Privacy

Data Controller
NIVALIS Energy Systems
230 Schilling Circle, Suite 120
Hunt Valley, MD 21031 – USA

  1. Introduction

NIVALIS Energy Systems (“NIVALIS”, “we”, “us”, or “our”) is committed to protecting the privacy of users of its website and services, in compliance with the General Data Protection Regulation (GDPR) and applicable United States privacy laws.

This Privacy Policy explains how we collect, use, and safeguard personal data globally.

  1. Categories of Personal Data Collected

We may collect the following categories of personal data:

  • Identification data (name, surname)
  • Contact data (email address, phone number)
  • Business information (company, job title)
  • Technical data (IP address, browser type, device)
  • Usage data (website interactions, analytics, cookies)
  1. Purpose of Processing and Legal Basis

We process personal data for the following purposes:

  • Responding to inquiries → legal basis: pre-contractual measures
  • Providing services → performance of a contract
  • Marketing activities (where applicable) → consent
  • Website improvement and analytics → legitimate interest
  1. Data Processing Methods

Personal data is processed using electronic and organizational measures designed to ensure appropriate security and prevent unauthorized access, disclosure, or loss.

  1. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, and in accordance with applicable legal obligations.

  1. Data Sharing

Personal data may be shared with:

  • IT and hosting service providers
  • Technical partners and consultants
  • Public authorities, where required by law

All third parties are contractually bound to confidentiality and data protection obligations.

  1. International Data Transfers

As NIVALIS is headquartered in the United States, personal data may be transferred outside the European Economic Area (EEA).

Such transfers are carried out in compliance with GDPR safeguards, including:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions adopted by the European Commission, where applicable
  1. Data Subject Rights (EEA/UK)

Individuals located in the European Economic Area have the right to:

  • Access their personal data
  • Request rectification or erasure
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time

Requests can be submitted to: [insert contact email]

  1. U.S. Privacy Rights

Under applicable U.S. state laws, including the California Consumer Privacy Act, users may have the right to:

  • Know what personal data is collected
  • Request deletion of personal data
  • Opt out of the sale or sharing of personal data
  1. Cookies and Tracking Technologies

This website uses cookies and similar tracking technologies. Where required by law, non-essential cookies are used only with user consent.

For more details, please refer to our Cookie Policy.

  1. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure.

  1. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page.

  1. Contact Information

For any privacy-related requests or inquiries:
info@nivalisenergy.com