Privacy notice

Who we are

The Gridly Services are provided by Gridly Energy Solutions B.V., a company established under the laws of the Netherlands ("Gridly", "we", "us"). Gridly is the controller for the processing of Personal Data described in this notice.

All tasks and responsibilities concerning data protection are handled by our team. You can send questions about the protection of Personal Data, privacy and security, or contact us for other reasons, at privacy@gridly.energy.

Scope

This privacy notice covers the collection of Personal Data through:

• the website gridly.energy and any other website from which you access this privacy notice;
• the Gridly mobile app for iOS and Android;
• the Gridly portal (portal.gridly.energy) and the Gridly APIs;
• the Gridly Edge Gateway and other Gridly hardware and software installed at your site;
• our social media pages; and
• HTML-formatted email messages and surveys that we send to you and that link to this privacy notice.

It applies to all visitors and users of the Gridly Services and our social media pages, including households, businesses, installers and partners.

Personal Data

You can visit our websites anonymously, without telling us who you are and without revealing any information about yourself. To use the Gridly app, the Gridly portal and our energy management services, however, we need certain Personal Data from you.

You may provide us with Personal Data (such as your name, email address, phone number, address and company name) when you create a Gridly account, are invited to a household or organization, request a demo or contact us. We use this Personal Data to give you access to the requested products, services, content and information. We may also use it to understand who uses our products and services, to support you and your installer, and to manage our business development activities.

How we collect Personal Data

We may collect your Personal Data:

• When you contact us with questions, comments, ideas or complaints, or otherwise communicate with Gridly (including when applying for a job with Gridly): the information we collect depends on how and why you contact us (for example, your email address when you email us, or the details in your job application). In any case we collect your contact details so we can respond and communicate with you.
• When you request a demo or fill in a contact form: we collect your name, email address, phone number, company name and the content of your message.
• When you subscribe to our newsletters or updates: we collect your email address and country.
• When you create and use a Gridly account in the app or portal: we collect your account details (name, email address, language and settings), the households or organizations you belong to and your role in them, and your activity in the Gridly Services.
• When you connect an installation to Gridly: we collect data about your site and connected devices (such as the location of the installation, smart meter, solar inverter, home battery, heat pump and charger), measurements such as energy consumption, generation, power and state of charge, and the schedules, settings and preferences you set. Where you link an account with a device manufacturer or an energy supplier, we store the access details needed to read and control your devices or to retrieve tariffs.
• When you use the Gridly app: we collect technical data such as the app version, device type, operating system and, if you allow it, a push notification token. We collect diagnostic data about crashes and errors to improve the app.
• When you submit a support request: we collect your email address so we can respond, and your description of the problem. We strongly recommend not sending us screenshots or attachments that contain confidential or personal data that is not needed to solve the problem.
• When you visit our websites: we may collect data from your computer and internet connection, including your IP address, the date and time of your visit, the address of the website that referred you, the device you use and your movements and preferences on our websites.
• When you attend a webinar or event of Gridly: we collect your first and last name, email address, company name, country and area of interest.
• From other sources: we may receive Personal Data from installers and partners who install or manage your system, from your energy supplier or device manufacturer when you link them, from marketing partners, social media platforms and recruitment partners, from co-workers or household members who invite you, and from publicly available sources.
• Offline: we may collect Personal Data about you offline, for example when you visit our booth at an event or call us.

If you provide Personal Data relating to other people (for example when you invite a household member, or as an installer on behalf of your customer), you confirm that you are entitled to do so and that we may use this information in accordance with this privacy notice.

Newsletters and updates

If you subscribe to our newsletter and/or updates, we use your email address to send them to you. You can unsubscribe at any time with the link in each newsletter or update, or by contacting privacy@gridly.energy.

Invitations

If you invite another person to a household or organization in Gridly, we ask you for that person's name and email address. We then send that person an invitation email to create an account or join your household or organization. We store this information to send the invitation and to process its acceptance.

Statistical information

We collect information about visits to our websites and use of the Gridly Services to provide a better experience and service and to make the Gridly Services as user friendly and useful as possible. For example, we keep track of the domains from which people visit and measure activity on our websites. When we do so, we keep this information anonymous or aggregated.

We use this data to analyze trends and statistics and to improve our services. This information is not reviewed at an individual level.

Links to other websites

The Gridly Services may contain links to other websites. Gridly is not responsible for the privacy practices or the content of those websites. A link from the Gridly Services to another website does not mean that Gridly endorses or has reviewed that website. We suggest contacting the operators of those websites directly for information on their privacy policies.

Energy data and platform analytics

We use the energy and device data of your installation to provide our energy management services: to show your consumption, generation and savings, to forecast and plan, to control your devices on your behalf (for example charging and discharging a battery), and to explain the decisions we make.

This data, and the insights and statistics derived from it, are visible to the members of your household or organization and, depending on the permissions set, to the installer or partner who manages your installation.

Use of Personal Data

We only use Personal Data when the law allows us to. Most commonly, this is to perform a contract with you or your employer, on the basis of the consent you gave us, when it is necessary for our legitimate interests (and your interests and rights do not override them), or when we need to comply with a legal or regulatory obligation.

We may use Personal Data:

• to sign you in to the Gridly Services;
• to manage our relationship with you, for example as a customer, household member, installer or event attendee;
• to provide the products and services you requested, including monitoring and controlling your energy installation;
• to respond to your questions and fulfil your requests;
• to send you service messages and notifications, such as alerts about your installation and changes to our services, terms, conditions and policies;
• to allow you to invite others and share access to your household or organization;
• to send you marketing communications that may be relevant to you;
• for our business purposes, such as data analysis, audits, fraud monitoring and prevention, developing new products, improving and modifying our services and algorithms, identifying usage trends, determining the effectiveness of our promotional campaigns and operating and expanding our business;
• to support installers and partners in installing, managing and maintaining the installations of their customers;
• to allow you to take part in competitions and promotional activities and to administer them (some of these activities have additional rules, which may contain more information about how we use Personal Data, so we suggest you read them carefully);
• to facilitate social sharing functionality; and
• as we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal processes; (c) to respond to requests from public and government authorities, including those outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations and those of any of our affiliates; (f) to protect our rights, privacy, safety and property, and those of our affiliates, you and others; and (g) to pursue available remedies and limit the damages that we may sustain.

We may use Personal Data for compatible purposes if we need to do so.

Legitimate interest

For any processing based on legitimate interest, we have carried out an assessment to make sure that it is not overridden by your rights or interests.

Developing the Gridly Services: we use aggregated and personal data about the use of the Gridly Services and the energy data of installations to develop and improve our products, forecasts and control algorithms. This is necessary for our interest in building better products, better technology and better communication.

Sharing Personal Data

Gridly does not sell Personal Data. We consider this information a vital part of our relationship with you. There are, however, certain circumstances in which we may share Personal Data with third parties without further notice to you, as set out below:

• Like many businesses, Gridly engages other companies to perform certain business functions, such as hosting, data analysis, IT infrastructure, customer service, email delivery, push notifications, auditing, payment processing and similar services. When we do, we only provide them with the information they need to perform their specific function, and we enter into a data processing agreement with them where required.
• With the installer, partner or energy company through which you use Gridly, or that manages your installation, to the extent needed to install, support and operate your installation.
• With device manufacturers and energy suppliers whose systems you connect to Gridly, to the extent needed to read and control your devices or retrieve tariffs. Their use of this data is governed by their own privacy policies.
• By you, in shared spaces such as households, organizations, message boards, chat, profile pages, blogs and other services where you can post information (including our social media pages). Information you post in public spaces becomes public and may be available to other users of the Gridly Services and to the general public. Please be careful when deciding to disclose information about yourself.
• With your connections on social media and your social media account provider, in connection with your social sharing activity. By connecting your social media account, you authorize us to share information with your social media account provider, and the use of that information is governed by the privacy notice of that social media site. If you do not want this, do not connect your social media account and do not use social sharing.
• Gridly may share your registration data for an event of Gridly with the partners of Gridly listed on the registration page. These partners use your registration data for their participation in the event. If a partner intends to use your Personal Data for other purposes, they will contact you to explain how and for which purposes.
• In the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings), we may disclose Personal Data to a third party.
• As we believe to be necessary or appropriate, we may also disclose Personal Data to a third party: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal processes; (c) to respond to requests from public and government authorities, including those outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations and those of any of our affiliates; (f) to protect our rights, privacy, safety and property, and those of our affiliates, you and others; and (g) to pursue available remedies and limit the damages that we may sustain.

Security

We treat Personal Data as strictly confidential. To protect it against accidental or unlawful destruction, loss, use or alteration and against unauthorized disclosure or access, we use appropriate physical, technical and organizational security measures. If you have reason to believe that your interaction with us is no longer secure (for example, if you think the security of your Gridly account has been compromised), please notify us immediately.

Cookies

Cookies are small pieces of text stored on your computer or mobile device that distinguish you from other users. Like most websites, our websites use cookies. Only strictly necessary cookies and similar storage (for example to remember your language and your cookie choice) are active by default; they do not collect Personal Data. Analytics cookies (Google Analytics) are only placed after you accept them in the cookie banner. You can change your choice at any time by clearing the cookies and site data of our website in your browser.

The Gridly app and portal store data on your device that is needed to keep you signed in and to remember your settings.

Your rights

If you tell us that you do not want us to use your Personal Data to contact you further, we will respect your wishes. Regarding our use of your Personal Data, you have a number of rights, such as:

• request access to the Personal Data we hold about you;
• ask us to erase the Personal Data we hold about you;
• object to any processing we do on the basis of legitimate interests;
• ask us to restrict the processing of your Personal Data;
• receive the Personal Data you provided to us in a structured, commonly used and machine-readable format (data portability);
• withdraw your consent at any time, where we process Personal Data on the basis of consent;
• unsubscribe from our newsletter and/or updates at any time with the link at the bottom of each email, or by contacting privacy@gridly.energy;
• ask us to correct any incorrect Personal Data we hold about you. If you have a Gridly account, you can review and update most of this information yourself in the app or portal.

If you want to exercise any of these rights, or have any other question about your Personal Data, please contact us at privacy@gridly.energy.

In your request, please tell us what you would like us to do. For your protection, we may only carry out requests for the Personal Data associated with the email address you use to send the request, and we may need to verify your identity first. We will respond as soon as reasonably practicable and in any case within the period required by law.

We may need to retain certain information for record keeping purposes. There may also be residual information that remains in our databases and other records, which will not be removed.

You also have the right to lodge a complaint with a supervisory authority. In the Netherlands this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Retention

Unless indicated otherwise when we collect your Personal Data (for example in a form you complete), we erase Personal Data once we no longer need it for the purposes for which it was collected or otherwise processed, or to comply with legal obligations (such as retention obligations under tax or commercial law).

Transfer of Personal Data

Personal Data is stored on servers located within the European Economic Area, and may also be processed in any country where we have facilities or in which we engage service providers.

If we transfer Personal Data about you outside the European Economic Area, we make sure that it is protected in a manner consistent with the General Data Protection Regulation (GDPR). Where required by applicable law, we only transfer Personal Data to recipients outside the European Economic Area in a country with an adequacy decision of the European Commission, or if the recipient has entered into the EU Standard Contractual Clauses with us.

Changes to this privacy notice

Our business and the Gridly Services may change from time to time. As a result, we may need to change this privacy notice. We reserve the right to update or modify it at any time. The date at the top shows when it was last updated; if we make significant changes, we will inform you through the Gridly Services or by email. We recommend that you review this privacy notice regularly so that you stay informed.