Back to Sign In
NL EN FR
EU GDPR • REGULATION (EU) 2016/679

Privacy Policy

New Energy Grid EMS Cloud • GEMS Cloud v10.0.0
1. Data Controller & Multi-Tenant Roles

This Privacy Policy governs the processing of personal and smart-energy telemetry data on the New Energy Grid EMS Cloud Cloud Platform (powered by New Energy Grid EMS). Where your installation is provisioned through an accredited installer or energy partner, your partner organization acts as customer relationship controller and New Energy Grid acts as cloud infrastructure processor under Article 28 of Regulation (EU) 2016/679 (GDPR).

2. Categories of Data Processed
  • Account & Identity Data: full name, email address, optional phone number, bcrypt-hashed password, optional RFC 6238 TOTP two-factor credentials, and legal consent timestamps.
  • Smart Meter & Site Telemetry: solar PV generation, battery power/SoC/health, 3-phase grid voltages and currents (L1/L2/L3), 15-minute quarter-hour demand peaks, EV charging sessions, and thermal relay states.
  • Security & Diagnostic Logs: authentication IP addresses, remote command audit trails, and edge controller health heartbeats.
3. Legal Basis & Purpose of Processing (GDPR Art. 6)

Data is processed strictly to: (a) deliver real-time telemetry streaming, autonomous peak shaving, and dynamic EPEX Spot optimization under your service agreement (Art. 6(1)(b) GDPR); (b) protect grid-connected hardware and cloud accounts against unauthorized access (legitimate interest, Art. 6(1)(f) GDPR); and (c) enable optional remote commissioning support by your assigned installer, which you may restrict to Read-Only or Revoke at any time in Settings.

4. Data Retention & Minimization
  • 5-Minute Granular Telemetry History: automatically pruned after 90 days.
  • Edge Diagnostic Console Logs: automatically pruned after 14 days.
  • Daily Energy Rollups & Monthly Capacity Peaks: retained while your GEMS controller remains paired to provide multi-month tariff analytics.
5. European Hosting & Security Controls

All edge-to-cloud and browser-to-cloud traffic is encrypted in transit via TLS 1.2/1.3 and hosted in European Union data centers (Google Cloud Europe) with strict tenant isolation. Personal and energy data are never sold or shared for advertising.

6. Your GDPR Rights & Supervisory Authority

Under GDPR Articles 15–20, you can self-service export a complete machine-readable JSON archive of your data or permanently erase your account at any time from /account, or contact support@newenergygrid.com. You also have the right to lodge a complaint with the Belgian Data Protection Authority (GBA / APD), Rue de la Presse 35, 1000 Brussels (dataprotectionauthority.be), or your national EU supervisory authority.