Privacy notice

Volton Technology OÜ, registry code 17019506, registered office Golden Gate, Ahtri 6, 10151 Tallinn, Estonia.

Contact for privacy enquiries: info@volton.energy.

This notice covers personal data processed when you visit volton.energy and its subdomains (the "website").

Volton's contractual products (electricity supply, B2B platform) are subject to separate privacy notices issued at the point of contracting; those notices apply to that contractual relationship and override this one for that data.

Server logs from website requests: IP address, request URL, timestamp, response status, user-agent string.

Analytics events recorded by Umami (a self-hosted analytics service): page paths, referrer, anonymised hashed visitor identifier reset every 24 hours, button-click events. Umami operates without cookies and does not record IP addresses or any personally identifiable information in raw form.

Contact-form submissions: the name, email and message you provide, plus the timestamp.

Webstore and checkout data: order items, name, email address, phone number, delivery pickup point, billing address, company name, VAT number, payment method, payment status, invoice data, shipment and tracking events.

Google Ads conversion data, processed only after you consent to marketing cookies: the Google Ads conversion tag then records which advertising campaign led to an action (such as an enquiry or order) and may read and set advertising cookies. Without your consent the Google tag runs in a cookieless state and sets no advertising cookies.

Operating, securing and maintaining the website (Article 6(1)(f) GDPR — legitimate interest in delivering and protecting the service).

Aggregate analytics to understand usage and improve content (Article 6(1)(f) GDPR — legitimate interest; data is aggregated and not used to single individuals out).

Responding to your contact-form enquiry (Article 6(1)(b) GDPR — pre-contractual measures, or Article 6(1)(f) for general enquiries).

Processing webstore orders, payments, invoices, delivery, returns and complaints (Article 6(1)(b) GDPR — performance of a contract; Article 6(1)(c) — legal obligations for accounting, tax and consumer-law records; Article 6(1)(f) — fraud prevention and operational support).

Measuring the effectiveness of our Google Ads campaigns through conversion tracking (Article 6(1)(a) GDPR — your consent). This processing only runs after you accept marketing cookies in the cookie banner, and you can withdraw your consent at any time via the "Cookie settings" trigger (see Cookies below).

Server logs: 7 days, then automatically deleted.

Umami analytics: retained in aggregate; visitor-identifier hashes are reset every 24 hours so individual visitors cannot be re-identified across days.

Contact-form submissions: 24 months from the last interaction, unless a longer period is required to address the matter you contacted us about or by applicable law.

Cloud-infrastructure and email providers act as data processors on our behalf, bound by data-processing agreements that meet GDPR Article 28 requirements.

For webstore orders we share the minimum necessary data with Montonio for payment processing, Omniva/Montonio shipping for delivery and label/tracking services, and email providers for order, invoice and shipment messages.

If, and only if, you consent to marketing cookies, conversion data is shared with Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC for Google Ads conversion measurement.

We do not sell personal data. Apart from the Google Ads conversion tracking described above, which runs only with your consent, we do not share personal data with advertisers or third-party trackers.

All processing of website personal data described above, other than Google Ads conversion tracking, takes place inside the European Economic Area (Frankfurt, Germany region).

When you consent to marketing cookies, Google Ads conversion data may be transferred to and processed by Google LLC in the United States. Such transfers rely on the European Commission’s Standard Contractual Clauses together with Google’s supplementary safeguards.

Strictly necessary cookies: a locale-preference cookie that remembers your language choice, a cookie-consent cookie that records your cookie choices, and an authentication cookie set only if you sign in to the editorial back-office.

Marketing cookies: Google Ads conversion-tracking cookies. By default these are not set — the Google tag loads under Google Consent Mode v2 with consent denied, so it makes only cookieless pings and stores no advertising cookies. Advertising cookies are set only after you accept marketing cookies in the cookie banner (legal basis: your consent, Article 6(1)(a) GDPR).

You can withdraw your consent or change your choice at any time using the "Cookie settings" trigger in the website footer, which reopens the cookie banner. Withdrawal takes effect for future processing and does not affect the lawfulness of processing carried out before withdrawal. Umami analytics operates without cookies and does not require consent.

Under the GDPR you have the right to request access to your personal data, rectification, erasure, restriction of processing, and data portability, and you have the right to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email info@volton.energy with the subject "Data request". We will respond within 30 days; we may extend this by up to two further months for complex requests, and will inform you of any extension.

You have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, info@aki.ee, https://www.aki.ee

We do not make decisions based solely on automated processing that produce legal effects on you or similarly significantly affect you.

We will revise this notice when our processing practices change materially. The "Last updated" date at the top reflects the most recent revision.