Legal
Privacy policy
This policy explains which personal data Energize processes when you visit this website, send us an enquiry or use the Energize Solar AI platform, why we process it, and which rights you have.
Controller
The controller of your personal data under the General Data Protection Regulation (GDPR) is Energize. Write to us with any question about this policy or your data, and to exercise your rights.
- Controller
- Energize
- contact@energize.hr
Data we process
Which data we process depends on how you use our services.
When you visit the website
- Technical data your browser sends with every request, such as your IP address and browser type, which our servers receive when they deliver the page.
- Your language and your cookie choice, stored in cookies.
- Only if you allow analytics cookies: which pages you view (the page address only, without query parameters) and how you use the site, measured by Google Analytics.
When you send us an enquiry
The contact form asks for:
- your name and email address
- the town where your solar plant is, and its capacity (kW) and age
- whether the enquiry is urgent, your message and, if you asked about a specific product, which one
We store your enquiry in the platform database (Amazon Web Services, Frankfurt, EU) together with your IP address and browser details (user agent), and email it to our company inbox through Amazon SES (EU, Frankfurt). We use it to answer your enquiry (Art. 6(1)(b) GDPR), and the IP address and browser details to protect the form against spam and abuse (Art. 6(1)(f) GDPR).
When you use the platform
- Account data: username, name and email address, and your password, which we store only in hashed form.
- Your role, your organisation memberships and the sites you have been given access to.
- Drone imagery you upload, including the GPS position and other metadata (EXIF) recorded in the files.
- Locations and addresses of solar plants (sites).
- An activity log of actions taken in your account, including IP addresses.
- Records you create or are assigned on the platform, such as panel comments and their photos, service-book entries, work orders and maintenance jobs.
- Notifications, your settings and preferences, and any push-notification subscriptions from an earlier version of the app (we no longer send push notifications).
Purposes and legal bases
We process personal data for the following purposes, each on a legal basis under Article 6(1) of the GDPR:
Contract and steps before a contract
To answer your enquiry, and to provide the platform to you or your organisation: your account, inspections with their maps, site addresses and weather data, reports and notifications.
Legitimate interests
To keep the website and the platform secure and working reliably, for example through the activity log, error monitoring and spam protection for the contact form; to show maps on public pages such as the demo and shared maps; to keep a plant's maintenance history complete after an account is deleted; and to improve our panel and defect detection models with imagery uploaded to the platform. You can object to this processing at any time; see Your rights below.
Consent
For analytics cookies (Google Analytics). You can withdraw your consent at any time in the cookie settings; this does not affect processing that took place before you withdrew it.
Account data is needed to provide the platform, and the contact form's fields (except those marked optional) are needed to answer your enquiry. You are not obliged to give them to us, but without them we cannot provide the platform to you or reply to you.
We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR). Our defect detection assesses solar panels, not people.
Recipients and processors
Your data reaches the following service providers, either because they process it for us or because your browser contacts them directly:
- Hosting
- The platform runs in the Frankfurt region of Amazon Web Services (eu-central-1) and on processing servers operated by Energize.
- Amazon SES
- Sends our emails, including contact-form enquiries to our inbox.
- Sentry
- Error monitoring in its EU region. Error reports are configured to exclude request contents, IP addresses, cookies and identifiers such as your email address; they may contain technical details of the failing request, such as its URL and browser type.
- Google Analytics, only if you allow analytics cookies.
- Google, Esri and OpenStreetMap
- Satellite images and maps. When a map loads, your browser requests them directly from these providers, so they receive your IP address and the map area you are viewing.
- OpenStreetMap Nominatim
- Receives a site's coordinates, without any of your account details, so that we can show the site's address.
- Open-Meteo, PVGIS and NASA POWER
- Receive a site's coordinates (for past weather also the date of an inspection), without any of your account details, so that we can show weather data for its inspections and flight planning, and the plant's expected yield. PVGIS is run by the European Commission's Joint Research Centre; NASA POWER is a backup weather source in the United States.
Within the platform, a site's data is visible to its owner, to the users who have been given access to it, and to Energize staff with the administrator role, who operate and support the platform. A share link shows the shared map to anyone who has the link.
Transfers outside the EU
Our AWS hosting and email sending are located in Frankfurt (eu-central-1), and Sentry processes error reports in its EU region.
Google, which provides Google Analytics (only if you allow analytics cookies) and the default satellite images on our maps, may transfer data to the United States under the EU–US Data Privacy Framework.
Your browser requests map images directly from Google, Esri and OpenStreetMap, which may process your IP address outside the EU. Esri is based in the United States.
NASA POWER, which we use only as a backup weather source, is a US service: when it is used, it receives a site's coordinates and the date of an inspection, without any account details.
Retention
How long we keep data depends on what it is:
- Account data
- As long as your account exists. When you delete your account, your name and email address are removed and the account is closed straight away; copies in our backups disappear as the backups are replaced on their normal rotation.
- Plant data
- Sites, inspections and their images stay on the platform after an account is deleted, so that a plant's inspection and maintenance history is not lost. The records the person created there, such as panel comments and their photos, service-book entries, uploaded images and activity-log entries (without IP addresses), stay too, under an anonymous label instead of their name (Art. 6(1)(f) GDPR). To have the text of these records deleted as well, write to contact@energize.hr.
- Enquiries
- In the platform database for at most 24 months; the IP address and browser details are deleted after 90 days, and enquiries flagged as spam after 30 days. The copy in our inbox is kept for as long as we need it to handle your enquiry.
- Cookies
- For the periods listed in the cookie table below.
Your rights
Under the GDPR, and subject to the conditions it sets, you have the following rights:
Access
Find out which of your data we process and get a copy of it.
Rectification
Have inaccurate data corrected and incomplete data completed.
Erasure
Have your data erased.
Restriction
Have the processing of your data restricted.
Portability
Receive the data you gave us in a machine-readable format.
Withdrawal of consent
Withdraw your consent at any time, without affecting processing that took place before.
To exercise your rights, write to contact@energize.hr.
In the app
With an account, you can do two things yourself under Settings → Privacy & data:
Download your data — a machine-readable copy (a JSON file) of the personal data linked to your account, including records you created or were assigned.
Delete your account — we remove your name and email address straight away, close the account and sign you out on every device. Your plants' inspection data and the records you created stay on the platform under an anonymous label, as described under Retention.
You can also correct your name yourself under Settings → Profile.
You also have the right to lodge a complaint with a supervisory authority. In Croatia, that is the Agencija za zaštitu osobnih podataka (AZOP).
Changes to this policy
We update this policy when our services or the way we process personal data change. The date at the top of this page shows when it was last updated.