Privacy Policy

SolarNordics, is the “controller”, as defined by the European General Data Protection Regulation (GDPR), with respect to the data processing on this website. We respect and protect your privacy rights. We understand the importance of personal information that we receive from you as a user of our website. We respect the protection of your personal data and will collect, store or process all data obtained exclusively in accordance with the relevant data protection regulations and within the scope of our business purpose.

Personal data is all information relating to an identified or identifiable natural person. A natural person is considered as identifiable if they can be identified directly or indirectly, in particular by association with an identifier, such as a name, an identification number, location data, online identification data or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.

If we obtain your consent for the processing of personal data, Article 6 (1) sentence 1 lit. a of the European Data Protection Regulation (GDPR) serves as the legal basis.

The processing of personal data required for the performance of a contract with you is based on Art. 6 (1) p. 1 lit. b) GDPR. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, this is to be done within the framework of Art. 6 (1) p. 1 lit. c) GDPR.

If the processing is necessary to protect a legitimate interest of us or a third party and this interest is not overridden by your interests, fundamental rights and freedoms, Article 6 (1) sentence 1 lit. f) GDPR serves as the legal basis for the processing. The legitimate interest of our company is usually the provision of our owed/due services and / or ongoing optimisation of our services and presentations.

Your personal data will be erased or blocked as soon as the purpose for its retention ceases to exist. The retention period may be extended if this is provided for by the European or national legislators in EU regulations, laws, or other directives. Data will also be deleted or blocked if a retention period as stated by the legal rules above expires, unless there is a need for further data retention in order to conclude or fulfil a contract.

In principle, we do not collect or use any personal data when you visit our website. We only collect and use your personal data to the extent that is necessary for providing a functional website and our content and services. The collection and utilisation of personal data occurs only after active consent by the user. Exceptions apply in cases where obtaining consent is impossible for factual reasons and where data processing is permitted by law.

In the following, we would like to inform you about the type, scope, and purpose of our data handling within the framework of this website:

Any time our website is accessed, the user’s access data that are required for enabling and billing the use is stored on our server in a log file which is automatically transmitted to us by your browser.

Those are:

• Browser type / browser version
• Operating system used
• Host name of the accessing computer
• Date and time of server request
• IP address of the computer accessing the website
• Website from which our website was accessed (Referrer URL)
• Files accessed
• Data volume transferred

The log files are stored for the following purposes:

• Evaluation of file access for statistical purposes
• System security and stability of the website
• Review for any use that violates the terms of contracts or is otherwise unlawful provided that there are actionable indications for this.

This data processing operation is based on Art. 6. (1) p. 1 lit. f) GDPR. Our legitimate interest follows from the above-mentioned purposes for data collection. We do not use the data collected for the purpose of identifying you. We do not combine this data with other data sources.

Whenever our website is viewed, so-called “cookies” are stored on the user’s computer. A cookie is a small text file in the designated directory of the computer. This file is used to identify the user’s computer for the duration of the session. Cookies cannot manipulate the user’s end device and can be deleted manually at any time, most easily in the browser.

You can individually set the handling of cookies in your internet browser so that cookies are rejected or only accepted after confirmation. The sole purpose of cookies which are regulated here with the scope of legitimate interest, so-called “session cookies” is to ensure the function of our Internet offer. Please note that some features of our application cannot work properly if you decide to reject cookies in general.

The processing of the data by cookies is required for the aforementioned purposes to safeguard our legitimate interests as well as those of third parties according to article 6 (1 ) p. 1 lit. f) GDPR.

We collect and use personal data on the basis of Art. 6 (1) p. 1 lit. b) GDPR from you to the extent necessary to enable the use of our website (usage data).

If you use the contact form to send us inquiries, we will store your data from the form or the e-mail address provided for contacting you, including the contact data you provided there, only for processing the respective inquiry and in case we have any follow-up questions. We do not pass this data on to third parties without your consent. This data usage is based on article 6 (1) p. 1 b) GDPR as part of the processing of your concern. In order to prevent unauthorised access to your personal data, the e-mail traffic is encrypted by SSL/TLS-technology.

We offer our planning tool “QuickPlan” on our website. If you use “QuickPlan” as an end customer and consent actively to a forwarding of your personal data, we will send those to a maximum of one to three (1-3) cooperating installers for the purpose of submitting an offer. The legal basis for this is Article 6(1) p. 1 lit. b) GDPR. The further and subsequent data usage by the external installers is outside our purview.

In addition, we offer a free newsletter to our partner resellers to provide them with new information. In order to receive the newsletter, we ask you to provide your e-mail address and an evidence of business registration. The disclosure of additional, separately marked data is optional.

We use the double-opt-in procedure for the newsletter subscription. After you have signed up, we will send you an e-mail to the provided e-mail address and ask for confirmation that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and the times of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to investigate possible misuse of your personal data. After your confirmation, we save your e-mail address only for the purpose of sending the newsletter.

The legal basis for this is Article 6 (1) p. 1 lit. a) GDPR. You can unsubscribe at any time, e. g. by clicking on the corresponding link at the end of each newsletter or, for instance, by sending an e-mail to info@solarnordics.com.

On our website, we offer you the opportunity to register by providing your personal data. The data is entered in an input mask and transmitted to us and stored.

The following data is collected during the registration process:

• Company
• Customer number
• Salutation
• First name
• Last name
• Address of customer
• Postal code
• City
• Phone number
• E-mail address

The following data is also stored at the time of registration:

• IP address of the user
• Date and time of registration

Registration in the partner login serves to make certain content and services available as part of our services. The legal basis for data processing is your consent, given during the registration process and revocable at any time, based on Art. 6 (1) p. 1 lit. a) GDPR. We do not pass this data on to third parties without your consent.

The use of tracking tools and in particular cookies set for this purpose is based on Art. 6 (1) p. 1 lit. a) GDPR by your consent, which can be revoked at any time. In this way, we want to ensure a needs-based design and the ongoing optimization of our website (through statistical evaluations).

Please note: If you give consent here, you also consent to the transfer of personal data to the USA. Some service providers whose services we use, such as Google, are based in the USA (details in our privacy policy). In the USA, there is no level of data protection comparable to EU standards. Other sufficient guarantees for data transfer are also lacking. There is therefore a risk that public authorities in particular may access personal data without having sufficient information and legal protection.

Our website uses cookies. We use this data to ensure the full functionality of our website as well as to inform the user about the use of cookies on our website and to obtain and record the user’s consent.

The following data is transmitted automatically:

• Anonymised IP address of the user;
• Date, time of consent;
• User agent of the end user’s browser;
• Website from which the access was made (referrer URL);
• Anonymous, random and encrypted key;
• The cookies allowed by the user (cookie status), which serves as proof of consent.

An automatically created key for managing/proving granted consents and the consent status are also stored in the end user’s browser in the cookie “ews”. This allows the website to automatically read and comply with the end user’s consent in all subsequent page requests and future end user sessions for up to 12 months.

The legal basis for the data processing is Art. 6 (1) lit. c GDPR. Only with a corresponding mechanism for granting and managing consent can we comply with the legal requirements.

You can prevent the collection and processing of your data by disabling the execution of script codes in your browser settings or by installing a script blocker in your browser.

Where we process your personal data on our website you are a “data subject”, as defined by the GDPR. Therefore, you have the following rights vis-à-vis us:

You shall have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information:

• The purposes of the processing;
• The categories of personal data concerned;
• The recipients or categories of recipients to whom your personal data have been disclosed or are still being disclosed;
• The envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
• The existence of a right to lodge a complaint with a supervisory authority;
• Where the personal data are not collected from you, any available information as to their source;
• The existence of an automated decision-making process, including profiling pursuant to article 22 (1) and (4) of the GDPR and, at least in these cases, meaningful information on the logic involved, as well as the significance and the envisaged consequences of such a processing for you.

You also have the right to be informed as to whether your personal data is transferred to a third country or to an international organization. In this context, you have the right to be informed of the appropriate safeguards pursuant to article 46 GDPR relating to the transfer.

You have the right to obtain from us without undue delay the rectification and/or completion of your personal data, provided that your processed data is incorrect or incomplete. Should this be the case, we will make the correction without delay.

You shall have the right to obtain from the controller restriction of processing where one of the following applies:

• You contest the accuracy of your personal data for a period of time that enables us to verify the accuracy of the data
• The processing is unlawful and you oppose the erasure of your personal data and request the restriction of their use instead;
• We no longer need your personal data for the purposes of processing, but you require them for the establishment, exercise or defence of legal claims, or
• You have objected to the processing pursuant to article 21 (1) GDPR pending the verification whether our legitimate grounds override your legitimate grounds.

If you have requested the restriction of the processing of your personal data, these shall – with the exception of storage – only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or of a Member State. You will be informed by us before the restriction is lifted.

You shall have the right to obtain from us the erasure of your personal data without undue delay. We are obliged to erase personal data without delay where one of the following reasons applies:

• Your personal data is no longer necessary for the purposes for which they were collected or otherwise processed.
• You withdraw consent on which the processing is based according to article 6 (1) p. 1 lit. a) or article 9 (2) lit. a) GDPR, and where there is no other legal ground for the processing.
• You object to processing pursuant to article 21 (1) GDPR and there are no overriding legitimate grounds for the processing.
• In accordance with article 21 (2) GDPR, you object to the processing by means of direct marketing.
• The personal data have been unlawfully processed.
• Your personal data have to be erased for compliance with a legal obligation in Union or Member State law to which we are subject.
• Your personal data have been collected in relation to information society services referred to in article 8 (1) GDPR.

If we have made your personal data public and we are obliged to erase it pursuant to article 17 (1) GDPR, we shall take reasonable steps, taking into account the available technology and the implementation costs, to inform responsible person/s which is/are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

Your right to erasure shall not apply to the extent that processing is necessary:

• For exercising the right to freedom of expression and information;
• For compliance with a legal obligation which requires processing by Union or of the Member State law to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
• For reasons of public interest in the area of public health in accordance with article 9 (2) lit. h) and i) and article 9 (3) GDPR;
• For archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes pursuant to article 89 (1) of the GDPR, insofar as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of this processing, or
• For the establishment, exercise or defence of legal claims.

Where you have exercised your right to the rectification or erasure of data or the restriction of its processing vis-à-vis us, we have a duty to communicate this rectification or erasure of the data or the restriction of its processing to all recipients to whom your personal data was disclosed, unless this proves impossible or involves disproportionate effort.

You have a right to be informed about these recipients.

You have the right to receive your personal data, which you may have provided us, in a structured, commonly used and machine-readable format. In addition, you have the right to transmit this data to another responsible person without hindrance, provided that

• the processing is based on consent pursuant to article 6 (1) p. 1 lit. a) GDPR or article 9 (2) lit. a) GDPR or on a contract pursuant to article 6 (1) p. 1 lit. b) GDPR
• the processing is carried out by automated means.

You also have the right to have the personal data transmitted directly from one controller to another, where technically feasible. This shall not adversely affect the rights and freedoms of others.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

We do not believe that the data currently being processed within the offering of our website include data that is subject to the right of data portability.

You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data, which is based on article 6 (1) p. 1 lit. e) or f) GDPR at any time, including profiling based on those provisions.

We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

Where your personal data are processed for direct marketing purposes, you shall have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

You have the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects for you or has similar significant negative effects for you. We do not perform such processing operations.

Without prejudice to any other rights of administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, place of work or the place of the alleged infringement, if you feel that the processing of your personal data violates the GDPR.

On our website we may also use links to websites of other providers. This privacy policy does not apply to this extent. Please read the privacy notice of the respective provider where your use of the websites of these other providers involves the collection, processing or use of personal data. We are not responsible for their data protection handling.

Your personal data will be stored exclusively on our servers or on servers used on our behalf. Access and use of the data is only possible for an expressly authorised group of employees or service providers and is only limited to data necessary for the completion of their respective task.

Your data will not be transferred to third parties without your consent. A data transfer to third countries (countries outside the European Economic Area – EEA) does not take place, unless otherwise stated in this privacy policy, and is not intended in the future.

To protect your personal data, we have taken technical and organisational measures to ensure that your data is protected against accidental or intentional loss, destruction or manipulation and against access by unauthorised persons. Our protective measures are reviewed at regular intervals and, if necessary, adapted to technical progress.

We reserve the right to change this privacy policy at any time as required and with reference to the data protection regulations in effect at the time when the privacy notice is changed.

Version: November 2022