cores.es/infocores (“InfoCores Website”).

CORES has drafted this “Privacy Policy” to provide clear and accessible information in a single document explaining how your personal data will be processed via the aforementioned Websites.

Initial access to the Websites will not involve the processing of any personal data, with the exception of that indicated in the Cookie Policy of each Website (link to the InfoCores and CORES Website cookies policies]. Once the user proceeds to complete any of the available forms, CORES will then go on to process the data corresponding to the request made.

The CORES Website contains various forms which should be used to contact the Corporation (“Contact Form”) or to register for the CORES subscription service (“Subscription”).

The InfoCores Website, meanwhile, is designed to provide access to a restricted area for Authorized Users which permits the use of the “InfoCores” application. InfoCores enables comprehensive management of the processes involved in the exchange of information between the organizations affected by the legislation relating to minimum security stocks (the “Obligated Entities”) and CORES.

InfoCores serves to facilitate compliance with the requirement for the aforementioned Obligated Entities to provide information to CORES, as established under  Law 34/1998, of the 7th October, relating to the hydrocarbons sector and  Royal Decree 1716/2004, of the 23rd July, which regulates the obligation for the maintenance of minimum security stocks, the diversification of natural gas supply and the role of the Corporación de Reservas Stratégicas de Productos Petrolíferos. 

In line with the above, access to the restricted area requires a registration process and subsequent verification by CORES. All significant aspects related to the commercial situation of the Obligated Entity will be considered strictly confidential in regards to individualized data from the company, in accordance with article 5.4 of Royal Decree 1716/2004 of the 23rd July and the Resolutions of the General Directorate of Energy and Mining Policy, of the 29th May 2007 and the 15th December 2008. 

The processing of the personal data of users completing the various forms conducted by CORES is described in the following sections. Please use the [+] symbol to access the corresponding information. 

I.  GENERAL QUESTIONS 

The following sections are applicable to all processing performed via the Websites, both the CORES and InfoCores sites. 

II. SPECIFIC INFORMATION ON PROCESSING VIA THE CORES WEBSITE

The Cores Website contains various forms by which the user may provide their personal data to CORES in order to make enquiries or request registration to the Subscription service. Below we provide information on some of the specific questions related to the processing of your data in both cases. 

III. SPECIFIC INFORMATION ON PROCESSING VIA THE INFOCORES WEBSITE

As explained above, InfoCores is an application for the comprehensive management of the processes involved in the exchange of information between the Obligated Entities and CORES. For this purpose, it uses an electronic digital signature system. 

Only those persons duly authorized by the Obligated Entities or those acting on their behalf (“Authorized Users”) will be permitted access to InfoCores. 

For this reason, access to InfoCores will require a registration process, which includes verification of the identity and, as applicable, the power of attorney of the Authorized User.  

In accordance with the above, CORES only processes the personal data of the Authorized Users in their capacity as contact persons for the Obligated Entities, for whom the InfoCores application is ultimately intended.   

I. GENERAL QUESTIONS

1. Data Controller 

The controller of personal data is the CORPORACIÓN DE RESERVAS ESTRATÉGICAS DE PRODUCTOS PETROLÍFEROS (hereinafter, “CORES”, the “Data Controller” or the “Controller”), with registered address at Paseo de la Castellana n.º 79 – Planta 7ª. Madrid (28046) and N.I.F. (Tax Code) Q-2870025-J.

2. Data Subjects’ Rights. Withdrawal of consent

In accordance with current data protection legislation, you may exercise various rights with the Data Controller:

  • Demand access to your data and obtain a copy.  
  • Request their rectification and/or deletion in certain cases. 
  • Oppose the production of personalized profiles.  
  • Request that we limit the processing of your data. 
  • Request the portability of the data you have supplied when you sign an agreement with us. 

To exercise these rights, please contact us via the following: 

  • By email 
  • By post to Paseo de la Castellana n.º 79 – Planta 7ª. Madrid (28046).

In the case of processing conducted through the InfoCores service, you may also exercise your rights using the tool included on InfoCores. 

In regard to the processing based on your consent, you may contact CORES to withdraw this consent at any time using the methods indicated above. 

In all events, as a data subject or affected party, you may present all complaints you consider justified with the Spanish Data Protection Agency (www.aepd.es). 

II. SPECIFIC INFORMATION ON PROCESSING VIA THE CORES WEBSITE

1. Processed data categories

The following data may be collected from users of the Website: 

  • Identification details (full name). 
  • Contact details (email and telephone number).
  • Other personal details contained within the user’s message. 

2. Purposes of processing and basis of legitimization

The purpose of processing in each case is to adequately attend the request received via the form: 

  • Managing your enquiries made via the Contact Form. 
  • Managing your application for registration with the Subscription service and supplying the service.

In both cases, the legitimate basis for the processing of your data is the consent you provide when filling in and sending us the Contact Form. We remind you that you may withdraw your consent at any time in accordance with the terms of section 2. “Data subjects’ rights. Withdrawal of consent.”

3. Conservation Period

The data related to the Contact Form will be kept as long as necessary to process the enquiry or request made. Once the enquiry or request has been dealt with, we will keep your personal data on file for an additional period of six years for the purposes of legal compliance on the part of CORES. At the end of this period, CORES will proceed to delete your personal data. 

The data for the Subscription service will be kept until the user requests the cancellation of the service. 

4. Recipients of the data 

Your personal data may be consulted by the various departments under the charge of the Controller which are involved in the processing of the request or the provision of the Subscription service. 

In addition, for the provision of the various services offered on the Websites, CORES contracts various suppliers who may have access to your data. These service providers, entrusted by CORES for data processing management, may change over time. In all events, the Controller guarantees that all processing managers comply with the appropriate security measures and adhere to CORES instructions. CORES does not make any international transfers of personal data. 

III. SPECIFIC INFORMATION ON PROCESSING VIA THE INFOCORES WEBSITE

1. Processed data categories 

CORES will process the personal data of the Authorized Users provided by the Obligated Entity in order to process the corresponding registration and allow professional contact in the event of incidents or in the course of normal InfoCores use. This data includes the following: 

  • Full name.
  • Details listed on the Passport, DNI or equivalent ID document.  
  • Address, email and telephone number, preferably those of the company.  
  • Position held or professional relationship with the Obligated Entity.
  • User name, access and login password for operations performed on InfoCores. 
  • Information contained on the digital certificate used to access the area restricted to members.   

2. Purposes of processing and basis of legitimization 

The data of Authorized Users is processed, in their capacity as contact persons for the Obligated Entities, for the purpose of exchanging information between the latter and CORES in order to comply with the requirements imposed under Law 34/1998, of the 7th October, on the hydrocarbons sector and Royal Decree 1716/2004, of the 23rd July, regulating the obligation to maintain minimum security stocks, the diversification of natural gas supply and the role of the Corporation.  

The processing of the personal data of the Authorized Users is conducted on the following legal basis: 

  • Compliance with the requirement for the Obligated Entities to provide information to CORES as defined under the aforementioned legislation.  
  • The legitimate interest of CORES in managing and complying with aforementioned statutory obligation. CORES will not use your personal data for any purpose other than maintaining the corresponding relations with the Obligated Entity of which you are the representative or authorized person.  
  • The existence of a legal relationship demonstrated by the acceptance of the InfoCores Conditions of Use on the part of the Obligated Entity.

3. Conservation period 

CORES will process the personal data of the Authorized Users as long as the latter continue to hold such a position (in other words, until either the Authorized User or the Obligated Entity cancel their registration with InfoCores via the established procedures). Once the user’s registration has been cancelled, CORES will keep their personal data on file for an additional 6 years in compliance with legal requirements. After this time, no further information on the Authorized User will be kept on structured databases. However, your personal details may be included in various documents which form part of non-structured repositories of information which need to be kept for longer periods (for example scanned copies of powers of attorney).   

4. Recipients of the data

Your personal data may be consulted by the various departments under the charge of the Controller which are involved in the processing of InfoCores. In the same manner, the Obligated Entity on whose behalf the Authorized User accesses the platform may consult the InfoCores user information at any time. 

In the course of providing the various services offered on the Websites, CORES contracts various suppliers who may have access to your data. The Controller guarantees that all processing managers comply with the appropriate security measures and adhere to CORES instructions.

Authorized User data may be passed on to the Courts, Judges and competent Public Administration departments in accordance with applicable legislation or when CORES is legally required to do so.  

 

Subscribe to Updates to "Privacy policy "