-
Types of Personal Information We Collect
-
Here's how we collect personal information
-
Here's what we use personal information for
-
This is how long we retain personal data
-
To Whom Do We Disclose Personal Information?
-
Here's How We Protect Your Personal Information
-
You have control over your personal information
-
Your personal data and that of your users when Ngenic Energi acts as a data processor
-
Here’s how we handle your personal information when you are no longer a customer
Types of Personal Information We Collect
Contact Information
When you become a customer of Ngenic Energi, we collect your contact information:
Name, address, email address, phone number.
Information About Your Services
We also store data about which of our services you order and use, as well as how you use them.
Information that our products and services collect during use
We also store data collected by our products and services in order to provide the services you use from us.
Support Cases
When you contact our support team, we collect the information you provide to us so that we can assist you with your inquiry.
Here's how we collect personal information
We collect and process data that…
- ...you'll let us know yourself when you become a customer.
- …you provide when you contact us in the form of notes, chat conversations, emails, and recorded calls.
- …is generated when you use our services—for example, when you use our app or visit our website.
- …our products and services collect—for example, temperature data and energy information.
- …we obtain from other sources—such as your energy provider.
- …is collected through cookies that gather information on and from your web browser.
Exactly what information we collect about you depends on which of our services you use.
Here's what we use personal information for
In order for us to process your data, one of the following legal bases must be met:
- Requirements for fulfilling the agreement with you.
- Requirements for fulfilling a legal obligation on the part of Ngenic Energi.
- The treatment is in both your and Ngenic Energy's best interest.
- Your consent for that specific processing.
In order for us to provide our services to you, we need to process your personal data. Below you will find information about how we use your data, as well as the legal basis for the processing.
Provision of Services
We process personal data to identify you as a customer and to manage and deliver the products and services you have ordered and subscribed to. We also process personal data necessary to handle billing and payment for the services you use.
Legal basis: Performance of a contract.
Communication and Support
We may use personal information from your previous contact with us to provide you with better assistance.
We use your contact information and details about the services you use to send you invoices, newsletters, important information about your services, offers, and tips on how to use our services.
Legal basis: Balancing of interests, consent, and performance of a contract.
Development of Our Services and Products
We process personal data related to how you use our services and from your interactions with us to help us improve your experience specifically and our products and services in general.
Legal basis: Balancing of interests and consent.
Marketing
In order to market relevant products and services to you based on your needs, we process personal data about which services you use and how you use them.
Legal basis: Balancing of interests and consent.
Safety and Prevention of Substance Abuse
We process personal data for the purpose of detecting and preventing the following in our services and on our network:
- substance abuse
- attempted intrusion
- attacks such as viruses, DDoS
- violation of the law
- use of our services that violates our terms and conditions
Legal basis: Performance of a contract and legal obligation.
Legal Obligations
We process personal data in order to comply with legal requirements.
Legal basis: Legal obligation.
This is how long we retain personal data
We retain personal data for as long as there is a documented purpose for its processing. Please contact ourData Protection Officerfor details.
To Whom Do We Disclose Personal Information?
Partners, subcontractors, and other companies within the Ngenic Energi Group
We have agreements with all partners and subcontractors within the EU, and EU standard contractual clauses for all parties outside the EU. Where applicable, we apply the EU’s standard contractual clauses (2010/87/EU) or the standard contractual clauses that replace them following any decision by the European Commission and/or the Court of Justice of the European Union. Among other things, the agreements specify what personal data is processed, the purpose of the processing, how personal data must be protected, and how long it will be processed. The agreements also include instructions from the data controller to the data processor regarding how the personal data may be processed.
We strive to never share more personal information than is absolutely necessary with each partner.
We take appropriate protective measures to ensure that your personal data is handled in accordance with applicable laws regarding security and privacy. We impose the same requirements on our subcontractors.
We may share certain data with the following partners and subcontractors for the purposes listed below.
Marketing and Analysis Purposes
| Google (Mountain View, CA, USA) | Analytics data collected via third-party cookies for marketing and web analytics |
|---|---|
|
Meta Platforms (Menlo Park, CA, USA). |
Analytics Data via Third-Party Marketing Cookies |
For the purpose of providing the services ordered
| Unifaun AB (Stockholm, Sweden). | Data required to deliver shipments to customers |
|---|---|
| DHL Freight AB and its group companies (Stockholm, Sweden). | Data required to deliver shipments to customers |
| Microsoft Ireland Operations, Ltd. (Dublin, Ireland). | Microsoft's operating environments are used by Ngenics' systems, which process collected customer data. Microsoft also handles address suggestions and the conversion of addresses to coordinates. |
| Elomraden.se (Trollhättan, Sweden). | Address data for looking up electricity price zones |
For the purpose of charging for our services
| Stripe Payments Europe Ltd (Dublin, Ireland) | Data Required to Process Card Payments |
|---|---|
| Chargebee Ireland Limited (Dublin, Ireland) | Data required to manage subscriptions |
| Linserv AB (Stockholm, Sweden) | Data required for processing billing, shipping, and accounting (CRM system) |
| Nordea AB (Helsinki, Finland) | Data Required for Manual Refunds |
| Öhrlings PricewaterhouseCoopers AB (Stockholm, Sweden) | Transaction data for bookkeeping and financial reporting purposes |
For the purpose of communicating with customers
| Mailjet SAS (Paris, France) | Data required to communicate via email |
|---|
For the purpose of providing support services
| Help Scout Inc. (Boston, MA, USA) | Data Required to Provide Support Services |
|---|---|
| Targetprocess Inc. (Amherst, NY, USA) | Data Required to Provide Support Services |
Government Agencies
Upon request, we may be required by law or by a decision from a government agency to disclose certain personal information to, for example, the police.
Here's How We Protect Your Personal Information
We use industry standards to securely store, process, and transmit sensitive information, such as personal data and passwords. Examples include SSL/TLS, PGP, and one-way hash algorithms.
The protection is implemented through systematic, organizational, and technical measures to ensure integrity, confidentiality, and availability.
We have policies and security procedures for, among other things:
- information security
- incident management
- risk analysis
- software updates
- secure configuration and management of devices
- offices and server rooms
- software development
- instruction and training
Ngenic Energy's employees are bound by confidentiality agreements and process only the information required for their assignments.
You have control over your personal information
You have control over your own personal information. This means you decide what information you want to provide and what processing of your personal information you consent to, and you can withdraw your consent at any time.
Please note, however, that we need certain personal information in order to provide our services to you. If you choose to withdraw your consent, this may mean that we will not be able to provide all of our services to you.
Read more here about your rights regarding your personal information
Your personal data and that of your users when Ngenic Energi acts as a data processor
In cases where you are the data controller and Ngenic Energi acts as a data processor, our processing of your customers’ personal data is governed by ourData Processing Agreement, which is attached to our contract.
Here’s how we handle your personal information when you are no longer a customer
When you cancel your account, we will delete all of your personal information where there is no longer a purpose for continued processing. We will also notify any partners and subcontractors who have processed your data that it must be deleted from their systems.
Among other things, the following will be removed: your…
- …personal information in our CRM system.
- …all data collected from our products and services that can be linked to you as a customer in our operational systems.
- …backups of the above are deleted according to our backup schedule.
Among the items that are not removed are, among others:
- Data required under the Accounting Act.
- Aggregated statistical data that cannot be traced back to an individual customer.