Privacy & Cookie Policy

Grid One d.o.o., Avenija Dubrovnik 15, 10000 Zagreb, OIB 21721383787, and Syntio d.o.o., Trg Dražena Petrovića 3, 10000 Zagreb, OIB: 88942753905 (hereinafter: Companies) are trading companies that provide services through the My Energy Community platform.

My Energy Community is a platform that enables the service of remote data reading from advanced electricity meters through devices provided by the Companies under agreed conditions for the purpose of providing the service (hereinafter: Device).

The service is provided as part of pilot projects that the Companies conduct in cooperation with the HEP distribution system operator (hereinafter: HEP ODS) to verify the technical capabilities of advanced electricity meters with the long-term goal of enabling each user to contract for the service of monitoring and downloading data on electricity consumption/production in real-time upon completion of the pilot project.

To justify and maintain your trust, the Companies pay special attention to the adequate protection of personal data in accordance with the General Data Protection Regulation (GDPR EU 2016/679 of April 27, 2016).

The privacy policy aims to establish a framework for the protection of personal data and applies to the processing of personal data that the Companies carry out in accordance with the objectives and activities within the use of the service through the MEC platform, the provisions of the General Regulation, and this Policy.

The purpose of the Privacy Policy is to establish appropriate processes for the protection and management of data subjects’ personal data. Personal data refers to all data relating to an individual whose identity is identified or can be identified. A data subject is a natural person who can be identified directly or indirectly, especially by an identifier such as name, identification number, location data, network identifier, or by one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that individual.

This page provides you with information on how and why the Companies that provide services through the MEC platform collect and process your personal data, under what conditions and circumstances, and what rights you have regarding your personal data.

Please carefully read these notices to familiarize yourself with all relevant information regarding the handling of your personal data and to be fully aware of the rights that belong to you based on applicable national and European regulations.

WHO IS THE DATA CONTROLLER OF YOUR PERSONAL DATA?

Grid One and Syntio trading companies collect your personal data, determine the purposes and manner of their processing, and are responsible for processing such data in accordance with applicable European and national data protection regulations.

In conducting their business, the Companies act as data controllers, handling your data exclusively in accordance with applicable regulations and ensuring an adequate level of protection and security.

Certain personal data are necessary for data controllers to provide you with the use of products or services within the MEC platform service. However, if for any reason you do not want to provide your personal data to the Companies, you are free to refuse, but then the Companies may not be able to deliver the products or provide the services you are interested in.

Contact information:

Grid One d.o.o., Avenija Dubrovnik 15, 10000 Zagreb, OIB 21721383787 Syntio d.o.o., Trg Dražena Petrovića 3, 10000 Zagreb, OIB: 88942753905 Contact email address: privacy@myenergycommunity.eu

WHAT PERSONAL DATA IS COLLECTED AND PROCESSED?

In their activities, the Companies may collect, store, and use (process) the following types of your personal data:

I) Data obtained directly from you:

General identification data and contact data related to the service and contract (name and surname of the connection owner, email address of the connection owner, and address of the measuring point) Other data if there is a valid legal basis (e.g., sending newsletters, receiving inquiries through contact forms, etc.). II) Data collected by others about you:

For the purpose of verifying the technical capabilities of advanced electricity meters, we collaborate with Hrvatska elektroprivreda (HEP) and the Distribution System Operator (ODS) from which we collect data configured on your meter, including information on meter compatibility, to ensure the proper functioning of our platform and provide you with personalized services. III) Data collected automatically:

We use cookies and collect information related to IP addresses, downloaded content, number of visitors, time of visit, and demographic data of visits by country for statistical purposes. Information collected in this way is not disclosed to third parties under any circumstances, except in the case of a legal obligation. Read more about cookies and how to disable them here.

HOW DO WE COLLECT YOUR PERSONAL DATA?

The Company collects your personal data directly from you, from third parties, or automatically in the ways described in the preceding paragraph.

At the time of registration on our web application, we need your email address.

For the purpose of verifying meter and Device compatibility, we need the name, surname of the connection owner, and address of the measuring point. If you apply to participate through our questionnaire, in addition to the aforementioned personal data, we will also ask for your email address so that we can inform you of the verification result.

We collect data on the compatibility of your meter from HEP-ODS for the purpose of verifying the technical capabilities of using the platform services.

By connecting the Device to the electricity meter and using the Device, data on electricity consumption/production is available to you at any time through the web application.

Data on consumption/production are used to monitor electricity consumption/production in real-time, and the Companies process them in aggregated form (without personal data) for statistical purposes and to improve the service.

When visiting the website www.myenergycommunity.eu and the web application for monitoring electricity consumption/production in real-time, the server automatically collects information about your IP address. Our web server does not collect your email address or any other information by which we could identify you.

The web application does not profile users or make automated decisions based on user profiles.

PURPOSE AND LEGAL BASIS OF PROCESSING YOUR PERSONAL DATA

Service providers collect and process your personal data for various permitted purposes, but always on a valid legal basis.

The purposes for which the Companies collect and process your personal data may include:

User identification (inquiries and complaints) and execution of user requests Continuous provision of services within the MEC platform Use of all services on the website myenergycommunity.eu More efficient response to your inquiry submitted via the contact form Statistical data processing Sending news, notices, and other informative materials about current events, activities, education, projects, forums, and consultations in the field of development and improvement of citizen energy communities

The personal data you provide us when filling out forms on the website or when communicating with us by phone or email typically include name, surname, email address, and phone number, and we will use them to provide you with a more efficient response to your inquiry.

By giving consent to receive our notifications via email, we will process your personal data for the purpose of sending notifications about news, events, education, projects, forums, and consultations in the field of development and improvement of citizen energy communities and activities related to the operation of the MEC platform. You can withdraw your consent at any time by sending a request to the email address privacy@myenergycommunity.eu, and we will act on your request.

If you have shared your email address with us via the form on the website to receive notifications about our news, you have also given us your consent to send you such notifications via email. You can withdraw your consent at any time by unsubscribing.

TRANSFER OF PERSONAL DATA TO THIRD PARTIES

Service providers through the MEC platform make special efforts to ensure that your personal data is collected and processed in accordance with the above-mentioned purposes.

Service providers use web tools for traffic analysis on the website. The relationship between service providers through the MEC platform and all third parties with whom your data is shared is governed by special agreements in compliance with the General Data Protection Regulation, which guarantee that personal data (email address, anonymous traffic statistics on the website, etc.) are used only for the purposes for which your consent was given.

If it is necessary to engage third parties for the purpose of the service, service providers ensure that the legal framework for processing your personal data is respected, ensuring the security of your personal data in accordance with applicable data protection regulations. In the event of using any form of external services involving access to your personal data, access is regulated by a contractual relationship compliant with the General Data Protection Regulation.

Service providers through the MEC platform will never make your personal data available to third parties without a valid legal basis and purpose for processing.

WHERE ARE YOUR PERSONAL DATA PROCESSED?

Your personal data is processed within the EU/EEA.

If it becomes necessary to process personal data outside the EU/EEA, companies providing services through the MEC platform will take all necessary steps before exporting data to protect your personal data in accordance with applicable data protection regulations.

WHAT ARE YOUR RIGHTS REGARDING THE PROTECTION OF YOUR PERSONAL DATA AND HOW TO EXERCISE THEM?

Every data subject whose personal data is processed by service providers through the MEC platform as data controllers has the following rights:

• Right to access data – allows the data subject to be informed by the companies whether their data is being processed, the purpose of processing, categories of personal data, recipients or categories of recipients, the intended period for which the data will be stored, etc.
• Right to rectification of data – allows the data subject to request correction of inaccurate or incomplete personal data concerning them
• Right to erasure – allows the data subject to request deletion of personal data, where the companies must not delete the data subject’s personal data if their processing is necessary (e.g., compliance with the prescribed data retention obligation or in case of establishing, exercising, or defending legal claims)
• Right to restriction of processing – the data subject may request restriction of processing of personal data in case they contest the accuracy of personal data, consider the processing unlawful and oppose the deletion of personal data, and instead request restriction of their use, or in case the data subject has objected to processing and is awaiting confirmation of whether the legitimate interests of the data controller override those of the data subject
• Right to data portability – allows the data subject to transfer data to another data controller; it is important to note that the right to data portability applies only to personal data provided by the data subject to service providers through the MEC platform themselves
• Right to object – allows the data subject to object to the processing of personal data by the data controller. Service provider companies through the MEC platform will refrain from further processing the data subject’s personal data, except if they prove that there are compelling legitimate reasons for processing (grounds that override the interests, rights, and freedoms of the data subject) or if the processing is necessary for establishing, exercising, or defending legal claims
• Right to lodge a complaint with the supervisory authority – if the data subject believes that the processing of personal data concerning them violates the General Data Protection Regulation, the data subject may file a complaint with the Personal Data Protection Agency.

Request for exercising the aforementioned rights can be submitted:

by mail to the address: by email to: privacy@myenergycommunity.eu

Service providers through the MEC platform will inform you of the actions taken without undue delay and no later than one month from the receipt of the request. In exceptional cases, this period may be extended by an additional two months, taking into account the complexity and number of requests, about which the service providers are obliged to inform you.

WHEN CAN YOU LODGE A COMPLAINT ABOUT THE PROCESSING OF PERSONAL DATA?

You can lodge a complaint about the processing of your personal data with the companies – service providers through the MEC platform at any time, after which they will no longer process your personal data, unless otherwise provided by applicable regulations.

If you believe that there has been a breach of your personal data or a violation of your rights, you have the right to contact the competent supervisory authority – the Personal Data Protection Agency. More information about your rights regarding personal data can be found on the website of the Personal Data Protection Agency: www.azop.hr.

HOW LONG DO SERVICE PROVIDERS RETAIN YOUR PERSONAL DATA?

Service providers retain your personal data for the entire duration of the processing purpose. If you are interested in the details and deadlines for retaining your personal data, you can contact us at the email address: privacy@myenergycommunity.eu.

Service providers will not retain your personal data longer than necessary and lawful, and will process them only for the purposes for which the data were collected.

CHANGES TO THE PRIVACY POLICY

Service providers regularly update this Privacy Policy in accordance with changes and news based on applicable regulations and ensure that its latest version is always available on the website: https://www.myenergycommunity.eu/politika-privatnosti.

In the event of significant changes to the content of the Privacy Policy that may significantly affect your rights, freedoms, and/or interests, you will be directly notified.

---

• We reserve the right to change or supplement the information contained on this page over time, so we kindly ask visitors and users of our website to periodically check this page for more accurate information on how we protect their privacy. By continuing to be present on our pages and using our services, we consider that you accept all the described provisions regarding the use of cookies and privacy protection.

COOKIE POLICY

To ensure that our website functions correctly and to continuously improve the site for the purpose of enhancing your experience while using it, this site needs to store a small amount of information (cookies) on your computer. Over 90% of all websites use this method, and according to the provisions of the European Union as of March 25, 2011, we are required to request your consent for its use.

By using the website, you consent to the use of cookies. By blocking them, you can still browse the site, but not all of its features will be available to you.

What are cookies?

A cookie is information stored on your computer by the website you visit. Usually, it saves your settings (such as selected language or address), and when you revisit the website, the web browser uses cookies belonging to that site. Cookies are able to store a wide range of information, including personal information (email address or your name), but this information can only be saved if you enable it.

Websites can only access information for which they have permission, not other files on your computer. Information related to cookies is not used for your identification, and browsing habit data is solely under our control.

How to disable cookies?

If you disable cookies, they will not be stored on your computer. Cookie settings can be adjusted within your Internet browser (Firefox, Chrome, Opera, Safari), but by disabling them, you will not be able to use some of the functionalities on our websites.

Types of cookies

First-party cookies

This type of cookie comes from the website you visited and is divided into temporary or permanent.

Third-party cookies

They come from other websites (e.g., Google Analytics or advertisements) that are present on the website you visited. With this type of cookie, websites can track user actions for statistical purposes.

Temporary cookies

Also known as session cookies, they are used to store temporary data and disappear from your computer when you close the browser.

Permanent cookies

They remain on your computer after closing the browser. Websites use them to store data (e.g., password and username) so that you don’t have to log in again when revisiting a particular page. Permanent cookies remain on your computer until you delete them or until they reach a specified cookie retention time.

Cookies by function

Technical cookies are mandatory (always active) cookies necessary for the functioning of the website. They are usually set in response to your actions that involve requesting services, such as cookie settings, login, or filling out forms. You can set your browser to block these cookies or to receive alerts about them, but in that case, some parts of the site may not work. These cookies do not store any information that could identify you.

Functional cookies (can be disabled) enable the website to provide enhanced functionality and personalization.

Statistical cookies (can be disabled) allow tracking of visits and traffic sources for the purpose of measuring and improving the effectiveness of the website.

Marketing cookies (can be disabled) are used to track users across websites and display targeted ads.

Does www.myenergycommunity.eu use cookies?

Yes, mandatory cookies and statistical cookies (Google Analytics) for the purpose of improving user experience.

---

• We reserve the right to change or supplement the information contained on this page over time, so we kindly ask visitors and users of our website to periodically check this page for more accurate information on how we protect their privacy. By continuing to be present on our pages and using our services, we consider that you accept all the described provisions regarding the use of cookies and privacy protection.