Data Privacy & Processing Information

PREAMBLE

This documentsets out HYDROGRID GmbH's data privacy and processing information in relationto the use of HYDROGRID's public company website. It does not cover processingactivities carried out within the HYDROGRID Insight SaaS platform, which aregoverned by the applicable customer contract.

1.     Processing activities

• Provision of information about goods or services of the Controller for customers^[1], interested parties and website visitors,
• Contract performance with customers.

2.    Controller        

HYDROGRID GmbH, FN 459688m, Walcherstraße 11A/13, 1020 Vienna, Austria (here in after referred to as the "Controller").

‍

3.     Contact Details of the Controller

Privacy enquiries: privacy@hydrogrid.ai

‍

4.     Purposes of Data Processing

4.1 Performance or Preparation of a Contract

• Providing retrievable information about HYDROGRID's services for customers and interested persons.

• Providing communication channels for servicing the customer relationship.

• Fulfilment of contractual obligations under service contracts.

4.2 Legitimate Interest

• Direct marketing of HYDROGRID's services and events to existing customers, to the extent permitted by applicable law.

• Improving HYDROGRID's website and services through analysis of visitor behaviour using analytics tools.

• Sending a newsletter to existing customers pursuant to Section 174 of the Austrian Telecommunications Act 2021 (TKG 2021), with the option to opt out at any time.

• Transmitting visitor identification data to third-party providers for embedding video content (YouTube, Vimeo) on the website, subject to visitor consent via the cookie consent mechanism.

• Storing visitor IP addresses for a maximum of three months to defend against denial-of-service attacks and maintain website security (Art. 6(1)(f) GDPR, Recital 49).

4.3 Consent

• Sending a newsletter to new subscribers on the basis of explicit consent, with the option to withdraw at any time.

• Loading non-essential cookies and tracking technologies (analytics, advertising, video embeds) on the basis of consent obtained via the cookie consent banner, in accordance with Section 165(3) TKG 2021.

‍

5.     Legal Basis for Data Processing

5.1 Performance of a Contract (Art. 6(1)(b) GDPR)

Where HYDROGRID processes personal data in connection with concluding or performing a contract with a customer or prospective customer, the legal basis is Art. 6(1)(b) GDPR.

5.2 Consent (Art. 6(1)(a) GDPR)

Where HYDROGRID relies on consent — for example for newsletter subscriptions by new subscribers, or for non-essential cookies — such consent may be withdrawn at any time with effect for the future, without affecting the lawfulness of processing carried out prior to withdrawal.

5.3 Legitimate Interest (Art. 6(1)(f) GDPR)

See Section 6 below for a description of the legitimate interests relied upon.

‍

6.     Legitimate Interests

6.1 IT Security

HYDROGRID stores the IP addresses of website visitors for a maximum of three months in order to defend against denial-of-service attacks and prevent other damage to its systems. HYDROGRID has an overriding legitimate interest in maintaining the availability and security of its online services (Recital 49 GDPR).

6.2 Direct Marketing

HYDROGRID processes existing customer contact data for direct marketing of its own services, to the extent permitted by law. The purpose is to communicate relevant updates and offers to customers with whom HYDROGRID already has a contractual relationship. This does not extend the applicable retention period for that data. Customers may object to direct marketing at any time and without giving reasons.

‍

7.     Change of Purpose      

HYDROGRID will process personal data of customers for direct marketing of its own services. Data will not be made available to third parties for this purpose.There is no incompatibility with the purpose of the original data collection. Customers may object at any time.

‍

8.    Automated Decision-Making

Visitors areunder no obligation to provide personal data when using this website. Providingdata via contact or demo request forms is voluntary. Not providing therequested information may mean HYDROGRID is unable to respond to the enquiry.

‍

9.     Obligation to Provide Data

Visitors are under no obligation to provide personal data when using this website. Providingdata via contact or demo request forms is voluntary. Not providing therequested information may mean HYDROGRID is unable to respond to the enquiry.

‍

10.  Types of Personal Data Processed  

‍

10.1 Data provided by the visitor

• Name

• Company name

• Phone number

• Email address

‍

10.2 Data collected automatically

• Requested file name and URL

• Volume of data transferred

• Request status (success or failure)

• Browser and operating system identifiers

• Referring website (if access was made via a link)

• Account usage information (for registered users: date created, login frequency, date of last access)

• Software usage information (use of available platform features)

‍

11.  Service Providers and Recipients      

HYDROGRID engages third-party service providers (processors) to support the provision ofits website and services. These providers process personal data only on HYDROGRID's instructions. Categories of processors include:

•       Cloud infrastructure and hosting providers (EU-based private cloud)

•      Customer relationship management providers

•      Customer support and ticketingproviders

•      Invoicing and billing providers

•      Expense management providers

•      Website analytics providers

•      Digital advertising platforms

•      Email and collaboration toolproviders

•      Website hosting and CMSproviders

The full list of processors is available on request at privacy@hydrogrid.ai. HYDROGRID reserves the right to engage additional processors; any new processor will be reflected in an updated version of this document.

12.  Internal Recipients      

• System administrator
• Departments (Commercial,Operations, Product Development)
• Management    

‍

13. Transfers to Third Countries

Some service providers engaged by HYDROGRID are located or process data outside the European Economic Area (EEA). In each case, HYDROGRID ensures that an adequate level ofdata protection is in place, by relying on:

•       EU Standard Contractual Clauses(SCCs) pursuant to European Commission Decision (EU) 2021/914 of 4 June 2021;or

•       EU data residency configuration —where a provider stores and processes data within the EU by configuration, no third-country transfer occurs.

Transfers currently take place to the United States and Australia in connection with analytics, advertising, collaboration, invoicing, and ticketing services.Details of specific transfers and applicable safeguards are available on request at privacy@hydrogrid.ai.

‍

 Check up-to-date details on our Cookie Policy here.

‍

14.  Social Media Presence

14.1 General

HYDROGRID maintains presences on social media channels for advertising and communication purposes. When visitors access HYDROGRID's social media pages, the respective platform operator may process visitor data for its own purposes — includingserving interest-based advertising — outside the EEA. HYDROGRID has no access to data held by social media platform operators and recommends that visitors contact the relevant platform directly to exercise their data protection rights.

Processing is based on HYDROGRID's legitimate interest in advertising and customer communication, as protected under Art. 6(1)(f) GDPR.

14.2 Platforms

LinkedIn: LinkedIn Ireland Unlimited Company,Wilton Place, Dublin 2, Ireland. Privacy policy: linkedin.com/legal/privacy-policy

Facebook: Meta Platforms Ireland Limited, 4Grand Canal Square, Dublin 2, Ireland. Privacy policy: facebook.com/privacy/policy

Vimeo: Vimeo Inc., 555 West 18th Street,New York, NY 10011, USA. Data processed outside the EEA — Standard ContractualClauses apply. Privacy policy: vimeo.com/privacy

‍

15.  Storage Periods

HYDROGRID retains personal data only for as long as necessary for the purposes for whichit was collected, or as required by applicable law. In particular:

•       Accounting and invoicing records:seven years from the end of the relevant business year, pursuant to Section132(1) of the Austrian Fiscal Code (BAO).

•       Website security logs (IPaddresses): maximum three months.

•       Contact and demo request data: 24months from submission, or until the enquiry is resolved, whichever is earlier.

•       Newsletter subscription data: until consent is withdrawn or until the end of the customer relationship, as applicable.

‍

16. Rights of Data Subjects

‍

Data subjects whose personal data is processed by HYDROGRID have the following rights under GDPR:

• Art. 15 — Right of access: to obtain confirmation of whether and to what extent personal data is being processed.

• Art. 16 — Right to rectification: to obtain correction of inaccurate or incomplete personal data without undue delay.

• Art. 17 — Right to erasure: to obtain deletion of personal data where the conditions of Art. 17(1) GDPR are fulfilled.

• Art. 18 — Right to restriction: to obtain restriction of processing where the conditions of Art. 18(1) GDPR are fulfilled.

• Art. 20 — Right to data portability: to receive personal data in a structured, commonly used, and machine-readable format.

• Art. 21 — Right to object: to object at any time to processing based on legitimate interest, including for direct marketing purposes.

Requests may be submitted to privacy@hydrogrid.ai. HYDROGRID will respond within one month of receipt.

‍

‍

 17. Right to Lodge a Complaint

Each data subject has the right to lodge a complaint with the supervisory authority pursuant to Art. 77 GDPR and Section 24 of the Austrian Data Protection Act(DSG) if they believe that the processing of their personal data infringes applicable data protection law.

‍

18.  Supervisory Authority

Österreichische Datenschutzbehörde (Austrian Data Protection Authority)

Barichgasse40-42, 1030 Vienna, Austria

Phone: +43 152 152-0  |  Email: dsb@dsb.gv.at

‍

‍

HYDROGRIDGmbH  | Walcherstraße 11A/13, 1020 Vienna, Austria  |  FN459688m  |  privacy@hydrogrid.ai  | www.hydrogrid.ai

Last updated: June 2026  |  Thisdocument is available in English, German, and Portuguese at www.hydrogrid.ai

‍

‍