1. Scope and summary

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights. It applies to enerzn websites, the myenerzn and myhycube platforms, related mobile apps (iOS/Android), HEMS devices, and related services.

2. Data we collect

We collect only what we need to run services and comply with legal rules. Typical categories:

• Identity and contact data (name, address, e-mail, phone).
• Contract and billing data (contract type, tariff, billing information).
• Technical and usage data (IP, browser, device type, app version, crash reports).
• Energy and device data (meter readings, time-resolved consumption and generation, device telemetry, IoT control data, smart meter data).
• App data (device IDs, push tokens, usage stats). These categories mirror the data listed in our German data statement.

3. Purposes and legal basis

We process personal data for specific, limited purposes:

• To provide and operate HEMS, apps, platform and dynamic tariff services (contract performance - Art. 6(1)(b) GDPR).
• For billing, invoicing and statutory obligations (legal compliance - Art. 6(1)(c) GDPR).
• To maintain, secure and improve our services, apps and website (legitimate interest - Art. 6(1)(f) GDPR).
• For marketing or push notifications only with your consent (consent - Art. 6(1)(a) GDPR). These legal bases reflect the company's published policy.

4. Cookies, tracking and analytics

We use cookies and similar technologies to run the website, maintain sessions, gather analytics and improve services. Where required, we obtain consent for non-essential cookies. Logfiles and analytics data are kept for troubleshooting and service improvement for limited periods.

5. Mobile apps and IoT devices

When you use our apps or HEMS devices we collect device data, tokens for push notifications, real-time energy data, and crash reports. Push notifications are only sent if you consent and can be disabled in app settings. Data needed to deliver the service is processed under contract law.

6. Recipients and third parties

We share personal data only as necessary to:

• Network operators, meter operators and market partners for energy-market processes.
• Payment and billing processors.
• Service providers (hosting, analytics, maintenance).
• Legal authorities where required. Third parties are selected carefully and bound by contract to protect your data.

7. International data transfers

Where data is transferred outside the EU/EEA, we rely on appropriate safeguards such as standard contractual clauses or applicable legal bases. If international transfer applies to your data, we will inform you where relevant.

8. Retention periods

• Logfiles: short-term (typically up to 7 days) unless needed for security or troubleshooting.
• Contract and billing data: statutory retention periods (for example 6 or 10 years where required).
• Energy consumption data: stored as required by energy regulations (for example specific retention up to 2 years for certain meter data). Exact retention rules are in the company data statement.

9. Your rights

You have the right to:

• Access your personal data.
• Rectify inaccurate or incomplete data.
• Request restriction of processing or object where lawful.
• Withdraw consent at any time (where processing is based on consent).
• Request deletion where legal and contractual conditions allow.
• Lodge a complaint with a supervisory authority. To exercise rights, contact info@enerzn.com. For supervisory complaints, use the German data protection authorities if relevant.

10. Security

We apply technical and organizational measures to protect personal data. This includes access controls, encryption where appropriate, and regular security reviews. Absolute security cannot be guaranteed.

11. Contact and data protection contact

For questions or requests contact: info@enerzn.com. If you have privacy-specific questions mention "Data Protection" in the subject. The company's legal and registration details are published in the Impressum.

12. Changes to this policy

We may update this policy. The effective date above shows the last update. Significant changes will be communicated on the website.