[personal data protection]

Privacy Policy

We clearly explain what data we process, why we need it and how you can exercise your rights.

1. Controller

The controller of personal data is Energize Intelligent Solutions d.o.o., Trnjanski nasip V. 28, 10000 Zagreb, Croatia.

For any questions about privacy or to exercise your rights, contact us at [email protected] or by phone at +385 95 822 6318.

2. What data we process and for what purposes

Contact enquiries

When you send us a message through the contact form, we process your full name, email address, company name if you choose to provide it, the content of the message and the data needed to protect the form from abuse. We use this data to receive and process your enquiry, communicate with you, prepare a quote and take steps prior to entering into a contract.

With each enquiry we record its internal reference, time of receipt, the page of the form and the selected service if the enquiry was started on that service’s page. If you accept cookies, we may also record available campaign tags, the landing page and the referring domain with the enquiry to assess marketing effectiveness. We do not send your name, company name or message content to Google. If you have accepted cookies, we send the email address from a successfully submitted enquiry to Google only in one-way hashed form (SHA-256), so that Google can match the enquiry to an ad click (enhanced conversions).

Enquiries via Facebook and Instagram

If you submit our solar power plant inspection assessment form within Facebook or Instagram, we receive your name, email address, the town or municipality of the plant, and the reason for and desired timing of the inspection. Your phone number and the approximate capacity of the plant or number of panels are optional. We use the data to process the request, agree the scope of the inspection and estimate a quote, and we may record the enquiry and its business outcome in our internal records. Submitting this form does not sign you up for a newsletter.

The form is located on the Meta platform, which processes data in accordance with its own Privacy Policy. Before submitting, check any data the platform may have pre-filled. The purposes, retention periods and rights set out in this policy apply to the data Energize receives.

Technical data

When you access the website, infrastructure providers may automatically process your IP address, the time of the request, the requested page, browser and device type and security logs. The purpose is to deliver the website, ensure reliability, prevent abuse and resolve technical issues.

Analytics and advertising

This website uses Google Analytics 4 and Google Ads conversion measurement with Google Consent Mode. The Google tag loads on every visit. Until you select “Accept”, it neither sets nor reads cookies and sends Google only cookieless signals: the time, the page visited and the traffic source, the browser and device type, the consent state, a successfully submitted enquiry or a click on a phone or email link, and the IP address, from which Google derives an approximate location. Google uses these signals for aggregate statistics and conversion modelling. When you arrive from a Google ad, we carry the click identifier (for example gclid) in the addresses of links within the site until you make a consent choice, without storing it on your device.

If you select “Accept”, Google Analytics and Google Ads may set and read cookies to measure traffic, ad effectiveness and conversions. Google signals are also enabled, which let Google associate visit data with the Google accounts of users who have allowed this, as are advertising and remarketing to visitors of this website on Google services and partner sites. With a successfully submitted enquiry we send Google the hashed email address described in the section on contact enquiries.

If you select “Decline” or make no choice, no cookies are set and Google receives only the cookieless signals described above.

3. Legal bases for processing

  • Taking steps at your request prior to entering into a contract and performing a contract for business enquiries and quotes (Article 6(1)(b) GDPR).
  • Legitimate interest in replying to general enquiries, protecting the website and preventing abuse, while respecting your rights and reasonable expectations (Article 6(1)(f) GDPR).
  • Consent for analytics and advertising cookies, Google signals, remarketing and sending a hashed email address to Google (Article 6(1)(a) GDPR). You can withdraw your consent at any time.
  • Legitimate interest in aggregate measurement of traffic and ad effectiveness through cookieless signals before or without consent (Article 6(1)(f) GDPR). You can object to this processing at [email protected].
  • Legal obligation where regulations require certain business or accounting data to be retained (Article 6(1)(c) GDPR).

4. Recipients and processors

We do not sell data. To the extent necessary to operate the website, the following service providers may process it:

  • Vercel – website hosting and running the contact function.
  • Resend – technical delivery of messages from the contact form.
  • Google Workspace – receiving and storing business email and internal records of enquiries.
  • Google Analytics and Google Ads (Google Ireland Limited) – traffic statistics, ad and conversion measurement and remarketing; cookies only after consent, otherwise only cookieless signals.
  • Cloudflare – management of the domain’s DNS infrastructure.

For enquiries sent via Facebook or Instagram, we also use Meta lead forms. Meta is not involved in our web form; its processing on its own platforms is described in Meta’s Privacy Policy.

We may disclose data to competent authorities only when required by law or necessary to protect legal claims.

5. International transfers

Some providers may process data outside the European Economic Area. In such cases, the transfer is based on an applicable mechanism under the GDPR, such as an adequacy decision or standard contractual clauses, with additional safeguards where needed.

6. How long we keep data

  • We keep enquiries that do not result in a business relationship for no longer than 24 months from the last communication, unless they need to be deleted earlier or kept longer because of a legal claim.
  • If a contract is concluded, we keep the related communication and documentation for the duration of the business relationship and afterwards in line with the periods required by accounting and other applicable regulations.
  • Security and technical logs are kept only for the period needed for security, diagnostics and reliable operation, according to the infrastructure providers’ settings.
  • Event data in Google Analytics is kept for a maximum of 14 months. Cookies are kept for the periods stated below or until consent is withdrawn, whichever comes first.

7. Cookies and local storage

The website uses the local storage entry ed_cc to remember your cookie choice. This entry does not contain the user’s identity and remains on the device until you delete it or open the settings again.

After consent, Google Analytics may set the cookies _ga and _ga_* to distinguish visits and produce aggregate statistics. Their duration is limited to a maximum of six months on this website. For Google Ads, the cookies _gcl_au and _gcl_aw (lasting up to 90 days) may be set to link an ad click to an enquiry. For advertising and remarketing, Google may also set its own cookies on its domains, such as google.com and doubleclick.net, under its own policies. More information is available in Google’s information about cookies.

After consent, we temporarily store the source tags of your visit in the browser tab storage entry ed_attribution, until the tab is closed or consent is withdrawn. In analytics we record a successfully accepted contact enquiry, without the content of the form, and a click on a phone or email link together with the page where it happened, without sending the phone number or message content; without consent, as a cookieless signal. A click does not confirm that a call took place or a message was sent.

You can withdraw consent by selecting the Cookie settings link and then “Decline”. Withdrawal does not affect the lawfulness of processing before withdrawal.

8. Your rights

Depending on the circumstances, you have the right to request access to your data, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest. If processing is based on consent, you can withdraw it at any time.

Send your request to [email protected]. To protect your data, we may ask for reasonable confirmation of your identity. We will reply within the time limits set by the GDPR.

9. Complaint to the supervisory authority

If you believe your data is being processed in breach of the regulations, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb. Information and contact details are available at azop.hr.

10. Security and automated decision-making

We apply reasonable technical and organisational measures to protect data from unauthorised access, loss or misuse. Through this website we do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

11. Changes to this policy

We may update this policy from time to time due to changes in services, providers or regulations. The current version will always be published on this page with the date of the last update.