1. What personal data we collect

1. During your registration at EnergyLive.cloud
   While creating an account on our Website we will ask you to provide us your name and e-mail address. Your e-mail shall be the username for using our services and you will be able to set a password that will be encrypted and not known to us. Upon registration and through your personal account you may choose to consent receiving newsletters from us.
2. While managing your electronic profile
   If you wish to receive specific notifications while using our Services you can always save your preferences regarding services you consider to be of greater interest for you. Collecting such information takes place following your affirmative actions with the aim to provide better services. We may as well classify in an anonymized way our users' preferences in order to improve our services.
3. While managing your electronic profile
   The data available through the platform operated by EnergyLive.cloud are often subject to third parties' intellectual property and other rights (e.g., national and/or international energy exchange markets etc., hereinafter the Third Parties) that prioritize the integrity of their systems against data and information leakage. In order to allow the input of the aforementioned data into Company's Platform and users' access to it, Third Parties require the provision of basic contact information of all platform users (such as full name and e-mail address).

2. Who we collect your data from

Data are collected directly by the subjects either by using our website, or upon creation of an account or during contact with us for clarifications or precontractual information. During use of services, you may need to insert personal data belonging to third parties (clients) in which case the user remains responsible for acquiring all necessary permits for using this data. Only based on such guarantee which is explicitly provided by the user upon use of the website do we process personal data while we may process it insofar necessary for the performance of our contractual obligations.

3. Why we need your personal data

We collect and process personal data for the below mentioned purposes:

1. Provision of services requested by the user and offered by our Company (contractual obligations, legal obligations).
2. Ability to contact and inform you with respect to products and services offered by us provided that you have consented to such actions (consent, legal interest).
3. Contact with the user following an enquiry sent through our web Contact form (consent, performance of contract, legal interest).
4. Protection of our company's property and lawful claims (legal claims, legal interests).

4. Who shall we share your data with

The Company does not transmit personal data in countries or international organizations outside the EEA. Personal data are not sold to any third parties.
In order to perform our contractual obligations and provide the best possible service we shall share personal data with:

1. Business associates such as:
   
   • In pseudonymized form with marketing associates, so that they can suggest a marketing activity.
   • Data providers to EnergyLive.cloud that require the provision of basic contact information of all platform users to ensure the integrity of their systems against data and information leakage.
2. Public or data protection authorities, if this is required based on national or EU legislation not only to comply to legal obligation as well as to protect the Company's lawful claims.
3. Investors, to the extent that the expansion of business activity requires a due diligence by an interested investor, taking any measures necessary to secure and protect confidentiality of personal data.

5. For how long we keep your personal data

1. Account data on energylive.cloud
   Through your personal account profile, you can delete your data at any time. However, the Company shall keep the data necessary for the performance of contractual obligations, compliance with legal obligations, as well as to preserve its business interests.
2. Data collected via Contact website form
   Those data shall be retained solely for responding to your request and unless we enter into a business cooperation, these shall be deleted three (3) months following reply to your enquiry/request.

6. What measures we take for your data safety

The Company has taken all necessary technical and organizational measures for the safety of your personal data. We have applied all required procedures, such as encryption and pseudonymization, in order to prevent unauthorizes and/or unlawful access or transmission to third parties.

As for your password, it is chosen by you and it is highly recommended to choose an extremely strong one and not reveal it to any third parties. It is advisable not to automatically store the password on your browser and often delete history, so as to prevent third parties from acquiring your password.

7. Cases where we need your consent

In certain cases, processing of personal data may require your prior consent. In that case we shall explain in simple and plain language what is the intended processing, whereas you shall continue to be able to use our services even if you do not provide the requested consent.

In any case, you may freely and at any time revoke your consent in cases where data processing relies on that and we are obliged to stop any further processing based on such consent.

For the time being, you are requested to provide consent only if you wish to receive via e-mail our newsletter with marketing activities, news and services. You can revoke such consent either through Settings of your account or by simply sending us an e-mail through our web Contact form mentioning that you revoke consent. In these cases, we shall retain your e-mail in encrypted format in order to make sure that you receive no further newsletters from us.

8. Now, let’s take a look at your rights regarding your personal data

• Right to access: You have the right to ask us if we keep your personal data, which are these and you can ask a copy thereof. If you have already created a profile on EnergyLive.cloud you can directly exercise that right through your account. Exercising this right is subject to ID verification processes and is satisfied under the condition that third parties' rights are not violated.
• Right to rectification: You have the right to ask us to rectify your personal data if this is imprecise, inadequate or not up to date. If you have already created a profile on EnergyLive.cloud you can directly exercise that right through your account.
• Right to erasure/to be forgotten: You have the right to ask us to delete your personal data except for those we need to keep pursuant to legislation or for lawful business purposes stipulated by law. If you have already created a profile on EnergyLive.cloud you can directly exercise that right through your account.
• Right to restrict processing: You can ask to restrict processing all or part of your personal data in certain cases e.g. when your data held is imprecise.
• Right to object: You have the right to object to processing your personal data for reasons related to your personal status or for processing related to direct marketing purposes.
• Right to portability: You have the right to ask us to deliver a copy of your personal data in easily readable format and/or send such a copy to a third person indicated by you for the provision of similar services.
• Right to not be subject to automated processing: Notwithstanding exceptions stipulated in law, you have the right to ask us not to proceed with decision making for you based on automated means such as profiling, in cases where such a decision could have or has important legal consequences for you.

For the exercise of rights that you cannot use your profile account you can contact us via our Contact Form on this Website under the subject "Exercise of Data Subject Rights" and we shall proceed with any required action to respond in a timely manner and within the time limits set by law.

9. If you think that your personal data rights are violated…

Law provides you with the ability to lodge a complaint to the competent data protection authority in your country of residence or the country of our main establishment. Please find below the contact details for the competent authority in Greece:
Hellenic Data Protection Authority
1-3 Kifisias Avenue
115 23 Athens
Tel: +30 210 6475600
Fax: +30 210 6475628
Website: www.dpa.gr