Privacy policy

Powernaut (hereinafter ‘we’, ‘us’ and ‘our’) understands the importance of the privacy of its customers and users of its website visitors and the protection of their personal data. This policy sets out how we handle and process your personal data.


Powernaut BV, with its registered office at Hubert Frère-Orbanlaan 318, 9000 Gent KBO (Crossroads Bank for Enterprises) number 1004.987.997 manages this website. We act as the data controller when we process our customers’ and website users’ personal data. 

We believe it is important to create and maintain an environment where our customers can be confident that their data will not be misused. We comply with the regulations applicable to data protection such as the Regulation (EU) 2016/679 (also referred to as the General Data Protection Regulation, hereinafter “GDPR”) and the Belgian Data Protection Act. The aforementioned regulations concern the protection of personal data and provide you with rights over the said personal data.

The objective of this policy is to indicate what personal data we collect, how we use your data after you have visited our website and to assure you that we process your data appropriately. 

This privacy policy and the terms and conditions of use apply when you visit our website.  The application of terms and conditions other than those set out herein is explicitly prohibited unless we have provided express permission in writing in advance. In the latter case, this policy applies alongside the specific agreement. The use of this website, the platform and the content contained therein is only permitted subject to compliance with this policy. The use of this website, the platform and the content contained therein is only permitted subject to compliance with the full text of this policy.

What type of personal data do we collect?

It is not necessary to provide personal data to use most of our website.

We collect and process the following categories of personal data for the purposes stated below:

  • Name, form of address, address;

  • Contact details (email, phone number);

  • Company;

Additional or optional data are provided by filling out forms on our website or when we contact you (by telephone, email or at trade fairs or events). 

We also collect and process data obtained via our website or the devices you use. The collected data may contain:

  • Via the Powernaut platform/software we process the following personal data : 

    • Login details (username and password) for the section of the website reserved for customers and partners;

    • EAN number

    • Energy supplier

    • Energy consumption data

  • Location data (collected via social media or the IP address of your device; GPS signals sent by your mobile device);

  • Data collected using cookies, web beacons or from the internet. These data are automatically collected and can be related to the website you visited before you navigated to our website or the website you navigated to after visiting our website. We may also collect data on the website pages you have visited, your IP address, the type of browser you use, the access time and your operating system. Read our cookie policy to find out more on how we use cookies.

  • Data we obtain from other websites, for example if you ask us to link to your LinkedIn  account.

We may also collect data from the public domain to check data previously collected or to manage or broaden our activities.

Why do we collect these data and on what legal basis?

We collect the aforementioned data to understand your energy household, understand the extent to which your home installations can contribute to grid stability, and to provide better service for the following specific purposes:

  • To provide the energy management services of your household with the functionality to steer your smart installations so that they can contribute to grid stability.

  • To provide grid operators with the data so that they can assess the situation of the grid.

We also process your personal data for the following purposes : 

  • To respond to your (online) questions regarding our products or services, to be able to provide information regarding our products and to follow up online offers.

  • To improve our products or services.

  • To investigate complaints on our products, services or website.

  • To meet the legal and regulatory obligations as well as compliance requirements.

  • To analyse and monitor the use of accounts to prevent, investigate or report fraud, terrorism, deception, security incidents and criminal activity to the relevant authorities. 

  • To send periodic email messages with offers on our products and services, special offers or other information which we believe may be of interest to you.

  • To contact you from time to time for the purposes of market research purposes. We may contact you by email or telephone.

  • To process your personal data for specific purposes as indicated on specific forms on our website, by notification in writing or by email.

We process the aforementioned personal data based on various processing reasons, as listed in Articles 6.1 (a), (b), (c) and (f) of the GDPR. 

Processing of your personal data is required in order to meet contractual obligations for the purposes of delivering products or services in accordance with our agreements. Where personal data is processed (for example to provide you with energy consumption data; create invoices or to communicate with you) in the execution of the agreement, we will store the data for 10 years in accordance with legal retention requirements or as specified in article 7 of this policy with regard to the Powernaut platform.

In some cases, it can be a legal requirement to process personal data and to share it with third parties such as government entities for the purposes of government business or anti-money laundering legislation.  

In these cases, we have a legitimate interest to process your personal data and to contact you to be able to perform our operations or provide you with information on our products, services, promotions and/or events. Your personal data is retained for up to two years after the termination of our commercial relationship.

If you are not a current customer or partner, we will request your consent to provide you with information on our events, products and services for promotional purposes. In this case, we will retain your personal data for two years.

How will your data be used and shared?

We can share your personal data with:

  • Partners such as providers of smart home systems. ; 

  • Customers such as energy utilities:

Customers will be the controller of the transmitted personal data and shall process your data for the purposes of providing the necessary balancing services and/or performing their grid duties as high voltage grid operator or low and medium voltage grid operator.

Based on our legitimate interest, we may also share your personal data with third parties that assist us with our products and services. Some examples of third-party activities include the hosting of web servers, data analysis, marketing support providers and customer service. These companies have access to your personal data but only when this is required to perform their activities. They are not permitted to use your data for any other purposes.

Your personal data may not be sold or leased to third parties. 

We may publish your personal data to enforce our policy, to comply with our legal obligations or in the interest of safety, in the public interest or for the purposes of legal enforcement in any country where we have entities or subsidiaries. We may follow up a request from a law enforcement agency, regulatory authority or government agency. We may also publish data for the purposes of current or scheduled court cases or to protect our property, safety, people or other rights and interests.

Should Powernaut be sold or merged with another company, your data will be accessible to the advisor of the potential buyer and transferred to the new company owners. In that case, we will take the appropriate measures to guarantee the integrity and confidentiality of your personal data. The use of your personal data will always be subject to this policy.

Transfer of your personal data outside the European Economic Area

We do not transfer your personal data to third parties outside the European Economic Area.

Rights of the data subject

Data protection legislation provides various rights for the data subject with regard to the processing of personal data to ensure the data subject has sufficient control over the processing of their personal data.

You are entitled to inspect the data we hold on you and to request and receive a copy of the personal data on our records. You are entitled to request that we amend, add to or delete any outdated, incorrect or incomplete personal data relating to you when your personal details change. You are also entitled to limit the processing of your personal data and to object thereto. You are also entitled to receive the personal data you have provided to the data controller in a structured, commonly used, machine-readable format, and to transmit it to another data controller.

We can request you verify your identity to ensure your request is lawful and that we are sending the reply to a person entitled to make such a request and to receive the data.

Please note that we may refuse access to your personal data or may not be able to grant your request under specific circumstances when we are entitled to do so under the applicable data protection legislation.

For further information on the processing of your personal data or if you wish to exercise your rights, please contact us at

You are entitled to lodge a complaint with the competent supervising authority (for data protection). In Belgium, the Data Protection Authority, Drukpersstraat 35, 1000 Brussels (

Data retention and data deletion

Our general data retention period for the personal data of the users of our products is 3 years. Following the receipt of a termination request, Powernaut will promptly deactivate the associated accounts, according to the terms stipulated in the process below. We commit to the deletion of the Personal Data related to the requesting customer from our active systems within 30 days of account deactivation, except where we are legally obligated to retain certain data or in cases involving unresolved disputes.

Powernaut is committed to safeguarding the privacy and security of the customer’s personal data, even after the termination of services. This section outlines the steps both Parties take to responsibly manage and delete customer data when service agreements are concluded.

  1. Initiation of Termination:
    Customers who wish to terminate their services with the Powernaut should submit a written notice through Powernaut’s data protection officer mail address:,.or can also express their wish to terminate their services through our partners who then inform us.

  2. Data Handling Post-Termination:
    Following the receipt of a termination request, Powernaut will promptly deactivate the associated accounts. Powernaut commits to the deletion of the Personal Data related to the requesting customer from its active systems within 30 days of account deactivation, except where the Parties are legally obligated to retain certain data or in cases involving unresolved disputes.

  3. Data Sanitization Measures:
    Powernaut adheres to stringent data sanitization protocols to ensure the complete and irreversible removal of all customer data from its computing resources. The Partners’ sanitization process involves overwriting storage media and aligning with industry-standard practices to prevent any possibility of data recovery.

  4. Confirmation of Actions Taken:
    Upon completing the data sanitisation process, customers will receive a confirmation email from the party to whom they submitted their termination request. This email will detail the specific actions taken and verify the comprehensive deletion of their data.


We make every effort to guarantee the security of your data. We have implemented reasonable technical and organisational measures to guarantee your personal data against accidental or unlawful destruction, loss, modification, unauthorised disclosure and/or unauthorised access to the data transmitted, saved or otherwise processed. Please note that the internet is an open network; we cannot therefore guarantee that unauthorised third parties will not be able to circumvent these measures or use your personal data for inappropriate purposes.

This website may include links to third-party websites. We will not be held liable for the content of these websites, nor for the privacy standards and practices of the corresponding third party. You must read and understand the relevant third-party and website privacy policies before accepting cookies and visiting a website, to ensure your personal data is sufficiently protected.

Terms and conditions of use and liability

Rights to the website and materials – Permitted usage
Our website and the materials available thereon (for example texts, images, videos, data, software, brands and trademarks and other data) are protected by intellectual property rights. 

Visitors to the website and our platform are permitted to consult the website, the platform and the material for their own purposes. This right of use is non-exclusive and non-transferable and we reserve the right to revoke this right at any time and without justification. Any other use of any element of the website and/or platform (i.e. reproduction, changes, publication or any other form of distribution) is prohibited, unless we and/or the licensors have provided advance express permission in writing.

Prohibited use of the website and material

You undertake as follows: not to use the website, the platform and the material (1) illegally and/or for illegal purposes; (2) not to damage, modify, interrupt, stop it or impair its efficiency; (3) to disseminate or install computer viruses nor to disseminate or install material that is insulting, obscene, threatening or otherwise not in accordance with the intended use of the website and the platform; (4) not to infringe third-party or our rights to privacy, protection of personal data or intellectual property; (5) to disseminate or install material for marketing or advertising purposes without requesting our prior approval and only insofar as the recipient has requested the said material.


We shall make every effort to ensure the information we add to our website and the platform is as complete, correct and current as possible, although we cannot guarantee that the information provided does not include any errors. The information contained therein is not aimed at specific people or organisations and may therefore not be complete, relevant or accurate. 

The information must not be considered professional or legal advice (an expert should always be consulted for these purposes). The user is responsible for the use of the website, the platform and their data. We waive all liability for any damage caused by any errors on this website.

We make every reasonable effort to limit technical malfunctions. Errors and malfunctions may however occur when using the website or the platform, which may hinder the availability or operation thereof. The website, the platform and the content thereof is provided “as is” and we do not accept any liability for issues resulting from the use of our website, the platform or the content thereof.

The website pages or the platform may contain links to external websites for whose content we neither assume nor will assume any liability with regard thereto. We will not be held liable for material and information added by users to the website or platform. The user is obliged to indemnify or compensate us for all damage attributable to the material and information.

Applicable legislation and jurisdiction

Belgian law is applicable to our website, this policy and disputes that may arise with regard to these. In the event of a dispute, only the courts of Belgium shall have jurisdiction.

Amendments to this policy

Powernaut may amend or update this policy to ensure the provision of information on how we process your personal data at that time. The updated version of this policy is available on the same website and will take effect upon publication. Please visit this webpage regularly to ensure you remain up-to-date on how we collect and process personal data, how and under what circumstances we use your personal data and when we share your personal data with third parties.

July 2024