SunVolt Club Privacy Policy and GDPR Notices

The controller responsible for your personal data is SunVolt Energy UAB, a company registered in Lithuania under Reg. No. 307557122, with its registered office at Beržų al. 1, Samylų sen., Kauno r., LT-53118, Lithuania (referred to as SunVolt, we, us or our).

You can contact us about privacy and data protection at any time:

• Email: [email protected]
• Phone (Lithuania): +370 636 83720
• Phone (Spain): +34 624 354 292
• Phone (Romania): +40 341 402 403
• Postal address: Beržų al. 1, Samylų sen., Kauno r., LT-53118, Lithuania

SunVolt Club is our business-to-consumer membership programme, operated online at club.sunvoltenergy.eu. Our corporate website is sunvoltenergy.eu. This policy covers the SunVolt Club membership platform and the forms and tools we offer there.

We only collect the data we need for the purposes described in Section 3. Most of it comes directly from you when you use the website. We collect the following categories of data:

Registration and account data

When you create a SunVolt Club account or join the waiting list, we collect your name, email address, phone number, country and, where relevant, your city or region. We also store your account settings and your membership status.

Checkout and payment data

When you pay the 99 EUR annual membership fee, we collect your billing details (name, billing address, country) and a record of your payment (amount, date, order reference and status). Your card number and full payment credentials are entered on and processed by our payment processor and are never stored on our servers. Please note that paid checkout activates only at commercial launch; until then the platform operates in waiting-list mode and no fee is charged.

Energy questionnaire data

When you complete the energy assessment questionnaire, we collect information about your home and your energy use, which may include your address or location, roof and property characteristics, your electricity consumption, your current tariff or supplier and your energy goals. You may optionally upload copies of your energy bills to make the assessment more accurate. Uploading bills is always your choice.

Green Home Award application data

If you apply for the SunVolt Green Home Award, we collect the information and files you submit to support your application. This may include details about your home situation, your household, your motivation and the expected impact, together with photographs of your property. Some of this information could reveal personal circumstances. Please share only what you are comfortable providing, and please avoid including special categories of data (such as health or other sensitive details) unless it is truly necessary; if you choose to include such information, we process it only on the basis of your explicit consent.

Savings calculator data

When you use the savings calculator, we process the figures you enter (for example roof size, consumption or budget) to produce an estimate. If you ask us to save the result or to contact you about it, we also keep the associated contact details.

Contact and waiting-list forms

When you use a contact form or join the waiting list, we collect your name, email address, phone number (if provided) and the content of your message or enquiry.

Marketing data

If you sign up for our newsletter or offers, we record your consent, your email address and your communication preferences, and basic data about how you interact with our emails (for example whether an email was opened or a link was clicked), so we can measure and improve our communications.

Technical and usage data

Like most websites, we automatically receive certain technical data when you browse, such as your IP address, device and browser type, and pages viewed. Cookies and similar technologies are described in Section 9 and in our Cookie Policy.

Under the GDPR we must have a legal basis for each use of your data. We rely on the following bases, mapped to each purpose:

• Creating and managing your membership account and delivering the club benefits (member pricing, the 250 EUR credit, group-buying rounds, partner discounts and support): performance of our contract with you (Article 6(1)(b)).
• Processing the 99 EUR membership fee and keeping invoicing and payment records: performance of our contract (Article 6(1)(b)) and compliance with our legal obligations (Article 6(1)(c)).
• Preparing your personalised energy assessment from the questionnaire: performance of our contract (Article 6(1)(b)). Any energy bills you upload are optional and are processed on the basis of your consent (Article 6(1)(a)).
• Handling your Green Home Award application, including property details and photographs, and documenting the jury decision: performance of our contract and taking steps at your request (Article 6(1)(b)). Any special category information you choose to include is processed only with your explicit consent (Article 9(2)(a)).
• Providing the savings calculator estimate: our legitimate interest in giving you a useful tool (Article 6(1)(f)), or your consent (Article 6(1)(a)) if you ask us to save the result or to contact you.
• Responding to contact enquiries and managing the waiting list: taking steps at your request and our legitimate interest in answering you (Article 6(1)(b) and (f)); waiting-list marketing is sent only with your consent (Article 6(1)(a)).
• Sending marketing emails and offers: your consent (Article 6(1)(a)), which you can withdraw at any time.
• Keeping our website secure, preventing fraud and abuse, and improving our services: our legitimate interest (Article 6(1)(f)).
• Meeting our accounting, tax and other legal duties: compliance with a legal obligation (Article 6(1)(c)).
• Establishing, exercising or defending legal claims: our legitimate interest (Article 6(1)(f)).

Where we rely on legitimate interest, we have weighed our interest against your rights and freedoms, and you can object as explained in Section 8. Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

We send marketing emails only if you have asked to receive them. We use a double opt-in process: after you submit your email address, we send you a confirmation message, and you become a subscriber only after you click the confirmation link. This protects you against someone else signing up your address.

You can withdraw your consent and stop marketing emails at any time. Every marketing email contains an unsubscribe link, and you can also email us at [email protected]. Withdrawing consent is free and takes effect promptly. It does not affect service messages that we need to send about your membership, your payment or your Award application.

We keep your personal data only for as long as we need it for the purposes above, and then we delete it or anonymise it. Our main retention rules are:

• Waiting-list and contact-form data: until commercial launch or until you ask us to remove it, and in any case no longer than 24 months from your last interaction.
• Account and membership data: for the duration of your membership and for a limited period afterwards to manage renewals and any follow-up.
• Membership fee, invoicing and transaction records: for the period required by Lithuanian and Romanian accounting and tax law, which is generally up to 10 years.
• Energy questionnaire answers and any uploaded bills: for the duration of your membership plus a short period, or until you ask us to erase them, whichever is sooner.
• Green Home Award application files and photographs: for the duration of the relevant Award edition and a limited period needed to document the jury decision, after which non-winning applications are deleted; records relating to the winner are kept longer to meet legal, tax and evidentiary requirements.
• Marketing consent records and subscriber data: until you withdraw consent, after which we keep a minimal record that you unsubscribed so we can honour your choice.
• Technical, security and cookie data: for the periods set out in our Cookie Policy and our security logs, which are short.

Where the law requires a longer retention period, or where data is needed for an ongoing legal claim, we keep it for that period only.

We do not sell your personal data. We share it only with trusted service providers who help us run SunVolt Club, and only as needed. These providers act as our processors and may process your data only on our instructions. We currently work with the following categories of recipient:

• Payment processor: Stripe, which securely handles card payments and the checkout for the membership fee.
• Email provider: the service that delivers our transactional and marketing emails.
• Hosting provider: the service that hosts the website and stores its data.
• Customer and application management: Monday.com, which we use to manage enquiries, memberships and Award applications.

We have data processing agreements in place with these processors, as required by Article 28 of the GDPR, so that they protect your data to the same standard we do. We may also disclose data to our professional advisers (such as accountants or lawyers), and to public authorities or courts where the law requires it. Installation of a physical PV system is carried out through our certified subcontractor network, and where you contract such a system we share the details needed to deliver it.

We aim to keep your data within the European Economic Area (EEA). Some of our processors, such as our payment, email and application-management providers, may process data outside the EEA, including in the United States.

Whenever data leaves the EEA, we make sure it is protected by appropriate safeguards, such as an adequacy decision of the European Commission, the EU-US Data Privacy Framework where applicable, or the European Commission's Standard Contractual Clauses together with additional measures where needed. You can ask us for more detail about these safeguards using the contact details in Section 1.

You have the following rights over your personal data:

• Access: to know whether we process your data and to receive a copy of it.
• Rectification: to have inaccurate or incomplete data corrected.
• Erasure: to have your data deleted where there is no lawful reason for us to keep it.
• Restriction: to have us limit how we use your data in certain situations.
• Portability: to receive certain data in a structured, commonly used, machine-readable format and, where technically possible, to have it sent to another controller.
• Objection: to object to processing based on our legitimate interest, and to object to direct marketing at any time.
• Withdrawal of consent: to withdraw any consent you have given, at any time, without affecting earlier processing.

To exercise any of these rights, contact us at [email protected]. We will respond within one month, and we may ask you to confirm your identity first. Exercising your rights is free, unless a request is clearly unfounded or excessive.

If you believe we have not handled your data properly, you have the right to lodge a complaint with a supervisory authority. Our lead authority is the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, ada.lt). If you are in Romania, you may also complain to the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro), or to the data protection authority in your own EU or EEA country. We would, however, appreciate the chance to address your concern first.

We use cookies and similar technologies to make the website work, to remember your preferences, to measure how the site is used and, with your consent, for marketing. You control non-essential cookies through the consent banner shown on your first visit, and you can change your choices at any time.

For full details of the cookies we use, their purposes and how to manage them, please see our separate Cookie Policy.

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. These include encryption of data in transit, restricted access on a need-to-know basis, careful selection of our processors and regular review of our security practices. No system can be completely secure, but we work to reduce the risks and to respond quickly if an incident occurs. Where the law requires it, we will notify you and the competent authority of a personal data breach.

SunVolt Club is intended for adults. Our services are not directed at children, and we do not knowingly collect the personal data of anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this Privacy Policy from time to time, for example if we change our services or if the law changes. When we do, we will update the effective date at the top and, for significant changes, we will tell you by a notice on the website or by email.

If you have any questions about this policy or about how we handle your data, please contact us at [email protected], by phone on +370 636 83720 (Lithuania), +34 624 354 292 (Spain) or +40 341 402 403 (Romania), or by post at Beržų al. 1, Samylų sen., Kauno r., LT-53118, Lithuania.