Invrida Privacy Statement

1. Contact details

Invrida

Thomas Edisonweg 33
5151 DH Drunen, the Netherlands
Website: https://invrida.com/
Email: privacy@invrida.com

2. Personal data we process

Invrida processes personal data because you use our website, services or monitoring service, because you provide this data to us yourself, or because this data has been provided to us by parties involved in delivering, transferring or continuing a service.

We may process the following personal data:

• first and last name;
• address details;
• installation address;
• phone number;
• email address;
• customer number, reference or account details;
• data required to create or manage an account;
• data about your solar installation, inverter, serial numbers and connected equipment;
• monitoring data, fault reports and service history;
• correspondence by email, phone, website form or other communication channels;
• other personal data you actively provide to us, for example via our website, app, platform, correspondence or by phone.

3. Processing in connection with the Autarco monitoring service

Invrida may process personal data of end users of the Autarco monitoring service. This data is processed to continue, manage and support that monitoring service.

This means personal data may be used for, among other things:

• continuing access to the monitoring service;
• managing customer and installation data;
• displaying and processing monitoring data;
• analysing and resolving faults;
• providing service and support;
• informing customers about changes to the service;
• customer communication;
• administrative handling;
• compliance with legal obligations.

The personal data may originate from you, from Autarco, from an installer, from a service partner or from another party involved in delivering, transferring or continuing the monitoring service.

Invrida uses this personal data exclusively for purposes that fit within offering, continuing, managing and supporting the monitoring service and for related service, communication and administrative purposes.

4. Special and/or sensitive personal data

Invrida does not intend to process special categories of personal data, such as data on health, religion, political opinion or other special categories of personal data.

If you believe we have collected personal data without consent, please contact us at privacy@invrida.com. We will then delete this information.

5. Purposes of processing

Invrida processes personal data for the following purposes:

• to carry out our services;
• to continue, manage and support the Autarco monitoring service;
• to give you access to an account or online environment;
• to call or email you when this is necessary for our services;
• to inform you about changes to our services or products;
• to provide service, maintenance and support;
• to analyse and resolve faults;
• to improve our website and services;
• for administrative purposes;
• to comply with legal obligations.

6. Legal bases for processing

Invrida only processes personal data when there is a valid legal basis. Depending on the situation, we process personal data on the basis of:

• performance of a contract, for example where personal data is needed to perform the monitoring service or other services;
• legitimate interest, for example to safeguard continuity of the monitoring service, provide service, resolve faults and improve our services;
• legal obligation, for example for tax and administrative retention requirements;
• consent, for example when consent is required for certain cookies or marketing communication.

Where we process personal data on the basis of consent, you have the right to withdraw your consent at any time. This does not affect processing that has already taken place before you withdrew your consent.

7. Automated decision-making

Invrida does not take decisions based solely on automated processing, including profiling, that have legal consequences for you or otherwise significantly affect you.

8. Retention periods

Invrida does not keep personal data longer than necessary for the purposes for which the data was collected or used.

We apply the following retention periods:

• customer, contact and account data: as long as the customer relationship or service continues and for a maximum of 2 years thereafter;
• data needed for the Autarco monitoring service: as long as the monitoring service is active and for a maximum of 2 years after termination;
• installation data, inverter data, serial numbers, monitoring data and service data: as long as needed for performance of the service, service, warranty, fault analysis or disputes, with a maximum of 5 years after termination of the service;
• fault reports, support tickets and service history: maximum 5 years after resolution or termination of the service;
• administrative and tax data, such as invoices and payment data: 7 years;
• data from contact forms or one-off information requests: maximum 1 year after the last contact moment;
• newsletter data: until you unsubscribe;
• cookie data: according to the retention periods set in the cookie or analytics tools used.

When data is no longer needed, it is deleted or anonymised.

9. Sharing personal data with third parties

Invrida does not sell your personal data to third parties.

Invrida only provides personal data to third parties where necessary for the performance of our agreement with you, for the continuation or support of the monitoring service, or to comply with a legal obligation.

We may share personal data with, among others:

• IT and hosting providers;
• suppliers of software and monitoring systems;
• service partners and installers, insofar as necessary for service or support;
• administrative service providers;
• parties involved in the continuation of the Autarco monitoring service;
• government authorities, where we are legally required to do so.

With parties that process personal data on our behalf, we conclude a data processing agreement where required. In it we make arrangements about security, confidentiality and the use of personal data.

Where personal data is processed outside the European Economic Area, we ensure that this only happens where appropriate safeguards are in place.

10. Cookies and similar techniques

Invrida uses cookies and similar techniques. A cookie is a small text file stored on your computer, tablet or smartphone when you visit a website.

We use the following types of cookies:

Functional cookies

These cookies are needed to make the website work properly. Examples are cookies that remember your cookie preferences or make sure forms function securely. No consent is required for functional cookies.

Analytical cookies

We may use analytical cookies to gain insight into the use of our website, such as visitor numbers, pages visited and general usage statistics. For this, for example, Google Analytics may be used.

Where analytical cookies are configured in a privacy-friendly way and have little impact on your privacy, consent is not always required. Where analytical cookies collect more data than necessary, we ask for your consent.

Tracking and marketing cookies

If Invrida uses tracking or marketing cookies, for example for personalised content, advertising or remarketing, these are only placed after you have given your consent.

On your first visit to our website we inform you about the use of cookies and, where necessary, ask your consent to place them.

You can disable cookies via your browser settings. You can also delete previously stored cookies via your browser.

11. Your rights

You have the following rights regarding your personal data:

• right of access;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to object to processing;
• right to data portability;
• right to withdraw consent given.

You can send a request to privacy@invrida.com.

To make sure the request was made by you, we may ask you for additional information so that we can verify your identity. If we ask for a copy of your ID, please black out your passport photo, MRZ code, passport number and citizen service number. This is to protect your privacy. We will respond as soon as possible, but at the latest within four weeks of your request.

12. Filing a complaint

Invrida wishes to point out that you have the right to file a complaint with the national supervisory authority: the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). You can do so via the website of the Dutch Data Protection Authority.

13. Security of personal data

Invrida takes the protection of personal data seriously and takes appropriate technical and organisational measures to prevent misuse, loss, unauthorised access, unwanted disclosure and unauthorised modification.

If you have the impression that your data is not properly secured or there are indications of misuse, please contact us at privacy@invrida.com.

14. Changes to this privacy statement

Invrida may change this privacy statement when our services, legislation or processing of personal data change. The most recent version is always available on our website. We recommend that you consult this privacy statement regularly.