Version: 1.0.0

Last updated am 10/25/2023

Data protection information for the processing of your data when using PowerQuartier

We are using the platform PowerQuartier in order to give you an insight into your energy consumption and the origin of your electricity, to bill energy flows digitally and to optimize consumption and supply. We herewith inform you about the usage of personal data when using the software PowerQuartier provided by Exnaton AG (hereafter “Exnaton”), the associated application (hereafter “App”) and when using the customer support. We hereby comply with our information obligations according to Art. 13, 14 of the General Data Protection Regulation (hereinafter: GDPR).

I. Responsible and data protection officer within the meaning of the GDPR

-

Responsible for data processing within the scope of the use of PowerQuartier is:

Exnaton AG

-

Our data protection responsible is reachable at:

or at the postal address:
Exnaton AG Zeughausstrasse 31
(with the addition "to the attention of the data protection officer"). We expressly point out that when using this e-mail address, the content will not only be taken note of by our data protection officer. If you would like to exchange confidential information, you should therefore first ask for direct contact with the data protection officer via this e-mail address. You can find more information on your rights as a data subject under Section IV.

II. Type, scope and purpose of data processing, legal basis and storage period

In the following we would like to give you information about which data we process for which purposes, on which legal basis and how long this data is stored.

1. Data processing when using product name PowerQuartier

With the usage of the platform PowerQuartier, we process the following types of personal data from you for the following purposes:

-

We process the personal master data of the user (surname, first name, salutation) for the purpose of authorizing the user.

-

We process the contact details of the users (e-mail address, telephone number, address) for the purpose of establishing contact.

-

We process the contract of users (e.g. energy tariffs between end customers, access agreements between end customers and network operators, participation agreement with the energy community) for the purpose of executing the contract.

-

We process data (e.g. metering point number, technical characteristics of the photovoltaic system) for the purpose of recording consumption and for invoicing.

-

We process system-related measurement data (e.g. energy consumption/generation linked to times) for the purpose of recording consumption and billing.

-

We process data on the identifier (link between end customer and system data) for the purpose of clearly identifying households, objects, etc.

-

We process log data (e.g. http request, IP address, time stamp, server response) for/ for the purpose of executing the contract.

Legal basis for processing:

The processing of the master data and contact data of the user, the contract data, the system data, the system-related measurement data and the data on the identifier takes place on the legal basis of Article 6 Paragraph 1 lit. b GDPR to fulfill the contractual obligations with you.

Duration of storage:

We store your data until the purposes of processing have been achieved and there are no legal retention periods to the contrary. The legal retention periods can be found in the national legal texts. Unless there are statutory retention periods to the contrary, we will delete your data processed as part of the use of PowerQuartier after 90 days from the end of the contract. If the rights of the data subject are asserted, we store your data for verification purposes on the basis of our legitimate interest (verifiability of the fulfillment of the rights of the data subject) for three years. Further information: If you have given your consent to anonymous further processing, your energy and login data will be anonymized and PowerQuartier processed further in anonymous form by Exnaton as the person responsibleIn this regard, we refer to Exnaton's data protection information, which we have enclosed with this data protection information.

2. Data processing as part of customer support

As part of the technical customer support provided, we process your personal data, such as the contact details of the requester, for the purpose of answering your request and providing the technical functionality and pass this on to Exnaton for the purposes mentioned. Legal basis for processing: Data processing takes place on the legal basis of Article 6 Paragraph 1 Letter f GDPR. The data processing serves our legitimate interest in answering your request. Duration of storage: The data will be deleted after your request has been processed, provided that there are no legal retention periods to the contrary.

III. Categories of recipients

We only pass on your data to recipients if you have given your consent or if there is a (statutory) legal basis. We pass on your data to the following recipients:

-

Exnaton AG, Zeughausstrasse 31, 8004 Zürich, Switzerland.

IV. Your rights as a data subject

You have the following rights in relation to data processing - if the respective requirements are met - in particular:

-

Right to information about which data we process about you (Article 15 GDPR);

-

Right to rectification of your data (Article 16 GDPR);

-

Right to erasure (Art. 17 GDPR);

-

Right to restrict the processing of your data (Article 18 GDPR);

-

Right to data portability (Art. 20 GDPR);

In the case of data processing on the basis of Article 6 Paragraph 1 Clause 1 Letter f GDPR (legitimate interest), you have the right to object at any time with effect for the future under the conditions of Article 21 GDPR. In the case of data processing on the basis of consent, you have the right to withdraw your consent at any time, without affecting the legality of the processing carried out on the basis of your consent up to the point of withdrawal. In order to assert your rights described here, you can contact us at any time using the contact details given above. You also have the right to contact your local data protection supervisory authority.