Privacy Policy
Effective from
GridWiseNow is an energy management platform for business customers. This policy explains what personal data we process, why, on what basis, and what you can require of us.
1. Who is responsible
The controller of personal data processed through GridWiseNow is Genaitive sp. z o.o., ul. Żurawia 71, 15-540 Białystok, NIP 9662207839, KRS 0001179479.
For privacy matters write to rodo@gridwisenow.com. For anything else, contact@gridwisenow.com.
The platform is provided to organisations, not to consumers. In most cases your employer or client organisation decides that you should have an account and what you can see in it.
2. What we process
- Account data — your e-mail address, name, optionally a phone number, your role and the organisation you belong to.
- Sign-in data — confirmation of your identity when you log in. We never receive or store your password.
- Measurement data — electricity readings from your organisation's sites. This describes installations rather than people.
- Service records — a record of security-relevant actions taken in the platform, with timestamps.
- Anything you send us yourself — for example when you report a problem or contact support.
We use no analytics, advertising or behavioural tracking, and we set no cookies beyond those strictly necessary to keep you signed in.
3. Why, and on what basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing the platform to your organisation and giving you access to it | Art. 6(1)(b) — performance of a contract. |
| Keeping the service secure and preventing misuse | Art. 6(1)(f) — legitimate interest. |
| Handling questions and fault reports you send us | Art. 6(1)(f) — legitimate interest. |
| Billing, accounting and tax records | Art. 6(1)(c) — legal obligation. |
| Establishing or defending legal claims | Art. 6(1)(f) — legitimate interest. |
We do not sell personal data, we do not make it available for anyone else's marketing, and we do not use it to train machine-learning models.
4. Who else receives it
We use a limited number of suppliers to operate the service: providers of cloud infrastructure and hosting, of transactional e-mail delivery, and of internal operational alerting. They act solely on our instructions under data processing agreements and may not use the data for their own purposes.
Some suppliers are established outside the European Economic Area or may process data there. Such transfers rely on the safeguards provided for in the GDPR, including the European Commission's standard contractual clauses.
Customers receive the identified list of our sub-processors under their data processing agreement, and are notified of changes to it.
We disclose data to public authorities only where the law requires it, and only to the extent required.
5. How long we keep it
- Account data — for the duration of your organisation's contract, and afterwards only where a statutory retention period applies.
- Measurement data — for the duration of the contract, and deleted on your organisation's instruction or when it ends.
- Service records — for as long as needed to investigate incidents and to defend claims.
- Accounting records — for the period required by tax law.
6. Your rights
Subject to the conditions in the GDPR you may request access to your data, its correction or erasure, restriction of processing, a copy in a portable format, and you may object to processing based on our legitimate interest.
Write to rodo@gridwisenow.com. If your account was created by an employer or client organisation, we may need to involve them, because they decide who has access to their data.
You may also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa.
7. Security
We apply technical and organisational measures appropriate to the risk, and each organisation's data is kept separate from every other organisation's. If a breach occurs that is likely to result in a risk to your rights, we notify the supervisory authority and, where required, you.
8. Automated decisions
The platform produces analyses and forecasts for your organisation's own staff. No decision producing legal effects concerning you is taken solely by automated means.
9. Changes
If what we process or who processes it changes, we update this page and the effective date above, and we tell you about material changes rather than relying on you noticing the date.