Privacy Policy

1. Right of Access (Art. 15 GDPR)

You have the right to obtain confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have a right of access to that data and to the following information:

• the purposes of the processing
• the categories of personal data
• the recipients or categories of recipients
• the envisaged storage period or the criteria used to determine it
• the existence of the rights to rectification, erasure, restriction, and objection
• the right to lodge a complaint with the competent supervisory authority
• where applicable, the origin of the data (if not collected from you)
• where applicable, the existence of automated decision-making including profiling, with meaningful information about the logic involved, the significance, and the envisaged consequences
• where applicable, transfer to a third country or an international organisation together with the appropriate safeguards

2. Right to Rectification (Art. 16 GDPR)

Should your personal data be inaccurate or incomplete, you have the right to request its immediate rectification or completion.

3. Right to Restriction of Processing (Art. 18 GDPR)

Where one of the following conditions is met, you may request the restriction of the processing of your personal data:

• You contest the accuracy of your data – processing is restricted for the period we need to verify its accuracy.
• The processing is unlawful, you oppose erasure, and instead request the restriction of use.
• You have objected to the processing – for as long as it has not yet been established whether our legitimate grounds override yours, processing is restricted.

4. Right to Erasure (Art. 17 GDPR)

Where one of the following grounds applies, you may request the immediate erasure of your personal data:

• Your data is no longer necessary for the purposes for which it was collected.
• You withdraw your consent and there is no other legal basis.
• You object to the processing and there are no overriding legitimate grounds, or you object to direct marketing pursuant to Art. 21(2) GDPR.
• Your data is being processed unlawfully.
• Erasure is required to comply with a legal obligation.
• The data was collected in relation to information society services offered pursuant to Art. 8(1) GDPR.

Exceptions to the Right to Erasure

These grounds do not apply insofar as processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation or for the performance of a task carried out in the public interest; for reasons of public interest in the area of public health; for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes; or for the establishment, exercise, or defence of legal claims.

In particular, statutory retention obligations (e.g. under the Austrian Commercial Code (UGB) and the Federal Fiscal Code (BAO)) may preclude immediate erasure; in such cases, processing is restricted for any further active use.

5. Right to Data Portability (Art. 20 GDPR)

You have the right to receive the personal data you have provided to us and that we process by automated means on the basis of consent or a contract, in a structured, commonly used, and machine-readable format, or – where technically feasible – to request its direct transmission to another controller.

6. Right to Object (Art. 21 GDPR)

You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data carried out on the basis of Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on those provisions. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims.

Where your personal data is processed for direct marketing purposes, you have the right to object at any time and without giving reasons to the processing for the purposes of such marketing; this also applies to profiling insofar as it is related to such direct marketing. Following an objection to marketing, your data will no longer be processed for these purposes.

7. Right to Withdraw Consent Given (Art. 7(3) GDPR)

You have the right to withdraw consent given under data protection law at any time with effect for the future. The lawfulness of the processing carried out on the basis of the consent until the withdrawal remains unaffected.

8. Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work, or the place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR. The supervisory authority responsible for us is:

Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna. Telephone: +43 1 52 152-0 · Email: dsb@dsb.gv.at · Web: www.dsb.gv.at

Exercising Your Rights

To exercise your rights, an informal message to Blackvolt Energy GmbH, Währinger Straße 6-8/11, 1090 Vienna, Austria, telephone +43 676 6237708, email fabian.wasef@blackvolt.at is sufficient.

We will respond to your request without undue delay, at the latest within one month.

Self-hosted content, no third-party integration

• The fonts used are served from our own web space; no connection to external font services (e.g. Google Fonts) takes place.
• Videos are exclusively self-hosted; no content from video platforms (e.g. YouTube, Vimeo) is embedded.
• No map services, no social media plugins, no advertising or retargeting pixels, and no tag manager are used.
• No external captcha services (e.g. reCAPTCHA) are integrated; the contact form's spam protection works without third-party scripts.

1. Description and Scope of the Data Processing

Our website has a contact form through which you can contact us electronically. Transmission takes place technically via the processor Formspree, Inc., 1207 Delaware Ave #727, Wilmington, DE 19806, USA ("Formspree"), which receives the data on our behalf and forwards it to us. Further information on Formspree's data protection: https://formspree.io/legal/privacy-policy

Data is only transmitted to Formspree when you actively submit the form; no transmission takes place when the page is merely accessed. Protection against automated spam submissions is provided by a form field invisible to you as well as server-side at Formspree; no third-party script is embedded in the website.

At the time of submission, the data you have entered is processed. The following categories may arise:

• first name
• last name
• email address
• telephone number (if provided)
• content of the message
• technical metadata during transmission (e.g. timestamp), insofar as logged by the form service

2. Purpose of the Data Processing

The processing of the personal data from the input form serves solely to handle your enquiry. The other data processed during the submission process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

3. Legal Basis

The legal basis for processing the data transmitted via the contact form is Art. 6(1)(f) GDPR; our legitimate interest lies in handling your enquiry. Where the contact is aimed at concluding a contract, the additional legal basis is Art. 6(1)(b) GDPR.

4. Storage Period

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the data from the input form, this is the case when the respective conversation has ended, i.e. when it can be inferred from the circumstances that the matter concerned has been conclusively clarified. If the enquiry leads to a business relationship, the statutory retention periods apply.

5. Transfer to Third Countries

Formspree, Inc. is based in the United States. The transfer of your personal data to the USA is safeguarded by the Standard Contractual Clauses (SCCs) adopted by the European Commission.

1. Scope of the Data Processing

We maintain a company presence on LinkedIn. This is used for applications, information/PR, and active sourcing. We provide information there and offer the possibility of communication. If you carry out an action on our company presence (e.g. comments, posts, likes), you may thereby make personal data (e.g. your real name or the photo from your user profile) public. We do not have complete information about the processing of your personal data by the platform operator as a (joint) controller; further information can be found in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy

2. Purpose and Legal Basis

Our company presence serves to inform users about our services and to communicate with customers, prospective customers, and potential applicants. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in public relations and communication. Where the contact is aimed at concluding a contract, the additional legal basis is Art. 6(1)(b) GDPR.

3. Storage Period

The data generated by the company presence is not stored in our own systems. We process messages you send us via the platform until the matter has been conclusively clarified.

4. Exercising Your Rights

You can exercise your rights as a data subject, as set out in the section "Your Rights", vis-à-vis us at any time – most easily by an informal email to fabian.wasef@blackvolt.at. For processing by the platform operator, please also contact LinkedIn: https://www.linkedin.com/legal/privacy-policy

1. Scope of the Processing

We use Plausible Analytics, a privacy-friendly web analytics tool from Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. Plausible works without cookies: no IP addresses are stored, no device-related identifiers are set, and no fingerprinting is used. Individual visitors are not recognised across multiple websites. The data collected is processed exclusively in aggregated, anonymised form; tracing individual visitors is not possible.

2. Purpose and Legal Basis

The processing serves the statistical evaluation of the use of our website in order to optimise content and user-friendliness. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in optimising our website on the basis of anonymised usage statistics. Data processing by Plausible takes place on servers within the EU.

3. Exercising Your Rights

The configuration used aims at the most data-minimising evaluation possible. You can control the execution of scripts in your browser at any time (e.g. via script blockers). Further information can be found in Plausible's privacy policy: https://plausible.io/privacy