Privacy Policy

1. Data Controller

Energie Software B.V. is the data controller for personal data processed through this Platform. We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch law.

2. What Data We Collect

We collect and process the following categories of personal data:

• Account data: name, email address, customer ID, address, and contact details
• Meter data: EAN codes, meter readings, and consumption history
• Payment data: SEPA mandate details, IBAN, and payment history
• Usage data: login timestamps, session data, and platform activity logs

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance — to deliver energy supply services, process invoices, and manage your account.
• Legal obligation — to comply with Dutch energy market regulations, EDSN reporting requirements, and ACM compliance obligations.
• Legitimate interest — to detect fraud, ensure platform security, and improve our services.
• Consent — for optional communications such as newsletters, where applicable.

4. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Meter and billing data is retained for 7 years in accordance with Dutch fiscal requirements. Account data is deleted within 30 days of account closure upon request.

5. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Request erasure of your data (right to be forgotten)
• Object to or restrict certain processing activities
• Receive your data in a portable, machine-readable format
• Withdraw consent at any time where processing is based on consent

To exercise your rights, use the GDPR request form in your account settings, or contact us at privacy@energiesoftware.nl.

6. Data Sharing

We share personal data with the following parties only where necessary:

• EDSN — Dutch energy data network for meter switch and market messaging
• ACM — Dutch Authority for Consumers and Markets, for regulatory compliance reporting
• Payment processors — for SEPA direct debit collection
• Hosting providers — server infrastructure located within the EU/EEA

We do not sell personal data to third parties.

7. Cookies

This Platform uses session cookies required for authentication and security. No third-party tracking or advertising cookies are used.

8. Contact & Complaints

For privacy questions, contact our Data Protection Officer at privacy@energiesoftware.nl. You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.