Privacy Notice

Purpose of this Privacy Notice

While visiting our website Home – Golden State Wind (‘the Website’), you may provide us with personal data, such as connection data (IP address, event logs) but also contacts, names, location data, addresses, commercial or professional information, and others. We will process such information in a lawful, fair, and transparent manner.

This privacy notice (‘Notice’) describes how GOLDEN STATE WIND LLC (‘OW’,‘we’, ‘our’, or ‘us’) collects, uses, and discloses personal data about you when you visit our Website. In accordance with Article 13 of the Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (‘GDPR’), and other applicable local laws, we are required to inform users on how we process the personal data that we collect through their use of the Website, or otherwise when they interact with us, including any data they may provide when they contact us via our online form or through any other communication channel available. If you are a California resident, please refer to the section on “Information for California Residents” below.

Data Controller and contact details

  • Data controller: GOLDEN STATE WIND LLC
  • Registered office: 3 Center Plaza, Suite 205, Boston, MA 02108
  • Contact details of the Data Protection Officer (‘DPO’): dpo@oceanwinds.com

If, at any time, you have any questions concerning our Privacy Notice or our Data Protection Policy, or you want to exercise your data rights, please feel free to contact us at one of the addresses above.

Types of data processed

The categories of information that we may collect about you include the following:

  • Identifiers, such as name, postal address, telephone number, e-mail address, location data, unique personal identifiers such as IP addresses and device identifiers, and other similar identifiers;
  • Professional information, such as employer, job title, or profession;
  • Inferences regarding preferences or other characteristics;
  • Internet or other electronic network activity information, such as Internet or other electronic network activity information, including browser type and operating system; browsing history, clickstream data, search history, and information regarding your interaction with an internet website, application, or advertisement, including access logs and other activity information related to your use of our Website; the length of time you visit our Website; and the referring URL, or the website that led you to our Website.

We collect the personal data described above from one or more of the below sources:

  • Directly from you, when you contact us and/or use our websites;
  • Indirectly from you, for example, automatically through the use of cookies and similar technologies.

Purpose of processing

We may use your personal data for the following business purposes:

  • Identification and authentication: We use your identifiers to verify your identity and to protect the security of your personal data;
  • Operating our business: We process your personal data to provide you with our Website and services, including to manage and answer your queries, doubts, or requests, and for the purposes of maintaining commercial relations, including management of pre-contractual and contractual relations;
  • Communicating with you: We may use your personal data to communicate with you regarding our services and respond to your inquiries;
  • Marketing and targeted advertising: We may use your personal data to send, including through electronic means, communications and information about the services we provide and the activity we conduct, when you agree so;
  • Exercising our rights: We may use your personal data to exercise our legal rights where it is necessary to do so, for example to detect, prevent and respond to suspected or actual illegal activities, fraud claims, intellectual property infringement claims, or violations of law or our terms and conditions;
  • Complying with our obligations: We may process your personal data to comply with legal or regulatory requirements, where this is required by law or regulation, such as in response to court orders, to comply with privacy or financial regulations, or to cooperate with law enforcement, other government entities, or lawful investigations; and
  • Protecting against harm: We may use personal data as we deem necessary to protect the rights and safety of us, you, or others.

We also use the information in other ways for which we provide specific notice at the time of collection and obtain your consent to the extent required by applicable law. We may aggregate or de-identify any information collected about you and we may use that aggregated or de-identified information for any purpose. To the extent we deidentify any data originally based on personal data, we will maintain and use such data in deidentified form and will not attempt to reidentify the data.

Your personal data will not be processed further in any way that is incompatible with the purposes described above or with the law. The processing does not involve automated decision-making.

Please note that while provision of your data is not a requirement necessary to enter into a contract and you are not obliged to provide any of the personal data this notice refers to, in case of failure to provide your data, we may not be able to get in touch with you.

Legal basis for processing

Personal data are processed on the basis of:

  • Your consent, expressed through the submission of the request for information, through the means of contact available on the Website, after having read and accepted this Privacy Notice. You may withdraw your consent at any time, without prejudice to the lawfulness of the processing carried out up to the moment of withdrawal. However, as a result, your request for information may not be addressed.
  • The execution of contractual relationships in case you are party of an agreement with us (or the adoption of pre-contractual steps, as the case may be), to the extent the communication is carried out in the context of the agreement or the negotiations to enter into an agreement.
  • The legitimate interest of OW in maintaining professional contact and commercial relations with third parties such as suppliers. You may object at any time to the processing of your data for this purpose, as explained in the section on the exercise of rights. When legitimate interest is the legal basis of processing, OW has performed a prior legitimate interest assessment to ensure that OW interest prevails over your rights and freedoms (which is available upon request).
  • Compliance with applicable law.

Retention period

We store your information for as long as its processing is necessary for the purpose for which it was collected for.

This means that data collected for professional contact and commercial relation purposes will be kept for as long as the relationship with the data subject subsists and, once ended – or when you request to erase your data before date, during the limitation periods of the obligations arisen from the data processing. Regarding users subscribed to our commercial communications, we will process their data until they decide to unsubscribe or cancel their subscription.

In general, personal data collected through online forms or contact sections will be erased without delay upon the end of the purpose after the request has been resolved, in case we do not have an existing agreement with you (or with a company you represent or work at). Otherwise, please consult our privacy notice for contractors of employees.

Your information that is no longer needed is either irreversibly anonymized or destroyed securely.

Security and confidentiality

We maintain rigorous physical, electronic and procedural safeguards designed to protect the personal data you provided against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use, in compliance with the law.

We restrict access to your information to only those persons who need to use it for the relevant purpose and all our staff, regardless the stage of processing they are involved in, undertake to process your information with the utmost care, secrecy, and confidentiality and in accordance with the law.

Data recipients

We will not communicate your data to third parties unless strictly necessary, if needed to comply with a legal obligation and/or with your prior authorization.

We may disclose your data with competent authorities who have a right of access recognised by law, if legally required to do so, or if requested by a governmental entity or regulatory authority or when we believe in good faith that such action is necessary to comply with legal requirements or processes, prevent a crime or protect national security. The lawful basis for this sharing is complying with a legal obligation.

We can also share your personal data to other companies of the group to which OW belongs for (i) the implementation of pre-contractual measures; (ii) the conclusion or performance of a contract (both based on the legitimate basis of the performance of a contract/take pre-contractual measures with you); and/or (iii) the establishment, exercise or defense of legal claims (based on our legitimate interest, after conducting a legitimate interest assessment -available upon request- to verify that it prevails over the users rights and interests).

Information may be also given to third-party contractors or other persons or entities that we engage when outsourcing certain functions. Personal data will be shared with such third-party contractors, persons, or entities only to the extent reasonably necessary for them to perform services on our behalf and not for any other purpose and pursuant to reasonable confidentiality obligations.

When we rely on the cooperation of third-party service providers who may have access to your personal data and who will process the data on our behalf as part of their provision of services, we adhere to strict criteria for their selection and undertake to enter into corresponding data processing agreements with them, in compliance with applicable law, ensuring they implement appropriate technical and organisational measures to guarantee data security, and they process the personal data for the agreed purposes and only in accordance with our instructions.

Finally, we reserve the right to transfer any information that we collect about you through your use of the Website to any acquirers of OW’s business or in the event that we sell or otherwise transfer some or all of our assets, and to entities resulting from merger processes or any other type of transformation affecting our company, being the legal basis of processing the continuity of business and the satisfactory study and completion of the transaction.

We may disclose any of your personal data to the third parties noted above for the business purposes outlined in the “Purpose of processing” section above. We do not “sell” your personal data, as that term is defined under applicable law. We do not “share” your personal data, as defined by applicable law.

We do not have actual knowledge that we sell or share personal data of minors under 16 years of age.

International data transfers

Being a company with international presence, we may transfer your personal data to the companies in our Group, in accordance with our legitimate interests and for internal administrative purposes. Such companies can be based in or outside the European Union (EU).

In case of transfer of personal data outside the EU and the European Economic Area (EEA), we will make sure that appropriate and adequate safeguards to protect your information are implemented, ensuring an adequate level of security.

This entails that transfers are only made:

  • to countries that the European Commission has formally recognised as offering an adequate level of protection of personal data, or
  • to receiving countries not considered as having sufficient guarantees in place in terms of data privacy, only upon establishing appropriate safeguards, as required by the law, by means of Standard Contractual Clauses or Binding Corporate Rules, as well as putting in place additional guarantees, as necessary, for the best protection of your personal data.

You may obtain a copy of the safeguards regarding the international transfer by requesting it to our data protection officer.

Other Websites

This Website may contain links to third-party websites over which we have no control. OW is not responsible for the privacy policies or practices of such other websites and we encourage you to review the privacy policies, if any, on such web pages.

Your rights in relation to data processing

In accordance with applicable regulations, you are entitled to all rights recognised to data subjects regarding personal data and you may exercise them by contacting our DPO at dpo@oceanwinds.com. Among others, you may:

  • Access your personal data and obtain confirmation as to whether your personal data is being processed and information on how it is processed (including the purposes of the processing, recipients to whom it has been or will be disclosed, the source of information from where we obtained it, the retention period applied, any right that you may have concerning the processing, where personal data are transferred, the appropriate safeguards implemented, etc.) and request copies of such data.
  • Rectify inaccurate or incomplete data.
  • Object to the processing of your data, where you believe that it is non-compliant with applicable personal data protection legislation and where the processing is based on legitimate interest.
  • Withdraw your consent at any time.
  • Request the erasure of all or any of your data when they are no longer needed for the purposes they were collected for when (i) processing was based on your consent and you have withdrawn your consent and there is no other legal ground for the processing, (ii) processing was based on legitimate interest but you have objected to the processing and there are no overriding legitimate grounds for the processing, (iii) you believe that the personal data have been unlawfully processed, or (iv) the data have to be erased for compliance with a legal obligation. Where applicable, in such cases data shall be anonymised or blocked in accordance with applicable law.
  • Restrict the processing of your data when you contest its accuracy (during the period necessary for OW to verify its accuracy), when (i) the processing is unlawful and you oppose the erasure of the data and requests the restriction of its use instead, (ii) we no longer need the personal data for the purposes we collected it for but they are required by you for the establishment, exercise and defence of legal claims, or (iii) you have objected to the processing (until it is verified whether our legitimate interests in the processing overrides those of the data subject).
  • Request the portability of the data (i.e., receive your personal data) that you provided based on consent or on a contract, either for yourself or for transfer to another Data Controller. In the latter case you may transmit such data yourself or have it transmitted directly from us, where technically feasible.

In addition, as a data subject, should you consider that our processing of your personal data infringes the applicable data protection regulations, you have the right to lodge a complaint with the competent supervisory authority, in the country of your habitual residence, place of work or place of the alleged infringement.

Information for California residents

California residents wishing to exercise their rights, or their authorized agents, may contact us using the contact details provided in the “Contact Us” section below. To help protect your privacy and maintain security, we will take steps and may require you, or your authorized agent, to provide certain information (such as your name, address, email address, and relationship to OW) to verify your identity before granting you access to your personal data or complying with your deletion or correction request. In addition, if you ask us to provide you with specific pieces of personal data, we will require you to sign a declaration under penalty of perjury that you are the consumer whose personal data is the subject of the request. If you designate an authorized agent to make an access, correction, deletion, or opt-out of sale request on your behalf, we may require you to provide the authorized agent written permission to do so and to verify your own identity directly with us (as described above).

Additional Information. If you choose to exercise any of your rights under the CCPA, you have the right to not receive discriminatory treatment by us. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.

Contact Us

If you have questions about this Policy or our use of your personal data, please contact us at: dpo@oceandwinds.com.

Changes to the Policy

We may modify or update this Policy from time to time. We encourage you to visit this Policy at least once per year to learn about any changes to the way we collect, use, or disclose your personal data. If we make a material change to this Policy, we will take reasonable steps to notify you, as required by applicable law.