Energy Web Dashboards Privacy Notice

General information

Energy Web AG, a Swiss company located at Baarerstrasse 10, 6300 Zug, Switzerland, registered under CHE-374.087.679 ("Energy Web", "we", "us") publishes hosted pages at dashboards.energyweb.org for its personnel, and at share.energyweb.org for external recipients holding a link. Energy Web AG is a subsidiary of the Energy Web Foundation (EWF), a Swiss nonprofit foundation.

Energy Web AG is the controller of the personal data described in this notice. This notice explains what we record when one of those pages is opened, complementing our Privacy Policy at energyweb.org/privacy, which covers our website and our business contact records.

What we record

When a page is opened, we record the date and time, which page was accessed, the country the request came from, and the IP address the request came from.

Where a page is opened using a shared link, the access is recorded against the link, not against a person. We do not ask you for an email address or any other detail to open a page, and we do not hold one.

Where an Energy Web colleague signs in with a company account, we also record the account used, because access to internal pages is granted by account.

What we do not record

We do not record how long a page is viewed, what is scrolled or what is clicked. We do not record any location more precise than the country. We limit repeated incorrect password attempts to protect against guessing, but we do not keep a record of them.

Why we record it

To control who can open a page, to identify and investigate misuse, and to withdraw access to a link when needed.

This is our legitimate interest in the security of our systems and information in the sense of Art. 6 Par. 1 lit. f GDPR, and the corresponding provisions of the Swiss Federal Act on Data Protection. We do not use this data for marketing, and we do not use it to draw conclusions about individual viewers.

Cookies on these pages

These pages set only a strictly necessary session cookie, used to keep you signed in or to remember that a link password has been entered. No analytics or tracking cookies are used. Our Cookie Policy at energyweb.org/cookies explains our approach to cookies across Energy Web services.

Who has access to these records

The colleague who published a page sees counts only: how many times it was opened, how many distinct people opened it internally, and how many share links were used. They do not see identities and they do not see individual timestamps.

Records identifying an account or an IP address are available only to a small number of administrators, and only for security investigation and withdrawal of access.

How long access lasts, and how long we keep records

Most external links expire automatically, within one week at most. In limited cases an administrator may issue a link that does not expire, for example where a page needs to remain available to a partner for the duration of a project. Those links are recorded in an internal register and reviewed periodically, and any link can be withdrawn at any time on request.

Links that do not expire are logged in the same way as any other link. This is deliberate: a link that stays live indefinitely is the one most likely to be forwarded or leaked, and access records are the only way we would notice.

Transfer of personal data

These pages and their access records are hosted on Cloudflare infrastructure. Where personal data is transferred outside Switzerland or the European Economic Area, we rely on a decision by the European Commission or the Swiss Federal Council that the destination country provides adequate protection, on certification under the EU-US or Swiss-US Data Privacy Framework, or on the standard contractual clauses together with a documented assessment of the destination country's laws and of the technical and organizational measures protecting the data.

Your rights

You may request access to your personal data, and its correction or deletion. You may object to processing based on our legitimate interest, and request that processing be restricted. If you wish to avail yourself of these rights, you may contact the address info@energyweb.org anytime, and we will respond within one month.

If you hold a link that does not expire and no longer wish to have access, or wish us to withdraw it, please contact info@energyweb.org.

If you are not satisfied with how we have handled your personal data, you can lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC), or with the data protection authority of the country where you live or work.

Questions

If you have questions about this notice, please email info@energyweb.org or contact us in writing via post at Energy Web AG | Baarerstrasse 10 | 6300 Zug | Switzerland.

We review this notice at least once a year. The effective date at the top of this page shows when it last changed.

Our representative in the EU according to article 27 GDPR is: