ES EN

Privacy policy

Contents 

1.- IDENTIFICATION AND OWNERSHIP OF THE WEBSITE

2.- DATA CONTROLLER

3.- DATA PROTECTION OFFICER (DPO)

4.- PURPOSE OF THE WEBSITE 

5.- DATA COLLECTED  

6.- PURPOSES OF PROCESSING AND LEGAL BASES

7.- RETENTION PERIODS

8.- SHARING DATA WITH ENERGY SUPPLIERS

9.- COMMERCIAL COMMUNICATIONS

10.- PROFILING

11.- INTERNATIONAL DATA TRANSFERS

12.- DATA PROCESSORS AND PROVIDERS

13.- SECURITY MEASURES

14.- SECURITY BREACHES

15.- MINORS

16.- DATA SUBJECTS' RIGHTS

17.- PROCESSING USING ARTIFICIAL INTELLIGENCE

18.- CONSENT TO COMMERCIAL CALLS FROM ENERGY SUPPLIERS (ART. 13.y RD 88/2026)

19.- COOKIES AND TRACKING TECHNOLOGIES

20.- THIRD-PARTY DATA PROVIDED BY THE USER

21- CONFIDENTIALITY AND DUTY OF SECRECY

22- UPDATES AND APPLICABLE LAW

  1. IDENTIFICATION AND OWNERSHIP OF THE WEBSITE

This Privacy Policy governs the processing of personal data carried out through the website www.tarifalo.com (hereinafter, “the website”), owned by Feebbo Solutions, S.L.U. (hereinafter, Feebbo), with tax ID (CIF) B13515622 and registered office at calle Serrano, 42-4ºA 28001 Madrid (Spain), registered in the Madrid Companies Register, Volume 42685, Folio 126, Sheet M754918, Entry 2.

  1. DATA CONTROLLER

The Controller of your personal data is Feebbo Solutions, S.L.U., with the contact details given in the previous section.

  1. DATA PROTECTION OFFICER (DPO)

FEEBBO has appointed a Data Protection Officer. You can contact the DPO at the following email address dpo+tarifalo@feebbo.com or by post, for the attention of the DPO, at calle Serrano, 42-4ºA 28001 Madrid (Spain).

  1. PURPOSE OF THE WEBSITE

Tarífalo.com is a free online electricity and gas rate comparison operated by Feebbo Solutions, S.L.U. Its purpose is to give individuals and businesses an objective and independent tool for comparing the offers available on the free market, allowing them to identify, based on their usage profile, the most advantageous rates from the main suppliers operating in Spain.

When the user expressly requests it, Tarífalo.com acts as an intermediary between them and the energy suppliers it works with, passing on their contact details so they can personally offer their best rates and, where applicable, handle the change of supplier. Data is shared with suppliers exclusively on the basis of the user's express consent, under Regulation (EU) 2016/679, Organic Law 3/2018 and article 13.y of Royal Decree 88/2026.

As FEEBBO is neither an electricity supplier nor an independent aggregator within the meaning of Royal Decree 88/2026, it acts as an intermediary or offer comparison service, with the partner suppliers assuming the direct contractual relationship with the end consumer. Consequently, in order to handle the requests of users who wish to be contacted by suppliers and receive personalised offers, their personal data must be shared with the third-party energy companies identified in this Privacy Policy.

  1. DATA COLLECTED

Through the website's lead form, FEEBBO may collect the following categories of data:

  1. a) Identification data: first name and surname, gender.
  2. b) Contact data: phone number, email address, postcode.
  3. c) Energy usage data: type of supply requested (electricity, gas, dual), usage profile and other data needed to personalise offers.
  4. d) Browsing data: IP address, browser type, pages visited and time spent, collected through cookies and similar technologies in accordance with the Cookie Policy.

Providing the data marked as mandatory on the form is necessary to handle your request. Failure to provide this mandatory data will prevent the requested service from being provided.

  1. PURPOSES OF PROCESSING AND LEGAL BASES

– Handling the comparison request. Processing your rate comparison request and sending you the access code or comparison results. Legal basis Art. 6.1.b) GDPR: taking pre-contractual steps at the data subject's request.

– Sharing with suppliers and commercial contact (including by phone). Sharing your data with the energy suppliers listed in the Annex of Recipients so they can contact you and offer their best rates. This only happens if you tick box 2 on the form. Legal basis Art. 6.1.a) GDPR: express consent of the data subject.

– Handling enquiries and user support. Responding to enquiries, complaints or requests made through the available channels. Legal basis Art. 6.1.b) GDPR (pre-contractual relationship) and art. 6.1.f) GDPR (FEEBBO's legitimate interest in service quality).

– Compliance with legal obligations. Retaining communications and evidence of consent for the legally required periods. Legal basis Art. 6.1.c) GDPR: compliance with a legal obligation.

FEEBBO does not send its own unsolicited commercial communications or share your data with sectors other than energy without your separate express consent.

  1. RETENTION PERIODS

– Handling the comparison request. Six (6) months from handling the request, unless you have given consent for other purposes.

– Sharing with suppliers and commercial contact. Until you withdraw your consent, up to a maximum of twenty-four (24) months from the last interaction. After this period, the data will be blocked and subsequently deleted.

– Evidence of consent (logs). Three (3) years from when consent was obtained, in accordance with the applicable limitation periods.

– Enquiries and user support. One (1) year from resolution of the enquiry.

  1. SHARING DATA WITH ENERGY SUPPLIERS

If you have ticked the second box on the form, your contact details (name, phone and email) will be shared with the electricity and/or gas suppliers FEEBBO works with, for the sole purpose of allowing them to contact you by phone and offer you their energy rates and services. The recipient companies are those included in the updated list of recipients available in the Annex to this Privacy Policy and at the URL /cesionarios/ 

Each supplier receiving your data will act as an independent controller for the purposes of its own activity. FEEBBO does not control the processing each supplier carries out with your data once it has been shared, and we recommend that you read each supplier's privacy policy.

You can withdraw your consent to the sharing of your data at any time, without retroactive effect, by writing to dpo+tarifalo@feebbo.com.

Under article 13 of Royal Decree 88/2026 of 11 February, the General Regulation on electricity supply, sale and aggregation, the recipient suppliers may only contact you by phone if you have made an express, unambiguous and informed request for a specific purpose, as set out in the second box on the form. Ticking that box constitutes the authorisation required by energy regulations for commercial phone contact.

  1. COMMERCIAL COMMUNICATIONS

FEEBBO will only send its own commercial communications if the user has given consent through the mechanisms provided for this purpose. FEEBBO's commercial communications will be limited to energy rate comparison and related services.

In accordance with article 21 of the LSSI, users may object at any time to receiving electronic commercial communications by sending a request to the following email address dpo+tarifalo@feebbo.com  or by using the unsubscribe link included in each commercial communication.

  1. PROFILING

FEEBBO does not carry out profiling and no decisions based solely on automated processing producing legal or similarly significant effects on the user are taken, in accordance with article 22 GDPR.

  1. INTERNATIONAL DATA TRANSFERS

FEEBBO does not transfer your data outside the European Economic Area (EEA) to any recipient of its own.

However, some of the technology service providers used by FEEBBO (such as web analytics tools) may process browsing data on servers located outside the EEA, in particular in the United States. In such cases, transfers are made with the appropriate safeguards required by Chapter V of the GDPR, including the Standard Contractual Clauses approved by the European Commission. You can request more information about the applicable safeguards from the DPO.

  1. DATA PROCESSORS AND PROVIDERS

To provide the service, FEEBBO relies on third-party providers acting as data processors (art. 28 GDPR), including technology service providers, email platforms, CRM tools and web analytics services. All of them provide sufficient data protection guarantees, and FEEBBO has signed the corresponding data processing agreement with each of them.

You can request information about the data processors from the DPO.

  1. SECURITY MEASURES

FEEBBO has adopted the technical and organisational measures necessary to ensure a level of security appropriate to the risk, in accordance with article 32 GDPR. FEEBBO holds ISO/IEC 27001:2022 certification for its Information Security Management System. The measures implemented include encrypted communications, access controls, internal security policies and periodic reviews of the measures adopted.

  1. SECURITY BREACHES

In the event of a security breach affecting personal data, FEEBBO will activate its internal breach management protocol and, where appropriate, notify the Spanish Data Protection Agency (AEPD) within a maximum of seventy-two (72) hours of becoming aware of it (art. 33 GDPR). If the breach poses a high risk to your rights and freedoms, you will be informed directly (art. 34 GDPR).

  1. MINORS

The website is not aimed at children under 14. In accordance with article 7 LOPDGDD, children under 14 require the consent of their parents, guardians or legal representatives for their data to be processed. FEEBBO does not knowingly collect data from children under 14 without such authorisation.

  1. DATA SUBJECTS' RIGHTS

You have the right to:

  1. a) Access: obtain confirmation as to whether FEEBBO processes your data and, if so, access it.
  2. b) Rectification: correct inaccurate or incomplete data.
  3. c) Erasure (“right to be forgotten”): request the deletion of your data when, among other reasons, it is no longer necessary for the purposes for which it was collected.
  4. d) Restriction of processing: request that processing be suspended in certain circumstances.
  5. e) Objection: object to the processing of your data.
  6. f) Portability: receive your data in a structured, commonly used format and transmit it to another controller.
  7. g) Withdrawal of consent: at any time and without retroactive effect.
  8. h) Not to be subject to decisions based solely on automated processing with significant effects.

You can exercise these rights by writing to the following email address dpo+tarifalo@feebbo.com or in writing to calle Serrano, 42-4ºA, 28001 Madrid (Spain), enclosing a copy of your ID card or another document proving your identity.

FEEBBO will respond to your request within a maximum of one (1) month of receipt, which may be extended by two (2) further months in particularly complex cases (art. 12 GDPR).

If you believe FEEBBO has not properly respected your rights, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es.

  1. PROCESSING USING ARTIFICIAL INTELLIGENCE

We inform users that some of the processing carried out by FEEBBO may include artificial intelligence (AI) components, used for specific purposes such as improving our services, analysing data or personalising the user experience.

Under no circumstances will decisions based solely on automated processing that produce legal effects or significantly affect the data subject be taken without meaningful human intervention, in accordance with article 22 of the General Data Protection Regulation (GDPR). Transparency in how the AI systems used work is also guaranteed, with clear information about the logic applied, its purpose and the expected consequences of the processing.

AI processing complies with GDPR principles, especially lawfulness, fairness, transparency, minimisation, accuracy and security, and is subject to impact assessments where there is a significant risk to people's rights and freedoms. FEEBBO has adopted appropriate technical, security and organisational measures to ensure that such processing complies with current data protection law and the ethical principles applicable to these technologies.

Data subjects may at any time exercise their rights of access, rectification, erasure, objection, restriction, portability and not to be subject to automated decisions without human intervention by writing to the DPO at the email address dpo+tarifalo@feebbo.com or the postal address calle Serrano, 42-4ªA, 28001 Madrid (Spain).

AI processing by the Data Controller follows the guidelines set by the AEPD in its guide GDPR compliance of processing that incorporates Artificial Intelligence and Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act).

  1. CONSENT TO COMMERCIAL CALLS FROM ENERGY SUPPLIERS (ART. 13.y RD 88/2026)

Article 13 of Royal Decree 88/2026 of 11 February, approving the General Regulation on electricity supply, sale and aggregation, requires that, where the consumer is a natural person, energy suppliers may only carry out unsolicited advertising and commercial contact by phone when there is an express, unambiguous and informed request for a specific purpose from the consumer.

Ticking the second box on the Tarífalo.com form constitutes that express and unambiguous request from the user, in the terms required by that article and the interpretative criteria applied by the National Markets and Competition Commission (CNMC). This consent is valid for a maximum of twenty-four (24) months and may be withdrawn at any time by writing to dpo+tarifalo@feebbo.com

Full recordings of commercial calls will be kept by the suppliers as provided for in article 13.ah) 4º of RD 88/2026.

  1. COOKIES AND TRACKING TECHNOLOGIES

The website uses cookies and similar technologies to ensure it works, improve the browsing experience and, where applicable, obtain usage statistics. For more information, see our Cookie Policy. Non-technical cookies require your prior consent.

  1. THIRD-PARTY DATA PROVIDED BY THE USER

If you provide personal data of third parties through the website, you declare that you have their informed and valid consent for its processing in accordance with the applicable regulations, and that you have informed them of the content of this Privacy Policy.

  1. CONFIDENTIALITY AND DUTY OF SECRECY

FEEBBO and its staff are subject to a duty of confidentiality regarding the personal data processed, in accordance with article 5 LOPDGDD. This duty continues after the relationship with FEEBBO ends.

  1. UPDATES AND APPLICABLE LAW

This Privacy Policy may be updated to adapt to legislative, case-law or business changes. We recommend that you check it periodically. The current version will always be available in the website footer.

Spanish law will apply in the event of any dispute over the interpretation or application of this Privacy Policy.

Last updated: 1 January 2026

ANNEX — LIST OF RECIPIENT COMPANIES

The energy suppliers with which FEEBBO may share your data, when you have given your consent by ticking the second box on the form, are those included in the updated list available at /cesionarios/. This list is updated periodically by FEEBBO according to the partnership agreements in force at any given time. You can request the complete, updated list of recipients at any time by writing to dpo+tarifalo@feebbo.com

Hi! I'm a delicious cookie and I help improve your experience on our website. Will you accept me?
You can check the ingredients in our Cookie Policy