Información sobre privacidad y procesamiento de datos

PREAMBLE

This documentsets out HYDROGRID GmbH's data privacy and processing information in relationto the use of HYDROGRID's public company website. It does not cover processingactivities carried out within the HYDROGRID Insight SaaS platform, which aregoverned by the applicable customer contract.

1.     Processing activities

• Provision of information about goods or services of the Controller for customers^[1], interested parties and website visitors,
• Contract performance with customers.

2.    Controller        

HYDROGRID GmbH, FN 459688m, Walcherstraße 11A/13, 1020 Vienna, Austria (here in after referred to as the "Controller").

‍

3.     Contact Details of the Controller

Privacy enquiries: privacy@hydrogrid.ai

‍

4.     Purposes of Data Processing

4.1 Performance or Preparation of a Contract

• Providing retrievable information about HYDROGRID's services for customers and interested persons.

• Providing communication channels for servicing the customer relationship.

• Fulfilment of contractual obligations under service contracts.

4.2 Legitimate Interest

• Direct marketing of HYDROGRID's services and events to existing customers, to the extent permitted by applicable law.

• Improving HYDROGRID's website and services through analysis of visitor behaviour using analytics tools.

• Sending a newsletter to existing customers pursuant to Section 174 of the Austrian Telecommunications Act 2021 (TKG 2021), with the option to opt out at any time.

• Transmitting visitor identification data to third-party providers for embedding video content (YouTube, Vimeo) on the website, subject to visitor consent via the cookie consent mechanism.

• Storing visitor IP addresses for a maximum of three months to defend against denial-of-service attacks and maintain website security (Art. 6(1)(f) GDPR, Recital 49).

4.3 Consent

• Sending a newsletter to new subscribers on the basis of explicit consent, with the option to withdraw at any time.

• Loading non-essential cookies and tracking technologies (analytics, advertising, video embeds) on the basis of consent obtained via the cookie consent banner, in accordance with Section 165(3) TKG 2021.

‍

5.     Legal Basis for Data Processing

5.1 Performance of a Contract (Art. 6(1)(b) GDPR)

Where HYDROGRID processes personal data in connection with concluding or performing a contract with a customer or prospective customer, the legal basis is Art. 6(1)(b) GDPR.

5.2 Consent (Art. 6(1)(a) GDPR)

Where HYDROGRID relies on consent — for example for newsletter subscriptions by new subscribers, or for non-essential cookies — such consent may be withdrawn at any time with effect for the future, without affecting the lawfulness of processing carried out prior to withdrawal.

5.3 Legitimate Interest (Art. 6(1)(f) GDPR)

See Section 6 below for a description of the legitimate interests relied upon.

‍

6.     Legitimate Interests

6.1 IT Security

HYDROGRID stores the IP addresses of website visitors for a maximum of three months in order to defend against denial-of-service attacks and prevent other damage to its systems. HYDROGRID has an overriding legitimate interest in maintaining the availability and security of its online services (Recital 49 GDPR).

6.2 Direct Marketing

HYDROGRID processes existing customer contact data for direct marketing of its own services, to the extent permitted by law. The purpose is to communicate relevant updates and offers to customers with whom HYDROGRID already has a contractual relationship. This does not extend the applicable retention period for that data. Customers may object to direct marketing at any time and without giving reasons.

‍

7.     Change of Purpose      

HYDROGRID will process personal data of customers for direct marketing of its own services. Data will not be made available to third parties for this purpose.There is no incompatibility with the purpose of the original data collection. Customers may object at any time.

‍

8.    Automated Decision-Making

Visitors areunder no obligation to provide personal data when using this website. Providingdata via contact or demo request forms is voluntary. Not providing therequested information may mean HYDROGRID is unable to respond to the enquiry.

‍

9.     Obligation to Provide Data

Visitors are under no obligation to provide personal data when using this website. Providingdata via contact or demo request forms is voluntary. Not providing therequested information may mean HYDROGRID is unable to respond to the enquiry.

‍

10.  Types of Personal Data Processed  

‍

10.1 Data provided by the visitor

• Name

• Company name

• Phone number

• Email address

‍

10.2 Data collected automatically

• Requested file name and URL

• Volume of data transferred

• Request status (success or failure)

• Browser and operating system identifiers

• Referring website (if access was made via a link)

• Account usage information (for registered users: date created, login frequency, date of last access)

• Software usage information (use of available platform features)

‍

11.  Service Providers and Recipients      

HYDROGRID engages third-party service providers (processors) to support the provision ofits website and services. These providers process personal data only on HYDROGRID's instructions. Categories of processors include:

•       Cloud infrastructure and hosting providers (EU-based private cloud)

•      Customer relationship management providers

•      Customer support and ticketingproviders

•      Invoicing and billing providers

•      Expense management providers

•      Website analytics providers

•      Digital advertising platforms

•      Email and collaboration toolproviders

•      Website hosting and CMSproviders

The full list of processors is available on request at privacy@hydrogrid.ai. HYDROGRID reserves the right to engage additional processors; any new processor will be reflected in an updated version of this document.

12.  Internal Recipients      

• System administrator
• Departments (Commercial,Operations, Product Development)
• Management    

‍

13. Transfers to Third Countries

Some service providers engaged by HYDROGRID are located or process data outside the European Economic Area (EEA). In each case, HYDROGRID ensures that an adequate level ofdata protection is in place, by relying on:

•       EU Standard Contractual Clauses(SCCs) pursuant to European Commission Decision (EU) 2021/914 of 4 June 2021;or

•       EU data residency configuration —where a provider stores and processes data within the EU by configuration, no third-country transfer occurs.

Transfers currently take place to the United States and Australia in connection with analytics, advertising, collaboration, invoicing, and ticketing services.Details of specific transfers and applicable safeguards are available on request at privacy@hydrogrid.ai.

‍

 Check up-to-date details on our Cookie Policy here.

‍

14.  Social Media Presence

14.1 General

HYDROGRID maintains presences on social media channels for advertising and communication purposes. When visitors access HYDROGRID's social media pages, the respective platform operator may process visitor data for its own purposes — includingserving interest-based advertising — outside the EEA. HYDROGRID has no access to data held by social media platform operators and recommends that visitors contact the relevant platform directly to exercise their data protection rights.

El tratamiento se basa en el interés legítimo de HYDROGRID en la publicidad y la comunicación con el cliente, tal como se protege en el Art. 6(1)(f) del RGPD.

14.2 Plataformas

LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublín 2, Irlanda. Política de privacidad: linkedin.com/legal/privacy-policy

Facebook: Meta Platforms Ireland Limited, 4Grand Canal Square, Dublín 2, Irlanda. Política de privacidad: facebook.com/privacy/policy

Vimeo: Vimeo Inc., 555 West 18th Street, Nueva York, NY 10011, EE. UU. Datos procesados fuera del EEE — Se aplican las Cláusulas Contractuales Estándar. Política de privacidad: vimeo.com/privacy

‍

15. Plazos de conservación

HYDROGRID conserva los datos personales solo durante el tiempo necesario para los fines para los que fueron recopilados, o según lo exija la legislación aplicable. En particular:

• Registros contables y de facturación: siete años a partir del final del ejercicio fiscal correspondiente, de conformidad con el artículo 132(1) del Código Fiscal austriaco (BAO).

• Registros de seguridad del sitio web (direcciones IP): máximo tres meses.

• Datos de solicitudes de contacto y demostración: 24 meses desde el envío, o hasta que se resuelva la consulta, lo que ocurra primero.

• Datos de suscripción al boletín: hasta que se retire el consentimiento o hasta el final de la relación con el cliente, según corresponda.

‍

16. Derechos de los interesados

‍

Los interesados cuyos datos personales son tratados por HYDROGRID tienen los siguientes derechos en virtud del RGPD:

• Art. 15 — Derecho de acceso: a obtener confirmación de si se están tratando datos personales y en qué medida.

• Art. 16 — Derecho de rectificación: a obtener la rectificación de datos personales inexactos o incompletos sin dilación indebida.

• Art. 17 — Derecho de supresión: a obtener la supresión de datos personales cuando se cumplan las condiciones del Art. 17(1) del RGPD.

• Art. 18 — Derecho a la limitación del tratamiento: a obtener la limitación del tratamiento cuando se cumplan las condiciones del Art. 18(1) del RGPD.

• Art. 20 — Derecho a la portabilidad de los datos: a recibir los datos personales en un formato estructurado, de uso común y lectura mecánica.

• Art. 21 — Derecho de oposición: a oponerse en cualquier momento al tratamiento basado en el interés legítimo, incluso con fines de marketing directo.

Las solicitudes pueden enviarse a privacy@hydrogrid.ai. HYDROGRID responderá en el plazo de un mes desde su recepción.

‍

 17. Derecho a presentar una reclamación

Cada interesado tiene derecho a presentar una reclamación ante la autoridad de control de conformidad con el Art. 77 del RGPD y el Artículo 24 de la Ley Austriaca de Protección de Datos (DSG) si considera que el tratamiento de sus datos personales infringe la legislación aplicable en materia de protección de datos.

‍

18.  Autoridad de Control

Österreichische Datenschutzbehörde (Autoridad Austriaca de Protección de Datos)

Barichgasse40-42, 1030 Viena, Austria

Teléfono: +43 152 152-0  |  Correo electrónico: dsb@dsb.gv.at

‍

‍

HYDROGRIDGmbH  | Walcherstraße 11A/13, 1020 Viena, Austria  |  FN459688m  |  privacy@hydrogrid.ai  | www.hydrogrid.ai

Última actualización: junio de 2026 | Este documento está disponible en inglés, alemán y portugués en www.hydrogrid.ai

‍