Privacy Policy

1. Data Controller

The data controller within the meaning of the GDPR is:

Niklaus Olsen
Taruper Hauptstr. 164
24943 Flensburg, Germany

2. Overview of Processed Data

We process the following categories of personal data:

2.1 End Customers (Private Individuals and Businesses)

• Master data: Name, first name, company (if applicable), address
• Contact data: Email address, phone number
• Planning data: Roof shape, area, orientation, location coordinates, generated PV planning
• Payment data: Payment method, partial payment information (no complete credit card data)
• Usage data: IP address, access times, device used, browser
• Communication data: Messages via the platform

2.2 Installers (Businesses)

• Company data: Company name, address, contact person
• Contact data: Email, phone
• Location and radius data: Geographic service radius
• Qualification certificates (where collected)
• Usage data: IP address, access times

3. Legal Basis for Processing

We process personal data on the basis of the following legal grounds:

• Art. 6(1)(b) GDPR: Performance of a contract and pre-contractual measures (e.g. registration, subscription processing)
• Art. 6(1)(a) GDPR: Explicit consent (in particular, sharing of planning data with installers — see Section 5)
• Art. 6(1)(c) GDPR: Compliance with legal obligations (e.g. tax retention requirements)
• Art. 6(1)(f) GDPR: Legitimate interests (e.g. fraud prevention, platform security)

4. Purposes of Data Processing

We process your data for the following purposes:

• Provision and operation of the platform
• User account management and authentication
• Creation and display of PV roof planning
• Processing of subscriptions and payments
• Transmission of planning data to installers (only with consent, see Section 5)
• Technical security and abuse prevention
• Communication with users
• Compliance with legal obligations

5. Data Sharing with Installers — Consent

This is the most critical point from a data protection perspective: The sharing of your personal planning data with third-party installers is carried out exclusively on the basis of your explicit, prior consent (Art. 6(1)(a) GDPR).

5.1 Scope of Sharing

With your consent, the following data will be shared with installers registered on the platform whose configured service radius covers your location:

• Name and contact details
• Address / building location
• PV planning data (roof area, orientation, calculation)

5.2 Purpose of Sharing

The data is shared exclusively so that registered installers can provide you with a quote for the installation of the planned PV system.

5.3 Voluntariness

Granting consent is voluntary. Without this consent, the contact mediation function with installers is not available; however, you can still use the platform for PV calculations.

5.4 Withdrawal of Consent

You may withdraw your consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal. To withdraw, contact: info@pv-energie-planer.de or use the corresponding function in your user account.

5.5 Installers' Own Responsibility

After data has been shared, the respective installer becomes the independent data controller for the processing of your data. PV-Energie-Planer has no influence on any further processing by the installer. We recommend informing yourself about their data protection practices.

5.6 Consent Text

The following consent text is displayed before data sharing:

Note: This checkbox is not pre-checked by default (opt-in) and must be actively selected by the user.

6. Sharing with Other Third Parties

Your data will only be shared with third parties in the following cases:

• Data processors: Technical service providers (e.g. hosting, payment processing) under data processing agreements pursuant to Art. 28 GDPR
• Legal obligations: Where we are legally obliged to share data (e.g. with authorities)
• Installers: Only with your consent (see Section 5)

Currently used data processors / service providers:

• Hosting: IONOS SE, Germany
• Payment provider: Mollie B.V., Netherlands — Mollie Privacy Policy

7. Storage Duration

We store your data only as long as necessary for the respective purpose or as required by statutory retention obligations:

• Usage data / logs: Typically 30 to 90 days
• Contract-related data: For the duration of the contractual relationship plus statutory retention periods (e.g. 10 years pursuant to § 147 AO for tax-relevant documents)
• Planning data: For the duration of the subscription and 6 months after cancellation
• After withdrawal of consent: Deletion of affected data without delay, unless there is a legal obligation to retain it

8. Your Rights as a Data Subject

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR): You may request information about the data we process about you.
• Right to rectification (Art. 16 GDPR): You may have inaccurate data corrected.
• Right to erasure (Art. 17 GDPR): You may request the deletion of your data (right to be forgotten).
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR): Receive your data in a machine-readable format.
• Right to object (Art. 21 GDPR): Against processing based on legitimate interests.
• Right to withdraw consent (Art. 7(3) GDPR): At any time for the future.
• Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority.

To exercise your rights, contact: info@pv-energie-planer.de

9. Cookies and Tracking

9.1 Technically Necessary Cookies

We use technically necessary cookies that are required for the operation of the platform. These do not require consent.

• Session cookie: Stores your login status and enables secure use of your account. Automatically deleted when the browser is closed.
• Cookie consent: Stores your cookie settings (localStorage). Does not expire.

9.2 Optional Cookies (only with consent)

If we use additional cookies (e.g. for analytics or marketing), this is only done with your prior consent via the cookie banner.

9.3 Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Legal basis: Art. 6(1)(a) GDPR (consent)

Purpose: Analysis of website usage to improve our service

Data collected:

• Anonymised IP address
• Pages visited and time spent
• Referrer (where you came from)
• Device and browser information
• Approximate location (country/region)

Storage duration: Data is stored for 14 months and then automatically deleted.

Data transfer: Google may transfer data to the USA. Google is certified under the EU-US Data Privacy Framework.

Withdrawal: You can withdraw your consent at any time by clicking here and changing your cookie settings.

More information: Google Privacy Policy

9.4 Google Ads

We use Google Ads conversion tracking to measure the effectiveness of our advertisements.

Legal basis: Art. 6(1)(a) GDPR (consent)

Purpose: Measurement of conversions (e.g. registrations, purchases) to optimise our advertising campaigns

Data collected:

• Information that you reached our website via a Google ad
• Actions taken (e.g. registration, purchase)

Withdrawal: You can withdraw your consent at any time by clicking here.

You can also disable personalised advertising in your Google Ads settings.

10. Data Security

We employ technical and organisational measures to protect your data from unauthorised access, loss, or manipulation, including:

• SSL/TLS encryption for all data transmissions
• Access control and rights management
• Passwords are stored encrypted (hashed) and are not visible even to us
• Regular security reviews

11. Hosting

This website is hosted on a server in Germany (IONOS SE). With each access, server log files are automatically created containing the following data:

• IP address (anonymised)
• Date and time of the request
• Page accessed
• Browser and operating system

This data is used exclusively to ensure trouble-free operation and to improve our service. No merging with other data sources takes place.

12. Changes to this Privacy Policy

We reserve the right to amend this privacy policy as needed. The current version is always available on the platform. In the event of significant changes, we will inform you by email.

13. Contact

For questions about data protection, contact us at: info@pv-energie-planer.de