Privacy Policy

This Privacy Policy describes how ELECREST Energy B.V. ("ELECREST", "we", "us", or "our") collects, uses, discloses, and protects personal data when you visit our website at elecrest.energy, interact with our digital services, subscribe to communications, request product information, or otherwise engage with us in connection with our DC fast charging solutions engineered for the European market.

We are committed to protecting your privacy and processing personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Dutch Implementation Act (Uitvoeringswet AVG), and other applicable European and national data protection laws. Please read this policy carefully to understand our practices regarding your personal data and how we will treat it.

1. Data Controller

The data controller responsible for your personal data is ELECREST Energy B.V., registered in the Netherlands, with its registered office at De Werf 11, 2544 EH The Hague, Netherlands. For any questions regarding this Privacy Policy or our data processing activities, you may contact us at info@elecrest.energy.

Where required by law, we have appointed internal personnel to oversee privacy compliance. You may also contact your local supervisory authority. In the Netherlands, the competent authority is the Autoriteit Persoonsgegevens (AP), reachable via autoriteitpersoonsgegevens.nl.

2. Scope of This Policy

This Privacy Policy applies to personal data we process when you:

• Visit or browse our website, including pages related to products, technology, careers, and company information;
• Subscribe to newsletters or marketing communications;
• Submit enquiry forms, quote requests, or contact forms;
• Apply for employment opportunities through our careers section;
• Communicate with us by email, phone, or through social media channels linked from our website;
• Interact with us at trade events, demonstrations, or business meetings;
• Use cookies and similar technologies as described in our Cookie Policy.

This policy does not apply to third-party websites, applications, or services that may be linked from our site. We encourage you to review the privacy policies of any third parties you visit.

3. Categories of Personal Data We Collect

Depending on your interaction with us, we may collect the following categories of personal data:

3.1 Identity and Contact Data

Name, job title, company name, business address, email address, telephone number, and other identifiers you voluntarily provide when contacting us, requesting a quote, subscribing to updates, or applying for a position.

3.2 Professional and Business Data

Information about your organisation, role, industry sector, fleet or charging infrastructure requirements, project specifications, procurement timelines, and other details relevant to evaluating or delivering ELECREST products and services.

3.3 Communication Data

Content of emails, messages, form submissions, call notes, meeting records, and correspondence you send to us or that we send to you in connection with enquiries, support, partnerships, or recruitment.

3.4 Technical and Usage Data

IP address, browser type and version, device identifiers, operating system, referral URLs, pages viewed, time spent on pages, clickstream data, error logs, and similar information collected automatically through cookies, server logs, and analytics tools.

3.5 Marketing and Preferences Data

Your communication preferences, subscription status, consent records, and engagement metrics such as email open rates and link clicks, where permitted by law.

3.6 Recruitment Data

Curriculum vitae, cover letters, employment history, qualifications, references, interview notes, and other information submitted as part of a job application.

4. How We Collect Personal Data

We collect personal data through the following means:

• Directly from you — when you complete forms, subscribe to communications, request information, or communicate with us;
• Automatically — through cookies, pixels, and similar technologies when you use our website;
• From third parties — such as analytics providers, advertising platforms, recruitment platforms, publicly available business directories, event organisers, or business partners, where permitted by law;
• From your employer or organisation — where you interact with us in a professional capacity on behalf of a company.

5. Purposes and Legal Bases for Processing

We process personal data only where we have a valid legal basis under the GDPR. The table below summarises our main processing activities:

Where we rely on legitimate interests, we balance those interests against your rights and freedoms and implement appropriate safeguards. You may request further information about this balancing test by contacting us.

6. How We Use Your Personal Data

We use personal data for purposes including, but not limited to:

• Providing access to our website and digital content;
• Processing and responding to your requests, questions, and support needs;
• Preparing quotations, technical proposals, and commercial offers for HIMA and related product lines;
• Delivering newsletters, product updates, event invitations, and other communications you have requested;
• Improving our website, user experience, and marketing effectiveness through aggregated analytics;
• Conducting recruitment and evaluating candidates for employment;
• Preventing fraud, abuse, and unauthorised access to our systems;
• Complying with applicable laws, regulations, court orders, and regulatory requests;
• Managing our business relationships with customers, suppliers, partners, and stakeholders.

7. Marketing Communications

Where you have subscribed to our newsletter or otherwise consented to marketing, we may send you information about ELECREST products, technology developments, industry insights, events, and company news. You may withdraw consent or opt out at any time by clicking the unsubscribe link in our emails or by contacting us at info@elecrest.energy.

Even if you opt out of marketing, we may still send transactional or service-related communications that are necessary to respond to your enquiries or fulfil contractual obligations.

8. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to operate our website, remember preferences, and understand how visitors use our content. For detailed information about the cookies we use, their purposes, retention periods, and your choices, please see our Cookie Policy.

9. Disclosure of Personal Data

We may share personal data with the following categories of recipients, strictly as necessary:

• Service providers — hosting providers, email delivery services, CRM systems, analytics platforms, IT support vendors, and recruitment tools that process data on our behalf under data processing agreements;
• Professional advisers — lawyers, accountants, auditors, and insurers bound by confidentiality obligations;
• Business partners — distributors, integrators, or project partners involved in fulfilling your request, with appropriate contractual safeguards;
• Authorities — regulators, courts, law enforcement, or other public bodies where required by law;
• Corporate transactions — acquirers, investors, or successors in the event of a merger, acquisition, reorganisation, or sale of assets, subject to continued protection of your data.

We do not sell your personal data to third parties.

10. International Data Transfers

ELECREST is based in the European Economic Area (EEA). Where we transfer personal data to countries outside the EEA that have not been recognised as providing an adequate level of data protection, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, supplementary measures where required, and contractual commitments with recipients to protect your data.

You may request a copy of relevant transfer safeguards by contacting us at info@elecrest.energy.

11. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Retention periods vary depending on the nature of the data and our relationship with you:

• Enquiry and quote data — typically up to 24 months after last meaningful contact, unless a business relationship continues;
• Marketing subscription data — until you unsubscribe or withdraw consent, plus a short suppression record to honour your preferences;
• Recruitment data — up to 12 months after the application process concludes, unless you consent to longer retention for future opportunities;
• Website logs and analytics — according to the periods specified in our Cookie Policy or provider documentation;
• Contract and transaction records — for the duration of the relationship and as required by applicable commercial and tax laws.

When personal data is no longer required, we securely delete or anonymise it in accordance with our internal retention schedule and security policies.

12. Security Measures

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include access controls, encryption in transit where supported, secure hosting environments, staff training, and procedures for incident detection and response.

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but continuously review and improve our safeguards.

13. Your Rights Under the GDPR

Subject to applicable law, you have the following rights regarding your personal data:

• Right of access — to obtain confirmation of whether we process your data and receive a copy;
• Right to rectification — to request correction of inaccurate or incomplete data;
• Right to erasure — to request deletion in certain circumstances ("right to be forgotten");
• Right to restriction — to request limitation of processing in specific situations;
• Right to data portability — to receive data you provided in a structured, commonly used format;
• Right to object — to object to processing based on legitimate interests or for direct marketing;
• Right to withdraw consent — where processing is based on consent, without affecting prior lawful processing;
• Right not to be subject to automated decision-making — including profiling with legal or similarly significant effects, where applicable.

To exercise any of these rights, please contact us at info@elecrest.energy. We may need to verify your identity before responding. We aim to respond within one month, as required by the GDPR.

You also have the right to lodge a complaint with a supervisory authority, particularly in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

14. Children's Privacy

Our website and services are directed at business professionals and are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will take steps to delete such information promptly.

15. Automated Decision-Making and Profiling

We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you. Analytics tools may generate aggregated statistical insights about website usage, but these do not result in automated decisions about individuals in a manner described by Article 22 GDPR.

16. Third-Party Links and Embedded Content

Our website may contain links to third-party websites such as LinkedIn, YouTube, Facebook, and X (Twitter), as well as embedded maps or media. These third parties operate under their own privacy policies. We are not responsible for the privacy practices of external sites and encourage you to review their policies before providing personal data.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. When we make material changes, we will post the updated policy on this page and revise the "Last updated" date. Where required by law, we will provide additional notice or seek your consent.

We encourage you to review this page periodically to stay informed about how we protect your personal data.