This privacy policy describes how EcoRay ApS processes personal data about customers, potential customers, visitors to our websites, and other individuals who are in contact with us.
1. Data Controller
EcoRay ApS is the data controller for the processing activities described in this policy.
EcoRay ApS
Livjægergade 17 B, 2100 Østerbro
CVR: 45898385
Email: info@ecoray.dk
Phone: +45 52 51 54 53
2. What information do we process?
Depending on your relationship with EcoRay, we may process the following types of information:
- Name, address, phone number, and email address.
- Information about your home and property, such as address, housing type, roof conditions, and other technical details relevant to advice or installation.
- Energy and consumption data that you provide to us yourself, or to which we have access on a valid legal basis in connection with a solution.
- Information regarding quotes, orders, payments, financing, and customer history.
- Communication with us, including emails, forms, meeting bookings, and customer service enquiries.
- Technical information about the use of our websites and digital solutions, such as IP address, browser, device type, log data, and cookie information.
- Consents and preferences, including choices regarding cookies and marketing.
- Other information that you choose to provide to us.
3. Why do we process this information?
Quotes, consultation, and contract formation
We process information to respond to enquiries, prepare calculations and quotes, provide advice on energy solutions, and enter into agreements. This processing is primarily carried out to take steps at your request prior to entering into an agreement or to fulfil an agreement.
Delivery, installation, and customer service
We process information in order to plan and deliver products and services, coordinate installation, and handle service, documentation, registrations, and subsequent support. The processing is necessary to fulfil our agreement with you and, in certain cases, to comply with legal obligations.
Administration and documentation
We process information in connection with bookkeeping, invoicing, documentation, warranty and complaint cases, and other ordinary business administration. The processing is carried out to comply with legal obligations and to pursue legitimate interests in being able to document our agreements and operations.
Improvement of our website and services
We may process technical and statistical information to understand the use of our websites and to improve functionality, security, and user experience. Where the processing requires consent, we obtain it through our cookie and consent solution.
Marketing
We only send electronic marketing when we have a valid basis for doing so, for example your consent or another lawful basis. You can always unsubscribe from marketing via the link in the individual message or by contacting us.
4. Legal basis
Our processing may, among other things, be based on:
- Article 6(1)(b) of the General Data Protection Regulation (GDPR), where the processing is necessary to enter into or perform an agreement.
- Article 6(1)(c) GDPR, where the processing is necessary to comply with a legal obligation.
- Article 6(1)(f) GDPR, where we pursue a legitimate interest and your interests or fundamental rights do not override it.
- Article 6(1)(a) GDPR, where you have given consent to a specific processing activity.
If processing is based on consent, you can withdraw your consent at any time. The withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
5. Where does the information come from?
We receive most information directly from you. We may also receive information from publicly available registers, partners, suppliers, energy companies, or other sources, where this is relevant to the solution you have asked us for and we have a lawful basis for receiving the information.
6. Who do we share information with?
We only share personal data when it is necessary and lawful. Recipients may, for example, include:
- Installers, technicians, and other partners who help deliver the agreed solution.
- Providers of hosting, CRM, email, customer service, analytics, booking, document management, and other IT systems.
- Manufacturers and suppliers, where sharing is necessary for warranty, service, or product registration.
- Grid companies, authorities, or other relevant parties, where registration or notification forms part of the delivery or is required by law.
- Financing partners, if you yourself choose to apply for financing through such a partner.
- Auditors, advisers, and public authorities, where we are legally obliged to or have a legitimate need.
Suppliers who process information on our behalf may, as a general rule, only process the information in accordance with our instructions and under a data processing agreement.
7. Transfers to countries outside the EU/EEA
Some of our IT suppliers may process information outside the EU/EEA. If this happens, we ensure a valid transfer basis under the data protection rules, for example an adequacy decision or the European Commission's standard contractual clauses, where relevant.
8. How long do we keep information?
We only keep personal data for as long as is necessary for the purposes for which it was collected, or for as long as we are required to by law.
The retention period depends on factors such as whether you are a customer, whether a warranty or complaint period is running, whether the information forms part of accounting records, or whether there is a need to document a legal claim.
Information processed solely on the basis of consent is deleted or anonymised when the consent is withdrawn, unless we have another lawful basis for continued retention.
9. Security
We use appropriate technical and organisational security measures to protect personal data against accidental or unlawful loss, alteration, disclosure, misuse, or access.
10. Your rights
Under the data protection rules, and depending on the circumstances, you have, among other things, the right:
- To be informed about how we process your personal data.
- To access the personal data we process about you.
- To have inaccurate information rectified.
- To have information erased in cases where the rules provide a right to this.
- To have the processing restricted.
- To object to processing based on legitimate interests.
- To receive certain information in a structured, commonly used, and machine-readable format and have it transmitted to another data controller, where the conditions for data portability are met.
- To withdraw your consent.
If you wish to exercise your rights, you can contact us at info@ecoray.dk. We may ask for information necessary to ensure that we disclose or change information for the right person.
11. Complaints to the Danish Data Protection Agency (Datatilsynet)
If you are dissatisfied with our processing of your personal data, you can contact us. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet). You can find contact details and guidance at datatilsynet.dk.
12. Cookies
We use cookies and similar technologies on our websites and digital services. Below, you can read how they are used and how you manage your consent.
1. What are cookies?
Cookies are small text files that are stored on your device when you visit a website. Cookies can be used, among other things, to make the site work, remember your choices, measure the use of the site and – if you give your consent – support marketing.
We may also use technologies that work in a similar way to cookies. In this policy, we refer to them collectively as “cookies”.
2. What types of cookies do we use?
Necessary cookies
Necessary cookies are used for functions that are required for the website to work securely and correctly. They may, for example, remember your cookie choice or support forms, security, or technical functions. As a general rule, these cookies do not require consent when they are strictly necessary for the service you have requested.
Preference cookies
Preference cookies may be used to remember choices that make the experience more personal, for example language or other settings. We only use them when we have the necessary basis.
Statistics cookies
Statistics cookies help us understand how visitors use the website, for example which pages are visited, how users move around, and whether technical errors occur. Where the rules require consent, these cookies are only set once you have accepted them.
Marketing cookies
Marketing cookies may be used to measure the effect of campaigns, build audiences, or show more relevant marketing across websites and services. These cookies are only set with your consent, where consent is required.
3. The current cookie list
The specific list of cookies and providers may change as we develop our website and digital solutions. The most up-to-date information about each cookie, its purpose, provider, and lifespan is shown in our cookie and consent solution.
4. Your consent
When you visit the website for the first time, you can choose which non-necessary cookies you want to accept. You can accept or reject the relevant categories and change your choice later.
Consent to cookies is voluntary and can be withdrawn at any time. Withdrawal does not affect the lawfulness of processing already carried out on the basis of your earlier consent.
5. How to change your cookie choice
You can open our cookie settings on the website at any time and change or withdraw your consent. When you change your choice, we will respect the new settings going forward.
You can also delete cookies via your browser settings. Please note that blocking or deleting necessary cookies may affect the functionality of the website.
6. Third parties
Some cookies may be set by third-party providers if we use their features on the website, for example analytics, video, booking, maps, social media, or marketing. Third parties may process information under their own privacy policies where they are independent data controllers.
7. Personal data and cookies
Some cookies may involve the processing of personal data, for example IP address, online identifiers, information about the browser, or use of the website. You can read more about our processing of personal data in EcoRay's privacy policy.
13. The relationship between cookies and personal data
Some cookies may involve the processing of personal data, for example IP address, online identifiers, information about the browser, or use of the website. Where this is the case, the principles and rights described above also apply to that processing.
14. Changes
We may update this page, for example if our services, the cookies we use, or the way we process personal data change. The latest version will be available on our website.
Contact
Questions about personal data or cookies can be sent to info@ecoray.dk.