Privacy Policy – Global Energy Label

This Privacy Policy explains how Global Energy Label (“Global Energy Label”, “we”, “us”, or “our”) collects, uses, shares, and protects your personal data when you visit our website or use our services. We are committed to processing personal data in compliance with the General Data Protection Regulation (“GDPR”) and applicable Dutch and EU data protection laws.

1. Who we are

The data controller responsible for the processing of your personal data is:

Global Energy Label
Based in Utrecht, The Netherlands
Website: globalenergylabel.com
Email: info@globalenergylabel.com

Global Energy Label provides Energy Performance Certificates (EPCs) and related services across the European Union.

2. What personal data we collect

We only collect personal data that is relevant for providing our services and operating our business. Depending on how you interact with us, we may collect the following categories of personal data:

Identification and contact details: such as your name, email address, and telephone number.
Professional details: such as your company name, role or position, and business contact details.
Property details: information about the property for which you request an Energy Performance Certificate, such as address, type of building, size, and relevant technical or usage details you provide.
Communication data: content of your messages and enquiries submitted via our contact or quote forms, or sent to us by email.
Website usage data: such as IP address, browser type, pages visited, and other technical data collected through cookies and similar technologies, as described in our Cookie Policy.

We typically obtain this data directly from you when you fill in our contact or quote forms, communicate with us by email or phone, or use our website.

3. Why we collect your personal data

We use your personal data only for specified and legitimate purposes. In particular, we process your personal data for the following purposes:

To provide EPC services: to prepare and deliver Energy Performance Certificates and related consultancy, including assessing properties, preparing documentation, and communicating with you about the service.
To manage enquiries and quotes: to respond to your requests for information, quotations, or support submitted via our website, email, or phone.
To maintain our business relationship: to manage contracts, invoicing, and customer administration.
To improve our services and website: to analyse website usage and service performance (where permitted) to improve our offerings and user experience.
To send partner or service-related communications: to send you relevant updates or information about our services, our partners, or regulatory changes related to EPCs, where permitted by law and, where required, with your consent.
To comply with legal obligations: to keep records required by tax, accounting, or other applicable regulations.

4. Legal basis for processing

We process your personal data only where we have a valid legal basis under Article 6 of the GDPR. Depending on the context, this may include:

Performance of a contract (Article 6(1)(b) GDPR): when the processing is necessary to enter into or perform a contract with you, for example to provide EPC services or respond to your specific request for a quote.
Legitimate interests (Article 6(1)(f) GDPR): when the processing is necessary for our legitimate business interests, such as maintaining our customer relationships, improving our services and website, preventing fraud or misuse, or defending legal claims, provided that your interests and fundamental rights do not override those interests.
Consent (Article 6(1)(a) GDPR): when you have explicitly consented to a particular type of processing, for example receiving certain marketing or partner communications, or the placement of non-essential cookies. You can withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Compliance with a legal obligation (Article 6(1)(c) GDPR): when we need to process your data to comply with applicable laws, including Dutch tax and accounting regulations.

5. How long we keep your data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or to meet legal, accounting, or reporting requirements. The specific retention periods include:

Enquiries and quotations: data related to general enquiries, contact requests, and quotes is kept for up to 2 years from our last interaction, unless we are required by law to keep it longer or you request its earlier deletion where permitted.
Contracts and service delivery: data related to concluded agreements, invoices, and the provision of EPC services is kept for up to 7 years after the end of the financial year in which the service was provided, in line with Dutch legal and tax retention requirements.

After the applicable retention period, we will delete or anonymise your personal data in a secure manner.

6. Who we share your data with

We do not sell or trade your personal data to third parties. We will only share your personal data when this is necessary for our services, required by law, or when you have given your consent.

In particular, we may share your personal data with:

Service providers and processors: trusted third parties who provide services to us, such as website hosting, IT support, email service providers, customer relationship management tools, or accounting software. These parties act as processors on our behalf and are bound by written data processing agreements that require them to handle your personal data securely and only in accordance with our instructions and applicable law.
Professional advisors: such as lawyers, auditors, or consultants, where necessary to protect our legitimate interests and when they are subject to confidentiality obligations.
Public authorities: where we are legally obliged to disclose information, for example to tax authorities, regulators, or in the context of legal proceedings.

Where data is transferred outside the European Economic Area (EEA), we will ensure that appropriate safeguards are in place in accordance with GDPR requirements, such as the use of EU Standard Contractual Clauses or equivalent mechanisms.

7. Your rights

Under the GDPR, you have a number of rights in relation to your personal data. Depending on the circumstances and subject to certain conditions and exceptions, you may have the right to:

Access: to obtain confirmation as to whether we process your personal data and, if so, to receive a copy of the personal data we hold about you.
Rectification: to request the correction of inaccurate or incomplete personal data.
Erasure: to request the deletion of your personal data where, for example, it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
Restriction: to request that we restrict the processing of your personal data in certain situations, for example while we verify the accuracy of your data or assess an objection.
Data portability: to receive your personal data in a structured, commonly used and machine-readable format, and to transmit that data to another controller where technically feasible.
Objection: to object to the processing of your personal data where we rely on legitimate interests as our legal basis, including profiling, or to object at any time to processing for direct marketing purposes.
Withdraw consent: where processing is based on your consent, to withdraw that consent at any time.

You also have the right to lodge a complaint with your local supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

8. Cookies and similar technologies

Our website uses cookies and similar technologies to ensure the proper functioning of the site, to analyse usage, and, where applicable, to personalise content. Some cookies are necessary for the website to function and do not require your consent. Non-essential cookies, such as analytical or marketing cookies, are used only with your prior consent, where required by law.

For more detailed information about the cookies we use, the purposes for which we use them, and how you can manage your cookie preferences, please refer to our Cookie Policy.

9. Contact for privacy matters

If you have any questions, requests, or concerns about this Privacy Policy or the way we handle your personal data, or if you wish to exercise any of your rights, you can contact us at:

Global Energy Label
Email: info@globalenergylabel.com
Website: globalenergylabel.com

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, applicable laws, or other operational, legal, or regulatory reasons. We encourage you to review this page periodically to stay informed about how we process your personal data. The updated version will be indicated by the “Last updated” date below and will be effective as soon as it is accessible.

Last updated: August 2026