Data Privacy Policy

Data Privacy Policy

Powernext Commodities

Please refer to the up-to-date Powernext Commodities Market Rules for the description of Powernext Data Privacy Policy for this market segment, which are available here: https://www.powernext.com/documentation

Powernext Derivatives

Please refer to the up-to-date Market Rules of the Powernext Derivatives Regulated Market for the description of Powernext Data Privacy Policy for this market segment, which are available here: https://www.powernext.com/documentation

Organised Trading Facility

Please refer to the up-to-date Market Rules of the Powernext Organised Trading Facility for the description of Powernext Data Privacy Policy for this market segment, which are available here: https://www.powernext.com/documentation

Registry for Guarantees of Origin

Identity of the Data Processor: Powernext, a stock company incorporated under the laws of France, whose registered office is at 5 boulevard Montmartre – 75002 Paris (France), registered with the Commercial Registry of Paris under number 438 750 440 (hereinafter “Powernext”).

Collection of Personal Data: Through the functionalities offered by the Registry for Guarantees of Origin, Powernext will receive and/or collect Personal Data of the account holders, employees or representatives of companies (“Data Subject”). This includes any kind of Personal Data as understood under EU General Data Protection Regulation n°2016/679 (“GDPR”), as for example contact details (name, first name, company, function, email, postal address and phone number) or connection details as for example users connected, connection time, connected IP, number of connection attempts (success or failure), total number of connections (“Personal Data”).

Purpose of the collection of Personal Data: The Personal Data collected will be used in order to enable Powernext to fulfil its mission as operator of the Registry for Guarantees of Origin pursuant to its official designation as registry operator . The legal basis of this processing results from the execution of the contractual documentation applicable to the Registry for Guarantees of Origin (Powernext General Terms and Conditions for the Guarantees of Origin and the Domain Protocol associated to them) subscribed by the users.

Recipients of the Personal Data: The Personal Data collected are aimed at operating the Registry for Guarantees of Origin. Powernext as the designated registry manager, shall be considered as the main recipient of the collected Personal Data. However, due to its role of designating authority, DGEC shall also be considered as a recipient of the collected Personal Data, as some information may be transmitted to DGEC on its request.

Transfer of Personal Data to Third Parties: The Personal Data collected will not be transferred to Third parties, except if such transfer is permitted by law or if the prior consent of the Data Subject has been obtained. The Personal Data collected may also be transferred to public authorities where this is required by the applicable law (regulatory authorities, judicial authorities…).

Duration of storage: As per the technical specifications for the designation, the Personal Data collected will be stored for five (5) years after the termination of the mission of Powernext as registry manager of the Registry for Guarantees of Origin.
 
Your rights: Any individual has a right to obtain transparent information, to oppose, access and rectify any data which is relevant. These rights may be exercised by writing with acknowledgement of receipt to: 

compliance@powernext.com
or
Powernext
Compliance Department
5 boulevard Montmartre – 75002 Paris, France

Any complaint may be addressed to the French Data protection authority (CNIL – Commission Nationale de l’Informatique et des Libertés).

In case of contradiction between the available versions of the present Data Privacy Policy for the Registry for Guarantees of Origin, the French version shall be regarded as binding.

White Certificates Registry

Identity of the Data Processor: Powernext, a stock company incorporated under the laws of France, whose registered office is at 5 boulevard Montmartre – 75002 Paris (France), registered with the Commercial registry of Paris under number 438 750 440 (hereinafter “Powernext”).

Collection of personal data: Through the functionalities offered by the application Emmy, Powernext will receive and/or collect Personal Data of the account holders, employees or representatives of companies (“Data Subject”). This includes any kind of personal data as understood under EU General Data Protection Regulation n°2016/679 (“GDPR”), as for example contact details (name, first name, company, function, email, birth date, national identification number, postal address and phone number) or connection details as for example users connected, connection time, connected IP, number of connection attempts (success or failure), total number of connections (“Personal Data”)

Purpose of the collection of Personal Data: The Personal Data collected will be used in order to enable Powernext to fulfil its mission as registry manager of the White Certificates Registry as described in the Public Service Delegation relating to the national register for White Certificates signed between Powernext and the Direction Générale de l’Energie et du Climat (DGEC). The legal basis of this processing results from the execution of this Public Service Delegation, implemented through Powernext General Terms and Conditions for the White Certificates subscribed by the users of the registry.

Recipients of the Personal Data: The Personal Data collected are aimed for managing the White Certificates Registry on behalf of DGEC. DGEC, as the delegating authority, and Powernext as the delegate registry manager, shall be considered as recipients of the collected Personal Data.  

Transfer of Personal Data to Third Parties: The Personal Data collected will not be transferred to Third parties except if such transfer is permitted by law or if the prior consent of the Data Subject has been obtained. The Personal Data collected may also be transferred to public authorities where this is required by the applicable law (regulatory authorities, judicial authorities…).

Duration of storage: the Personal Data collected will be stored for twelve (12) years and then transmitted to public archives, in accordance with the provisions of the Public Service Delegation relating to the national register for White Certificates. 

Your rights: Any individual has a right to obtain transparent information, to oppose, access and rectify any data which is relevant. These rights may be exercised by writing with acknowledgement of receipt to: 

compliance@powernext.com
or
Powernext
Compliance Department
5 boulevard Montmartre – 75002 Paris, France

Any complaint may be addressed to the French Data protection authority (CNIL – Commission Nationale de l’Informatique et des Libertés).

In case of contradiction between the available versions of the present Data Privacy Policy for the White Certificates, the French version shall be regarded as binding.