Privacy notice

How Volton Technology OÜ processes personal data on volton.energy.

Last updated: 2026-04-28

Controller

Volton Technology OÜ, registry code 17019506, registered office Golden Gate, Ahtri 6, 10151 Tallinn, Estonia.

Contact for privacy enquiries: info@volton.ee.

Scope

This notice covers personal data processed when you visit volton.energy and its subdomains (the "website").

Volton's contractual products (electricity supply, B2B platform) are subject to separate privacy notices issued at the point of contracting; those notices apply to that contractual relationship and override this one for that data.

Personal data we process

Server logs from website requests: IP address, request URL, timestamp, response status, user-agent string.

Analytics events recorded by Umami (a self-hosted analytics service): page paths, referrer, anonymised hashed visitor identifier reset every 24 hours, button-click events. Umami operates without cookies and does not record IP addresses or any personally identifiable information in raw form.

Contact-form submissions: the name, email and message you provide, plus the timestamp.

Purposes and legal basis

Operating, securing and maintaining the website (Article 6(1)(f) GDPR — legitimate interest in delivering and protecting the service).

Aggregate analytics to understand usage and improve content (Article 6(1)(f) GDPR — legitimate interest; data is aggregated and not used to single individuals out).

Responding to your contact-form enquiry (Article 6(1)(b) GDPR — pre-contractual measures, or Article 6(1)(f) for general enquiries).

Retention

Server logs: 7 days, then automatically deleted.

Umami analytics: retained in aggregate; visitor-identifier hashes are reset every 24 hours so individual visitors cannot be re-identified across days.

Contact-form submissions: 24 months from the last interaction, unless a longer period is required to address the matter you contacted us about or by applicable law.

Recipients and processors

Cloud-infrastructure and email providers act as data processors on our behalf, bound by data-processing agreements that meet GDPR Article 28 requirements.

We do not sell personal data, share it with advertisers, or transfer it to third-party trackers.

International transfers

All processing of website personal data takes place inside the European Economic Area (Frankfurt, Germany region).

Cookies

Strictly necessary cookies: a locale-preference cookie that remembers your language choice, and an authentication cookie set only if you sign in to the editorial back-office.

We do not use advertising, profiling or third-party tracking cookies. Umami operates without cookies.

Your rights

Under the GDPR you have the right to request access to your personal data, rectification, erasure, restriction of processing, and data portability, and you have the right to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email info@volton.ee with the subject "Data request". We will respond within 30 days; we may extend this by up to two further months for complex requests, and will inform you of any extension.

Right to lodge a complaint

You have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, info@aki.ee, https://www.aki.ee.

Automated decision-making

We do not make decisions based solely on automated processing that produce legal effects on you or similarly significantly affect you.

Changes

We will revise this notice when our processing practices change materially. The "Last updated" date at the top reflects the most recent revision.