Privacy Statement

This is a translation of the Dutch version. In case of discrepancy, the Dutch version prevails.

1. Introduction

We respect your privacy. In this privacy statement, Integer Technologies B.V. ("Integer", "we") explains which personal data we process, why, and what rights you have. This statement applies to customers, business contacts, users of the Integer Platform, people who contact us, and visitors to our website.

2. Categories of personal data

Depending on your contact with us, we may process the following data:

• Name
• Address
• Job title and employer
• City / location
• Phone number(s)
• Email address
• ID number (passport or similar, only if a contract with you requires this)
• Bank details
• Correspondence and notes of our contacts with you
• For users of the Integer Platform: account details and a technical log of login attempts (including IP address)
• For website visitors: IP address and technical information (see section 8)
• How you use our website, such as the pages you visit and the buttons you click (only if you accept analytics cookies, see section 8)

Most of this data you provide to us yourself. Where we receive data from other sources, these are listed in section 4.

3. Legal basis for data processing

We may only process your personal data if we have a legal basis for it. Depending on the situation, we rely on one of the following legal bases under Article 6(1) of the General Data Protection Regulation (GDPR):

• Contract (Article 6(1)(b)): when processing is necessary to prepare, enter into or perform an agreement with you or your organization, for example when you request a savings scan, a quote or a callback through our website.
• Legal obligation (Article 6(1)(c)): when we are required by law to process your data, for example to keep our financial and tax records.
• Legitimate interest (Article 6(1)(f)): our legitimate interest in managing and developing our business relationships, informing our existing customers about comparable products and services, and keeping our website and other IT systems secure. We only rely on this basis when your interests do not outweigh ours.
• Consent (Article 6(1)(a)): for receiving our newsletter, and for analytics cookies and session recordings on our website. You can withdraw your consent at any time; this does not affect the lawfulness of processing before the withdrawal.

4. Sources

For personal data that we do not receive directly from you, we use the following sources:

• Publicly available sources: information from the Chamber of Commerce (KvK), official company websites, or professional social media platforms such as LinkedIn.
• Your employer or organization: contact details provided by a colleague or manager, for example to create your account on the Integer Platform or to perform a contract with your company.
• Property managers or landlords: contact details of people involved in managing a building where our equipment is installed.
• Business partners: installers, maintenance partners or lead generation agencies who share your contact details with us.

5. Purposes of data processing

We use your personal data for the following purposes:

• Responding to questions and requests you send us, including through the contact form, the savings scan and the partner application on our website;
• Customer relationship management;
• Fulfilling a contract between us, including providing user accounts for the Integer Platform and the related support;
• Invoicing and our financial administration;
• Sending newsletters, if you have subscribed, and informing existing customers about comparable products and services (you can unsubscribe at any time via the link in each message);
• Managing and securing our website and IT systems;
• Understanding how visitors use our website so we can improve it, if you have accepted analytics cookies;
• Complying with our legal obligations.

6. Recipients of your personal data

We do not sell your personal data. We only share your personal data with third parties where this is necessary for the purposes described above:

• Service providers that process data on our behalf, such as the providers of our CRM, email and collaboration tools, the forms on our website (Google Forms and Google Sheets), newsletter software, invoicing and accounting software, website analytics (PostHog), and the hosting of our website and the Integer Platform. We have data processing agreements with these parties.
• Our accountant and other professional advisers, where needed for our administration.
• Government authorities, if we are required by law to disclose your data.
• Other parties, if this is necessary to fulfil the agreement between us and you, or if you have given your consent.

7. Transfers outside the European Economic Area

Some of our service providers are based in the United States, or may process data there, for example the providers of our CRM, email and collaboration tools, website forms (Google), newsletter software and hosting. When personal data is transferred outside the European Economic Area, we ensure that appropriate safeguards are in place, such as certification of the recipient under the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses. You can contact us for more information about these safeguards. Our website analytics data is stored by PostHog in the European Union, on servers in Frankfurt, Germany.

8. Cookies and website analytics

Our website uses two kinds of cookies and similar techniques, such as storage in your browser.

Necessary. We store the choice you make in our cookie banner in your browser, so we do not ask you again on every page. This does not require your consent.

Analytics, only with your consent. If you click "Accept" in the cookie banner, we use PostHog to understand how visitors use our website and to improve it. PostHog then places a cookie (named "ph_" followed by a code and "_posthog", valid for one year) and stores data in your browser. It collects:

• the pages you visit, how long you stay, and the links and buttons you click;
• technical information, such as your browser, device, screen size, the website you came from and an approximate location derived from your IP address;
• session recordings, which show how you move through our pages (scrolling and clicks). What you type into form fields is hidden and not recorded.

The analytics data is not linked to your name or to the forms you send us.

If you click "Decline", we do not collect any analytics data. You can change your choice at any time via "Cookie settings" at the bottom of every page. If you withdraw your consent, we stop collecting analytics data from that moment.

Our hosting provider also processes your IP address and basic technical information (such as browser type and time of the request) in server logs, to deliver the website and keep it secure. We rely on our legitimate interest for this. The fonts on our website are served from our own server, so no data is sent to external font providers when you visit our website.

9. Data from buildings

Our systems measure and control the climate installations of buildings, such as temperature, CO₂ concentration, occupancy and energy consumption. We do this at the level of zones or shared installations, not individual homes or workplaces. As a rule, these data cannot be traced back to you and are therefore not personal data. If, in a specific situation, they can be traced back to a person, we process them on behalf of the owner or manager of the building, who is responsible for them. In that case, please contact the building owner or manager with any questions.

10. Retention periods

We do not keep your data longer than necessary for the purposes described above, unless we are required by law to keep it longer.

11. Your rights

When we hold your personal data, you have the right to:

• access your data;
• have incorrect data corrected;
• have your data deleted;
• restrict the processing of your data;
• receive your data, or have it transferred to another party;
• object to processing based on our legitimate interest;
• withdraw your consent at any time, where we process your data based on consent.

Right to object to direct marketing. You can always object to the use of your data for direct marketing, such as our newsletter and information about our products and services. If you object, we stop using your data for this purpose. You can do this via the unsubscribe link in each message or by emailing us.

You can submit your request to our Privacy Officer at info@integer.energy. We respond within one month at the latest, as required by law, and aim to respond within 14 business days.

12. Submitting a complaint to the Dutch Data Protection Authority

If you are not satisfied with the way we handle your personal data, please contact us first. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): submit a complaint.

13. Automated decision-making

We do not take decisions about you based solely on automated processing, including profiling, as referred to in Article 22 GDPR.

14. Changes to this privacy statement

We may amend this privacy statement. The current version is always available on our website, with the date of the last change at the top.

15. Our contact information

The controller for the processing of your personal data is:

Integer Technologies B.V.
Registered address: Markestrijp 50, 5707 DL Helmond
Office: TU/e Campus, De Rondom 18c, 5612 AP Eindhoven
Chamber of Commerce (KvK): 84670150

For all questions about privacy and the protection of your personal data, please contact our Privacy Officer, Pau Brossa Rodriguez, at info@integer.energy.