Privacy

How we handle personal data.

Last updated: 3 July 2026

Who we are

Novera Energy GmbH, Löffelstraße 44, 70597 Stuttgart, Germany ("we", "us", "our") is the operator of novera-energy.com and is responsible for the processing of any personal data described in this notice. For any privacy-related question, write to info@novera-energy.com.

What data we use and why

We process a limited amount of personal data when you use our website or contact us. The list below explains the relevant purposes, data categories, legal bases and legitimate interests.

  • Purpose

    Operating and displaying the website; ensuring technical functionality and security

    Data categories
    Technical access data, including IP address, date and time of access, requested page/file, referrer URL, browser type/version, operating system/device information and error/log data.
    Legal basis
    Art. 6 (1) (f) GDPR: Legitimate interests
    Legitimate interest
    Providing a secure, stable and functional website, preventing misuse, troubleshooting errors and ensuring IT security.
  • Purpose

    Responding to enquiries sent to info@novera-energy.com or otherwise initiated by you

    Data categories
    Contact and communication data, including name, business contact details, email address, company/organization, role, message content, attachments and related correspondence metadata.
    Legal basis
    Art. 6 (1) (b) GDPR: Performance of a contract / pre-contractual steps where the enquiry relates to a contract or pre-contractual steps; otherwise, Art. 6 (1) (f) GDPR: Legitimate interests.
    Legitimate interest
    Responding to communication enquiries, maintaining business communications and documenting correspondence.
  • Purpose

    Website usage measurement and improvement through Plausible Analytics

    Data categories
    Aggregated usage data such as page URL, referrer, date/time of visit, country, device type, browser and operating system. Plausible is intended to be used without cookies or persistent identifiers and without cross-site tracking.
    Legal basis
    Legitimate interests, to the extent personal data is processed at all.
    Legitimate interest
    Understanding aggregate website use, improving content and measuring the performance of an informational B2B website.
  • Purpose

    Compliance, legal defence and record-keeping, where necessary

    Data categories
    Relevant communication data, technical logs and documentation needed to establish, exercise or defend legal claims or comply with legal obligations.
    Legal basis
    Art. 6 (1) (c) GDPR: Compliance with legal obligations where a legal obligation applies; otherwise, Art. 6 (1) (f) GDPR: Legitimate interests.
    Legitimate interest
    Protecting our legal interests, demonstrating compliance and handling disputes or authority requests.

We do not set advertising or tracking cookies, and we do not share personal data with third parties for marketing.

Cookies and similar technologies

We do not use advertising cookies or cross-site tracking technologies. We use Plausible Analytics for privacy-friendly, aggregated website analytics. Plausible does not set cookies, does not use persistent identifiers and does not track visitors across websites.

How long we keep it

We keep your personal data for as long as necessary for the purposes defined above.

Email correspondence is retained for as long as needed to handle your enquiry, and for a reasonable period afterwards for record-keeping — typically up to two years, unless a longer period is required for legal reasons. Server access logs are retained for a short operational period, typically up to 30 days, unless longer retention is necessary for security incidents or legal reasons. Analytics data is kept in aggregate form and is not used to identify individual visitors.

Who we share it with

We may share personal data with the following recipients or categories of recipients where necessary for the purposes described above:

  • Vercel Inc. — hosting and content delivery.
  • Plausible Analytics — privacy-friendly, cookieless analytics (EU-hosted).
  • Email provider — for receiving and replying to messages sent to info@novera-energy.com.
  • Professional advisers, authorities, courts or other third parties — where necessary for compliance, legal defence or enforcement of rights.

We do not sell personal data, and we do not use it for advertising or profiling.

International data transfers

Where personal data is transferred outside the European Economic Area, we ensure that appropriate safeguards are in place, such as an adequacy decision of the European Commission or the EU standard contractual clauses, unless another GDPR-compliant transfer mechanism applies. You may contact us for further information on the relevant safeguards or to obtain copies thereof.

Your rights

You have the following rights regarding our processing of your personal data, provided that the respective legal requirements are met:

  • Request access to the personal data we hold about you.
  • Ask us to correct inaccurate data.
  • Ask us to delete data.
  • Ask us to restrict processing.
  • Receive your data in a portable format.
  • Lodge a complaint with a data-protection supervisory authority.

Right to object: You can object, on grounds relating to your particular situation, at any time to our processing of your personal data where such processing is based on Art. 6 (1) (f) GDPR (legitimate interests). We will stop processing your personal data unless we can demonstrate compelling legal grounds for the processing.

To exercise any of these rights (with the exception of the right to lodge a complaint with a supervisory authority), write to info@novera-energy.com.

Requirement to provide your personal data

You are generally not required (neither under a statutory nor a contractual requirement) to provide personal data to us. However, if you contact us or request information, the provision of certain personal data may be necessary so that we can respond to your enquiry or take pre-contractual or contractual steps. If you do not provide the relevant data, we may not be able to process your enquiry or provide the requested information. Technical access data is collected automatically when you visit our website and is necessary for the operation, security and functionality of the website.

No automated decision-making

We do not use personal data collected through this website for automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

Changes

We may update this notice as the site evolves. The date above reflects the most recent revision.