Planning tool for buildings & districts

Privacy

Data protection for the users of our services is our top priority. This page provides detailed information about data protection policy at npro.energy. If you have any questions about data protection, please feel free to use the provided contact options.

Basics

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data includes all data that can personally identify you. Detailed information on data protection can be found in our privacy policy listed below.

Data Collection on This Website

Data processing on this website is carried out by the website operator. You can find their contact details in the section "Notice Regarding the Responsible Party" in this privacy policy.

How Do We Collect Your Data?

Your data is collected in two ways: First, you may provide it to us, for example, by entering data into a contact form. Other data is collected automatically or based on your consent when visiting the website through our IT systems. This includes technical data (e.g., internet browser, operating system, or the time of the page visit). This data is collected automatically as soon as you enter this website.

What Do We Use Your Data For?

Some of the data is collected to ensure the website functions correctly. Other data may be used to analyze your user behavior. If contracts can be concluded or initiated via the website, the transmitted data is also processed for contract offers, orders, or other business inquiries.

What Rights Do You Have Regarding Your Data?

You have the right to receive information about the origin, recipients, and purpose of your stored personal data at any time, free of charge. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can withdraw this consent at any time with future effect. Additionally, under certain circumstances, you have the right to request the restriction of the processing of your personal data. You also have the right to file a complaint with the competent supervisory authority. For these and any other questions regarding data protection, you can contact us at any time.

Analytics Tools and Third-Party Tools

When visiting this website, your browsing behavior may be statistically analyzed. This is primarily done using so-called analytics programs. Detailed information on these analytics programs can be found in the following privacy policy.

General Information and Mandatory Disclosures

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations as well as this privacy policy. When you use this website, various personal data is collected. Personal data includes information that can personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

Please note that data transmission over the internet (e.g., communication via email) may have security vulnerabilities. A complete protection of data from third-party access is not possible.

Notice Regarding the Responsible Party

The responsible party for data processing on this website is:

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage Duration

Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for data processing ceases. If you make a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial retention periods); in such cases, deletion will occur once these reasons no longer apply.

General Information on the Legal Bases for Data Processing on This Website

If you have given consent to data processing, we process your personal data based on Article 6(1)(a) GDPR or, in the case of special categories of personal data under Article 9(1) GDPR, on Article 9(2)(a) GDPR. If explicit consent has been given for the transfer of personal data to third countries, processing is additionally based on Article 49(1)(a) GDPR.

If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), data processing also takes place in accordance with § 25(1) TDDDG. Your consent can be withdrawn at any time.

If your data is required to fulfill a contract or to carry out pre-contractual measures, processing is based on Article 6(1)(b) GDPR. Additionally, we process your data if it is necessary to comply with a legal obligation under Article 6(1)(c) GDPR. Data processing may also be based on our legitimate interest according to Article 6(1)(f) GDPR.

The specific legal bases applicable in each case are outlined in the relevant sections of this privacy policy.

Data Protection Officer

For any questions regarding data protection or the processing of your data, you can contact us through the provided contact options: Contact.

Data Transfer to Third Countries

Some of the tools we use may transfer data to countries outside the EU. If the provider is not certified under the EU-US Data Privacy Framework (DPF) or the data is transferred to a country with inadequate data protection standards, there is a risk that personal data will not be protected to the same extent as within the EU. Details on the affected services and data recipients can be found in this privacy policy.

Recipients of Personal Data

As part of our business activities, we work with various external entities. In some cases, it is necessary to transfer personal data to these external parties.

We only share personal data with external entities if it is necessary for contract fulfillment, if we are legally required to do so (e.g., sharing data with tax authorities), if we have a legitimate interest under Article 6(1)(f) GDPR in sharing the data, or if another legal basis permits the transfer.

When using data processors, we only transfer personal data based on a valid data processing agreement (DPA). In the case of joint processing, a joint processing agreement is concluded.

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You can revoke a previously given consent at any time. The legality of the data processing carried out before the withdrawal remains unaffected by the revocation.

Right to Object Under Article 21 GDPR

You have the right to object at any time to the processing of your personal data if it is based on legitimate interest (Article 6(1)(f) GDPR). In such cases, your data will no longer be processed unless there are compelling legitimate grounds for the processing that override your interests.

If your personal data is processed for direct marketing purposes, you have the right to object at any time. In this case, your data will no longer be used for such purposes. You can submit your objection via email to the address provided in our Contact section.

Right to Lodge a Complaint with a Supervisory Authority

Data subjects have the right to lodge a complaint with a data protection supervisory authority if they believe that the processing of their personal data violates the GDPR.

Right to Data Portability

You have the right to receive the data you have provided to us based on your consent or a contract in a machine-readable format or – where technically feasible – to have it transferred to a third party.

Access, Rectification, and Erasure

Under applicable legal provisions, you have the right at any time to receive free information about your stored personal data, its origin and recipients, and the purpose of data processing. You also have the right to request the correction or deletion of this data. For these and any other questions regarding personal data, you can contact us at any time.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data if one of the following conditions is met:

  • You contest the accuracy of the data (for the duration of the verification).
  • The processing was unlawful, but you prefer restriction instead of deletion.
  • We no longer need the data, but you require it to establish, exercise, or defend legal claims.
  • You have objected to the processing (pending the outcome of the balancing of interests).

Restricted data may only be processed – apart from storage – with your consent or in specific legally defined exceptional cases.

SSL and TLS Encryption

Our website uses SSL and TLS encryption to protect the transmission of confidential data. You can recognize an encrypted connection by the “https://” prefix in the address bar and the padlock icon in your browser. This encryption ensures that transmitted data is protected from unauthorized access.

Data Collection on This Website

Cookies

Our website uses cookies. These are small data packets stored on your device. They can be session cookies (automatically deleted after your visit) or persistent cookies (stored until you delete them or your browser automatically removes them).

Cookies may be set by us (first-party cookies) or by third-party providers (third-party cookies, e.g., for payment services or analytics). Some cookies are necessary for the website’s basic functionality, while others serve analytics or advertising purposes.

The storage of technically necessary cookies is based on Article 6(1)(f) GDPR (legitimate interest in ensuring a flawless and optimized website experience). If consent is required, processing is based on Article 6(1)(a) GDPR and § 25(1) TDDDG. You can revoke your consent at any time.

You can configure your browser to allow cookies on a case-by-case basis, reject them altogether, or automatically delete them when closing your browser. Please note that disabling cookies may limit the functionality of this website.

An overview of the cookies and services used on this website can be found in this privacy policy.

Server Log Files

The provider of this website automatically collects and stores information in so-called server log files, which your browser transmits. These include:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources. Processing is based on Article 6(1)(f) GDPR (legitimate interest), as data collection is necessary for the secure and error-free operation of the website.

Contact Form

If you send us an inquiry via the contact form, your details, including your contact information, will be stored for processing your request and for possible follow-up questions. This data will not be shared without your consent.

Data processing is based on Article 6(1)(b) GDPR if your request is related to contract fulfillment or pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling inquiries (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), if this was requested. You can revoke your consent at any time.

The data remains stored until you request its deletion, revoke your consent, or the purpose for data storage ceases. Statutory retention periods remain unaffected.

Inquiry via Email, Telephone, or Fax

If you contact us via email, telephone, or fax, your inquiry, including all personal data derived from it (e.g., name, inquiry), will be stored and processed to address your concern. This data will not be shared without your consent.

Processing is based on Article 6(1)(b) GDPR if your inquiry is related to a contract or pre-contractual measures. In all other cases, processing is carried out on the basis of our legitimate interest in effectively handling inquiries (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), if this was requested. You can revoke your consent at any time.

The data remains stored until you request its deletion, revoke your consent, or the purpose for data storage ceases. Statutory retention periods remain unaffected.

Registration on This Website

You have the option to register on our website to access additional features. The data you enter will be used exclusively for the service for which you have registered. The mandatory fields must be completed, as registration is not possible otherwise.

In case of important changes, such as modifications to the service offering or technical updates, we will inform you via the email address provided during registration.

The processing of registration data is carried out for the purpose of fulfilling the user agreement and, if applicable, initiating further contracts (Article 6(1)(b) GDPR).

Your registration data will remain stored as long as you are registered. After deregistration, the data will be deleted unless legal retention requirements apply.

Appointment Scheduling Tool Calendly

We use Calendly on our website to schedule appointments. The provider is Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA. To book an appointment, you enter your data (e.g., name, email address, desired date) into the designated form. This data is used for appointment scheduling and management.

Processing is based on Article 6(1)(f) GDPR (legitimate interest in providing a simple scheduling process) or, if consent is required, on Article 6(1)(a) GDPR and § 25(1) TDDDG. You can revoke your consent at any time.

Calendly stores your data on servers in the USA. Data transmission is based on the EU Commission’s Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework certification of Calendly.

Further information on data processing by Calendly can be found in their privacy policy: Calendly Privacy Policy.

Analytics Tools and Advertising

Google Analytics

This website uses features of Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics analyzes visitor behavior on the website and collects various usage data, such as page views, session duration, operating systems used, and user origin. This data is assigned to the respective device but is not linked to a user ID.

Additionally, mouse and scroll movements as well as clicks may be recorded. Google Analytics uses machine learning technologies and modeling approaches to enhance data analysis.

The analysis is conducted using technologies such as cookies or device fingerprinting. The information collected by Google is typically transferred to servers in the United States and stored there.

The use of Google Analytics is based on your consent (Article 6(1)(a) GDPR and § 25(1) TDDDG). You can revoke your consent at any time.

Data transfer to the USA is based on the Standard Contractual Clauses (SCCs) of the European Commission. Details can be found here: Google Privacy.

Google is certified under the EU-US Data Privacy Framework (DPF). More information is available at: Data Privacy Framework.

IP Anonymization

IP anonymization is activated for Google Analytics on this website. This means that your IP address is shortened within the EU or other contracting states of the European Economic Area (EEA) before being transmitted to the United States. Only in exceptional cases is the full IP address sent to a Google server in the USA and shortened there.

On behalf of the website operator, Google uses this information to analyze your website usage, compile reports on website activities, and provide other services related to website and internet usage.

The IP address transmitted by your browser will not be merged with other Google data.

Browser Plugin

You can prevent the collection and processing of your data by Google Analytics by downloading and installing the following browser plugin: Google Analytics Opt-Out.

Further information on how Google handles user data can be found in the Google Privacy Policy.

Newsletter

Newsletter Data

If you subscribe to our newsletter, we require your email address and information that confirms you are the owner of the provided email address and consent to receiving the newsletter. Additional data is collected only on a voluntary basis.

We use external newsletter service providers for the management and delivery of the newsletter, as described below.

Mailchimp with Disabled Performance Tracking

This website uses Mailchimp for sending newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

Mailchimp enables the organization and distribution of newsletters. The data you enter for newsletter subscription (e.g., email address) is stored on Mailchimp servers in the USA. Performance tracking is disabled, meaning your interactions with our newsletters (such as opens and clicks) are not analyzed.

If you do not wish for your data to be transferred to Mailchimp, you can unsubscribe from the newsletter at any time using the unsubscribe link provided in each newsletter email.

The processing of your data is based on your consent (Article 6(1)(a) GDPR). You can revoke your consent at any time by unsubscribing from the newsletter.

Data transfer to the USA is based on the Standard Contractual Clauses (SCCs) of the European Commission. More information is available at: Mailchimp EU-US Data Transfer and Standard Contractual Clauses .

After unsubscribing, your email address will be removed from our mailing list. To prevent future unwanted mailings, it may be stored in a blacklist. This is done in compliance with legal requirements (Article 6(1)(f) GDPR). You may object to this storage if your interests outweigh our legitimate interest.

More information can be found in Mailchimp’s Privacy Policy.

Mailchimp is certified under the EU-US Data Privacy Framework (DPF). Further details are available at: DPF Participant Mailchimp.

Plugins and Tools

Google Maps

This website uses the mapping service Google Maps, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Maps allows us to integrate map content into our website.

To use Google Maps, your IP address is stored and usually transmitted to Google’s servers in the United States. The website operator has no control over this data transfer. Additionally, Google may use Google Fonts for display purposes, which causes your browser to load the required fonts.

The use of Google Maps is based on our legitimate interest in a visually appealing website presentation (Article 6(1)(f) GDPR). If consent is required, processing is carried out according to Article 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your consent at any time.

Data transfer to the USA is based on the Standard Contractual Clauses (SCCs) of the European Commission .

Further details on data processing can be found in Google’s Privacy Policy.

Google is certified under the EU-US Data Privacy Framework (DPF). More details are available at: DPF Participant Google.

OpenStreetMap

This website uses the mapping service OpenStreetMap (OSM), provided by the OpenStreetMap Foundation (OSMF), St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom.

The United Kingdom is considered a data protection-compliant third country, as it offers a data protection level equivalent to that of the EU.

When loading OpenStreetMap maps, a connection to OSMF’s servers is established. In the process, your IP address and other usage-related information may be transmitted to OpenStreetMap. OSM may also set cookies or similar recognition technologies.

The use of OpenStreetMap is based on our legitimate interest in an appealing website presentation (Article 6(1)(f) GDPR). If consent is required, processing is carried out according to Article 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your consent at any time.

Audio and Video Conferences

Data Processing for Online Conference Tools

We use online conference tools to communicate with our customers. The specific tools we use are listed below. When you communicate with us via video or audio conference, personal data is processed by both us and the provider of the respective tool.

The data collected includes, in particular:

  • Email address and/or telephone number
  • Duration of the conference, start and end time of participation
  • Number of participants and additional metadata related to the session
  • Technical data such as IP address, device type, operating system, and connection type
  • Content uploaded or shared by you (e.g., chat messages, files, cloud recordings)

The processing is carried out to facilitate online communication. Please note that we have only limited influence over data processing by the respective providers. Further details can be found in the privacy policies of the conference tools we use, which are linked below.

Purpose and Legal Bases

We use online conference tools to communicate with potential or existing contract partners or to provide specific services to our customers. The processing of this data is carried out in accordance with Article 6(1)(b) GDPR.

Furthermore, the use of these tools serves the simplification and acceleration of communication, which constitutes a legitimate interest under Article 6(1)(f) GDPR.

If consent is required for use, the processing is based on Article 6(1)(a) GDPR. Consent may be revoked at any time with future effect.

Storage Duration

The data collected by us through video and conference tools will be deleted as soon as you request deletion, withdraw your consent, or the purpose for storage no longer applies. Stored cookies will remain on your device until you delete them manually. Statutory retention periods remain unaffected.

We have no control over the storage duration of data that is stored by the respective providers of the conference tools. Further information can be found in the privacy policies of the respective providers.

Microsoft Teams

We use Microsoft Teams, a service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

Further information on data processing can be found in Microsoft's Privacy Policy.

Microsoft is certified under the EU-US Data Privacy Framework (DPF). More information can be found at: DPF Participant Microsoft.

Additional Information

In the case of commercial use of our software, our General Terms and Conditions also apply. These govern the contractual rights and obligations between users and our company.

Additionally, for the processing of personal data in the context of commercial use, the conclusion of a Data Processing Agreement (DPA) is required. The relevant documents can be reviewed on our order page.

nPro software

Plan your energy system with nPro!

Newsletter

We inform you about new tool features and services.