In short Summary
- We collect only what we need to answer you, provide the platform and prepare the documents our clients order
- Consumption data from a supply point is used only with the explicit authorisation of its holder, which can be withdrawn at any time
- Identifying and analytical data are stored apart, in a European cloud with the region in Spain
- We do not sell personal data and do not use it for advertising
- You can access, correct or delete your data at any time, and we reply within one month
Who is responsible for your data
The controller of your personal data is the company that operates Termavia
- Company
- [Registered company name, S.L.]
- Tax ID (NIF)
- [NIF]
- Registered office
- [Street and number, postcode] Barcelona, Spain
- hello@termavia-group.com
This policy applies to the website termavia-group.com, to the Termavia platform and to the communications we exchange with clients, technicians and visitors
Your data at a glance
Every piece of personal data we hold goes through the same four stages
What you give us, what public registers publish about buildings, and consumption data with authorisation
Each purpose has a legal basis, listed in section 4
Identifying and analytical data apart, with access by role and every access logged
Or earlier when you ask, unless the law requires us to keep it
What we collect
Data you give us
Name, work email, organisation, role and message when you write to us or request a walkthrough, and a cadastral reference if you choose to share one. For users of the platform, the account details of the organisation and its staff, and for technicians who sign, the details needed to check their status in the register of certifying technicians
Data about buildings
Data published by the Cadastre, the regional certificate registers, the cartographic institute and the AEMET meteorological service. It describes buildings rather than people, but a cadastral reference or an address can be linked to an owner, so we treat it with the same care as personal data
Consumption data
Hourly electricity consumption of a supply point obtained through DATADIS, and gas consumption provided by the holder. This is personal data, used only with the explicit authorisation of the supply point holder, as explained in section 5
Technical data
IP address, browser type and access logs needed to deliver the website and the platform and to keep them secure
We do not ask for and do not process special categories of data, such as health, beliefs or political opinions
Why we use it and on what basis
The legal bases refer to article 6 of the General Data Protection Regulation (GDPR)
| Purpose | Data | Legal basis | How long |
|---|---|---|---|
| Answering requests and preparing a walkthrough | Contact details, message, cadastral reference | Consent and steps prior to a contract, art. 6.1.a and 6.1.b | 24 months after the last contact |
| Product update emails | Email address | Consent art. 6.1.a | Until you unsubscribe |
| Providing the platform to clients and their staff | Account data, properties, drafts and documents | Contract art. 6.1.b | Term of the agreement, then as in section 8 |
| Checking the status of a signing technician | Name and register details | Legitimate interest in documents signed only by accredited professionals, art. 6.1.f | Term of the agreement |
| Calibration and outcome measurement | Consumption series of a supply point | Consent of the supply point holder, art. 6.1.a | While the authorisation is in force |
| Invoicing and accounting | Billing details | Legal obligation art. 6.1.c | 6 years |
| Security of the website and the platform | Technical data and access logs | Legitimate interest art. 6.1.f | Up to 12 months |
| Indicators on the housing stock | Data from processed properties, fully anonymised | Legitimate interest in improving the typology library, art. 6.1.f | Once anonymised, the data no longer relates to a person |
Consumption data
Consumption data qualifies as personal data. We access it only after the holder of the supply point gives explicit authorisation, and only for calibrating the model of the building and measuring the result of works
- For a shared supply point, such as a central boiler room, access follows a resolution of the general meeting of the community of owners
- For an individual flat, the holder of that supply point authorises access separately
- Each authorisation is recorded with its scope and term
- Withdrawing an authorisation stops processing and unlinks the consumption series from the supply point
- Inside the platform, consumption is used aggregated to building level, and products built on the property database use fully anonymised data only
We never use consumption data to profile occupants or to market anything to them
Who receives it
We share personal data only where a purpose in section 4 requires it
- Our hosting provider, a European cloud with the storage region in Spain
- Our email delivery provider, for replies and update emails
- The electronic signature service chosen by the technician who signs
- Public bodies, on behalf of the client who ordered a document: the centralised register of certifying technicians for the signatory check, the regional certificate register when a document is registered, and in Catalonia the Housing Agency's telematic instrument for technical inspection reports
- Professional advisers bound by confidentiality, such as lawyers and auditors, when needed
- Courts and authorities, where the law requires it
Providers act as processors under data processing agreements. We do not sell personal data and do not share it for advertising
Transfers outside the European Economic Area
We store and process data in the European Economic Area, with the main storage region in Spain. If a provider ever needs to access data from outside the European Economic Area, we allow it only under an adequacy decision or standard contractual clauses approved by the European Commission
How long we keep it
When a period ends we delete the data or anonymise it so that it can no longer be linked to a person
How we protect it
- Identifying and analytical data are stored separately
- Storage is in a European cloud with the region in Spain
- Access is divided by role on the principle of the minimum necessary rights, and every access to data is logged
- The production environment is closed to direct access by developers, and every change passes through a test environment first
- The database is backed up regularly
- The private key of a technician's qualified signature never leaves the card or the cloud signature service
If a breach occurs that is likely to put your rights at risk, we notify the Spanish Data Protection Agency within 72 hours and inform you without undue delay
Your rights
Select a right to start a request in the form below. Exercising your rights is free of charge
We may ask you to confirm your identity. We reply within one month, which can be extended by two further months for complex requests, and we tell you if that happens. If you are not satisfied with our answer, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) at aepd.es
Send a request about your data
Or write to hello@termavia-group.com with the same details
Thank you
Your request is registered
Children
Our services are meant for professionals and organisations. We do not knowingly collect data from anyone under 14, the age Spanish law sets for giving consent to data processing
Changes to this policy
We update this policy when our services or the law change. The date at the top shows the version in force. Material changes are announced on the website and, for clients, by email before they take effect
| Date | Change |
|---|---|
| 9 November 2026 | First publication |
Contact
For anything about your data, write to hello@termavia-group.com or by post to the registered office in section 1. This policy follows Regulation (EU) 2016/679, the General Data Protection Regulation, and Spanish Organic Law 3/2018 on the protection of personal data and the guarantee of digital rights