Privacy Policy

We believe that the privacy of our users must be a priority. For this reason, we apply a transparent policy across our processes so users remain informed and in control of their personal data.

Through this website, personal data is not collected without the user's knowledge, nor is it transferred to third parties except where necessary to provide services, comply with legal obligations or manage requests made by users.

Who is responsible for processing your data?

In accordance with Regulation (EU) 2016/679, the General Data Protection Regulation, and applicable personal data protection rules, this website is owned by:

Hereinafter, the WEBSITE.

Legal framework

The WEBSITE respects the safeguards, rules and procedures established by applicable law to protect privacy, intimacy and personal data protection rights.

• Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
• Applicable national rules on data protection and information society services.
• Principles applicable in the European Economic Area (EEA) and, where applicable, Switzerland.

Keep control of your data

Any personal data that may be collected will be processed confidentially and included in the corresponding processing activity owned by the WEBSITE.

Data collection and use are essential to provide our services. However, we will only request information that is adequate, relevant and limited to what is necessary for the purposes described in this policy.

Data we may request

Depending on how you use the WEBSITE, we may request or receive the following data:

• Contact data: name, surname, email, phone number, company and country.
• Professional data: company, role, project, requested service and enquiry content.
• Meeting data: preferred date, time and availability when the user requests a meeting.
• Files voluntarily provided: technical documentation, images, PDFs or other files submitted through the form.
• Technology data: IP address, device type, browser, operating system, language preferences, visited pages and data derived from consented cookies.

Purposes of processing

Personal data may be processed for the following purposes:

• Responding to enquiries submitted through the contact form.
• Managing information requests about renewable energy services, Solar PV, BESS, EPC, consulting or strategic development.
• Organising meetings requested by the user.
• Managing commercial communications where consent or applicable legitimate interest exists.
• Improving the WEBSITE user experience.
• Maintaining WEBSITE security, detecting malicious activity and preventing fraud.
• Complying with legal, administrative or regulatory obligations.

Legal basis for processing

The legal basis for data processing may be:

• Consent: when the user voluntarily provides data or accepts optional cookies.
• Pre-contractual or contractual measures: when processing is necessary to manage a request, proposal or professional relationship.
• Legitimate interest: to respond to business enquiries, protect website security and maintain reasonable professional communications.
• Legal obligation: when it is necessary to retain or communicate information due to a regulatory requirement.

Retention period

We will keep personal data for the time necessary to fulfil the purpose for which it was collected. In general, data linked to enquiries will be retained while necessary to manage the request and, afterwards, during applicable legal periods or for the defence of possible claims.

Data processed for commercial purposes will be retained until the user requests deletion or objects. Data linked to cookies will be retained according to the duration indicated in browser settings or in the cookie policy.

Use of the website by minors

Use of this WEBSITE by minors requires prior authorisation from their parents, guardians or legal representatives, who will be responsible for the minors' use of the site.

Recipients and providers

We may use third-party providers to help us deliver our services, such as hosting, website maintenance, email tools, forms, storage, consented analytics, security or professional services. These providers will only access the information necessary to perform their tasks and must process it under instructions and confidentiality obligations.

TheNotCoalCompany OÜ will not rent or sell personal information, nor share data with advertisers or advertising networks without explicit consent, except under legal obligation, administrative request or judicial procedure.

International data transfers

International data transfers outside legally applicable safeguards are not planned. If providers located outside the European Economic Area or Switzerland are used, appropriate mechanisms will be applied under the GDPR, such as standard contractual clauses or other recognised safeguards.

Data security

The WEBSITE applies appropriate technical and organisational measures to provide a level of security suited to the risk, seeking to ensure the confidentiality, integrity and availability of personal data.

Reasonable security mechanisms, technical maintenance, software updates, protection against malicious activity and measures aimed at preserving system resilience are used.

Browsing advice

• Check that you are accessing the correct domain before entering personal data.
• Do not use links received by email, SMS or messaging if you suspect they may be fraudulent.
• Keep your browser and operating system updated to improve security.
• Review your browser privacy and cookie settings.

What rights do you have regarding your data?

You have the right to know whether the WEBSITE is processing personal data concerning you. You may also request access, rectification, deletion, objection, restriction of processing and portability of your data, as well as withdraw consent where processing is based on consent.

You may exercise your rights by contacting TheNotCoalCompany OÜ at hi@notcoal.eu, indicating Data Protection Rights or GDPR Rights in the subject line and providing enough information to verify your identity.

User obligations

The user undertakes to ensure the accuracy of the data provided and to communicate any changes. When providing third-party data, the user declares that they have obtained sufficient authorisation and informed those persons under applicable rules.

Commercial communications

You may opt out of receiving commercial communications by requesting it by email at hi@notcoal.eu with the subject line I do not wish to receive commercial communications.

Cookies

The WEBSITE may use necessary functional cookies, language cookies, cookies linked to contact forms and, if implemented and consented to, analytics or marketing cookies. You can find more information in our Cookies Policy.

Website content and links

This WEBSITE may contain links to third-party websites whose privacy policies are not controlled by TheNotCoalCompany OÜ. When accessing those sites, the user should review and decide whether to accept their privacy and cookie policies.

Intellectual and industrial property

The elements that form part of the WEBSITE, including texts, design, structure, code, logos, trademarks, images and other distinctive signs, are owned by TheNotCoalCompany OÜ or its collaborators, unless otherwise indicated, and are protected by intellectual and industrial property rights.

Liability

TheNotCoalCompany OÜ makes reasonable efforts to keep the WEBSITE updated, secure and available, but does not guarantee the absolute absence of errors, interruptions or technical incidents. Access to and use of the WEBSITE is the user's responsibility.

Updates to this policy

This Privacy Policy may be updated periodically. The terms published at the time of WEBSITE use will apply. We recommend reviewing this page periodically to stay informed.

Applicable law

This policy will be interpreted in accordance with applicable data protection rules in the European Union, including the GDPR, and any other rules applicable to TheNotCoalCompany OÜ.