Privacy Policy of InnoEnergy

This Privacy Policy sets out how KIC InnoEnergy SE (“InnoEnergy”, “us”, “our”, “we”) handles personal data of you when you are making use of the online order shop and website: https://innoenergyshop.myshopify.com (“Site”).



ARTICLE 1. SCOPE AND RESPONSIBILITIES


1.1 This Privacy Policy applies to the Processing of Personal Data obtained by us of visitors of the Site, including (personnel of its) customers (“Data Subjects”).


1.2 InnoEnergy is the controller for these Processing activities.


1.3 The Site may include references of third parties (for example hyperlinks, banners or buttons). We do not control these references and are not responsible for compliance with the law by these third parties. We recommend to carefully read the privacy policies of the third party websites you are visiting via the Site.


1.4 Additional privacy provisions may apply to specific sections in this Site.


ARTICLE 2. PERSONAL DATA AND PROCESSING


2.1 “Personal Data” means any information relating to an identified or identifiable natural person (data subject). We may collect the following Personal Data from Data Subjects:
a. name and address details;
b. information about an order;
c. e-mail address;
d. IP address;
e. payment details.


2.2 “Process” or “Processing” means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.


ARTICLE 3. PROCESSING OF PERSONAL DATA AND LEGAL GROUNDS

3.1 InnoEnergy is Processing personal Data Submitted by Data Subjects in the context of the use of the Site, for the following purposes:
a. Performance of a contract (B-B): Personal Data of Data Subjects may be Processed by us for the performance of a contract when the Data Subject places an order via the Site. The purpose also includes payment for the report ordered. We do not Process more Personal Data than is strictly necessary for the performance of the contract involved. This Processing of Personal Data is necessary for the performance of a contract and/or for purposes of a legitimate interest pursued by InnoEnergy, namely to conducts its normal business.
b. Communication: Personal Data of Data Subjects may be Processed by us to communicate with Data Subjects about the report ordered and to inform Data Subjects of matters that are important for the use of the Site, customer service and the handling of any complaints. This Processing of Personal Data is necessary for the performance of a contract and/or for purposes of a legitimate interest pursued by InnoEnergy, namely to conducts its normal business.
c. Marketing purposes; Personal Data of Data Subjects may be Processed by us for direct marketing purposes, by sending our newsletters, advertising, project information, information about InnoEnergy, our projects, services and/or our educational programs and/or job offers. This Processing of Personal Data is necessary for purposes of a legitimate interest pursued by InnoEnergy, namely to keep in touch with customers and to offer customers similar products and services or is based on prior consent.
d. Statistical purposes; InnoEnergy compiles statistical information from the Personal Data, as much as possible on an anonymous basis. This Processing of Personal Data is necessary for purposes of a legitimate interest pursued by InnoEnergy, namely to improve its products and services.


ARTICLE 4. PROCESSING OF PERSONAL DATA AND LEGAL GROUNDS


4.1 InnoEnergy shall only disclose Personal Data to third parties where required by law or to our employees, contractors, designated agents, or third-party service providers if necessary for the purposes described in this privacy policy. Third-party service providers include processors (i.e. any person or legal entity engaged by InnoEnergy for Processing, and not being an employee nor otherwise subjected to the authority of InnoEnergy or its Executive Board or any of its members). We also share information with our affiliates.


4.2 The third-party service providers may be located outside the European Economic Area (“EEA”). This will involve transferring Personal Data to countries outside the EEA. If and insofar as we transfer Personal Data with parties in countries outside the EEA that do not have an adequate level of protection, we will agree with these parties data protection provisions set by the European Commission, so called Standard Contractual Clauses. A copy of the agreed standard provisions can be requested at InnoEnergy. Please contact us if you would like to obtain additional information on the transfer of Personal Data out of the EEA.


ARTICLE 5. SECURITY


5.1 We take appropriate organizational and technical security measures to protect Personal Data and to prevent misuse, loss or alteration thereof. In addition, we limit access to Personal Data to those employees, agents, contractors and other third parties who have a need to have access. Also, the aforementioned persons involved are bound by a confidentiality obligation, either in their employment agreements or (data processor) contracts.


5.2 We have internal safety guidelines in place including a data breach policy in which it is described how to deal with a suspected Personal Data breach. We will notify the relevant supervisory authority and the Data Subjects involved if required under applicable privacy legislation.


5.3 We store Personal Data that we collect via the Site on servers in and outside the EEA. The storage will involve transferring Personal Data outside the EEA.


ARTICLE 6. RETENTION PERIODS

6.1 We do not store Personal Data any longer than strictly necessary for the purposes for which we collect the Personal Data.


6.2 Data Subject’s may request InnoEnergy to delete the Personal Data at any stage. If the Personal Data are no longer required for the purposes for which we collected or otherwise Processed the Personal Data, we will remove the Personal Data.


ARTICLE 7. COOKIES


7.1 InnoEnergy may use “cookies” (small pieces of data stored on the Data Subject’s computer) or similar tools using (as much as possible anonymized) information.


7.2 KIC uses different types of cookies for different purposes;
a. Functional cookies: cookies that are necessary for the Site to function properly, including cookies that are necessary to enable the Data Subject to sign in to certain services to protect both the Data Subject and InnoEnergy, help make our services easier to use.
b. Analytical cookies: cookies that ensure that insight can be gained into how Data Subjects use (parts of) the Site, to help us understand how users engage with our services and to improve their features. InnoEnergy does not use the data obtained with these cookies to study the use of the Site at an individual level, but only at an aggregated level.
c. Tracking cookies; cookies are used for direct marketing purposes of InnoEnergy.


7.3 We only use third party cookies to improve the quality and effectiveness of the Site. For example, it uses Google Analytics, which is set up in a privacy-friendly manner. Google Analytics Processes the IP addresses for InnoEnergy.


7.4 For a list of cookies that can be used we refer to the cookie policy (https://www.shopify.ca/legal/cookies).


7.5 Most browsers are set to accept cookies by default. You can set the browser to disable cookies or indicate when a cookie is being sent. However, it is possible that some functions and services of both InnoEnergy and other websites do not function properly if cookies are disabled.


ARTICLE 8. DATA SUBJECT’S RIGHTS

8.1 Data Subjects have the following rights:
a. the right to withdraw consent at any time, if the Personal Data Processing is based on consent (see above);
b. the right to request access to his Personal Data;
c. the right to request rectification of the Personal Data that we hold about the Data Subject involved;
d. the right to request erasure of Personal Data concerning the Data Subject;
e. the right to object to Processing of Personal Data where we are relying on a legitimate interest. Insofar as the Processing of your Personal Data takes place for direct marketing purposes, we will always honour such request. For Processing for other purposes, we will also stop Processing, unless we have compelling legitimate grounds for the Processing which override your interests, rights and freedoms or that are related to the institution, exercise or substantiation of a legal claim;
f. the right to request restriction of Processing of Personal Data;
g. the right to request to transfer of Personal Data to the Data Subject involved or to a third party (right to dataportability). Note that this right only applies to automated information which Data Subjects initially provided consent for us to use or where we used the information to perform a contract with the Data Subject involved.


8.2 We may request specific information from Data Subjects to help us confirm the identity and the rights described above.


8.3 The exercise of the abovementioned rights is free of charge.


8.4 InnoEnergy shall inform Data Subjects, within one (1) month after the receipt of such a request. Depending on the complexity of the request and on the number of requests, this period can be extended by another two (2) months. Applicable law may allow or require us to refuse your request. If InnoEnergy decides not to meet the request made, the refusal shall be explained, subject to any legal or regulatory restrictions. If InnoEnergy decides to meet the request made the necessary measures will be taken as soon as reasonably possible.


8.5 If requests are manifestly unfounded or excessive, in particular because of the repetitive character, we will either charge a reasonable fee or refuse to comply with the request.


ARTICLE 9. CONTACT


9.1 For any questions, complaints or in the event that Data Subjects wish to make use of one of the rights mentioned in this Privacy Policy, you may contact us at the contact details below:

KIC InnoEnergy SE
Kennispoort, 6th floor, John F. Kennedylaan 2
5612 AB Eindhoven, The Netherlands.
e-mail: info@innoenergy.com
tel: +31 40 247 31 82



ARTICLE 10. DATA PROTECTION AUTHORITY


10.1 In addition to the above mentioned rights everyone have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or of an alleged infringement of the GDPR at all times. However, we would appreciate the chance to deal with concerns before Data Subject’s approach the supervisory authority, so please contact us beforehand.


ARTICLE 11. MISCELLANEOUS


11.1 This Privacy Policy may be amended by InnoEnergy from time to time. Amendments to this Privacy Policy will enter into force after publication of the revised version on https://innoenergyshop.myshopify.com. It is your responsibility to regularly review the applicable conditions. This Privacy Policy is last amended and revised in January 2019.


11.2 If a provision from this Privacy Policy is in conflict with the law, it will be replaced by a provision of the same purport that reflects the original intention of the provision, all this to the extent legally permissible. In that case, the remaining provisions remain applicable unchanged.