Privacy Policy

1. Privacy at a Glance

The following notes give a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information can be found in the sections below.

Who is responsible? The controller for data processing on this website is enervance solutions GmbH. Contact details are given in section 2.

How do we collect your data? Some data you provide to us yourself, for example when you fill in a contact form. In addition, our IT systems automatically record technical data when you visit the website (e.g. browser, operating system, time of the page request). Further data on how you use the website is only collected if you have consented in the cookie banner.

What do we use your data for? To provide the website without errors, to answer your enquiries and – only with your consent – to analyse how the website is used and to measure the effectiveness of our advertising.

What rights do you have? You can at any time request information about your stored data as well as its correction, deletion or the restriction of its processing. You can withdraw any consent you have given at any time. You also have the right to lodge a complaint with a supervisory authority. Details can be found in section 3.

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

2. Controller

The controller for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR) on this website is:

enervance solutions GmbH
represented by MSc Andreas Maier
Paul-Henri-Spaak-Str. 5
44263 Dortmund
Germany

Phone: +49 231 9976 70240
Email: info@enervance.team

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

3. Your Rights

Within the scope of the applicable law, you have the following rights. To exercise them, contact us at any time using the details in section 2.

• Access to the personal data we hold about you, its origin, recipients and the purpose of processing (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data, unless a statutory retention obligation applies (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR), in particular if you dispute the accuracy of the data, the processing is unlawful, we no longer need the data but you need it to establish legal claims, or you have objected and the balancing of interests has not yet been completed
• Data portability (Art. 20 GDPR): data that we process automatically on the basis of your consent or a contract will be provided to you on request in a common, machine-readable format, or transferred directly to another controller where technically feasible
• Objection to certain processing (Art. 21 GDPR) – see the following section for details
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR). The lawfulness of processing carried out before the withdrawal remains unaffected. You can withdraw consent given in the cookie banner via the "Show cookie settings" link in the website footer.
• Complaint to a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, place of work or the place of the alleged infringement. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

Right to Object in Special Cases and to Direct Marketing (Art. 21 GDPR)

If your personal data is processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation; this also applies to profiling based on these provisions. The legal basis of each processing operation is stated in this privacy policy. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (Art. 21(1) GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to processing for this purpose; this also applies to profiling to the extent that it is related to such direct marketing. After an objection, we will no longer use your data for direct marketing purposes (Art. 21(2) and (3) GDPR).

4. General Information

4.1 Legal Bases

We process personal data on the following legal bases; which one applies is stated for each processing operation:

• Consent – Art. 6(1)(a) GDPR. Where the consent covers storing information on your device or accessing it (e.g. cookies), additionally § 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG).
• Contract and pre-contractual measures – Art. 6(1)(b) GDPR
• Legal obligation – Art. 6(1)(c) GDPR
• Legitimate interest – Art. 6(1)(f) GDPR. For storage and access on your device that is strictly necessary for the service you requested, additionally § 25(2) no. 2 TDDDG.

4.2 Retention Period

Unless a more specific retention period is stated for a processing operation, we store your data until the purpose of processing no longer applies. If you assert a justified request for erasure or withdraw your consent, we delete your data unless we have other legally permissible reasons for storing it (e.g. retention periods under tax or commercial law of up to ten years); in that case, the data is deleted once those reasons no longer apply.

4.3 Recipients and Processors

We only pass on personal data where this is necessary for the purposes set out in this privacy policy. Service providers that process data on our behalf (e.g. hosting, email delivery, marketing) are contractually bound under Art. 28 GDPR to process the data only on our instructions and in compliance with the GDPR.

4.4 Data Transfers to the USA and Other Third Countries

Some of the services we use are operated by companies based in the USA or transfer data there (Google, Microsoft). On 10 July 2023, the European Commission adopted an adequacy decision for the USA (EU-US Data Privacy Framework). Transfers to US organisations actively certified under this framework are based on this decision (Art. 45 GDPR). The list of certified companies is available at https://www.dataprivacyframework.gov/list. For other transfers we use the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

4.5 SSL/TLS Encryption

For security reasons, this website uses SSL/TLS encryption, for example for enquiries you send via our forms. You can recognise an encrypted connection by "https://"; and the padlock icon in your browser's address bar.

4.6 Objection to Advertising Emails

We hereby object to the use of the contact details published in the legal notice for sending unsolicited advertising and information material. We expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.

5. Hosting and Provision of the Website

Nature and Scope of Processing

We operate our website on a virtual server provided by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you visit the website, our web server automatically processes data transmitted by your browser and stores it in log files (server log files):

• IP address
• date and time of access
• page or file requested
• referrer URL (the previously visited page)
• browser type and version, operating system

Fonts and all other components of the website are delivered from our own server; simply visiting the website does not transfer any data to third-party providers. Third-party services (section 8) are only loaded after you have given your consent.

Details on data processing by IONOS: https://www.ionos.de/terms-gtc/terms-privacy. We have concluded a data processing agreement with IONOS.

Purpose and Legal Basis

The processing is necessary to deliver the website and to ensure its security and stability. The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR).

Retention Period

Server log files are automatically deleted after 14 days unless they are needed for longer to investigate a specific security incident.

6. Cookies and Consent Management (Cookie Banner)

Nature and Scope of Processing

Cookies are small text files that your browser stores on your device. On your first visit, a cookie banner asks which categories you agree to:

• Necessary cookies – always active; only store your choice in the cookie banner
• Analytics cookies – Google Analytics (section 8.1)
• Marketing cookies – Google Ads (section 8.2)

No analytics or marketing services are loaded without your consent. The cookie banner runs on our own server; your choice is not transmitted to third parties.

You can change or withdraw your choice at any time via the "Show cookie settings" link in the website footer.

Cookie	Provider	Purpose	Category	Retention
cc_cookie	enervance	Stores your choice in the cookie banner	Necessary	6 months
_ga	Google	Distinguishes visitors	Analytics	2 years
_ga_<ID>	Google	Stores the session state	Analytics	2 years
_gcl_au	Google	Attributes conversions to ad clicks	Marketing	90 days

If you consent to marketing cookies, Google may also set or read cookies on its own domains (e.g. doubleclick.net, google.com). These cookies are managed by Google; details: https://policies.google.com/technologies/cookies?hl=en.

If you withdraw a category, we delete its cookies on our domain and reload the page. We cannot technically delete cookies on Google domains; you can remove them in your browser settings.

Purpose and Legal Basis

Storing your choice is necessary to document and respect your consent (Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR; § 25(2) no. 2 TDDDG). We only set analytics and marketing cookies with your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).

Retention Period

See the table. You can also delete cookies in your browser at any time.

7. Contacting Us

7.1 Contact Forms

Nature and Scope of Processing

On our website you can send us an enquiry via contact forms (e.g. "Book a demo"). In doing so, we process:

• name (or first and last name) and business email address – mandatory
• company and grid level – depending on the form
• your message – optional
• the page on which you submitted the form

Your details are not stored in a database but sent to our mailbox by email and processed there.

Recipients: Enquiries are sent to the responsible members of our staff and to our marketing agency, which supports us in handling enquiries and measuring the success of our campaigns. We use an email service provider to deliver the emails. The agency and the email service provider act as our processors (section 4.3).

Purpose and Legal Basis

We process your details to answer your enquiry. If your enquiry relates to the conclusion or performance of a contract (e.g. a demo or a quote), the legal basis is Art. 6(1)(b) GDPR. In all other cases, the processing is based on our legitimate interest in handling and answering enquiries addressed to us (Art. 6(1)(f) GDPR); you can object to this at any time (section 3). By ticking the box in the form you confirm that you have read this privacy policy; this does not constitute consent.

Providing the mandatory fields is not required by law or contract; however, we cannot process your enquiry without them. Alternatively, you can reach us by email or phone.

Retention Period

We delete your enquiry once it has been fully dealt with and no follow-up questions are to be expected, or after a justified objection by you. If the enquiry leads to a contractual relationship or contains business-relevant correspondence, the statutory retention periods apply (in particular six years for commercial and business letters and eight years for accounting vouchers; ten years for books of account, annual financial statements and similar records; § 257 German Commercial Code (HGB), § 147 German Fiscal Code (AO)).

7.2 Enquiries by Email or Phone

If you contact us by email or phone, we process your enquiry, including the data you provide, in order to deal with your request. Legal basis, purpose and retention period are as described in section 7.1.

7.3 Job Applications

Nature and Scope of Processing

You can apply to us via the application form on the "About us" page. In doing so, we process your name, email address, your message and – optionally – your application documents as a PDF file (max. 10 MB). The data is sent by email exclusively to the persons responsible for HR in our company. We use our email provider as a processor to deliver the email; beyond that, we do not pass your application on to third parties.

Purpose and Legal Basis

We process your data to decide on establishing an employment relationship (Art. 6(1)(b) GDPR in conjunction with § 26 German Federal Data Protection Act (BDSG)). If an employment contract is concluded, we continue to process the data to carry out the employment relationship.

Retention Period

If no employment relationship is established, we delete your documents no later than six months after the application process has been completed. This period results from our legitimate interest in being able to defend ourselves against possible claims under the German General Equal Treatment Act (AGG) (Art. 6(1)(f) GDPR). Longer storage, for example for a talent pool, only takes place with your separate consent.

8. Analytics Tools and Advertising

All services in this section are only loaded after you have consented to the respective category in the cookie banner; before that, no data is transmitted to Google. In addition, we use Google's consent mode (Consent Mode v2) in its basic variant: it informs the loaded Google services of your choice but sends no data before you consent.

8.1 Google Analytics 4

Nature and Scope of Processing

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics records how visitors use our website, for example:

• pages viewed, time spent and scroll depth
• clicks on buttons and links, document downloads
• submitted forms (without their contents)
• device, browser and operating system used, approximate location (country, city)
• source of the visit (e.g. search engine, ad)

This data is assigned to a pseudonymous identifier stored in cookies (see the table in section 6). Google uses the IP address to determine the approximate location; according to Google, it is not logged or stored in Google Analytics 4.

If you are signed in to your Google account and have allowed personalised advertising, Google may link this data to your account across devices (Google Signals).

We have concluded a data processing agreement with Google: https://business.safety.google/adsprocessorterms/.

Purpose and Legal Basis

We analyse usage in order to improve our website and our offering. The legal basis is your consent to the "Analytics cookies" category (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time via "Show cookie settings".

Transfer to Third Countries

Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework (see section 4.4): https://www.dataprivacyframework.gov/participant/5780.

Retention Period

Cookies: see the table in section 6. User- and event-level data is automatically deleted by Google after no more than 14 months.

More information: https://policies.google.com/privacy?hl=en

8.2 Google Ads with Conversion Tracking and Remarketing

Nature and Scope of Processing

We use Google Ads provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. With Google Ads we place ads in Google Search and on third-party websites.

• Conversion tracking: If you reach our website via one of our ads, we can see whether you subsequently take a certain action, e.g. submit a contact form. In our Google Ads account we only see aggregated statistical reports (e.g. the number of enquiries via an ad). Google itself processes further data for this purpose, such as online identifiers, click IDs, IP address and device information.
• Remarketing: Google can assign visitors to our website to audiences in order to show them our ads later in Google Search or on other websites. If you are signed in to Google, this may happen across devices.

For this purpose, cookies are set or read (see the table in section 6) and data such as your IP address, the pages visited, ad clicks and device information is transmitted to Google. Google processes some of this data under its own responsibility, on the basis of the Google Ads Controller-Controller Data Protection Terms: https://business.safety.google/adscontrollerterms/.

Purpose and Legal Basis

We measure the success of our ads and show our advertising specifically to people who have already shown interest in our offering. The legal basis is your consent to the "Marketing cookies" category (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time via "Show cookie settings". You can also turn off personalised advertising from Google at https://myadcenter.google.com/.

Transfer to Third Countries

Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework (see section 4.4).

Retention Period

Cookies: see the table in section 6. Remarketing lists keep visitors for as long as set for the respective list, for no more than 540 days. We have no influence on how long Google retains the data it processes under its own responsibility.

More information: https://policies.google.com/technologies/ads?hl=en

9. Audio and Video Conferencing (Microsoft Teams)

Nature and Scope of Processing

For meetings with prospects and customers we use Microsoft Teams, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. In doing so, we and Microsoft process the data you provide in order to take part (e.g. name, email address), meeting metadata (start, end, participants) and technical data (e.g. IP address, device information). Content shared in the meeting (chat, files) is stored on Microsoft servers. We only create recordings or transcriptions after announcing them in advance and, where required, with your consent.

We have concluded a data processing agreement with Microsoft.

Purpose and Legal Basis

Teams is used to communicate with prospects and customers (Art. 6(1)(b) GDPR) and to make communicating with us simple and fast (legitimate interest, Art. 6(1)(f) GDPR). Where consent is requested, it is the legal basis (Art. 6(1)(a) GDPR).

Transfer to Third Countries and Retention Period

Data may be transferred to Microsoft Corporation in the USA. Microsoft is certified under the EU-US Data Privacy Framework (see section 4.4). We delete the data stored by us as soon as the purpose no longer applies, unless statutory retention periods prevent this. More information: https://privacy.microsoft.com/en-gb/privacystatement

10. LinkedIn and Links to External Websites

LinkedIn Company Page

We maintain a company page on LinkedIn, a service provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. When you visit our page, LinkedIn collects data about your use and provides us with aggregated statistics ("Page Insights"). We are jointly responsible with LinkedIn for these statistics (Art. 26 GDPR); the agreement is available at https://legal.linkedin.com/pages-joint-controller-addendum. You can exercise your rights both with LinkedIn and with us.

The legal basis is our legitimate interest in a presence on social networks and in analysing it (Art. 6(1)(f) GDPR). Data may be transferred to LinkedIn Corporation in the USA, which is certified under the EU-US Data Privacy Framework (section 4.4). More information: https://www.linkedin.com/legal/privacy-policy

Links to External Websites

Our website contains links to external services, such as our LinkedIn page or Google Maps. These are plain links, not embedded content or plugins: no data is transmitted to these providers when you visit our website. Only when you click a link are you taken to the provider's website, where its privacy policy applies.

11. Changes to This Privacy Policy

We update this privacy policy when the website or the legal requirements change. The version published here applies.

Last updated: October 2026