Privacidade de dados e informações de processamento

PREAMBLE

This documentsets out HYDROGRID GmbH's data privacy and processing information in relationto the use of HYDROGRID's public company website. It does not cover processingactivities carried out within the HYDROGRID Insight SaaS platform, which aregoverned by the applicable customer contract.

1.     Processing activities

• Provision of information about goods or services of the Controller for customers^[1], interested parties and website visitors,
• Contract performance with customers.

2.    Controller        

HYDROGRID GmbH, FN 459688m, Walcherstraße 11A/13, 1020 Vienna, Austria (here in after referred to as the "Controller").

‍

3.     Contact Details of the Controller

Privacy enquiries: privacy@hydrogrid.ai

‍

4.     Purposes of Data Processing

4.1 Performance or Preparation of a Contract

• Providing retrievable information about HYDROGRID's services for customers and interested persons.

• Providing communication channels for servicing the customer relationship.

• Fulfilment of contractual obligations under service contracts.

4.2 Legitimate Interest

• Direct marketing of HYDROGRID's services and events to existing customers, to the extent permitted by applicable law.

• Improving HYDROGRID's website and services through analysis of visitor behaviour using analytics tools.

• Sending a newsletter to existing customers pursuant to Section 174 of the Austrian Telecommunications Act 2021 (TKG 2021), with the option to opt out at any time.

• Transmitting visitor identification data to third-party providers for embedding video content (YouTube, Vimeo) on the website, subject to visitor consent via the cookie consent mechanism.

• Storing visitor IP addresses for a maximum of three months to defend against denial-of-service attacks and maintain website security (Art. 6(1)(f) GDPR, Recital 49).

4.3 Consent

• Sending a newsletter to new subscribers on the basis of explicit consent, with the option to withdraw at any time.

• Loading non-essential cookies and tracking technologies (analytics, advertising, video embeds) on the basis of consent obtained via the cookie consent banner, in accordance with Section 165(3) TKG 2021.

‍

5.     Legal Basis for Data Processing

5.1 Performance of a Contract (Art. 6(1)(b) GDPR)

Where HYDROGRID processes personal data in connection with concluding or performing a contract with a customer or prospective customer, the legal basis is Art. 6(1)(b) GDPR.

5.2 Consent (Art. 6(1)(a) GDPR)

Where HYDROGRID relies on consent — for example for newsletter subscriptions by new subscribers, or for non-essential cookies — such consent may be withdrawn at any time with effect for the future, without affecting the lawfulness of processing carried out prior to withdrawal.

5.3 Legitimate Interest (Art. 6(1)(f) GDPR)

See Section 6 below for a description of the legitimate interests relied upon.

‍

6.     Legitimate Interests

6.1 IT Security

HYDROGRID stores the IP addresses of website visitors for a maximum of three months in order to defend against denial-of-service attacks and prevent other damage to its systems. HYDROGRID has an overriding legitimate interest in maintaining the availability and security of its online services (Recital 49 GDPR).

6.2 Direct Marketing

HYDROGRID processes existing customer contact data for direct marketing of its own services, to the extent permitted by law. The purpose is to communicate relevant updates and offers to customers with whom HYDROGRID already has a contractual relationship. This does not extend the applicable retention period for that data. Customers may object to direct marketing at any time and without giving reasons.

‍

7.     Change of Purpose      

HYDROGRID will process personal data of customers for direct marketing of its own services. Data will not be made available to third parties for this purpose.There is no incompatibility with the purpose of the original data collection. Customers may object at any time.

‍

8.    Automated Decision-Making

Visitors areunder no obligation to provide personal data when using this website. Providingdata via contact or demo request forms is voluntary. Not providing therequested information may mean HYDROGRID is unable to respond to the enquiry.

‍

9.     Obligation to Provide Data

Visitors are under no obligation to provide personal data when using this website. Providingdata via contact or demo request forms is voluntary. Not providing therequested information may mean HYDROGRID is unable to respond to the enquiry.

‍

10.  Types of Personal Data Processed  

‍

10.1 Data provided by the visitor

• Name

• Company name

• Phone number

• Email address

‍

10.2 Data collected automatically

• Requested file name and URL

• Volume of data transferred

• Request status (success or failure)

• Browser and operating system identifiers

• Referring website (if access was made via a link)

• Account usage information (for registered users: date created, login frequency, date of last access)

• Software usage information (use of available platform features)

‍

11.  Service Providers and Recipients      

HYDROGRID engages third-party service providers (processors) to support the provision ofits website and services. These providers process personal data only on HYDROGRID's instructions. Categories of processors include:

•       Cloud infrastructure and hosting providers (EU-based private cloud)

•      Customer relationship management providers

•      Customer support and ticketingproviders

•      Invoicing and billing providers

•      Expense management providers

•      Website analytics providers

•      Digital advertising platforms

•      Email and collaboration toolproviders

•      Website hosting and CMSproviders

The full list of processors is available on request at privacy@hydrogrid.ai. HYDROGRID reserves the right to engage additional processors; any new processor will be reflected in an updated version of this document.

12.  Internal Recipients      

• System administrator
• Departments (Commercial,Operations, Product Development)
• Management    

‍

13. Transfers to Third Countries

Some service providers engaged by HYDROGRID are located or process data outside the European Economic Area (EEA). In each case, HYDROGRID ensures that an adequate level ofdata protection is in place, by relying on:

•       EU Standard Contractual Clauses(SCCs) pursuant to European Commission Decision (EU) 2021/914 of 4 June 2021;or

•       EU data residency configuration —where a provider stores and processes data within the EU by configuration, no third-country transfer occurs.

Transfers currently take place to the United States and Australia in connection with analytics, advertising, collaboration, invoicing, and ticketing services.Details of specific transfers and applicable safeguards are available on request at privacy@hydrogrid.ai.

‍

 Check up-to-date details on our Cookie Policy here.

‍

14.  Social Media Presence

14.1 General

HYDROGRID maintains presences on social media channels for advertising and communication purposes. When visitors access HYDROGRID's social media pages, the respective platform operator may process visitor data for its own purposes — includingserving interest-based advertising — outside the EEA. HYDROGRID has no access to data held by social media platform operators and recommends that visitors contact the relevant platform directly to exercise their data protection rights.

O processamento baseia-se no interesse legítimo da HYDROGRID em publicidade e comunicação com o cliente, conforme protegido pelo Art. 6(1)(f) do RGPD.

14.2 Plataformas

LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irlanda. Política de privacidade: linkedin.com/legal/privacy-policy

Facebook: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Irlanda. Política de privacidade: facebook.com/privacy/policy

Vimeo: Vimeo Inc., 555 West 18th Street, New York, NY 10011, EUA. Dados processados fora do EEE — Aplicam-se as Cláusulas Contratuais Padrão. Política de privacidade: vimeo.com/privacy

‍

15.  Períodos de Armazenamento

A HYDROGRID retém dados pessoais apenas pelo tempo necessário para os fins para os quais foram recolhidos, ou conforme exigido pela lei aplicável. Em particular:

•       Registos contabilísticos e de faturação: sete anos a partir do final do ano fiscal relevante, nos termos da Secção 132(1) do Código Fiscal Austríaco (BAO).

•       Registos de segurança do website (endereços IP): máximo de três meses.

•       Dados de contacto e de pedido de demonstração: 24 meses a partir da submissão, ou até que a questão seja resolvida, o que ocorrer primeiro.

•       Dados de subscrição da newsletter: até que o consentimento seja retirado ou até ao fim da relação com o cliente, conforme aplicável.

‍

16. Direitos dos Titulares dos Dados

‍

Os titulares dos dados cujos dados pessoais são processados pela HYDROGRID têm os seguintes direitos ao abrigo do RGPD:

• Art. 15 — Direito de acesso: obter a confirmação de que os seus dados pessoais estão a ser processados e em que medida.

• Art. 16 — Direito de retificação: obter a retificação de dados pessoais inexatos ou incompletos sem demora injustificada.

• Art. 17 — Direito ao apagamento: obter o apagamento de dados pessoais quando as condições do Art. 17(1) do RGPD forem cumpridas.

• Art. 18 — Direito à limitação do tratamento: obter a limitação do tratamento quando as condições do Art. 18(1) do RGPD forem cumpridas.

• Art. 20 — Direito à portabilidade dos dados: receber os dados pessoais num formato estruturado, de uso corrente e de leitura automática.

• Art. 21 — Direito de oposição: opor-se a qualquer momento ao tratamento baseado em interesse legítimo, incluindo para fins de marketing direto.

Os pedidos podem ser enviados para privacy@hydrogrid.ai. A HYDROGRID responderá no prazo de um mês a contar da receção.

‍

‍

 17. Direito de Apresentar Reclamação

Cada titular dos dados tem o direito de apresentar uma reclamação à autoridade de controlo nos termos do Art. 77 do RGPD e da Secção 24 da Lei Austríaca de Proteção de Dados (DSG), se considerar que o tratamento dos seus dados pessoais viola a legislação aplicável em matéria de proteção de dados.

‍

18.  Autoridade de Controlo

Österreichische Datenschutzbehörde (Autoridade Austríaca de Proteção de Dados)

Barichgasse40-42, 1030 Viena, Áustria

Telefone: +43 152 152-0  |  E-mail: dsb@dsb.gv.at

‍

‍

HYDROGRIDGmbH | Walcherstraße 11A/13, 1020 Viena, Áustria | FN459688m | privacy@hydrogrid.ai | www.hydrogrid.ai

Última atualização: Junho de 2026 | Este documento está disponível em inglês, alemão e português em www.hydrogrid.ai

‍

‍

‍