Legal

Privacy Policy.

Last updated: 25 March 2026

1. Who we are

This website is operated by Productized B.V., trading as Energy Data Xchange (EDX), registered in the Netherlands. When this policy says "we", "us", or "EDX", it refers to Productized B.V.

If you have questions about this policy or your data, you can reach us at privacy@energydataxchange.com.

2. What data we collect

We collect the minimum data needed to operate this website and respond to your enquiries.

2.1 Contact and newsletter forms

When you submit a form on our site, we collect the information you provide, such as:

  • Name
  • Email address
  • Company name (if provided)
  • Message content

Forms are processed by Netlify (Netlify, Inc., San Francisco, USA). Submissions are stored on Netlify's servers and forwarded to us by email. Netlify acts as a data processor on our behalf.

2.2 Analytics

We use Google Analytics 4 (via Google Tag Manager) to understand how visitors use the site. Analytics data is only collected if you give consent through our cookie banner.

When consent is granted, Google Analytics may collect:

  • Pages visited and time on page
  • Referral source (how you found us)
  • Device type, browser, and screen size
  • Approximate location (country/region level)

We have IP anonymisation enabled. We do not use Google Analytics data for advertising, remarketing, or profiling. No personal data is shared with third parties for advertising purposes.

2.3 Hosting and server logs

Our website is hosted on Netlify. Netlify may collect basic server logs (IP address, request time, page requested) for security and operational purposes. These logs are retained for a limited period and are not used for tracking.

3. Cookies and consent

We use Google Consent Mode v2 to manage cookie consent. When you first visit the site, all analytics and advertising cookies are blocked by default.

Cookie type Purpose Set when
Essential Remembering your consent choice (localStorage) Always
Analytics Google Analytics 4 — page views, traffic sources, device info Only after you click "Accept"

You can change your consent choice at any time by clearing your browser's local storage for this site, or by clearing cookies. The consent banner will reappear on your next visit.

4. Legal basis for processing

Under the General Data Protection Regulation (GDPR), we process personal data on the following bases:

  • Consent — for analytics cookies (Article 6(1)(a))
  • Legitimate interest — for responding to your contact form submissions and basic site operation (Article 6(1)(f))
  • Contract performance — when you engage with us for a pricing walkthrough or project (Article 6(1)(b))

5. Data sharing

We do not sell your data. We share data only with the following service providers, who act as processors on our behalf:

  • Netlify — website hosting and form processing (USA, with Standard Contractual Clauses)
  • Google — analytics via Google Analytics 4 (USA, with Standard Contractual Clauses)

6. International transfers

Some of our service providers are based in the United States. Where data is transferred outside the European Economic Area (EEA), we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure an adequate level of protection.

7. Data retention

  • Contact form submissions — retained for up to 12 months after the enquiry is resolved, then deleted.
  • Newsletter subscriptions — retained until you unsubscribe.
  • Analytics data — retained in Google Analytics for 14 months, then automatically deleted.

8. Your rights

Under the GDPR, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your data
  • Restriction — ask us to limit how we use your data
  • Portability — receive your data in a structured, machine-readable format
  • Objection — object to processing based on legitimate interest
  • Withdraw consent — withdraw cookie consent at any time

To exercise any of these rights, email us at privacy@energydataxchange.com. We will respond within 30 days.

9. Supervisory authority

If you believe we are not handling your data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect the most recent revision. Material changes will be communicated through a notice on our website.