Privacy Statement Global Energy Label
This privacy statement applies to the processing of personal data by Global Energy Label, established in the Netherlands and active throughout Europe, including via the website globalenergylabel.com. We attach great importance to your privacy and handle your personal data with care and transparency, in accordance with the General Data Protection Regulation (GDPR) and other applicable laws and regulations.
1. Data controller and contact details
The controller responsible for the processing of your personal data is:
Global Energy Label
Website: globalenergylabel.com
Email: info@globalenergylabel.com
If you have any questions or requests regarding privacy and data protection, you can contact us via the above email address or telephone number.
2. What personal data do we process?
We only process personal data that is necessary to provide our services and improve our service delivery. Depending on your use of our website and services, we may process, among others, the following categories of personal data:
Data you provide yourself
For example, when you complete a contact form, request a quote, or enter into an agreement with us:
• Name and contact details (such as name, company name, address, email address, telephone number).
• Invoice and payment details (such as billing address, bank or payment details, VAT number if applicable).
• Details about your organization, building(s) and/or installations insofar as relevant for energy-related services (for example type of building, location, intended use, consumption data if provided by you).
• Content of your messages or questions to us.
Automatically collected data
When you visit our website, we may automatically collect certain data through cookies and similar technologies:
• IP address and general location (country or region).
• Device data (such as type of device, browser, operating system).
• Usage data (such as pages visited, click behavior, date and time of visit, referring website).
3. Purposes and legal bases for processing
We only process your personal data for specific, explicitly described and legitimate purposes. For each purpose, there is an appropriate legal basis under the GDPR.
Performance of a contract
We process personal data in order to:
• Be able to provide and perform our services, including advice and services in the field of energy labels and related energy solutions.
• Prepare and send quotations.
• Handle invoicing and payment processing.
• Communicate with you about the performance of the agreement and our services.
Legal basis: necessary for the performance of a contract or to take steps at your request prior to entering into a contract.
Legal obligations
In some cases, we are legally obliged to retain and/or provide certain data, for example for tax and administrative obligations or to comply with requests from competent authorities.
Legal basis: necessary for compliance with a legal obligation.
Legitimate interest
We may also process your data on the basis of our legitimate interest, provided that your privacy interests do not outweigh this. This includes, among others:
• Improving and securing our website and systems.
• Maintaining customer relationships and sending targeted service messages.
• Maintaining adequate business administration and internal reporting.
Legal basis: our legitimate interest in operating safely and efficiently, within the limits of your privacy rights.
Consent
For certain processing activities, we ask for your explicit consent, for example for:
• Sending newsletters or other forms of electronic marketing, if you are not a customer or where required by law.
• Placing and reading non-functional or non-anonymous analytical or marketing cookies (insofar as required).
You can withdraw your consent at any time. This does not affect the lawfulness of the processing before the withdrawal.
4. Retention periods
We do not retain your personal data longer than is necessary for the purposes for which we obtained it, unless we are legally obliged to retain data for a longer period.
In practice, we apply, among others, the following (categories of) retention periods:
• Administrative and invoicing data: up to a maximum of 7 years after the end of the financial year, in connection with statutory tax retention obligations.
• Data in the context of an agreement: up to a maximum of 5 years after the end of the service provision or relationship, unless a longer period is necessary in connection with (possible) disputes or legal obligations.
• Contact requests: up to a maximum of 2 years after your request has been handled, unless this results in a customer relationship or agreement.
• Cookie and usage data: in accordance with the retention periods stated in our cookie settings and/or cookie banner; as a rule, this data is not kept longer than necessary for the relevant analysis or marketing purposes.
After the retention period has expired, your personal data will be carefully deleted or anonymised.
5. Sharing personal data with third parties
We do not sell your data to third parties. However, where necessary, we may use third parties that process personal data on our behalf. These parties are called “processors” and act solely in accordance with our instructions and in compliance with the GDPR.
This includes, for example:
• Hosting and IT service providers that manage our website and systems.
• Email and communication service providers.
• Payment service providers and financial service providers for payment processing.
• Advisors and other professional service providers (such as accountants or legal advisors) insofar as this is necessary.
• Analytics and marketing partners for improving our website and services, if and insofar as you have given your consent for this.
We conclude data processing agreements with these processors that comply with the requirements of the GDPR. Where necessary, personal data may also be shared with third parties that are independently responsible for processing, such as government authorities or supervisory authorities, but only if we are legally obliged to do so or if this is necessary to protect our rights.
6. Transfer of personal data outside the European Economic Area (EEA)
As we are active throughout Europe, it is possible that personal data is processed or stored outside the European Economic Area (EEA), for example via our service providers. In such cases, we ensure that the transfer only takes place if an adequate level of protection is guaranteed, in accordance with the GDPR. This may be the case, for example, because the European Commission has adopted an adequacy decision, or because we use standard contractual clauses approved by the European Commission.
7. Cookies and similar technologies
We use cookies and similar technologies on our website to improve its functionality, analyse usage and, if you consent, tailor our services and content to your interests.
Types of cookies
In general, we distinguish between:
• Functional cookies: necessary for the proper functioning of the website and to remember your preferences (for example language settings).
• Analytical cookies: to measure and analyse the use of the website, so that we can improve quality and user experience. Where possible, this data is anonymised or pseudonymised.
• Marketing and tracking cookies: to track your browsing behaviour so that we can show relevant information and offers. These are only placed if you have given your consent.
On your first visit to our website, you are informed about the use of cookies and, where legally required, asked for your consent. You can change your cookie preferences at any time via your browser settings or, where available, via the cookie settings on our website.
8. Security of your personal data
We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction. These measures are regularly evaluated and, where necessary, adjusted in line with the state of the art and the nature of the processing.
Despite all efforts, no method of data transmission over the internet or method of storage can be guaranteed to be 100% secure. If you believe that your data is not properly secured or there are indications of misuse, please contact us immediately using the contact details at the bottom of this statement.
9. Your rights as a data subject
Under the GDPR, you have a number of rights with regard to your personal data. Upon your request, we will respect these rights within the statutory time limits and conditions.
These include the following rights:
• Right of access: you have the right to obtain an overview of the personal data we process about you.
• Right to rectification: you have the right to have inaccurate or incomplete personal data corrected or completed.
• Right to erasure (right to be forgotten): you can ask us to delete your personal data, for example when the data is no longer necessary for the purposes for which it was collected or when you withdraw your consent (insofar as the processing is based on it).
• Right to restriction of processing: in certain cases, you can request that the processing of your personal data be restricted.
• Right to data portability: you have the right to receive your personal data in a structured, commonly used and machine-readable format and to transfer this data to another service provider, insofar as this is technically possible and the processing is based on your consent or on a contract.
• Right to object: you can object to the processing of your personal data based on our legitimate interest. We will cease processing unless we have compelling legitimate grounds that outweigh your interests, rights and freedoms, or if the processing is related to legal claims.
• Right to withdraw consent: if the processing is based on your consent, you have the right to withdraw this consent at any time.
You can exercise your rights by sending a request to info@globalenergylabel.com. To protect your privacy, we may ask you to verify your identity.
10. Complaints to the supervisory authority
We are happy to assist you if you have a complaint about the way we handle your personal data. In that case, please contact us first. In addition, you always have the right to file a complaint with the competent supervisory authority. In the Netherlands, this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). If you live or work in another European country, you can also lodge a complaint with the supervisory authority in that country.
11. Changes to this privacy statement
We may amend this privacy statement from time to time, for example in connection with changes to our services or to applicable laws and regulations. The most recent version can always be found at globalenergylabel.com. We recommend that you consult this statement regularly so that you remain informed of any changes.
12. Contact
Do you have any questions, comments or requests about this privacy statement or about the processing of your personal data by Global Energy Label? Then please contact us via:
Email: info@globalenergylabel.com
Website: globalenergylabel.com
Global Energy Label 