Privacy Policy

Privacy Policy

Information on Data Protection and Processing of Your Personal Data

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. For detailed information on data protection, please refer to our privacy policy below.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the "Information on the Responsible Party" section of this privacy policy.

How do we collect your data?

Your data is collected on the one hand by you providing it to us. This can be, for example, data that you enter in a contact form.

Other data is collected automatically or with your consent by our IT systems when you visit the website. This is mainly technical data (e.g., internet browser, operating system, or time of page view). This data is collected automatically as soon as you enter this website.

We do not process payment data, as our website does not offer payment functions.

What do we use your data for?

Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

To exercise your rights or if you have questions about data protection, you can contact us at any time: info@woltanic.de.

Hosting

Vercel

We host the contents of our website with Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel processes technical data (e.g., IP addresses, browser information) to provide the website. Processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in a reliable website). If consent has been obtained for cookies or device information, processing is based on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.

Since Vercel may use servers in the USA, we base data transfers on standard contractual clauses of the EU Commission. Details: https://vercel.com/legal/privacy. We have entered into a data processing agreement (DPA) with Vercel to ensure GDPR compliance.

Hostinger

Our database, in which personal data (e.g., newsletter emails) is stored, is hosted with Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. Processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in secure data storage). A DPA with Hostinger ensures GDPR-compliant processing. Further information: https://www.hostinger.com/privacy-policy.

Technical Infrastructure

Web Technologies

This website was developed using the following technologies:

• Next.js: A React-based framework for website development. Provider is Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA.
• React: A JavaScript library for the user interface. Provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
• Tailwind CSS: A CSS framework for website styling. Provider is Tailwind Labs Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

These technologies are used exclusively for the display and functionality of the website. They do not process personal data and are used on the basis of Art. 6 para. 1 lit. f GDPR, as we have a legitimate interest in a modern, performant, and user-friendly website.

Content Management

The contents of the website are managed via a Content Management System (CMS). This system is operated on our own servers and does not process personal data of website visitors.

Cookies

Our website uses cookies and similar technologies to ensure functionality and analyze user behavior. Cookies are small text files that are stored on your device. We distinguish between:

• Necessary Cookies: Required for the basic functionality of the website (e.g., navigation). Legal basis: Art. 6 para. 1 lit. f GDPR.
• Analytics Cookies: Used for Google Analytics and Google Tag Manager to analyze user behavior. Legal basis: Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG (consent).

You can manage your cookie settings via our cookie banner or disable cookies in your browser settings. Without your consent, no non-essential cookies will be set.

Functional (Essential)

Marketing

General Information and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

We point out that data transmission over the Internet (e.g., when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

Data Protection Officer

Email: info@woltanic.de

Information on the Responsible Party

The responsible party for data processing on this website is:

Woltanic GmbH

Palisadenstraße 41

D-10243 Berlin

Phone: +49 30 837 913 15

Email: info@woltanic.de

Registered in Berlin under: HRB 249934 B

Tax Number: 37/598/50709

VAT ID: DE359776454

Managing Director: Jan Artur Blaszak

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Analytics Tools and Advertising

Google Tag Manager

We use Google Tag Manager. Provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to integrate tracking or statistics tools and other technologies on our website. Google Tag Manager itself does not create user profiles, store cookies, or perform independent analyses. It is only used to manage and deliver the tools integrated through it. However, Google Tag Manager does collect your IP address, which may also be transmitted to Google's parent company in the United States.

The use of Google Tag Manager is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in a quick and uncomplicated integration and management of various tools on its website. If a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's end device (e.g., device fingerprinting) within the meaning of TDDDG. Consent can be revoked at any time.

Google Analytics

This website uses functions of the web analytics service Google Analytics. Provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, duration of stay, operating systems used, and origin of the user. This data is summarized in a user ID and assigned to the respective end device of the website visitor.

The use of this service is based on your consent according to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.

Vercel Web Analytics

We use Vercel Web Analytics, a service of Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA, to analyze usage behavior on our website. This service collects anonymized data about visitor numbers, page views, and usage patterns.

The processing of this data is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in analyzing and optimizing our website). The data is processed anonymously and not merged with other personal data. Data transfer to the USA is based on standard contractual clauses of the EU Commission.

Further information on data protection at Vercel can be found at: https://vercel.com/legal/privacy.

Vercel Speed Insights

We use Vercel Speed Insights, a service of Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA, to analyze and improve the performance of our website. Vercel Speed Insights collects anonymized data about loading times and performance of our website.

The processing of this data is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in a performant website). The data is processed anonymously and not merged with other personal data. Data transfer to the USA is based on standard contractual clauses of the EU Commission.

Further information on data protection at Vercel can be found at: https://vercel.com/legal/privacy.

Plugins and Tools

Heizreport Plugins

On our website, we use plugins from Heizreport.de to provide you with interactive tools:

• WärmepumpenCHECK: A tool to check if your house is suitable for a heat pump.
• Förderrechner: A tool to calculate possible subsidies for heat pumps.

These plugins are provided by Heizreport.de and process the data you enter (e.g., building data, heating information) on Heizreport.de servers. Processing is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (contract fulfillment for inquiries).

The data you enter is transmitted to Heizreport.de and stored there. Further information on data protection at Heizreport.de can be found at: https://heiz.report/datenschutz.

Jotform

Our contact and inquiry forms are provided via Jotform Inc., 4 Embarcadero Center, Suite 780, San Francisco, CA 94111, USA. The data you enter (e.g., name, email) is stored on Jotform servers. Processing is based on Art. 6 para. 1 lit. b GDPR (contract fulfillment for inquiries) or Art. 6 para. 1 lit. a GDPR (consent). Data transfers to the USA are based on standard contractual clauses. A data processing agreement (DPA) with Jotform ensures GDPR compliance. Further information: https://www.jotform.com/privacy/.

YouTube with Extended Privacy Mode

This website embeds videos from YouTube. The operator of the website is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended privacy mode. Videos played in extended privacy mode are not used to personalize browsing on YouTube, according to YouTube.

Google Maps

This page uses the Google Maps map service. Provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there.

Google Reviews

We embed Google Reviews on our website. Provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Reviews allows us to display customer reviews from our Google Business Profile on our website. No personal data of website visitors is transmitted to Google. Only publicly available reviews and the name of the reviewer are displayed, which have already been published on Google.

The use of Google Reviews is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in presenting authentic reviews to our customers.

Trustpilot Reviews

We embed Trustpilot reviews on our website. Provider is Trustpilot A/S, Pilestræde 58, 5, 1112 Copenhagen, Denmark.

Trustpilot allows us to display authentic customer reviews on our website. When accessing the review function, no personal data of website visitors is transmitted to Trustpilot. Only publicly available reviews and the name of the reviewer are displayed, which have already been published on Trustpilot.

The use of Trustpilot is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in presenting authentic reviews to our customers.

Further information on data protection at Trustpilot can be found at: https://de.legal.trustpilot.com/for-reviewers/end-user-privacy-terms.

Storage Duration

Personal data is only stored for as long as necessary for the respective purpose. After the purpose has been fulfilled, the data is deleted unless legal retention obligations prevent this. The storage duration is:

• Contact inquiries: 6 months after completion of processing
• Newsletter subscriptions: Until revocation of consent
• Application documents: 6 months after completion of the application process
• Analytics data: 14 months
• Server log files: 7 days

Data Transfer to Third Countries

We process data in some cases also in third countries outside the European Union. This only happens if the special requirements of Art. 44 ff. GDPR are met. This means in particular:

• Processing takes place in countries with an adequate level of data protection recognized by the EU Commission
• Processing takes place on standard contractual clauses of the EU Commission
• Processing takes place on the basis of explicit consents

Specifically, we transfer data to the following third countries:

• USA: Google Analytics, Google Tag Manager, Google Maps, Google Reviews, Google News
• Cyprus: Hostinger (database hosting)

Automated Decision-Making

We do not use fully automated decision-making that has legal effect or significantly affects you in a similar way. Should we use such procedures in the future, we will inform you separately.

Protection of Children

Persons under 16 years of age may not transmit personal data to us without the consent of their parents or guardians. We do not request personal data from children and adolescents and do not knowingly collect it.

Notification of Data Breaches

In the event of a breach of the protection of personal data, we will immediately notify the competent supervisory authority and, if necessary, the affected persons. The notification is made within 72 hours of becoming aware of the breach.

Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR if your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 para. 1 lit. f GDPR).

Newsletter

With our newsletter, we inform you about us and our offers. If you wish to receive the newsletter, we need a valid email address from you as well as information that allows us to verify that you are the owner of the specified email address or that the owner agrees to receive the newsletter.

This data is used exclusively for sending the requested information and is not passed on to third parties. Registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registration you will receive an email asking you to confirm your registration.

The processing of the data entered during newsletter registration is based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). The consent given for the storage of the data, the email address, and their use for sending the newsletter can be revoked at any time, for example via the "Unsubscribe" link in the newsletter.

Application Process

We process the data transmitted to us in the context of applications for the purpose of processing the application procedure. Processing can also be carried out electronically, in particular if an applicant submits corresponding application documents electronically, for example by email.

The processing of applicant data is carried out to fulfill our (pre)contractual obligations in the context of the application procedure within the meaning of Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. f GDPR, insofar as data processing is necessary for us to fulfill legal obligations.

Applicant data will be deleted after completion of the application procedure, unless consent has been given for longer storage or if there are no other legitimate interests of the controller preventing deletion.

Data Protection Officer

Our data protection officer is:

Jan Artur Blaszak

Woltanic GmbH

Palisadenstraße 41

D-10243 Berlin

Phone: +49 30 837 913 15

Email: info@woltanic.de

You can contact our data protection officer at any time with questions about data protection.

Legal Bases for Processing

The processing of your personal data is carried out on the following legal bases:

• Art. 6 para. 1 lit. a GDPR: Consent for newsletter, cookies
• Art. 6 para. 1 lit. b GDPR: Contract fulfillment for installations and maintenance
• Art. 6 para. 1 lit. c GDPR: Legal obligations (e.g., tax law)
• Art. 6 para. 1 lit. f GDPR: Legitimate interest in marketing and website analysis

Updating the Privacy Policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g., when introducing new services. The new privacy policy will then apply to your next visit.

Document Information

This privacy policy is regularly updated to meet current legal requirements and our services.

• Version: 2.2.0
• Last Update: August 5, 2025
• Status: Active and current
• First Version: March 2023
• Last Change: Help Center added
• Next Review: August 2026

Social Media

We are present on various social media platforms. If you use these services, please note that your data may be processed outside the European Union. We have no influence on the data processing of the respective providers.

The use of social media plugins is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the widest possible visibility in social media.

Right to Data Portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done insofar as it is technically feasible.

Right to Object

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 para. 1 lit. e or f GDPR.

We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Right to Lodge a Complaint with the Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged violation. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.

The competent supervisory authority for us is:

Berlin Commissioner for Data Protection and Freedom of Information

Friedrichstraße 219

10969 Berlin

Phone: +49 30 13889-0

Email: mailbox@datenschutz-berlin.de

Cookie Settings

You can adjust your cookie settings at any time. The following options are available to you:

• Via the cookie banner on our website
• In your browser settings
• By contacting our data protection officer

Please note that disabling certain cookies may limit the functionality of our website.

Security Measures

We take appropriate technical and organizational measures in accordance with Art. 32 GDPR to ensure a level of protection appropriate to the risk. The measures include in particular ensuring the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as access to it, input, transfer, ensuring availability and its separation.

In addition, we have established procedures that ensure the exercise of data subject rights, deletion of data and responses to data threats. Furthermore, we take into account the protection of personal data already in the development or selection of hardware, software and procedures in accordance with the principle of data protection through technology design and through privacy-friendly default settings (Art. 25 GDPR).

Responsible Party

The responsible party for data processing on this website is:

Woltanic GmbH

Palisadenstraße 41

D-10243 Berlin

Phone: +49 30 837 913 15

Email: info@woltanic.de

Managing Director: Jan Artur Blaszak

Commercial Register: HRB 249934 B

VAT ID: DE359776454

Purposes of Data Processing

We process personal data for the following purposes:

• Carrying out heat pump and photovoltaic installations
• Creating offers and contract processing
• Customer service and support
• Marketing and advertising for renewable energy
• Newsletter distribution with information on renewable energy
• Website analysis and optimization
• Application procedures

Categories of Processed Data

We process the following categories of personal data:

• Contact data (name, address, email, phone)
• Building data (for heat pump and PV installations)
• Consumption data (for energy consulting)
• Financial data (for invoicing)
• Communication data (email, phone)
• Usage data (website visit)
• Application documents

Recipients of Data

We pass on personal data to the following recipients:

• Subcontractors for installations
• Financial service providers for payment processing
• Insurance companies
• Authorities (e.g., for subsidy applications)
• IT service providers for website hosting
• Analytics service providers (Google Analytics)

Our Web Applications & Services

All domains and subdomains under woltanic.app are internal web applications that have been specifically developed for our customers and are fully owned by Woltanic GmbH. These applications serve exclusively to provide customer-oriented services and improve your customer experience.

help.woltanic.app

Help Center & Documentation

Our Help Center offers comprehensive FAQ sections and detailed documentation on all Woltanic services for customers. Here you will find answers to frequently asked questions, instructions for your solar and heat pump systems, and comprehensive information about our services.

Benefits for You:

• Quick answers to frequently asked questions
• Detailed instructions and documentation
• Information on all Woltanic services
• 24/7 availability of information
• Regularly updated content

Data Collection:

• Usage data: Pages visited, search queries
• Technical data: IP address, browser info
• Feedback data: Ratings, comments (optional)

Data Storage:

• Usage data: 90 days
• Feedback: 2 years
• System logs: 30 days

support.woltanic.app

Customer Support System

Our support system enables you to quickly and easily get help with questions about your solar and heat pump systems. You can create tickets, track progress, and communicate directly with our experts.

Benefits for You:

• Quick help with technical questions
• Document upload for better diagnosis
• History of all inquiries
• Direct communication with experts
• 24/7 availability of support tickets

Data Collection:

• Contact data: Name, email address, user ID
• Support data: Tickets, messages, files
• Technical data: IP address, browser info

Data Storage:

• Active accounts: As long as account is active
• Support tickets: 3 years, then anonymization
• System logs: 90 days

ref.woltanic.app

Referral System

Our referral system enables our customers to recommend friends and family for our solar and heat pump systems. The system manages referrals, tracks their status, and enables transparent processing of referral bonuses.

Functions:

• Creation and management of referrals
• Tracking the status of referrals
• Calculation and payment of bonuses
• Transparent overview of all referrals
• Automated notifications

Data Collection:

• Customer data: Name, email, phone, address
• Referral data: Referred persons, status
• Bonus data: Calculation and payment

Data Storage:

• Referral data: 5 years after completion
• Bonus data: 10 years (tax purposes)
• Communication data: 3 years

Security:

• HTTPS encryption
• Secure authentication
• GDPR-compliant storage

Important Notice

Regarding All woltanic.app Subdomains

All domains and subdomains under woltanic.app are fully owned by Woltanic GmbH and are used exclusively for customer-oriented services.

Development & Control:

• Internally developed: By our IT team
• Customer-oriented: For your customer experience
• Controlled: Full control

Security & Transparency:

• Secure: GDPR-compliant
• Transparent: Clear data collection
• General info: woltanic.de