FEEDHOUSEMATRXX
Calculate
Hub Overview All Engineering Solutions Residential Solar Systems Commercial & Industrial Solar Battery Storage (BESS) SFS 6000 Inspections Nordic Yield Engine Engineering Consultation
Regulatory Legal Standard

Privacy & Data Protection Policy

Effective Date: January 1, 2026. Fully compliant with Regulation (EU) 2016/679 (GDPR) and the Finnish Data Protection Act (Tietosuojalaki 1050/2018).

1. Data Controller Identification

This Privacy Policy governs the processing of personal data collected through the digital properties, simulation engines, and engineering dispatch portals operated by Feedhousematrxx Nordic Solar Oy ("Company", "we", "our", or "us").

Registered Address: Keilasatama 5, 02150 Espoo, Finland
Business Registration No.: FI3492817-4
Data Protection Officer (DPO) Contact: [email protected]

2. Scope and Categories of Personal Data Collected

We collect and process personal data strictly necessary for engineering evaluations, quotation modeling, contract execution, inverter telemetry provisioning, and regulatory compliance under Finnish electrical safety mandates. Categories of personal data include:

  • Identity and Contact Data: Full name, telephone number, email address, physical installation address, and cadastral property identification numbers (kiinteistötunnus).
  • Technical & Energy Consumption Profiles: Annual electricity usage in kWh, main fuse size (pääsulakekoko, e.g., 3x25A), roof orientation, satellite GIS imagery, and distribution grid operator details (e.g., Caruna, Helen Sähköverkko, Elenia).
  • Inverter & Telemetry System Data: Real-time DC voltage, AC active power generation, battery state of charge (SoC), operational error codes, and cloud IP connections associated with registered inverter serial numbers.
  • Digital Interaction & Device Metadata: IP address, browser type, referral URLs, interaction timestamps, and cookie identifiers collected in accordance with our Cookie Policy.

3. Legal Bases for Processing Under GDPR

Under Article 6 of the General Data Protection Regulation (GDPR), we process your personal data under the following legitimate legal bases:

  • Performance of a Contract (Art. 6(1)(b)): To prepare preliminary engineering quotations, execute equipment installation agreements, handle delivery logistics, and connect your solar array to the national electrical grid.
  • Legal Obligation (Art. 6(1)(c)): To maintain mandatory SFS 6000 electrical commissioning protocols and fulfill statutory accounting requirements under Finnish law.
  • Legitimate Interests (Art. 6(1)(f)): To monitor the cybersecurity of our telemetry platforms, optimize solar yield calculation algorithms, and improve customer service.
  • Explicit Consent (Art. 6(1)(a)): For non-essential analytics tracking, marketing communications, and optional spot-price optimization services. Consent may be revoked at any time.

4. Third-Party Data Processors & Sub-contractors

We do not sell, rent, or monetize personal data under any circumstances. Personal data is shared exclusively with vetted data processors bound by strict Data Processing Agreements (DPAs) pursuant to Article 28 GDPR:

  • Distribution System Operators (DSOs): To file micro-generation network connection notifications (Pientuotannon liityntäilmoitus).
  • Inverter & Hardware Manufacturers: Cloud portal synchronizations (e.g., Sungrow, SolarEdge, Huawei) for real-time inverter warranty and telemetry tracking.
  • Cloud Infrastructure Providers: Secure hosting environments located exclusively within the European Economic Area (EEA), featuring end-to-end TLS 1.3 encryption.

5. Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes for which it was gathered. Specifically:

  • Pre-contractual Quotation Data: Retained for 24 months from submission unless converted to an active EPC contract.
  • Contractual & SFS 6000 Safety Documentation: Retained for 10 years to comply with statutory manufacturer warranty guarantees and Finnish electrical safety liability periods.
  • Financial & Invoice Records: Retained for 6 years in accordance with the Finnish Accounting Act (Kirjanpitolaki).

6. Your Data Protection Rights Under GDPR

As a data subject within the European Union, you maintain comprehensive enforceable rights under GDPR Chapter III:

  • Right of Access (Art. 15): Request a copy of all personal data held about you.
  • Right to Rectification (Art. 16): Correct inaccurate or incomplete property and contact details.
  • Right to Erasure ('Right to be Forgotten') (Art. 17): Request deletion of your data where statutory retention obligations do not apply.
  • Right to Restriction of Processing (Art. 18): Restrict the scope of data processing during dispute resolution.
  • Right to Data Portability (Art. 20): Receive your technical energy profiles in a structured, machine-readable format.
  • Right to Object (Art. 21): Object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, contact our Data Protection Officer at [email protected]. If you believe your rights have been infringed, you have the right to lodge a formal complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi).